AI Vendor Directory · AI in productivity suites
Does Notion AI train on your data?
No — does not train on your data by default. Vendor-stated default: no (all plans). Notion states: "By default, Notion and its AI Subprocessors do not use Customer Data to train any models," with contractual training prohibitions on subprocessors (models from Anthropic, OpenAI, and Notion-hosted). LLM-provider retention: zero data retention for Enterprise plans; 30 days or fewer for non-Enterprise plans. Notion AI is in scope of Notion's SOC 2 Type 2 report and ISO 27001 certification; HIPAA support uses zero-retention APIs.
By the Shieldra Compliance Team · Last updated 2026-07-29
What is Notion AI?
AI writing, Q&A and search assistant embedded in Notion workspaces, drawing on workspace pages the user can access. SMBs typically use it for drafting docs, summarizing notes and querying their internal wiki.
Key facts
- Vendor: Notion Labs — https://www.notion.com/product/ai
- Trains on customer data by default: no (all plans)
- Source for the training answer: https://www.notion.com/help/notion-ai-security-practices
- Last verified: 2026-07-29
What certifications does Notion AI hold?
- SOC 2 Type II
- ISO 27001
- ISO 27701
- ISO 27017
- ISO 27018
- HIPAA (BAA available)
- BSI C5
Security, DPA, and subprocessor links
- Security / trust page: https://www.notion.com/security
What is your EU AI Act role when you build on Notion AI?
Your organization is a deployer under the EU AI Act; Notion is the provider. Low transparency-duty exposure for internal use; Article 50 disclosure can apply if Notion AI output is published externally unreviewed.
What to record in your AI registry
- Provider: Notion Labs
- Model type: third party api
- Data typically flowing to the vendor: internal documents/wiki pages, project and task data, uploaded files
Sources
- https://www.notion.com/help/notion-ai-security-practices
- https://www.notion.com/security
Disclaimer
Curated from vendor-published pages on the date above. Vendor terms change - verify against the cited sources before relying on a profile for a procurement decision. Last verified 2026-07-29.
Frequently asked questions
Does Notion AI train AI models on your data?
No — does not train on your data by default. Vendor-stated default: no (all plans). Notion states: "By default, Notion and its AI Subprocessors do not use Customer Data to train any models," with contractual training prohibitions on subprocessors (models from Anthropic, OpenAI, and Notion-hosted). LLM-provider retention: zero data retention for Enterprise plans; 30 days or fewer for non-Enterprise plans. Notion AI is in scope of Notion's SOC 2 Type 2 report and ISO 27001 certification; HIPAA support uses zero-retention APIs.
What certifications does Notion AI hold?
Per the vendor's published pages as of 2026-07-29: SOC 2 Type II; ISO 27001; ISO 27701; ISO 27017; ISO 27018; HIPAA (BAA available); BSI C5.
What is your EU AI Act role when you build on Notion AI?
Your organization is a deployer under the EU AI Act; Notion is the provider. Low transparency-duty exposure for internal use; Article 50 disclosure can apply if Notion AI output is published externally unreviewed.
