- Deployment
- hosted
- Hq Country
- United States
- Hq City
- San Francisco
- Ownership
- private
- Founded
- 2013
- Training Default
- never
- Residency Options
- United States, Europe (Enterprise plan, data at rest only)
- Gov Access Exposure
- us-cloud-act
- Eu Ai Act Role
- deployer
- Certs
- ISO 27001, ISO 27017, ISO 27018, ISO 27701, SOC 2 Type II
- DPA available
- yes
- Zero Retention Available
- Yes
- Retention Default
- Enterprise plan: zero data retention with LLM providers. Non-Enterprise: LLM providers retain Customer Data 30 days or fewer. Data-retaining LLMs are off by default; embeddings are deleted within 60 days of page or workspace deletion.
- Retention Exceptions
- Certain AI features may require data-retaining LLMs, which an admin can switch on. External Agents functionality has separate retention practices.
- Subprocessors
- OpenAI, Anthropic, X.AI LLC, Fireworks, Baseten Labs, Inc., Turbopuffer, Amazon Web Services
- Subprocessor Count
- 7
- Transfer Mechanism
- sccs
- Eu Procurement Ready
- conditional
- Eu Procurement Reason
- EU data residency exists on the Enterprise plan but covers data at rest only — Notion states it will continue to store and process data in the United States, and explicitly excludes data processed by its subprocessors. Since the AI path is the subprocessors, no EU inference option exists. Contractual no-training and Enterprise ZDR are strong; the residency claim does not reach the AI feature.
- Training Claim Basis
- stated
- Training Confidence
- high
- Residency Claim Basis
- stated
- Residency Confidence
- high
- Retention Claim Basis
- stated
- Retention Confidence
- high
- Subprocessors Claim Basis
- stated
- Subprocessors Confidence
- high
- Residency Class
- non-eu-only
- Portability / Exit Path
- proprietary-only
- Subprocessor Jurisdiction
- non-eu
- Underlying model providers
- OpenAI, Anthropic, xAI, Fireworks, Baseten
