Openwake · evidence pack

Notion

https://www.notion.com · record 711 · read 2026-10-22 · rules/v1 · generated 2026-10-23 04:14 UTC

Facts

Trains on customer data

“User data is never used to train or influence Notion AI models.”

dpa · https://trust.notion.com/legal/dpa · confidence 0.60

Opt-out mechanism

none described

No supporting text found in the documents read.

dpa · https://trust.notion.com/legal/dpa · confidence 0.20

AI features

none stated

No supporting text found in the documents read.

dpa · https://trust.notion.com/legal/dpa · confidence 0.20

Model providers named

OpenAI, Anthropic, Fireworks AI

“OpenAI Figma Ramp”

dpa · https://trust.notion.com/legal/dpa · confidence 0.60

Retention

AI embeddings are deleted within 60 days of page or workspace deletion.

“AI embeddings are deleted within 60 days of page or workspace deletion.”

dpa · https://trust.notion.com/legal/dpa · confidence 0.50

Hosting regions

not stated

No supporting text found in the documents read.

dpa · https://trust.notion.com/legal/dpa · confidence 0.20

Subprocessor notice

not stated

No supporting text found in the documents read.

dpa · https://trust.notion.com/legal/dpa · confidence 0.20

Subprocessors (17)

Name	Category	Location	Quoted from
OpenAI	model provider	unstated	“OpenAI Figma Ramp” https://trust.notion.com/legal/dpa
Figma	other	unstated	“Figma Ramp Cursor” https://trust.notion.com/legal/dpa
Vercel	other	unstated	“Vercel NVIDIA Volvo” https://trust.notion.com/legal/dpa
Discord	other	unstated	“Discord Lovable 1Password” https://trust.notion.com/legal/dpa
1Password	other	unstated	“1Password Toyota Clay” https://trust.notion.com/legal/dpa
Amazon Web Services	hyperscaler	USA	“AWS · USA, European Union, Korea, Japan Hosting and storage systems provider.” https://trust.notion.com/legal/dpa
Anthropic	model provider	Global	“Anthropic · Global Service provider for AI agents, hosting large language models and embeddings, and for abuse prevention.” https://trust.notion.com/legal/dpa
Google Cloud	hyperscaler	unstated	“Notion discloses its infrastructure and hosting subprocessors in this trust center, including AWS, Cloudflare, and Google Cloud. See the subprocessors section for details.” https://trust.notion.com/legal/dpa
Cloudflare	other	unstated	“Notion discloses its infrastructure and hosting subprocessors in this trust center, including AWS, Cloudflare, and Google Cloud. See the subprocessors section for details.” https://trust.notion.com/legal/dpa
Okta	other	unstated	“Enterprise customers can configure SAML 2.0-based SSO with major identity providers including Okta, Microsoft Entra ID, Google Workspace, and OneLogin. Workspace administrators can enforce SSO-only au” https://trust.notion.com/legal/dpa
Box	other	unstated	“Notion conducts annual third-party grey-box penetration testing across desktop, mobile, and browser applications, with all critical and high findings remediated and validated.” https://trust.notion.com/legal/dpa
Fireworks AI	model provider	Global	“Fireworks · Global Service provider for hosting large language models and embeddings.” https://trust.notion.com/legal/dpa
Splunk	other	USA	“Splunk · USA Security and application logging. USA StarTree, Inc. · USA, Germany, Korea, Japan” https://trust.notion.com/legal/dpa
Twilio	other	USA	“Twilio · USA Multi-factor Authentication. USA Vercel Inc. · USA” https://trust.notion.com/legal/dpa
Amplitude	other	USA	“Amplitude · USA Event logging for analytics. USA Customer · USA” https://trust.notion.com/legal/dpa
Fivetran	other	USA	“Fivetran · USA, Germany, Korea, Japan Data pipeline for connecting systems to our data warehouse.” https://trust.notion.com/legal/dpa
Mailgun	other	USA	“Mailgun · USA Transactional, broadcast, and marketing messaging.” https://trust.notion.com/legal/dpa

Sources read

Document	URL	Read	Content hash	Ledger
dpa	https://trust.notion.com/legal/dpa	2026-10-22	2e8d488b96235440…	seq 64165

Ledger proof for this record.
seq 64186 · key 2f898a895f05b7a0 · 2026-10-22T05:19:28.534Z
hash cb494bbf9e7a499dddafcfd6d3ef268a48c15263e58cff3cf647cc19bc6928ba
prev 473a27e84e1204a7dc03c4d848433a5fe73d0852d35d94d8fbb92c60db6bdab7
payload e908cd646dad2412cd3f0b2b7bac02adf6998c4d1c37723f8d687270b81de00a
signature XcOnyorB1tVFKx8GWhcxSLdkPllR7BqByGYGU7Th/SXQxem/26uybuV51T6UTFu+we99Opxy48rgxbnL+VPMAA==
anchored 2026-10-22 at head seq 64204 68332ccffa8b4c79780bf1a01284351ca72309d4c1746ababe798f1ed346c99d
Fetch /v1/keys; for each ledger entry recompute sha256(prev_hash|kind|ref_id|payload_hash|created_at ISO) and verify the Ed25519 signature over that hash. Anchors are committed to git; compare the anchored head with the chain.