Microsoft 365 Copilot vs. Notion AI: data protection per plan

not publicly documented (consumer pages refer to the Microsoft privacy statement; no DPA named, q14/q15)

not publicly documented (consumer subscription; no DPA named in q14/q15)

not publicly documented

yes (according to q2, the DPA and Product Terms apply to Copilot use by organisations with Enterprise Data Protection; the comparison table on the Business pricing page lists the row "Enterprise Data Protection (EDP), management, compliance, and controls" for Copilot Business, q12)

yes (Enterprise Data Protection: DPA and Product Terms, Microsoft as processor, q2)

yes (Microsoft Products and Services DPA and Product Terms; Microsoft as processor, q2)

yes (Enterprise Data Protection: DPA and Product Terms, Microsoft as processor, q2)

not publicly documented for purely personal use: the Personal Use Terms (q10) "apply to personal use of the Services only" and contain no reference to a DPA. For use on behalf of an organisation, according to q10 the MSA applies, of which the DPA forms part (q8).

yes: The DPA (version effective from 2026-08-14) forms part of the Master Subscription Agreement (q8). According to the Personal Use Terms, the MSA applies only to use on behalf of an organisation or under a Plus, Business or Enterprise plan (q10).

yes: The DPA (version effective from 2026-08-14) forms part of the Master Subscription Agreement (q8). According to the Personal Use Terms, the MSA applies only to use on behalf of an organisation or under a Plus, Business or Enterprise plan (q10).

yes: The DPA (version effective from 2026-08-14) forms part of the Master Subscription Agreement (q8). According to the Personal Use Terms, the MSA applies only to use on behalf of an organisation or under a Plus, Business or Enterprise plan (q10).

"Except for certain categories of users or users who have opted out, Microsoft uses data from Bing, MSN, Copilot, and interactions with ads on Microsoft for AI training." Opt-out under Privacy > "Training on conversation activity" (q14, q15). Excluded, among others: users not signed in, under-18s, users in Brazil, China (excluding Hong Kong), Israel, Nigeria, South Korea, Vietnam (q14). Note: according to their own header text, q14 and q15 apply only to the older version of the Copilot app ("An updated version of the Microsoft Copilot app for web, desktop, and mobile devices is available as of August 18, 2026."). For the new version (article "your activity history", q27): "Prompts, responses, and your file contents when using the Microsoft Copilot app aren't used to train foundation models." According to q27, optional feedback is not used to train the foundation models.

"We do not train Copilot on data from the following types of users: ... Users of Copilot within Microsoft 365 apps with Personal or Family subscriptions." (q14) Article on Copilot in Microsoft 365 apps for home users (Personal, Family, Premium, Pro): "Prompts, responses, and your file contents when using Copilot in Microsoft 365 apps aren't used to train foundation models." (q22)

According to its header text, q22 applies "when you're using Copilot in Microsoft 365 apps for home, such as with a Microsoft 365 Personal, Family, Premium, or Pro plan": "Prompts, responses, and your file contents when using Copilot in Microsoft 365 apps aren't used to train foundation models." According to q22, optional feedback is used to improve Copilot, not to train the foundation models.

"Prompts, responses, and data accessed through Microsoft Graph aren't used to train foundation LLMs, including those used by Microsoft Copilot." (q1) The retrieved documentation does not distinguish between Business and Enterprise; the Business pricing page names "Enterprise Data Protection (EDP)" for Copilot Business (q12).

"Prompts and responses aren't used to train the underlying foundation models." (q16). Consumer page: users with an organisational Entra account are excluded from training (q14).

"Prompts, responses, and data accessed through Microsoft Graph aren't used to train foundation LLMs, including those used by Microsoft Copilot." (q1) User feedback (optional) is not used to train the foundation LLMs (q1). Web search queries (Bing): "aren't used to train generative AI foundation models" (q10).

"Prompts and responses aren't used to train the underlying foundation models." (q16). Consumer page: users with an organisational Entra account are excluded from training (q14).

Documentation does not differentiate by plan: "By default, Notion and its AI Subprocessors do not use Customer Data to train any models." Free: limited free AI responses for trying it out (trial).

Documentation does not differentiate by plan (see Free). Plus: Trial of Notion AI / limited free AI responses.

"Your use of Notion AI does not grant Notion any right or license to your Customer Data to train our machine learning models."

As Business; additionally: "by default our LLM providers utilize zero data retention for Enterprise plan workspaces".

