Notion

SaaS / Software United States Website Reviewed Sept. 2, 2026

Connected workspace for notes, wikis, projects and databases, with Notion AI and enterprise admin controls.

Certifications & Accreditations

Certification Certifying Body Scope Achieved Expiry Status
ISO/IEC 27001:2022 Accredited third-party certification body Notion production services and supporting ISMS Current
ISO/IEC 27017:2015 Accredited third-party certification body Cloud-specific information security controls for Notion services Current
ISO/IEC 27018:2019 Accredited third-party certification body Protection of PII in public cloud for Notion services Current
SOC 2 Type II Independent third-party auditor Notion platform; report available to customers under NDA via the trust centre Current

Compliance Frameworks

ISO/IEC 27001:2022
Full
SOC 2 Type 2
Full
GDPR 2016/679
Full
Notion acts as processor under its DPA; SCCs and UK IDTA available

Assess Notion in your own vendor risk programme

SnapGRC lets you send security questionnaires, track DPA status, manage sub-processors, and maintain a supplier risk register — all audit-ready.