Data

Notion and the GDPR: AI training, data location and DPA

Business: Doesn't train on your data. EU hosting only on higher plans · DPA on request.

Vendor: NotionWorkspace and projectsChecked on How we check

Verdict

Is Notion GDPR compliant?

Business

Business

Doesn't train on your data

EU hosting only on higher plans · DPA on request

Price: €19.50 / user / mo

No tool is GDPR compliant on its own: that depends on how your business uses it. This page shows the vendor's side, from its own pages. It is not legal advice.

Training

Does Notion train on your data?

Trains on your data by default?

Checked

Doesn't train on your data.

No. Notion and its AI sub-processors do not train on customer data by default; LLM providers keep data up to 30 days outside Enterprise

Source: notion.comHelp page (undated)Checked on

Location

Where does Notion store your data?

Where data is stored by default

Checked

United States

Source: notion.comHelp page (undated)Checked on

EU hosting on this plan

Checked

EU hosting only on higher plans.

Not on Business. Enterprise only (Frankfurt or Ireland); excludes account and usage data, sub-processor processing, Calendar, Mail and beta features

Source: notion.comEligibility and exclusionsChecked on

Contract

Does Notion sign a data processing agreement?

Data processing agreement (DPA)

Checked

DPA on request.

Yes. DPA effective 14 Aug 2026 forms part of the Master Subscription Agreement with Notion Labs, Inc.

Source: notion.notion.siteHeader and section 1.2Checked on

Processors

Who else handles Notion data?

Sub-processors (companies that handle the data for them)

Checked

26 listed.

Public. 26 third-party entries; 9 host AI models (Anthropic, OpenAI, Google, Fireworks, Baseten, Modal, Cerebras, xAI, Parallel), most listed as Global or USA; email sign-up for notices, 10-day objection window

Source: notion.notion.siteInfrastructure, Platform, Customer and Support Services tablesChecked on

EU–US Data Privacy Framework

Checked

On the list, under review.

Active, re-certification under review (EU-US DPF, Swiss-US DPF, UK Extension)

Source: dataprivacyframework.govSearch 'Notion Labs'Checked on

Retention

How long does Notion keep your data?

How long data is kept

Checked

On Business, the AI provider keeps data for 30 days or fewer, then deletes it. Deleted pages can be restored for 30 days, then are permanently deleted; embeddings go within 60 days

Source: notion.comSection 'How your Data is Protected and Retained' and 'Deleting and Restoring your Data'Checked on

Security

Which certifications and admin controls does Notion have?

Security certifications

Checked

Notion AI is in scope of Notion's SOC 2 Type 2 report and ISO 27001 certification

Source: notion.comSection 'Compliance and Certifications'Checked on

Admin controls for AI

Checked

Partly. Owners can turn off web search and image generation, choose which AI models the team can use, cap credit spend and set AI Meeting Notes options; the help centre describes no single switch that removes Notion AI from a Business workspace

Source: notion.comList under 'Workspace owners on any Notion plan can go to Settings → Notion AI'Checked on

Price

What does Notion cost?

Price, as shown in Germany

Checked

€19.50 / user / mo.

EUR 19.50 per member/month billed annually; EUR 23.50 billed monthly

Source: notion.comBusiness card, annual and monthly togglesChecked on

Alternatives

Notion alternatives that don't train on your data

Other workspace and projects tools whose business plan doesn't train on your data and includes a DPA.

The five marks, in order: No AI training · EU hosting · DPA · Sub-processors listed · DPF or EU vendor. ✓ meets it, ✕ doesn't, – partly, ? not stated.

Tool · PlanVerdictYour five rules
  • Google Chat

    Google Workspace Business Standard · €13.60 / user / mo

    Doesn't train on your dataEU hosting available · DPA in the terms

    ✓✓✓✓✓

  • Miro

    Business · €20 / user / mo

    Doesn't train on your dataEU hosting available · DPA in the terms

    ✓✓✓✓✓

  • monday.com

    Pro · €19 / user / mo

    Doesn't train on your dataEU hosting available · DPA in the terms

    ✓✓✓✓✓

  • Teamwork.com

    Basics · $9.99 / user / mo

    Doesn't train on your dataEU hosting available · DPA on request

    ✓✓✓✓✓

  • Wrike

    Business · $25 / user / mo

    Doesn't train on your dataEU hosting available · DPA in the terms

    ✓✓✓✓✓

Need something your tools can't do?

We design and build what your team is missing, around the way you already work and the data rules you set.

Book a callServices