Company: ASAN
Filing Date: 2025-03-18
Form Type: 10-K
Source: 0001477720-25-000045
Chunk: 37

Company: Asana, Inc.
Filing Date: 2025-03-18
Form: 10-K
Item: Item 1A
Chunk 37
---
 a security incident or are perceived to have experienced a security incident, we may experience material adverse consequences, such as government enforcement actions (for example, investigations, fines, penalties, audits, and inspections); additional reporting requirements and/or oversight; restrictions on processing confidential, proprietary, and sensitive data (including personal information); litigation (including class claims); indemnification obligations; negative publicity; reputational harm; monetary fund diversions; diversion of management attention; interruptions in our operations (including availability of data); financial loss; and other similar harms. Security incidents and material attendant consequences may cause customers to stop using our services, deter new customers from using our services, and negatively impact our ability to grow and operate our business. 

Additionally, our contracts may not contain limitations of liability, and even when they do, there can be no assurance that the limitations of liability in our contracts are sufficient to protect us from liabilities, claims, or damages if we fail to comply with applicable obligations related to privacy, data protection, or security. We also cannot be sure that our insurance coverage will be adequate or sufficient to protect us from or to mitigate liabilities arising out of our privacy, data protection, and security practices, that such coverage will continue to be available on commercially reasonable terms or at all, or that such coverage will pay future claims. 

In addition to experiencing a security incident, third parties may gather, collect, or infer sensitive information about us from public sources, data brokers, or other means that reveals competitively sensitive details about our organization and could be used to undermine our competitive advantage or market position. Additionally, our sensitive, proprietary, or confidential information could be leaked, disclosed, or revealed as a result of or in connection with our employees’ or vendors’ use of generative AI technologies.

Furthermore, any sensitive information (including regulated, proprietary and confidential information, including personal information and business information) that we input into a third-party generative artificial intelligence platform could be leaked or disclosed to others, including if sensitive information is used to train the third parties’ artificial intelligence model. Additionally, where an artificial intelligence model ingests personal information and makes connections using such information, those technologies may reveal other personal or sensitive information generated by the model.

Our use of AI and machine learning technologies in our products and operations gives rise to legal, business, and operational risks. Legal, regulatory, social and ethical issues relating to the use of AI and machine learning technologies in our products and business may result in reputational harm and liability.

Our platform integrates generative AI and machine learning technology into