Microsoft Privacy Statement (September 2026, q19), section Storage and processing of personal data: "Personal data collected by Microsoft may be stored and processed in your region, in the United States, and in any other jurisdiction where Microsoft or its affiliates, subsidiaries, or service providers operate facilities." Major data centres in, among others, Austria, Finland, France, Germany, Ireland, Luxembourg, the Netherlands, the UK, the USA; "Typically, the primary storage location is in your region or in the United States". Copilot-specific location statement: not documented.

Microsoft Privacy Statement (September 2026, q19), section Storage and processing of personal data: "Personal data collected by Microsoft may be stored and processed in your region, in the United States, and in any other jurisdiction where Microsoft or its affiliates, subsidiaries, or service providers operate facilities." Major data centres in, among others, Austria, Finland, France, Germany, Ireland, Luxembourg, the Netherlands, the UK, the USA; "Typically, the primary storage location is in your region or in the United States". Copilot-specific location statement: not documented.

Microsoft Privacy Statement (September 2026, q19), section Storage and processing of personal data: "Personal data collected by Microsoft may be stored and processed in your region, in the United States, and in any other jurisdiction where Microsoft or its affiliates, subsidiaries, or service providers operate facilities." Major data centres in, among others, Austria, Finland, France, Germany, Ireland, Luxembourg, the Netherlands, the UK, the USA; "Typically, the primary storage location is in your region or in the United States". Copilot-specific location statement: not documented.

Same arrangement as Microsoft 365 Copilot (Premium licence); a plan-specific deviation is not documented in the retrieved pages. According to q1/q6: calls to the LLM go to the nearest data centres in the region but may go to other regions at times of high utilisation; additional safeguards apply to EU users, "EU traffic stays within the EU Data Boundary". Exceptions according to the sources: (a) web search queries are excluded from the EU Data Boundary and the DPA (q2, q10); (b) Anthropic models are excluded from the EU Data Boundary (q2, q3); (c) Flex Routing: customers in the EU/EFTA can allow LLM inference outside the EU Data Boundary at peak load (USA, Canada or Australia); data at rest remains in the EUDB except for limited pseudonymised data; on by default for eligible tenants created after 2026-03-25, review of the setting recommended for older tenants (q4); (d) Copilot in Word/Excel/PowerPoint with Anthropic models: processing outside the EUDB (q5). Customers with Multi-Geo are not within the EUDB scope for Microsoft 365 (q4).

According to q1/q6: calls to the LLM go to the nearest data centres in the region but may go to other regions at times of high utilisation; additional safeguards apply to EU users, "EU traffic stays within the EU Data Boundary". Exceptions according to the sources: (a) web search queries are excluded from the EU Data Boundary and the DPA (q2, q10); (b) Anthropic models are excluded from the EU Data Boundary (q2, q3); (c) Flex Routing: customers in the EU/EFTA can allow LLM inference outside the EU Data Boundary at peak load (USA, Canada or Australia); data at rest remains in the EUDB except for limited pseudonymised data; on by default for eligible tenants created after 2026-03-25, review of the setting recommended for older tenants (q4); (d) Copilot in Word/Excel/PowerPoint with Anthropic models: processing outside the EUDB (q5). Customers with Multi-Geo are not within the EUDB scope for Microsoft 365 (q4).

According to q1/q6: calls to the LLM go to the nearest data centres in the region but may go to other regions at times of high utilisation; additional safeguards apply to EU users, "EU traffic stays within the EU Data Boundary". Exceptions according to the sources: (a) web search queries are excluded from the EU Data Boundary and the DPA (q2, q10); (b) Anthropic models are excluded from the EU Data Boundary (q2, q3); (c) Flex Routing: customers in the EU/EFTA can allow LLM inference outside the EU Data Boundary at peak load (USA, Canada or Australia); data at rest remains in the EUDB except for limited pseudonymised data; on by default for eligible tenants created after 2026-03-25, review of the setting recommended for older tenants (q4); (d) Copilot in Word/Excel/PowerPoint with Anthropic models: processing outside the EUDB (q5). Customers with Multi-Geo are not within the EUDB scope for Microsoft 365 (q4).

