Skip to main content
Notion logo

Notion

GDPR evidence

Build Custom Agents, search across all your apps, and automate

notion.soCollaborationLast verified 3 Nov 2026
Request the report Are you Notion?
GDPR mark, CertReports state Vendor-stated as of 3 Nov 2026Vendor-stated

Notion and GDPR

Notion states it holds a data processing agreement. CertReports captured this on 3 Nov 2026 from wolfia; it is a vendor statement, not an independent confirmation.

Evidence

Vendor-statedVendor states GDPR on its trust centre
as of 3 Nov 2026 · confidence 80%
SourceCapturedQuoteLinks
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
3 Nov 2026GDPR
Live page Snapshotsha256 84b79bf5e4
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
1 Nov 2026GDPR
Live page Snapshotsha256 442335d807
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
31 Oct 2026GDPR
Live page Snapshotsha256 16bdbeef6b
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
29 Oct 2026GDPR
Live page Snapshotsha256 721ab6e202
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
27 Oct 2026GDPR
Live page Snapshotsha256 186a0052ac
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
25 Oct 2026GDPR
Live page Snapshotsha256 012a8eb735
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
23 Oct 2026GDPR
Live page Snapshotsha256 68d6d91858
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
21 Oct 2026GDPR
Live page Snapshotsha256 dedffa0ae3
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
19 Oct 2026GDPR
Live page Snapshotsha256 db42e13aea
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
17 Oct 2026GDPR
Live page Snapshotsha256 e22a7151eb
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
15 Oct 2026GDPR
Live page Snapshotsha256 cd7fc7876f
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
13 Oct 2026GDPR
Live page Snapshotsha256 3ef02a50a8
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
11 Oct 2026GDPR
Live page Snapshotsha256 643bd3e4ed
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
9 Oct 2026GDPR
Live page Snapshotsha256 3007209357
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
7 Oct 2026GDPR
Live page Snapshotsha256 4c12b71aff
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
5 Oct 2026GDPR
Live page Snapshotsha256 923d7ff676
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
3 Oct 2026GDPR
Live page Snapshotsha256 3f9ba86d3d
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
1 Oct 2026GDPR
Live page Snapshotsha256 e3846b1ec7
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
29 Sep 2026GDPR
Live page Snapshotsha256 f29e2a9291
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
27 Sep 2026GDPR
Live page Snapshotsha256 110ad75fce
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
25 Sep 2026GDPR
Live page Snapshotsha256 85d61080ea
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
21 Sep 2026GDPR
Live page Snapshotsha256 948c5ae43a
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
20 Sep 2026GDPR
Live page Snapshotsha256 db78af03c2
This is wrong
Vendor-statedVendor states ISO 27701 on its trust centre
as of 3 Nov 2026 · confidence 80%
SourceCapturedQuoteLinks
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
3 Nov 2026ISO 27701
Live page Snapshotsha256 84b79bf5e4
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
1 Nov 2026ISO 27701
Live page Snapshotsha256 442335d807
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
31 Oct 2026ISO 27701
Live page Snapshotsha256 16bdbeef6b
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
29 Oct 2026ISO 27701
Live page Snapshotsha256 721ab6e202
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
27 Oct 2026ISO 27701
Live page Snapshotsha256 186a0052ac
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
25 Oct 2026ISO 27701
Live page Snapshotsha256 012a8eb735
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
23 Oct 2026ISO 27701
Live page Snapshotsha256 68d6d91858
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
21 Oct 2026ISO 27701
Live page Snapshotsha256 dedffa0ae3
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
19 Oct 2026ISO 27701
Live page Snapshotsha256 db42e13aea
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
17 Oct 2026ISO 27701
Live page Snapshotsha256 e22a7151eb
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
15 Oct 2026ISO 27701
Live page Snapshotsha256 cd7fc7876f
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
13 Oct 2026ISO 27701
Live page Snapshotsha256 3ef02a50a8
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
11 Oct 2026ISO 27701
Live page Snapshotsha256 643bd3e4ed
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
9 Oct 2026ISO 27701
Live page Snapshotsha256 3007209357
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
7 Oct 2026ISO 27701
Live page Snapshotsha256 4c12b71aff
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
5 Oct 2026ISO 27701
Live page Snapshotsha256 923d7ff676
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
3 Oct 2026ISO 27701
Live page Snapshotsha256 3f9ba86d3d
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
1 Oct 2026ISO 27701
Live page Snapshotsha256 e3846b1ec7
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
29 Sep 2026ISO 27701
Live page Snapshotsha256 f29e2a9291
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
27 Sep 2026ISO 27701
Live page Snapshotsha256 110ad75fce
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
25 Sep 2026ISO 27701
Live page Snapshotsha256 85d61080ea
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
21 Sep 2026ISO 27701
Live page Snapshotsha256 948c5ae43a
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
20 Sep 2026ISO 27701
Live page Snapshotsha256 db78af03c2
This is wrong
ExpiredInactive
as of 2 Nov 2026 · confidence 100%
Kind
Listing
Scope
YZ may collect personal data directly from end-user customers located in the European Union. In order to sign up for YZ's services, end-user customers must provide their full name, a username and phone number. End-user customers may also add, at their option, the following information to their profiles: profile photo, an emoji status, website, location, birthday and a short bio. YZ also automatically collects the following personal data: IP address, device identification, the type of browser and/or device the end-user customer is using to access our YZ's services, and the feature such end-user customer requested. YZ only shares personal data with analytics service providers (Google, Mixpanel and Segment) and agents who perform tasks on YZ's behalf (such as consultants or other service providers). YZ will share personal data to the extent the end-user customer consents or opts-in to such sharing, such as making certain information in a user profile viewable publicly. YZ may also share personal data to the extent that it is acquired by a third party or as necessary to comply with applicable law or court orders. Finally, YZ may de-identify personal data and share it with partners in order to improve and optimize its services.
SourceCapturedQuoteLinks
Data Privacy Framework list
Official registry · HTTP 200
2 Nov 2026Geneva: Inactive
Live pagesha256 ae6a158bed
This is wrong
ExpiredInactive
as of 2 Nov 2026 · confidence 100%
Kind
Listing
Issued or listed
7 Mar 2018
Scope
Personal Data other than Human Resources Data Purposes: Provide Services or Requested Information, Serve Administrative and Communication Purposes, Facilitating Collaboration in a Workspace, Managing Workspaces for Organizations, Marketing of Products and Services, and Process Information on Behalf of Customers. Type of third parties: service providers, business partners, affiliates, advertising partners, and other users of Notion's Service. Human Resources Data Purposes: HR administration, Finance administration, diversity equity and inclusion, security and management of systems and facilities, legal requirements, business transfers, and improve HR programs and systems. Type of third parties: service providers, affiliates, and subsidiaries. Type of third parties: service providers, affiliates, and subsidiaries.
SourceCapturedQuoteLinks
Data Privacy Framework list
Official registry · HTTP 200
2 Nov 2026Notion Labs, Inc.: Inactive
Live pagesha256 c936deacc3
This is wrong
ExpiredInactive
as of 2 Nov 2026 · confidence 100%
Kind
Listing
Scope
For the purpose of improving the quality of our service, we offer our users the ability to manage and store their contact and network data in Bridge. We also store and process usage data so that we can identify issues and improve the quality of our service.
SourceCapturedQuoteLinks
Data Privacy Framework list
Official registry · HTTP 200
2 Nov 2026Bridge Your Network Inc: Inactive
Live pagesha256 0f181aabcd
This is wrong
What GDPR means, and what it does not

