Notion AI safety profile

What it does with your data

Notion says it does not train AI models on what your staff type, paste or upload. The AI providers it works with don’t either. Its contracts with those providers forbid training, and that ban reaches every provider in the chain through written data-processing agreements. Notion states this commitment without limiting it to any plan.

What changes by plan is how long the AI provider holds on to your prompts and page content:

• Free, Plus and Business: the AI provider keeps data for 30 days or fewer, then deletes it.
• Enterprise: most models use zero data retention, so nothing is kept after the response. A few models keep data for a limited time to deliver a response. Those models are off by default, and the workspace owner has to opt in.

Inside Notion itself, a deleted page or workspace can be restored for 30 days. After that it moves to permanent deletion. Embeddings made from your pages are deleted within 60 days of the page or workspace being deleted. The vendor pages checked do not say whether people review AI requests.

Settings to change first

Because Notion says it does not train on customer data, there is no training setting to switch off. The vendor pages checked also do not describe an opt-out setting or menu path for training.

On Enterprise, these settings are worth handling before staff start:

1. Leave data-retaining AI models turned off. They are off by default, and only the workspace owner can opt in. Decide in advance who may approve that change.
2. If you want your data stored outside the United States, set a default region for new workspaces under organization settings → Data & Compliance → Data Residency. Existing workspaces have to be moved by contacting the account team or Notion support.
3. Turn off the addition of new integrations that are not on your allowlist, so staff can’t connect unvetted apps.

On Free, Plus and Business, the pages checked describe no AI data settings.

Free and paid tiers

The no-training promise covers every plan. The other differences all favor Enterprise:

• AI provider retention: Free, Plus and Business data is kept by the AI provider for up to 30 days. Enterprise uses zero data retention on most models, and data-retaining models stay off unless the owner opts in.
• Data region: only Enterprise can choose where data is stored. On other plans, workspace data stays in the United States. Data residency costs nothing extra on Enterprise.
• Health data: a HIPAA Business Associate Agreement is offered to Enterprise customers only.

In practice, the main question for a smaller plan is whether you are comfortable with an outside AI provider holding your prompts for up to a month.

Admin controls

Notion’s security page lists sign-in with SSO, MFA, role-based and least-privilege permissions, and audit logging that can feed a security monitoring tool. It also lists domain management, which lets you claim your email domain and control who creates workspaces. The page does not say which plans include these.

Under its Enterprise controls, admins can enforce SAML SSO, manage encryption keys, use SCIM to add and remove users, and set organization-wide rules for guest access, public sharing, exports and data retention.

Notion AI falls within Notion’s SOC 2 Type 2 report and ISO 27001 certification. Notion also lists annual ISMAP and BSI C5 audits, ISO 27701 and ISO 27018 attestations, and yearly outside penetration tests.

Using it with donor and client data

If your Notion workspace already holds donor or client records, Enterprise gives the most protection: zero data retention with AI providers on most models and a choice of region. On Free, Plus or Business, assume anything sent to Notion AI may sit with an outside AI provider for up to 30 days.

On any plan, set a rule that staff never paste these into AI prompts:

• Donor names together with gift amounts or giving history
• Client case notes or anything that identifies a person you serve
• Health information, unless you are on Enterprise with a signed BAA
• Credit card, bank or other payment details

Remember that data residency does not cover everything. Account information, usage data and data handled by subprocessors, including AI providers, may be processed outside your chosen region. If location matters to your funders or regulators, ask Notion in writing where each AI provider processes data, since the subprocessor list was not among the pages checked.

Questions people ask

Will Notion use our donor notes to train its AI?

Notion says no, on every plan. Neither Notion nor its AI providers may train models on customer data, and its contracts with providers forbid it.

If someone deletes a page, is it gone right away?

No. A deleted page or workspace can be restored for 30 days and then moves to permanent deletion. Embeddings made from it are deleted within 60 days.

Can we keep our data in Europe?

Only on Enterprise, which offers Frankfurt among its regions. Some data, such as account information and data handled by AI providers, may still be processed elsewhere.