Free and Plus plans include a trial of Notion AI. Business includes it.

Does Notion use my data to train AI?

Not by default. Notion says it won't train on your data unless you opt in.

Is Notion AI UK GDPR compliant?

That depends on how you use it. Notion offers a Data Processing Addendum, but you're still responsible for what personal data you put in and who can see it. See what is UK GDPR?

Home › Answers › Data, privacy and GDPR

Is Notion AI safe and secure?

Last checked: 18 October 2026 · The AI Till, UK

Short answer

For most business use, yes. Notion says your data isn't used to train models by default, Notion AI can only see pages you have access to, and it's covered by Notion's SOC 2 Type 2 and ISO 27001 certifications. On Free, Plus and Business plans, AI providers keep data for up to 30 days; Enterprise mostly uses zero-retention models.

Key facts (checked 18 October 2026)

Question	Notion's answer
Trains AI on my workspace?	Not by default
Who processes AI requests?	Third-party AI providers listed on its subprocessor page
Provider data retention	30 days or fewer on Free, Plus and Business; mostly zero retention on Enterprise
Permissions	AI only uses content you can already access
Certifications	SOC 2 Type 2 and ISO 27001

How Notion AI uses your workspace

Notion explains that when you ask a question, it searches an index of your pages for relevant content, then sends those pages and your request to the AI model to write the answer. Both steps follow your existing permissions, so Notion AI never widens what a person can see.

Other points from Notion's security page:

No training by AI providers. Notion says its contracts prohibit AI providers from training on your data, and that this applies to every provider in the chain.
Enterprise retention. Most models used on Enterprise keep nothing after responding. A small number don't offer zero retention; those are off by default and the workspace owner must opt in.
Some features need data-retaining models. Where they do, Notion gives admins a setting to turn them on.
Deletion. Deleted pages can be restored for 30 days. The searchable "embeddings" Notion creates are deleted within 60 days of a page or workspace being deleted.
Ownership. Notion says it doesn't claim ownership of your inputs or what Notion AI generates.

What to check

Your plan's retention: if you hold sensitive client data, Enterprise's zero retention may matter.
Page permissions: AI will find anything a user can open, so tidy up shared pages.
Your privacy notice if you store customer data in Notion.

Worked example: tidying up before you switch it on

Say you run a small lettings business in Brighton and keep tenant notes, maintenance logs and staff rotas in Notion. Before turning on AI for the team:

Audit sharing. Find any page shared with "everyone in workspace" that holds tenant contact details or HR notes, and restrict it. If a person can open it, AI can draw on it when that person asks.
Separate the sensitive stuff. Put staff and tenant records in restricted teamspaces.
Check your plan. Decide whether up to 30 days' provider retention is acceptable for your data, or whether you need Enterprise.
Update your records. Add Notion and its AI to your privacy notice and your list of suppliers who handle personal data.
Tell staff the rules. For example, no health details or bank details in AI prompts. See do I need an AI policy?

How much is Notion AI?

Notion's full AI features come with the Business plan. On Notion's pricing page, Free and Plus include a trial of Notion AI, while Business includes Notion Agent and AI Meeting Notes. The UK App Store lists Notion Plus at £11.99 a month and Business at £22.99 a month (checked 18 October 2026). Notion's website lists Plus at $10 and Business at $20 per member a month (checked 18 October 2026).

Common mistakes

Assuming AI ignores private pages. It respects permissions, but if a page is shared too widely, AI can surface it to everyone who has access.
Forgetting old pages. Former staff notes or old customer lists still sitting in shared spaces will be searchable.
Assuming every plan has zero retention. Only Enterprise mostly does.
Skipping the subprocessor list. It tells you which providers handle your data and where.

Sources

Checked 18 October 2026. Rules and prices change, so check the source before you rely on it. This is general information, not legal, tax or financial advice.

More on data, privacy and gdpr

All data, privacy and gdpr answers · All answers · Guides · AI tools directory

Get one useful AI tool in your inbox each weekday

Free, plain English, five minutes to read. Unsubscribe any time.

See our privacy notice.