According to q1/q6: calls to the LLM go to the nearest data centres in the region but may go to other regions at times of high utilisation; additional safeguards apply to EU users, "EU traffic stays within the EU Data Boundary". Exceptions according to the sources: (a) web search queries are excluded from the EU Data Boundary and the DPA (q2, q10); (b) Anthropic models are excluded from the EU Data Boundary (q2, q3); (c) Flex Routing: customers in the EU/EFTA can allow LLM inference outside the EU Data Boundary at peak load (USA, Canada or Australia); data at rest remains in the EUDB except for limited pseudonymised data; on by default for eligible tenants created after 2026-03-25, review of the setting recommended for older tenants (q4); (d) Copilot in Word/Excel/PowerPoint with Anthropic models: processing outside the EUDB (q5). Customers with Multi-Geo are not within the EUDB scope for Microsoft 365 (q4).

Data Residency (EU) only for Enterprise; without migration, workspace data remains in the USA. LLM processing by sub-processors: location not stated in the documentation.

Data Residency only for Enterprise; default: USA.

Data Residency only for Enterprise; default: USA.

Data Residency free of charge for Enterprise (q3). European data region: EU-Central-1 (Frankfurt), backup region EU-West-1 (Ireland); in addition USA, Japan and Korea (Japan/Korea via the account team). The feature only changes the storage location of data at rest (page content, uploaded files, search index, messages and files generated by third parties/bots; backups in the same region). Not covered are Notion Calendar/Mail, beta services, integrations, account and usage data, and data processed by sub-processors. The LLM providers for Notion AI operate with Zero Data Retention on Enterprise (q3). Without migration, data remains in the USA (q3).

• not publicly documented (consumer pages do not name any sub-processors)

• not publicly documented

• not publicly documented

• Anthropic (sub-processor according to q3; Anthropic models in, among others, Microsoft Copilot, Researcher, Copilot Studio, Power Platform and Copilot in Microsoft 365 apps; deactivated by default for customers in the EU/EFTA/UK and excluded from the EU Data Boundary; excepted are "Anthropic models with Data Retention": the Product Terms and DPA do not apply to them, and Anthropic acts there as an independent processor, q3)
• OpenAI (added to the sub-processor list 2026-06-23, usable from 2026-07-09, activated by default for eligible commercial customers from 2026-07-24; included in the EU Data Boundary but excluded from in-country processing commitments; q8)
• SpaceXAI (list updated 2026-09-10, available to eligible customers from 2026-09-18; Frontier programme only, does not apply to customers in the EU/EFTA/UK; q9)
• Full list and number: not publicly documented on the retrieved pages (reference to the Service Trust Portal, sign-in required)

• Anthropic (sub-processor according to q3; Anthropic models in, among others, Microsoft Copilot, Researcher, Copilot Studio, Power Platform and Copilot in Microsoft 365 apps; deactivated by default for customers in the EU/EFTA/UK and excluded from the EU Data Boundary; excepted are "Anthropic models with Data Retention": the Product Terms and DPA do not apply to them, and Anthropic acts there as an independent processor, q3)
• OpenAI (added to the sub-processor list 2026-06-23, usable from 2026-07-09, activated by default for eligible commercial customers from 2026-07-24; included in the EU Data Boundary but excluded from in-country processing commitments; q8)
• SpaceXAI (list updated 2026-09-10, available to eligible customers from 2026-09-18; Frontier programme only, does not apply to customers in the EU/EFTA/UK; q9)
• Full list and number: not publicly documented on the retrieved pages (reference to the Service Trust Portal, sign-in required)

• Anthropic (sub-processor according to q3; Anthropic models in, among others, Microsoft Copilot, Researcher, Copilot Studio, Power Platform and Copilot in Microsoft 365 apps; deactivated by default for customers in the EU/EFTA/UK and excluded from the EU Data Boundary; excepted are "Anthropic models with Data Retention": the Product Terms and DPA do not apply to them, and Anthropic acts there as an independent processor, q3)
• OpenAI (added to the sub-processor list 2026-06-23, usable from 2026-07-09, activated by default for eligible commercial customers from 2026-07-24; included in the EU Data Boundary but excluded from in-country processing commitments; q8)
• SpaceXAI (list updated 2026-09-10, available to eligible customers from 2026-09-18; Frontier programme only, does not apply to customers in the EU/EFTA/UK; q9)
• Full list and number: not publicly documented on the retrieved pages (reference to the Service Trust Portal, sign-in required)

