Notion Labs

notion.so · facts updated 2 weeks ago

Privacy facts at a glance
Jurisdictions
US · EU · DE · SG · GR · IE · IN · JP · AU · GB · KR
Subprocessors
35
Retention
The privacy policy includes a 'Data retention' section (section 7) but the specific retention period is not quoted in the provided excerpts.
Transfer mechanism
Standard Contractual Clauses (SCCs) and Data Privacy Framework, as referenced in the privacy policy and DPA
DPA available
Yes
Certifications
SOC 2 Type 2 · ISO 27001 · ISO 27701 · ISO 27017 · ISO 27018 · HIPAA · BSI C5
GDPR addressed
Yes
CCPA addressed
Yes
Named subprocessors
AWS Anthropic Confluent Cloudflare DeepL Fireworks OpenAI Splunk Turbopuffer Twilio Exa Google LLC

Tracked documents

Privacy policy
https://www.notion.com/trust/privacy-policy#california checked 2 weeks ago
Terms of service
https://www.notion.so/28ffdd083dc3473e9c2da6ec011b58ac checked 2 weeks ago
Security / trust page
https://www.notion.so/security checked 2 weeks ago

Recent changes

major Subprocessor list 2 weeks ago

Notion Labs published a new subprocessor list page adding numerous subprocessors including Anthropic, Fireworks, OpenAI, Google LLC, Cerebras Systems Inc., Baseten Labs, Parallel Web Systems, Mathpix Inc., Vercel Inc., Exa, Turbopuffer, StarTree Inc., Confluent, Cloudflare, DeepL, Splunk, Twilio, Teleperformance, and AWS, covering infrastructure, platform (including LLM hosting, web search, PDF conversion, and compute/AI agent actions), customer support, and business operations.

moderate Terms of service 2 weeks ago

Notion Labs updated their Terms of Service page navigation/index to add several new document links including a Master Subscription Agreement Update Summary (April 2026), Notion Marketplace Terms of Use, Notion Research Participation Terms, Notion Solutions Partner Program Agreement, Notion Certification Program Terms and Conditions, Professional Services Addendum, Premium Support Supplementary Terms, Marketing Program Participant Terms, Integration Gallery Terms of Service, and a Digital Services Act Transparency Disclosures page, while removing only the bare 'Notion' label.

minor Security / trust page 2 weeks ago

Notion Labs removed the 'New' label from the 'Agents' navigation item in the security/trust page header and AI features section.

minor Subprocessor list 2 weeks ago

Notion's subprocessor list page appears to have undergone a title/header change (removing the full page content including subprocessor tables and replacing with just 'Notion'), suggesting a significant structural or content removal in the diff representation, but the underlying subprocessor data changes cannot be clearly determined from this diff alone.

minor Terms of service 2 weeks ago

Notion's terms of service page was restructured, removing the full navigation sidebar and index of all policy documents (including links to MSA, DPA, subprocessor list, privacy policy, security exhibit, and all supplementary terms) and replacing it with only the Notion brand name, indicating a significant navigation/structural overhaul of the terms portal.

minor Privacy policy 2 weeks ago

Notion Labs removed the 'New' label from the 'Agents' navigation item in the privacy policy page header, with no substantive policy content changes.

Public summary; per-account review history visible to subscribers tracking this vendor.

Track Notion Labs in your workspace.

Get notified when Notion Labs adds a subprocessor, changes retention, updates their DPA, or quietly amends their privacy posture.

Start tracking — 14-day trial
No card required.