Company: ASAN
Filing Date: 2025-03-18
Form Type: 10-K
Source: 0001477720-25-000045
Chunk: 35

Company: Asana, Inc.
Filing Date: 2025-03-18
Form: 10-K
Item: Item 1A
Chunk 35
---
 may also gain access to other networks and systems after a compromise of our networks and systems.

We expend resources and modify our business activities to try to protect against security incidents. Additionally, certain privacy, data protection, and security obligations require us to implement and maintain specific security measures or industry-standard or reasonable security measures to protect our information technology systems and confidential, proprietary, and sensitive information.

While we have implemented security measures designed to protect against security incidents, there can be no assurance that these measures will be effective. We take steps designed to detect, mitigate, and remediate vulnerabilities in our information systems (such as our hardware and/or software, including that of third parties with whom we work). We have not been, and may not in the future, be able to detect and/or remediate all vulnerabilities including on a timely basis. Further, we have experienced (and may in the future experience) delays in developing and deploying remedial measures designed to address such identified vulnerabilities. Vulnerabilities could be exploited and result in a security incident. 

Additionally, we rely on or partner with third-party vendors and systems that have made representations as to their security measures but there can be no assurance that they will maintain their own security measures appropriately. Breaches of our security measures or those of our third parties, including supply chain attacks or other threats to our business operations, could result in unauthorized access to our sites, networks, systems, and accounts; unauthorized access to, and misappropriation of, individuals’ personal information or other sensitive, confidential or proprietary information of ourselves, our customers, or other third parties; viruses, worms, spyware, or other malware being served from our platform, mobile application, networks, or systems; deletion or modification of content or the display of unauthorized content on our platform; interruption, disruption, or malfunction of operations or our ability to provide our services; costs relating to breach remediation, deployment of additional personnel and protection technologies, and response to governmental investigations and media inquiries and coverage; engagement of third-party experts and consultants; or litigation, regulatory action, and other potential liabilities. 

If any of these breaches of security should occur, we cannot guarantee that recovery protocols and backup systems will be sufficient to prevent data loss. Additionally, if any of these breaches occur, our reputation and brand could be damaged, our business may suffer, we could be required to expend significant capital and other resources to alleviate problems caused by such breaches, and we could be exposed to risk of loss, litigation or regulatory action, and other potential liabilities, such as investigations, fines