Documents reviewed

Notion AI

Name: Notion AI
Price: 20.00 USD
Author: Notion Labs, Inc.

Logo: official trademark, served by us

AI features in the Notion workspace for drafting, summarizing and searching team knowledge.

Visit vendor website ↗ More in Writing & Research

Unpaid listing. The link is marked rel="nofollow".

Documents reviewed on Sep 19, 2026

DPA, privacy policy, sub-processor list, legal notice and pricing page read and recorded below, each with its source.

Not tested hands-on yet, so there is no rating. The full review adds that.

At a glance

All eight questions with sources →

DPA available?	yes · The Data Processing Addendum is incorporated by reference into the terms of use whenever Notion processes personal data on the customer's behalf
Is your content used for training by default?	no · All plans: no model training by default; Enterprise adds zero data retention at the model providers.
Data location disclosed?	yes · Default USA (AWS)
Independently certified (ISO 27001, SOC 2)?	yes · Notion itself is certified to ISO 27001, 27017, 27018 and 27701 as well as SOC 2 Type 2

7 of 8 privacy questions answered with evidence in Notion Labs, Inc.’s documents, as of Sep 19, 2026.

Key facts

Category	Writing & Research
Domain	notion.so visit ↗
Pricing model	Free plan + paid plans
Starting paid plan	Business: USD 20 per user per month, billed annually · Vendor page ↗, checked Oct 16, 2026 – Page doesn't label cycle; gend.co (secondary, Feb 2026) says $20 annual / $24 monthly
Headquarters	United States
Server location	United States
Vendor	Notion Labs, Inc.
More in this category	7 tools
In the directory since	Sep 19, 2026
Documents reviewed on	Sep 19, 2026

Not checked yet: rating from our test brief. How we review

Screenshots

Notion AI homepage on Sep 19, 2026 — Public homepage of Notion AI, captured by us on Sep 19, 2026. This is the vendor’s website, **not the product interface** – that requires an account and is part of the full review.

Rating

How we rate →

Not rated yet – ratings come from the hands-on test brief.

GDPR and privacy check

How we review →

Question	Answer	Evidence
Data processing agreement (DPA) available	yes The Data Processing Addendum is incorporated by reference into the terms of use whenever Notion processes personal data on the customer's behalf.	Source Sep 19, 2026
Server location disclosed	yes Default USA (AWS). Data residency eu-central-1 Frankfurt, backup Ireland, Enterprise plan only; account and usage data remain outside the region.	Source Sep 19, 2026
Sub-processors listed publicly	yes Public list in the Trust Center with about 26 entries, including AWS, Cloudflare, OpenAI, Anthropic, Google Cloud.	Source Sep 19, 2026
Training on customer data: default and opt-out, by plan	not used – every plan All plans: no model training by default; Enterprise adds zero data retention at the model providers.	Source Sep 19, 2026
EU representative appointed (Art. 27 GDPR)	unclear The privacy pages reviewed name no Art. 27 EU representative; only the US address and privacy@notion.com are given.	Source Sep 19, 2026
Standard Contractual Clauses (SCCs) for transfers outside the EU	yes The DPA incorporates the EU and UK SCCs, with reference to Schrems II and supplementary technical measures.	Source Sep 19, 2026
Deletion periods documented	yes Deleted workspaces become inaccessible immediately and are permanently removed after 30 days; AI embeddings within 60 days.	Source Sep 19, 2026
Independent certification (ISO 27001, SOC 2)	yes Notion itself is certified to ISO 27001, 27017, 27018 and 27701 as well as SOC 2 Type 2; HIPAA BAA for Enterprise only.	Source Sep 19, 2026

“Unclear” means we didn’t find the information in the public documents – not that the vendor doesn’t meet it. The check is a documented snapshot of the vendor’s public commitments. It is not a certification and not legal advice – see the disclaimer.