Openwake · evidence pack

Notion

https://www.notion.com · record 245 · read 2026-09-06 · rules/v1 · generated 2026-09-06 04:02 UTC

Facts

Trains on customer data

“User data is never used to train or influence Notion AI models.”

dpa · https://trust.notion.com/legal/dpa · confidence 0.60

Opt-out mechanism

none described

No supporting text found in the documents read.

dpa · https://trust.notion.com/legal/dpa · confidence 0.20

AI features

none stated

No supporting text found in the documents read.

dpa · https://trust.notion.com/legal/dpa · confidence 0.20

Model providers named

OpenAI, Anthropic, Fireworks AI

“OpenAI Figma Ramp”

dpa · https://trust.notion.com/legal/dpa · confidence 0.60

Retention

AI embeddings are deleted within 60 days of page or workspace deletion.

“AI embeddings are deleted within 60 days of page or workspace deletion.”

dpa · https://trust.notion.com/legal/dpa · confidence 0.50

Hosting regions

not stated

No supporting text found in the documents read.

dpa · https://trust.notion.com/legal/dpa · confidence 0.20

Subprocessor notice

not stated

No supporting text found in the documents read.

dpa · https://trust.notion.com/legal/dpa · confidence 0.20

Subprocessors (17)

Name	Category	Location	Quoted from
OpenAI	model provider	unstated	“OpenAI Figma Ramp” https://trust.notion.com/legal/dpa
Figma	other	unstated	“Figma Ramp Cursor” https://trust.notion.com/legal/dpa
Vercel	other	unstated	“Vercel NVIDIA Volvo” https://trust.notion.com/legal/dpa
Discord	other	unstated	“Discord Lovable 1Password” https://trust.notion.com/legal/dpa
1Password	other	unstated	“1Password Toyota Clay” https://trust.notion.com/legal/dpa
Amazon Web Services	hyperscaler	USA	“AWS · USA, European Union, Korea, Japan Hosting and storage systems provider.” https://trust.notion.com/legal/dpa
Anthropic	model provider	Global	“Anthropic · Global Service provider for AI agents, hosting large language models and embeddings.” https://trust.notion.com/legal/dpa
Google Cloud	hyperscaler	unstated	“Notion discloses its infrastructure and hosting subprocessors in this trust center, including AWS, Cloudflare, and Google Cloud. See the subprocessors section for details.” https://trust.notion.com/legal/dpa
Cloudflare	other	unstated	“Notion discloses its infrastructure and hosting subprocessors in this trust center, including AWS, Cloudflare, and Google Cloud. See the subprocessors section for details.” https://trust.notion.com/legal/dpa
Okta	other	unstated	“Enterprise customers can configure SAML 2.0-based SSO with major identity providers including Okta, Microsoft Entra ID, Google Workspace, and OneLogin. Workspace administrators can enforce SSO-only au” https://trust.notion.com/legal/dpa
Box	other	unstated	“Notion conducts annual third-party grey-box penetration testing across desktop, mobile, and browser applications, with all critical and high findings remediated and validated.” https://trust.notion.com/legal/dpa
Fireworks AI	model provider	Global	“Fireworks · Global Service provider for hosting large language models and embeddings.” https://trust.notion.com/legal/dpa
Splunk	other	USA	“Splunk · USA Security and application logging. USA StarTree, Inc. · USA, Germany, Korea, Japan” https://trust.notion.com/legal/dpa
Twilio	other	USA	“Twilio · USA Multi-factor Authentication. USA Vercel Inc. · USA” https://trust.notion.com/legal/dpa
Amplitude	other	USA	“Amplitude · USA Event logging for analytics. USA Customer · USA” https://trust.notion.com/legal/dpa
Fivetran	other	USA	“Fivetran · USA, Germany, Korea, Japan Data pipeline for connecting systems to our data warehouse.” https://trust.notion.com/legal/dpa
Mailgun	other	USA	“Mailgun · USA Transactional, broadcast, and marketing messaging.” https://trust.notion.com/legal/dpa

Sources read

Document	URL	Read	Content hash	Ledger
dpa	https://trust.notion.com/legal/dpa	2026-09-06	a9959c261ce4b37f…	seq 448

Ledger proof for this record.
seq 516 · key 2f898a895f05b7a0 · 2026-09-06T01:40:52.189Z
hash 19c27ce709f137944cda90d75f9ea95ace4cf8390e2a8c38f72a2dc00675b585
prev b738decfb4e1f32614f5572e37a5d1d09b188e3458b4748d0a8c58e2d428e987
payload d32db7a15efe4d7d2461113c855f31cc5fb4cb166537045ee12f3f52248a97eb
signature 1IXg6IaUIWJukok/7GwTlu0IHmaZZ2jQdP2vdCnvlcUSd26f6SgIeiRw58AEb/1JE3GTCFZpRYmDqE7Feik6Cg==
anchored 2026-09-06 at head seq 564 231a9dea0f93915bd7110e6786e00908325db3031635ace53c1023f850e0c49c
Fetch /v1/keys; for each ledger entry recompute sha256(prev_hash|kind|ref_id|payload_hash|created_at ISO) and verify the Ed25519 signature over that hash. Anchors are committed to git; compare the anchored head with the chain.