@Kehala_Hervey take a look at this What Documents are you comfortable saving in Asana and HIPAA Compliant Storage Options
It would be questionable if Asana itself is, I am not sure but Box and Dropbox are. Whether you could use Asana in a particular way while still having documents in say Box or Dropbox is a worthy question.