• Anthropic (sub-processor according to q3; Anthropic models in, among others, Microsoft Copilot, Researcher, Copilot Studio, Power Platform and Copilot in Microsoft 365 apps; deactivated by default for customers in the EU/EFTA/UK and excluded from the EU Data Boundary; excepted are "Anthropic models with Data Retention": the Product Terms and DPA do not apply to them, and Anthropic acts there as an independent processor, q3)
• OpenAI (added to the sub-processor list 2026-06-23, usable from 2026-07-09, activated by default for eligible commercial customers from 2026-07-24; included in the EU Data Boundary but excluded from in-country processing commitments; q8)
• SpaceXAI (list updated 2026-09-10, available to eligible customers from 2026-09-18; Frontier programme only, does not apply to customers in the EU/EFTA/UK; q9)
• Full list and number: not publicly documented on the retrieved pages (reference to the Service Trust Portal, sign-in required)

• Anthropic (AI agents, hosting of LLMs and embeddings, abuse prevention; Global)
• OpenAI (hosting LLMs/embeddings, abuse prevention; Global)
• Google LLC (hosting LLMs/embeddings, abuse prevention; Global)
• X.AI LLC (hosting LLMs/embeddings; USA, UK)
• Fireworks, Baseten Labs, Modal Labs (hosting LLMs/embeddings; Global)
• Cerebras Systems Inc. (hosting LLMs/embeddings; USA)
• Turbopuffer (vector database for embeddings; USA, Germany, Korea, Japan)
• Exa, Parallel Web Systems (web search; USA), Browserbase (web access for AI agents; USA, Spain), Vercel (code execution/agent actions; USA), Anysource/Runlayer (MCP security; USA)
• AssemblyAI (transcription; USA), DeepL (translation; USA)
• AWS (hosting and storage; USA, EU, Korea, Japan); further infrastructure, support and business sub-processors as per the list (q7, page states "Last updated": 2026-09-21)

• Anthropic (AI agents, hosting of LLMs and embeddings, abuse prevention; Global)
• OpenAI (hosting LLMs/embeddings, abuse prevention; Global)
• Google LLC (hosting LLMs/embeddings, abuse prevention; Global)
• X.AI LLC (hosting LLMs/embeddings; USA, UK)
• Fireworks, Baseten Labs, Modal Labs (hosting LLMs/embeddings; Global)
• Cerebras Systems Inc. (hosting LLMs/embeddings; USA)
• Turbopuffer (vector database for embeddings; USA, Germany, Korea, Japan)
• Exa, Parallel Web Systems (web search; USA), Browserbase (web access for AI agents; USA, Spain), Vercel (code execution/agent actions; USA), Anysource/Runlayer (MCP security; USA)
• AssemblyAI (transcription; USA), DeepL (translation; USA)
• AWS (hosting and storage; USA, EU, Korea, Japan); further infrastructure, support and business sub-processors as per the list (q7, page states "Last updated": 2026-09-21)

• Anthropic (AI agents, hosting of LLMs and embeddings, abuse prevention; Global)
• OpenAI (hosting LLMs/embeddings, abuse prevention; Global)
• Google LLC (hosting LLMs/embeddings, abuse prevention; Global)
• X.AI LLC (hosting LLMs/embeddings; USA, UK)
• Fireworks, Baseten Labs, Modal Labs (hosting LLMs/embeddings; Global)
• Cerebras Systems Inc. (hosting LLMs/embeddings; USA)
• Turbopuffer (vector database for embeddings; USA, Germany, Korea, Japan)
• Exa, Parallel Web Systems (web search; USA), Browserbase (web access for AI agents; USA, Spain), Vercel (code execution/agent actions; USA), Anysource/Runlayer (MCP security; USA)
• AssemblyAI (transcription; USA), DeepL (translation; USA)
• AWS (hosting and storage; USA, EU, Korea, Japan); further infrastructure, support and business sub-processors as per the list (q7, page states "Last updated": 2026-09-21)

• Anthropic (AI agents, hosting of LLMs and embeddings, abuse prevention; Global)
• OpenAI (hosting LLMs/embeddings, abuse prevention; Global)
• Google LLC (hosting LLMs/embeddings, abuse prevention; Global)
• X.AI LLC (hosting LLMs/embeddings; USA, UK)
• Fireworks, Baseten Labs, Modal Labs (hosting LLMs/embeddings; Global)
• Cerebras Systems Inc. (hosting LLMs/embeddings; USA)
• Turbopuffer (vector database for embeddings; USA, Germany, Korea, Japan)
• Exa, Parallel Web Systems (web search; USA), Browserbase (web access for AI agents; USA, Spain), Vercel (code execution/agent actions; USA), Anysource/Runlayer (MCP security; USA)
• AssemblyAI (transcription; USA), DeepL (translation; USA)
• AWS (hosting and storage; USA, EU, Korea, Japan); further infrastructure, support and business sub-processors as per the list (q7, page states "Last updated": 2026-09-21)

