{
  "slug": "notion",
  "category": "notes",
  "name": "Notion",
  "description": "Proprietary workspace app that combines notes, documents, wikis, databases and project management, with real-time collaboration and built-in AI features. Content is stored on Notion's servers without end-to-end encryption.",
  "website": "https://www.notion.com",
  "license": null,
  "platforms": [
    "windows",
    "macos",
    "android",
    "ios",
    "web"
  ],
  "jurisdiction": {
    "code": "US",
    "name": "United States",
    "eyes": "Five Eyes",
    "eu": false,
    "gdpr": false,
    "cloud_act": "provider"
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "F",
  "score": 20,
  "coverage": 100,
  "summary": "Notion scores 20 out of 100 (grade F) on the notes criteria. It partly meets no ads or data sales and independent audit. It does not meet open source and no trackers or telemetry. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.",
  "url": "https://privacyratings.com/notes/notion/",
  "markdown": "https://privacyratings.com/notes/notion/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "no",
      "evidence": null,
      "note": "Closed source."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "no",
      "evidence": "https://www.notion.com/trust/privacy-policy",
      "note": "The privacy policy allows third-party analytics and advertising cookies and pixels on the website, and Exodus finds Google CrashLytics in the Android app."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://www.notion.com/trust/privacy-policy",
      "note": "No ads in the app, but the privacy policy discloses device and browsing data to advertising partners, which it says may count as a sale."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://www.notion.com/security",
      "note": "SOC 2 Type 2 and ISO audits by independent firms are stated, but the reports are only available on request through the Trust Center."
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    }
  },
  "tests": {
    "ssllabs": null,
    "observatory": null,
    "internetnl_web": null,
    "internetnl_mail": null,
    "trackers": [],
    "tested_at": "2026-10-01T06:38:37.849Z"
  },
  "last_modified": "2026-10-01T06:56:31Z"
}