Add a HIPPA / BAA policy to Asana

I second this. HIPAA compliance all the way.