Skip to main content
ShadowAI Defense GitHub
← All services

Notion Labs · Productivity

Notion AI

Allow Enterprise Enterprise tier: Available DPA: Yes

Network signatures

Domains: notion.so, www.notion.so

API endpoints: api.notion.com

SNI patterns: *.notion.so, *.notion.com

Client signatures

Process names: Notion.app (macOS), Notion.exe (Windows)

Risk profile (1–5)

  • Data exfiltration: 4
  • IP loss: 4
  • Output quality (hallucination / legal): 2
  • Integration risk (OAuth, extensions, agentic): 2

Data egress concerns

  • Workspace document content sent to AI back-end
  • Customer notes
  • Internal strategy documents

Training-use default

Enterprise plan contractually excludes content from training. Lower tiers should be reviewed for opt-out scope.

Applicable detection rules

References