Notion AI
Notion Labs, Inc.
Short answer
Short answer: Notion AI is one of the lower-risk options — no training on your data by default, published sub-processors, EU data residency and zero LLM retention on Enterprise. Still apply a policy for what workspace data your team routes through it.
At a glance
- Vendor / legal entity
- Notion Labs, Inc.
- Headquarters
- 🇺🇸 San Francisco, US
- Category
- Productivity
- Ownership / jurisdiction
- US company (Notion Labs, Inc.), San Francisco; privately held.
- Trains on your data?
- No
- Data hosting & residency
- EU data residency (AWS Frankfurt, backup Dublin) is available to Enterprise Plan customers at no extra cost.
- Sub-processors
- Sub-processors — including AWS, Anthropic and OpenAI — are published in the Notion Trust Center (trust.notion.com).
- Enterprise tier
- The Enterprise Plan adds zero data retention with the LLM providers, EU data residency, and a BAA/HIPAA option; a DPA is available across paid plans.
- Certifications
- SOC 2 Type 2 · ISO 27001 · ISO 27017/27018/27701 · BSI C5 · HIPAA (BAA)
Why this rating
Notion AI does not use your data to train models by default — a contractual ban that extends to its AI sub-processors — and Enterprise gets zero data retention with the LLM providers plus EU data residency (AWS Frankfurt). It holds a broad certification set (SOC 2 Type II, ISO 27001, BSI C5, HIPAA), publishes its sub-processors, and offers a DPA. Low: strong, well-documented governance posture.
What it is
Notion AI generates, summarises and answers questions over your Notion content using third-party LLMs (OpenAI, Anthropic). Its governance posture is strong: Notion and its AI sub-processors do not use customer data to train models by default, the Enterprise Plan gets zero data retention with the LLM providers and EU data residency, and it publishes its sub-processor list. The main task is knowing that workspace content is being sent to an AI assistant at all.
Legal & compliance examples
How the same tool can be a safe helper or a high-risk deployment — the difference is what it decides about a person. Examples authored with Qadar AI's governance findings.
Don't: Screen candidate CVs and auto-reject applicants, or infer a candidate's emotions in a video interview.
Fine: Draft a job description, summarise public market research, or brainstorm interview topics — with no automated decision about a person.
These examples are general information, not legal advice, and are pending a legal review. Your obligations depend on your exact use, tools, and set-up.
Frequently asked questions
Does Notion AI train on your data?
No — Notion and its AI sub-processors do not use customer data to train models unless you explicitly opt in. Enterprise workspaces get zero data retention with the LLM providers.
Is there an EU data-residency option?
Yes — Enterprise Plan customers can host their data in the EU (AWS Frankfurt) at no extra cost.
How do I govern Notion AI at work?
Qadar AI Shield gives you discovery and an allow-list across browser AI tools, and redacts personal data before it reaches an assistant — a useful backstop even for lower-risk tools.
Sources
Every fact and the risk rating on this page trace to a primary source — the vendor's own trust center, privacy policy, DPA, or a regulator. Verify current terms before relying on them.
Govern this tool
Qadar AI Shield turns these risk facts into enforcement — discover who uses the tool, redact personal data before it reaches it, and allow-list or block it per team.
Risk levels are Qadar AI's curated assessment from cited primary sources — a curated assessment, not a certification, and not legal advice. Verify a tool's current terms before relying on them.