Skip to main content
Notion logo

Notion

SOC 2 evidence

Build Custom Agents, search across all your apps, and automate

notion.soCollaborationLast verified 3 Nov 2026
Request the report Are you Notion?
SOC 2 mark, CertReports state Vendor-stated as of 3 Nov 2026Vendor-stated

Notion and SOC 2

Notion states it holds a SOC 2 Type II report. CertReports captured this on 3 Nov 2026 from wolfia; it is a vendor statement, not an independent confirmation.

Evidence

Vendor-statedVendor states SOC 2 Type II on its trust centre
as of 3 Nov 2026 · confidence 80%
Kind
Type II
SourceCapturedQuoteLinks
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
3 Nov 2026SOC 2 Type II
Live page Snapshotsha256 84b79bf5e4
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
1 Nov 2026SOC 2 Type II
Live page Snapshotsha256 442335d807
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
31 Oct 2026SOC 2 Type II
Live page Snapshotsha256 16bdbeef6b
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
29 Oct 2026SOC 2 Type II
Live page Snapshotsha256 721ab6e202
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
27 Oct 2026SOC 2 Type II
Live page Snapshotsha256 186a0052ac
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
25 Oct 2026SOC 2 Type II
Live page Snapshotsha256 012a8eb735
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
23 Oct 2026SOC 2 Type II
Live page Snapshotsha256 68d6d91858
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
21 Oct 2026SOC 2 Type II
Live page Snapshotsha256 dedffa0ae3
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
19 Oct 2026SOC 2 Type II
Live page Snapshotsha256 db42e13aea
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
17 Oct 2026SOC 2 Type II
Live page Snapshotsha256 e22a7151eb
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
15 Oct 2026SOC 2 Type II
Live page Snapshotsha256 cd7fc7876f
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
13 Oct 2026SOC 2 Type II
Live page Snapshotsha256 3ef02a50a8
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
11 Oct 2026SOC 2 Type II
Live page Snapshotsha256 643bd3e4ed
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
9 Oct 2026SOC 2 Type II
Live page Snapshotsha256 3007209357
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
7 Oct 2026SOC 2 Type II
Live page Snapshotsha256 4c12b71aff
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
5 Oct 2026SOC 2 Type II
Live page Snapshotsha256 923d7ff676
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
3 Oct 2026SOC 2 Type II
Live page Snapshotsha256 3f9ba86d3d
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
1 Oct 2026SOC 2 Type II
Live page Snapshotsha256 e3846b1ec7
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
29 Sep 2026SOC 2 Type II
Live page Snapshotsha256 f29e2a9291
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
27 Sep 2026SOC 2 Type II
Live page Snapshotsha256 110ad75fce
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
25 Sep 2026SOC 2 Type II
Live page Snapshotsha256 85d61080ea
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
21 Sep 2026SOC 2 Type II
Live page Snapshotsha256 948c5ae43a
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
20 Sep 2026SOC 2 Type II
Live page Snapshotsha256 db78af03c2
This is wrong
Vendor-statedVendor states SOC 3 on its trust centre
as of 3 Nov 2026 · confidence 80%
SourceCapturedQuoteLinks
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
3 Nov 2026SOC 3
Live page Snapshotsha256 84b79bf5e4
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
1 Nov 2026SOC 3
Live page Snapshotsha256 442335d807
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
31 Oct 2026SOC 3
Live page Snapshotsha256 16bdbeef6b
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
29 Oct 2026SOC 3
Live page Snapshotsha256 721ab6e202
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
27 Oct 2026SOC 3
Live page Snapshotsha256 186a0052ac
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
25 Oct 2026SOC 3
Live page Snapshotsha256 012a8eb735
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
23 Oct 2026SOC 3
Live page Snapshotsha256 68d6d91858
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
21 Oct 2026SOC 3
Live page Snapshotsha256 dedffa0ae3
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
19 Oct 2026SOC 3
Live page Snapshotsha256 db42e13aea
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
17 Oct 2026SOC 3
Live page Snapshotsha256 e22a7151eb
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
15 Oct 2026SOC 3
Live page Snapshotsha256 cd7fc7876f
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
13 Oct 2026SOC 3
Live page Snapshotsha256 3ef02a50a8
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
11 Oct 2026SOC 3
Live page Snapshotsha256 643bd3e4ed
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
9 Oct 2026SOC 3
Live page Snapshotsha256 3007209357
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
7 Oct 2026SOC 3
Live page Snapshotsha256 4c12b71aff
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
5 Oct 2026SOC 3
Live page Snapshotsha256 923d7ff676
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
3 Oct 2026SOC 3
Live page Snapshotsha256 3f9ba86d3d
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
1 Oct 2026SOC 3
Live page Snapshotsha256 e3846b1ec7
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
29 Sep 2026SOC 3
Live page Snapshotsha256 f29e2a9291
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
27 Sep 2026SOC 3
Live page Snapshotsha256 110ad75fce
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
25 Sep 2026SOC 3
Live page Snapshotsha256 85d61080ea
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
21 Sep 2026SOC 3
Live page Snapshotsha256 948c5ae43a
Notion trust centre (Wolfia)
Vendor trust centre · HTTP 200
20 Sep 2026SOC 3
Live page Snapshotsha256 db78af03c2
This is wrong