"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.

Read the GDPR guide and browse all vendors with evidence

Questions buyers ask

Is Notion GDPR compliant?

There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.

How does CertReports verify this?

Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.

Change history

  1. 31 Oct 2026Subprocessor added: AssemblyAIAssemblyAI appeared on the subprocessor list.
  2. 31 Oct 2026Subprocessor added: BrowserbaseBrowserbase appeared on the subprocessor list.
  3. 31 Oct 2026Subprocessor added: CinderCinder appeared on the subprocessor list.
  4. 31 Oct 2026Subprocessor added: Modal LabsModal Labs appeared on the subprocessor list.
  5. 31 Oct 2026Subprocessor added: PlanetScalePlanetScale appeared on the subprocessor list.
  6. 31 Oct 2026Subprocessor added: TypeSafe AITypeSafe AI appeared on the subprocessor list.
  7. 31 Oct 2026Subprocessor removed: AmplitudeAmplitude left the subprocessor list.
  8. 20 Sep 2026Subprocessor added: MathpixMathpix appeared on the subprocessor list.
  9. 20 Sep 2026Subprocessor added: NotionNotion appeared on the subprocessor list.
  10. 20 Sep 2026Subprocessor added: OpenAIOpenAI appeared on the subprocessor list.

Alternatives with GDPR evidence

Similar vendors (shared product tags or the Collaboration category) whose GDPR row is verified or vendor-stated, ranked by similarity.

Taskworld logo

Taskworld

Collaboration

Taskworld is a cloud-based collaboration platform created by Fred Mouawad

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedDPF mark, CertReports state Expired
2 stated2 Nov 2026
zencoder logo

zencoder

Collaboration

Discover Zencoder's AI Coding Agent Platform for seamless code execution and

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedISO 42001 mark, CertReports state Vendor-statedDPF mark, CertReports state Verified
1 verified · 4 stated2 Nov 2026
Modo Labs logo

Modo Labs

Collaboration

Modo unifies digital life across campus and workplace—on mobile or desktop—with the leading campus experience app and workplace experience

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedDPF mark, CertReports state ExpiredTX-RAMP mark, CertReports state Vendor-stated
3 stated2 Nov 2026

Understand GDPR evidence

All articles