Notion AI
Notion
Safe
Notion says customer data is not used to train models by default, and its security page says customer data is never used to train models by Notion or its subprocessors. Notion AI only uses content the user can already access. Enterprise customers can get a business associate agreement, and zero-data-retention workspaces are described as supporting HIPAA workflows. That is a reasonable default for ordinary workspace content.
Last checked 2026-11-10
Data-safety checklist
Trains on your data by default
No
The Notion AI security practices page says that, by default, customer data is not used to train models. The main security page says customer data is never used to train AI models by Notion or its subprocessors.How to opt out
Steps
No opt-out is required for the default. The pages do not describe a switch that turns training on for normal customer data.Data retention
What they keep
Unknown as a single number of days. Zero data retention is a workspace option and is the configuration Notion ties to HIPAA-compliant workflows with its providers.BAA / HIPAA
Enterprise only
Notion says a business associate agreement is available to Enterprise customers, along with Enterprise HIPAA security features. Zero-data-retention workspaces use providers' zero-retention APIs for those workflows.Certifications
2 listed
- SOC 2 Type 2
- ISO 27001
Enterprise and admin controls
Controls
Permissions are respected, so AI can only use content the person can open. Enterprise adds the HIPAA configuration. Subprocessors that can see customer data are listed on Notion's subprocessor page.Sources
2 pages