What is not public

  • The report period is not public, so CertReports cannot say whether the Notion SOC 2 report covers the last 12 months.
  • The audit firm is not stated in any public source CertReports has captured.
  • Trust services criteria in scope, carve-outs and bridge-letter status are only in the restricted-use report, which CertReports never hosts.
What SOC 2 means, and what it does not

SOC 2 reports are restricted-use and are never "certifications". A Type II report covers a period; freshness is the period end plus a bridge letter of at most three months. "SOC 2 ready" and "in progress" are not reports. No public SOC 2 registry exists; the strongest registry-grade signal is a CSA STAR Level 2 attestation, then a public SOC 3.

Read the SOC 2 guide and browse all vendors with evidence

Questions buyers ask

Is Notion SOC 2 certified?

No organisation is "SOC 2 certified": SOC 2 is an attestation report issued by a CPA firm, not a certification. Notion states it holds a SOC 2 Type II report as of 3 Nov 2026.

How do I get the Notion SOC 2 report?

SOC 2 reports are restricted-use documents shared under NDA. Request it through the Notion trust centre or security page; CertReports links to it and never hosts the report.

How does CertReports verify this?

Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.

Change history

  1. 31 Oct 2026Subprocessor added: AssemblyAIAssemblyAI appeared on the subprocessor list.
  2. 31 Oct 2026Subprocessor added: BrowserbaseBrowserbase appeared on the subprocessor list.
  3. 31 Oct 2026Subprocessor added: CinderCinder appeared on the subprocessor list.
  4. 31 Oct 2026Subprocessor added: Modal LabsModal Labs appeared on the subprocessor list.
  5. 31 Oct 2026Subprocessor added: PlanetScalePlanetScale appeared on the subprocessor list.
  6. 31 Oct 2026Subprocessor added: TypeSafe AITypeSafe AI appeared on the subprocessor list.
  7. 31 Oct 2026Subprocessor removed: AmplitudeAmplitude left the subprocessor list.
  8. 20 Sep 2026Subprocessor added: MathpixMathpix appeared on the subprocessor list.
  9. 20 Sep 2026Subprocessor added: NotionNotion appeared on the subprocessor list.
  10. 20 Sep 2026Subprocessor added: OpenAIOpenAI appeared on the subprocessor list.

Alternatives with SOC 2 evidence

Similar vendors (shared product tags or the Collaboration category) whose SOC 2 row is verified or vendor-stated, ranked by similarity.

Taskworld logo

Taskworld

Collaboration

Taskworld is a cloud-based collaboration platform created by Fred Mouawad

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedDPF mark, CertReports state Expired
2 stated2 Nov 2026
zencoder logo

zencoder

Collaboration

Discover Zencoder's AI Coding Agent Platform for seamless code execution and

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedISO 42001 mark, CertReports state Vendor-statedDPF mark, CertReports state Verified
1 verified · 4 stated2 Nov 2026
Modo Labs logo

Modo Labs

Collaboration

Modo unifies digital life across campus and workplace—on mobile or desktop—with the leading campus experience app and workplace experience

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedDPF mark, CertReports state ExpiredTX-RAMP mark, CertReports state Vendor-stated
3 stated2 Nov 2026

Understand SOC 2 evidence

All articles