In This Article
Available on the Asana Enterprise+ tier. Visit our pricing page for more information.
Enterprise Key Management (EKM) is an Asana feature that allows you to encrypt your data with keys that you own. EKM affords you more control over your data by putting the keys in your hands, with visibility into how the keys are being used, all while you continue to get the most out of Asana.
Asana Enterprise Key Management integrates with your encryption keys which you create using AWS KMS (Key Management Service). Your keys will be used to encrypt your data across Asana’s data layer: data residing in RDS (Relational Database Service), Attachments residing in S3 and Search.
Enterprise Key Management can be provisioned for organizations where there is a minimum 100-seat Enterprise+ subscription in place.

EKM at Asana works by encrypting your data in all of our production datastores. At a high level, this is how EKM works:
Note that some features and elements of the service are not compatible with EKM will remain unencrypted. Currently, these exceptions are:
The following elements of the service are shared unencrypted with Asana subprocessors to enable provision of the services:
Note
If you are interested in EKM please contact your sales representative.