Hi @Lauren7
Asana is not specific to the medical field and as such we do not have clearly identifiable HIPAA compliance standards, but we keep any data entered into Asana secure. Your data is not encrypted on the servers (for performance reasons), but we do encrypt over the wire via SSL. Security is something we take very seriously. Please take a look at this information:
One workaround we can offer is the use of our integration with Box, which is HIPAA compliant. The link to our Box integration below:
Let me know if you have any further questions or concerns.