Notion AI

Notion · Productivity · US · www.notion.com

Last verified 2026-09-16
Entry services/notion-ai.yaml
Training on your data (default tier)
Not used to train models, by Notion or its AI subprocessors
Retention
LLM providers keep nothing for Enterprise workspaces; 30 days or fewer for other plans
Data residency
May be processed and stored anywhere in the world, including the United States

Vendor data-handling terms

Training on your data (default tier)
Not used to train models, by Notion or its AI subprocessors
By default, Notion and its AI Subprocessors do not use Customer Data to train any models. / We specifically have contractual agreements in place with our AI Subprocessors that prohibit the use of Customer Data to train their models.
checked 2026-09-16
Notion Help, Notion AI security and privacy practices
Retention
LLM providers keep nothing for Enterprise workspaces; 30 days or fewer for other plans

Data-retaining LLM features are off by default and can only be enabled by a workspace administrator. Embeddings are deleted within 60 days of page or workspace deletion.

When using Notion AI, by default our LLM providers utilize zero data retention for Enterprise plan workspaces, so no data is stored with LLM providers. / In addition, by default for all non-Enterprise plan workspaces, LLM providers only retain Customer Data for 30 days or fewer before deletion.
checked 2026-09-16
Notion Help, Notion AI security and privacy practices
Data residency
May be processed and stored anywhere in the world, including the United States
All information processed by us may be transferred, processed, and stored anywhere in the world, including but not limited to, the United States or other countries, which may have data protection laws that are different from the laws where you live.
checked 2026-09-16
Notion Privacy Policy, International transfers
Subprocessors
AI features use third-party LLM providers under contractual no-training terms
For each page in your workspace, we generate an embedding by using an OpenAI zero-retention embeddings API.
checked 2026-09-16
Notion Help, Notion AI security and privacy practices

Domains and endpoints

observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.

HostRoleSource
api.notion.comapiobserved

Assessment

Enterprise workspaces: lowOther plans: medium

Reasoning: No model training by Notion or its providers, contractual no-training terms with the LLM subprocessors, and zero retention at the providers for Enterprise workspaces. On other plans the providers hold Customer Data for up to 30 days, and Notion's own storage may be anywhere in the world. The relevant exposure is the workspace content Notion AI can read, which is governed by the workspace's own sharing settings.

Flags: GDPR Chapter V (worldwide storage per privacy policy) · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.

Changelog

  • 2026-09-16Documented. Training, retention, and subprocessor terms verified against Notion's AI security page; transfers against the privacy policy.
  • 2026-09-15Listed from the Unseen catalogue with observed domains.

Corrections

Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.

Edit on GitHub