Privacy facts at a glance
- Jurisdictions
- US · EU · DE · SG · GR · IE · IN · JP · AU · GB · KR
- Subprocessors
- 35
- Retention
- The privacy policy includes a 'Data retention' section (section 7) but the specific retention period is not quoted in the provided excerpts.
- Transfer mechanism
- Standard Contractual Clauses (SCCs) and Data Privacy Framework, as referenced in the privacy policy and DPA
- DPA available
- Yes
- Certifications
- SOC 2 Type 2 · ISO 27001 · ISO 27701 · ISO 27017 · ISO 27018 · HIPAA · BSI C5
- GDPR addressed
- Yes
- CCPA addressed
- Yes
Named subprocessors
AWS
Anthropic
Confluent
Cloudflare
DeepL
Fireworks
OpenAI
Splunk
Turbopuffer
Twilio
Exa
Google LLC
Tracked documents
Recent changes
Public summary; per-account review history visible to subscribers tracking this vendor.
Track Notion Labs in your workspace.
Get notified when Notion Labs adds a subprocessor, changes retention, updates their DPA, or quietly amends their privacy posture.
Start tracking — 14-day trialNo card required.