Office & collaboration

Notion AI

Provider: Notion Labs, Inc. · Based in: Notion Labs, Inc., 685 Market St., San Francisco, CA 94105, USA · Provider website

Plans
4
Sources
12
As of
18 Oct

As of 18 Oct 2026. Based on our research on this date and the process described in the methodology. No guarantee of accuracy, not legal advice. The provider’s current documents take precedence. Found an error? Report a correction.

Incomplete. 2 points could not be verified in any provider source (see open points). This does not mean the matter is unproblematic; it means we have not checked it.

At a glance

Hosting
US only: Free, Plus, BusinessEU option: Enterprise
Training on inputs
no: all 4 plans
DPA
not publicly documented: Freeyes: Plus, Business, Enterprise
Provider
Notion Labs, Inc.
Based in
Notion Labs, Inc., 685 Market St., San Francisco, CA 94105, USA (contact address according to the Privacy Policy, q11; Notion: "based in beautiful downtown San Francisco", q6)

Values from 4 plans, each listed with the plans it applies to. Details and evidence are in the plan table.

Compare Notion AI

Compare with another tool

Compared plan by plan with other tools in the category Office & collaboration:

Details per plan

Short values per plan. Click a feature to open the evidence and notes for all plans; sources with retrieval dates are under “Evidence”.

Compare with another tool

Price and scope

differs by plan
0 EUR/user/mo
differs by plan
no

Contract and data use

differs by plan
not publicly documented
no
differs by plan
Non-Enterprise: LLM providers retain…

Hosting and sharing

differs by plan
US only
list available

Evidence

differs by plan
7 sources

not documentedmeans: not publicly documented, not verifiable in any provider source. It does not mean “no”.

Third-country transfers

Provider: Notion Labs, Inc., San Francisco, USA. DPA 4.1: the customer authorises Notion and its sub-processors to transfer Customer Personal Data across borders, including from the EEA/Switzerland/UK to the USA. DPA 4.2: for Restricted Transfers, the EU standard contractual clauses (Implementing Decision 2021/914) or the UK IDTA apply (q8). Without Data Residency Migration, data remains in the USA. Sub-processors may process outside the data region (q3). The LLM sub-processors are predominantly listed with location 'Global' or USA (q7). EU-US Data Privacy Framework: Notion Labs, Inc. is entered in the DPF List (EU-US, Swiss-US and UK Extension, each with status "Active - Re-certification under Review", retrieved 2026-10-18, q12); the DPA and the Privacy Policy do not mention the DPF. Privacy Policy (q11): information "may be transferred, processed, and stored anywhere in the world, including but not limited to, the United States".

Sources:

Certifications (as stated by the provider)

Security page (q5): SOC 2, ISO 27001, ISMAP and BSI C5 (annual audits); ISO 27701 and ISO 27018 independently attested; BAA for HIPAA on Enterprise. Trust Center (q9) additionally lists SOC 2 Type I/II, SOC 3, CAIQ, HIPAA Compliance Attestation Report and, in the intro, ISO 27001/17/18/701; in addition, among others, PCI DSS Merchant Compliance, K-FSI and CASA Tier 3. Reports and certificates in the Trust Center only via "Request access to documentation". According to q1, Notion AI is in scope of the SOC 2 Type 2 report and the ISO 27001 certification. ISO 42001: not listed in the Trust Center (retrieved 2026-10-18).

Sources:

AI Act

Functions: Text generation and editing, summarisation, translation, Notion Agent (multi-step tasks), Research Mode, Enterprise Search across connected apps, AI Meeting Notes (transcription/summarisation, beta), image generation (beta), database autofill.

Provider’s statement: Trust Center (q9), section 'EU AI Act compliance': "Notion complies with the EU AI Act requirements." Notion AI is stated to be classified as a "limited-risk AI system" within the risk-based framework, and Notion itself categorised as a "deployer of AI systems" (provider's self-declaration). No document specific to the AI Act is listed in the Trust Center; an "AI Tools Usage and Governance Policy" is listed, available only on request for access (retrieved 2026-10-18).

Classification (for review, not legal advice): For review: customer typically a deployer (Art. 3(4)). Potentially relevant under Art. 50: published AI-generated texts (para. 4) and AI image generation (para. 2 lies with the provider). Not legal advice.

Sources:

Open points of the review

  • Trust Center documents (SOC 2 report, ISO certificate, "AI Tools Usage and Governance Policy") only on request for access; the self-classification under the EU AI Act (q9) therefore cannot be checked against documents.
  • EU-US Data Privacy Framework: status "Active - Re-certification under Review" (q12); whether the re-certification will be completed is open. Contractually, the DPA bases transfers on SCCs/UK IDTA (q8).

Frequently asked questions

Where does Notion AI store data?

US only (plans: Free, Plus, Business); EU hosting selectable (plans: Enterprise). According to the provider, as of 18 Oct 2026.

Is there a DPA for Notion AI?

not publicly documented in: Free; yes in: Plus, Business, Enterprise. Based on our research, as of 18 Oct 2026.

Does Notion AI use inputs for AI training?

no in: Free, Plus, Business, Enterprise. According to the provider, as of 18 Oct 2026.

Where is the provider based?

Notion Labs, Inc., 685 Market St., San Francisco, CA 94105, USA. According to the provider, as of 18 Oct 2026.

All sources

  1. 01Notion AI security & privacy practicesDocumentation · retrieved 14 Oct 2026
  2. 02Notion PricingPricing page · retrieved 18 Oct 2026
  3. 03Data residency for NotionDocumentation · retrieved 14 Oct 2026
  4. 04Notion AI (Help Center)Documentation · retrieved 7 Oct 2026
  5. 05Notion SecurityTrust Center · retrieved 14 Oct 2026
  6. 06About NotionDocumentation · retrieved 7 Oct 2026
  7. 07Notion's List of SubprocessorsSub-processor list · retrieved 18 Oct 2026
  8. 08Notion Data Processing Addendum (effective from 2026-08-14)DPA · retrieved 18 Oct 2026
  9. 09Notion Trust CenterTrust Center · retrieved 18 Oct 2026
  10. 10Notion Personal Use Terms of ServiceTerms and conditions · retrieved 18 Oct 2026
  11. 11Notion Privacy Policy (Last Updated: September 29, 2025)Privacy notice · retrieved 18 Oct 2026
  12. 12Data Privacy Framework List: Notion Labs, Inc.DPF List · retrieved 18 Oct 2026

More tools in Office & collaboration with an EU hosting option (in at least one plan)

  • Asana AI · Based in: Asana, Inc., 633 Folsom Street, Suite 100, San Francisco, CA 94107-3600, USA
  • Atlassian Rovo · Based in: Atlassian Pty Ltd
  • ClickUp Brain · Based in: Mango Technologies, Inc. DBA ClickUp, 350 Tenth Ave, 5th floor, San Diego, CA 92101, USA
  • Microsoft 365 Copilot · Based in: According to the Microsoft Privacy Statement

All tools in Office & collaboration · Tools with an EU hosting option

Further reading

All tools in the category: Office & collaboration. Notion AI has at least one plan with an EU hosting option; see also AI tools with an EU hosting option. Figures across all tools: Data report.