Notion

Notion is a widely used workspace platform that combines notes, documents, databases, and project tracking, and it has added AI features that read and summarize content across a company's workspace. For governance teams, the key question is what data those AI features can access, where that data is processed, and whether it is used to train models, since workspace content often includes confidential contracts, customer details, and internal strategy. Companies deploying Notion AI should review its data processing terms, confirm administrator controls over which pages and connected tools the AI can reach, and make sure employee use aligns with existing data handling policies.

1 item

Corporate PolicyGlobal2026-11-10

Notion's Fireworks AI Breach Exposes the SaaS AI Sub-Vendor Blind Spot

Notion disclosed that a breach at Fireworks AI, a third-party vendor it used to serve AI features, exposed chat transcripts from fewer than 1% of Notion workspaces. The transcripts lacked user or workspace identifiers but could still contain sensitive content pasted by users. Notion has disconnected from Fireworks AI and disabled the affected features while affected workspace owners investigate.

Notion Fireworks AI AI vendor risk data breach third-party AI incident response AI supply chain GDPR