Put Notion AI on Enterprise if your data policy requires zero retention at AI providers. On Business, providers such as Anthropic and OpenAI keep prompts and workspace context for up to 30 days. Neither Notion nor its providers train on customer data unless the workspace opts in. Review connector indexing and deletion times as a separate item.
When you need this
- Security review asks which providers process workspace content and for how long.
- Contracts or regulation require zero retention or HIPAA-eligible processing.
- Slack, Google Drive, or Microsoft 365 are about to be connected to Notion AI.
Evaluation criteria
Training use
Is workspace content used to train any model?
Look forLeave the setting that shares workspace data to improve Notion AI off. Notion's contracts bar Notion and its AI subprocessors from training on customer data by default.
Provider retention
How long do LLM providers keep prompts and context?
Look forRequire zero retention on Enterprise, or 30 days or fewer on other plans. A few models offer no zero retention, and Notion keeps them off until the workspace owner opts in. Claude Fable models need that opt-in because Anthropic stores their prompts. Notion's security page says only that such a provider keeps data "for a limited period solely to deliver the response". Get each model's retention period in writing before an owner turns it on.
Permissions
Can an answer reveal content a user cannot open?
Look forTest answers against the asking user's access. Notion AI uses only pages that user can open. Connectors filter results by the source app's permissions at query time and pick up permission changes within about an hour.
Connector indexing
What does each connector ingest, and when does it go away?
Look forThe first sync takes up to 36 hours and pulls up to one year of history. New content appears within about 3 hours. Notion deletes connector data within 24 hours of a disconnect, and embeddings within 60 days of deletion at the source. Guests are excluded.
Compliance
Which certifications and agreements cover Notion AI?
Look forConfirm that Notion AI is in scope of the SOC 2 Type 2 report and the ISO 27001 certification. Enterprise supports HIPAA processing through providers' zero-retention APIs under a business associate agreement (BAA). Data loss prevention (DLP) and security information and event management (SIEM) connections also need Enterprise.
Admin controls
Which settings does an owner set before rollout?
Look forRequire confirmation before web requests, or turn web search off. In September 2025, a security team used indirect prompt injection to make Notion AI leak data through its web search tool. Restrict the allowed models and who can create Custom Agents. On Enterprise, review Custom Agent changes in the audit log.
Questions to ask vendors
- Is 30-day provider retention acceptable, or do we need Enterprise for zero retention?
- Which subprocessors process our content today, and who on our team receives Notion's new-subprocessor notices?
- Which connectors will a workspace owner set up, and have the admins of those apps approved the scopes?
- Which features we plan to use need a data-retaining model, and how long does that provider keep data?
Red flags
- Assuming Business has zero retention at LLM providers. They keep data up to 30 days on Business.
- Connecting Slack or Google Drive before checking that primary emails match across apps.
- A data-retaining model turned on for Custom Agents without a security review.
- Connector search treated as a records system, though it reaches only one year back.
Products in this piece
Sources
- Official documentation
- 7
- Public source
- 1
- Notion Help Center: Notion AI security & privacy practices
- Notion Help Center: Enterprise Search security & privacy practices
- Notion Help Center: Notion AI Connectors overview
- Notion Help Center: What is Notion AI? FAQs
- Notion Help Center: Custom Agents
- Notion pricing
- Notion AI product page
- Hacker News comment on making Notion AI leak data through web search (Sep 19, 2025)