0 (free use; consumer pricing page not retrieved)

Microsoft 365 Personal: USD 9.99/month or USD 99.99/year; Microsoft 365 Family: USD 12.99/month or USD 129.99/year (US comparison page, q20). Germany (q28, as of 2026-10-18): Microsoft 365 Single EUR 10.00/month or EUR 99.00/year, Microsoft 365 Family EUR 13.00/month or EUR 129.00/year; no indication whether VAT is included.

USD 19.99/month or USD 199.99/year (US comparison page, q20). Germany (q28, as of 2026-10-18): EUR 22.00/month or EUR 219.00/year; no indication whether VAT is included.

Add-on: USD 18 per user/month with annual payment (promotional price, "Originally starting from $21.00 now starting from $18.00"), USD 25.20 monthly; qualifying plan required. Bundled: Business Standard with Copilot USD 23.50 (annual) / USD 28.20 (monthly); Business Premium with Copilot USD 32.00 / USD 38.40 (q12). Germany (q29, as of 2026-10-18, "prices plus VAT" (translated)): add-on Microsoft 365 Copilot Business EUR 15.60 per user/month with annual billing ("Originally starting from 18,20 € now starting from 15,60 €"), EUR 21.84 with a monthly subscription; bundles with Business Standard or Business Premium EUR 20.36 or EUR 27.73 (annual) and EUR 24.43 or EUR 33.28 (monthly). The page offers the filters "plans with Teams" and "plans without Teams" (translated labels); which filter the bundle prices in the page text belong to cannot be determined from the retrieved text

no additional cost with eligible Microsoft 365 plans ("Microsoft Copilot Chat is available at no additional cost for all Microsoft Entra account users with an eligible Microsoft 365 subscription.", q13); eligible plans include Microsoft 365 Business Premium, Business Standard and Business Basic (q24). Cost of the base plan not recorded.

USD 30 per user/month with annual payment, USD 31.50 with monthly payment; qualifying Microsoft 365 plan required separately (q13). Germany (q30, as of 2026-10-18): EUR 26.00 per user/month with annual billing or EUR 27.30 with monthly payment (annual subscription), "prices plus VAT" (translated)

no additional cost with eligible Microsoft 365 plans ("Microsoft Copilot Chat is available at no additional cost for all Microsoft Entra account users with an eligible Microsoft 365 subscription.", q13); eligible plans include Microsoft 365 E7, E5, E3, F3, F1, G5, G3, A5, A3, A1 as well as Office 365 E5, E3, E1 Plus, E1, F3, G and A plans (q24). Cost of the base plan not recorded.

EUR 0 per member/month (as of 2026-10-18); AI only as a trial

EUR 9.50 per member/month with annual billing (preselected on the pricing page: "annual billing" (translated label); as of 2026-10-18). With monthly billing (toggle "monthly billing" (translated label)), EUR 11.50 per member/month. No indication whether incl. VAT; AI only as a trial

EUR 19.50 per member/month with annual billing (preselected on the pricing page: "annual billing" (translated label); as of 2026-10-18). With monthly billing (toggle "monthly billing" (translated label)), EUR 23.50 per member/month. No indication whether incl. VAT; Notion AI included (with usage allowance)

not publicly documented (pricing page: "custom plans", "contact sales" (translated labels); as of 2026-10-18)

yes

yes (Copilot in Microsoft 365 apps for subscribers)

yes (according to the comparison page, Premium includes "Everything in Microsoft 365 Family, plus" further Copilot features, q20; q22 names Premium as a plan "for home" with Copilot in Microsoft 365 apps)

yes (Copilot add-on for qualifying Business plans)

yes (chat with web data; work data only via upload/selection; basic features in Word/Excel/PowerPoint/OneNote without Priority Access, q6)

yes (chat with web and work data via Microsoft Graph and Work IQ, Copilot in Word/Excel/PowerPoint/Outlook/Teams, Priority Access, agents)

yes (chat with web data; work data only via upload/selection; basic features in Word/Excel/PowerPoint/OneNote without Priority Access, q6)

no (only limited free trial responses)

no (only limited free trial responses)

yes

yes