Security practices

• We use SSL everywhere, within the data center and out.

• Your data is encrypted at rest and in transit.

• We run 100% on the cloud using AWS within a virtual private network that cannot be accessed via the public internet, except via our public-facing proxy servers.

• We have Amazon CloudTrail turned on at all times.

• We perform quarterly independent security audits using established security firms.

• We'll notify you within 72 hours of learning about a data breach.

• All employees receive regular security training.

• We're in the process of obtaining our SOC2 certificate.

Sub-processors

• Amazon Web Services

• Amplitude

• Segment

• Crashlytics

• Intercom

• Loggly

• Snowflake

• Fivetran

• Stripe

Glossary

1. SSL (Secure Sockets Layer) is the industry standard for customer protection on the web. It instantly encrypts plain text (your data, including passwords and credit card numbers) that only you can decrypt. Here's a video explainer in case it's helpful.

2. Amazon VPC (Virtual Private Cloud) allows Notion to implement granular network control and security measures.

3. Amazon CloudTrail helps Notion with the governance, compliance, operational auditing, and risk auditing of our AWS account.

4. The folks we work with at NCC Group are the global experts in cyber security and risk mitigation. They help us with services such as penetration testing, overall software security, security training, and vulnerability protection.

5. SOC 2 is a security report based on AICPA's Trust Services Criteria.

FAQs

Will other people be able to see my private notes and data?

Your data is safe in Notion! Only you will have access to your private notes.

If someone tries to navigate to your workspace without having access, they'll see an error message like this:

Worth noting:

• If you enable Public Access in the Share menu at the top right of a page, it will publish that page to the web so that anyone with the link can access it. This is always turned off by default.

• If you're sharing a workspace with others, any notes in the Workspace section of your sidebar will be visible to everyone in the workspace. You can store your private notes in the Private section of the sidebar for shared workspaces — no one else will be able to access these pages, even admins. If your sidebar doesn't have those sections, you're the only person in your workspace, and all your notes are private!

 

Related guides