HIPAA enabled via zero-retention APIs, BAA requirement not stated · Notion and its AI subprocessors do not use customer data to train models · Enterprise gets zero retention at the LLM provider; all other plans up to 30 days
| Notion AI | |
|---|---|
| HIPAA BAA | Notion states Notion AI "enables HIPAA compliance by utilizing LLM provider's zero-retention APIs and allows for the processing of protected health information (PHI)." Zero retention is documented as the default for Enterprise plan workspaces. Whether a signed BAA is required, and on which plan, is not stated in this article |
| Trains on your data | No"By default, Notion and its AI Subprocessors do not use Customer Data to train any models," and use of Notion AI grants Notion no license to train on Customer Data |
| Survives deletion | Plan-dependentEnterprise workspaces get zero data retention at the LLM provider, so nothing is stored. All non-Enterprise workspaces: LLM providers retain Customer Data for 30 days or fewer. Embeddings in vector databases are deleted within 60 days of page or workspace deletion |
| Deployer / admin log access | Not stated in this article |
| Third-party attestation | Yes"Notion AI is included in the scope of Notion's SOC 2 Type 2 report and ISO 27001 certification" |
The retention gap between plans - Enterprise gets zero retention at the LLM provider while every other plan leaves Customer Data with that provider for up to 30 days. Also the assumption Notion runs only its own models: Anthropic and OpenAI are named AI subprocessors
Vendor terms change without notice. This page reflects what Notion published as of September 2, 2026. Re-verified quarterly.
If you need a scored Go / Conditional Go / No-Go verdict for a vendor decision — including a vendor not listed here — that's an AI Vendor Risk Assessment: three binary industry gates, nine scored criteria, four provenance fields on every finding. $997, delivered in 48 hours.
See how AVRA works →Want all 13 tools in one file?
Covers 22 tiers across 13 tools — same sourcing, side by side, printable for a vendor file.