Notion AI
Notion Labs · Productivity AI
Ayliea's assessment: Medium RiskAyliea recommends: ApproveIn Ayliea's curated list
Verified . Risk classification and recommended policy are Ayliea's subjective assessments — not vendor certifications.
- Data residency
- United States; EU residency on Enterprise
- Zero retention available
- Yes (commercial / Enterprise tier)
- Certifications
- SOC 2 Type II, ISO 27001, ISO 27018, HIPAA
Why this rating
Inherits Notion's existing compliance boundary. Notion AI prompts and outputs stay within the workspace; Notion does not use customer content for training by default.
Considerations before deploying
- Verify HIPAA BAA executed if processing PHI
- Apply page-level permissions before enabling AI on shared workspaces
Sources
- Notion Trust Center (www.notion.so)
- Notion AI FAQ (www.notion.so)
Want this for every tool on your network?
A scoping call starts an expert assessment that maps your full AI surface — sanctioned and shadow — from the log metadata you share.