Notion AI — privacy & data policy

Provider: Notion. PromptPrivacy score: 90/100. Last verified November 01, 2026.

What happens to your data?

When you submit a query, Notion AI retrieves relevant pages from your workspace matching your existing access permissions and sends them to AI models to formulate an answer. Neither Notion nor model providers use this content to train models. Provider retention ranges from zero data retention to a maximum of 30 days depending on your plan tier.

Does it train on your data?

Does not train on your content. By default, neither Notion nor its third-party AI providers use customer data to train models, and this obligation is contractually enforced throughout the provider supply chain.

Can you opt out?

Not applicable. User content is not used to train AI models by default.

Data retention

For Enterprise workspaces, most models feature zero data retention (ZDR), with non-ZDR models requiring admin opt-in. For Free, Plus, and Business tiers, AI providers retain data for 30 days or fewer before deletion. Deleted pages or workspaces remain recoverable for 30 days prior to permanent deletion, and search embeddings are deleted within 60 days.

Encryption & security

Data in transit is encrypted using TLS 1.2 or greater. Customer workspaces are logically separated in production, and Notion AI is covered under SOC 2 Type 2 and ISO 27001 certifications.

Is it safe for work?

Yes. Notion AI respects existing workspace permissions, enforces strict no-training contractual guarantees with subprocessors, offers zero data retention for enterprise workflows, and holds SOC 2 Type 2 and ISO 27001 certifications.

Source policy: https://www.notion.so/help/notion-ai-security-practices