Notion compliance, certifications and attestations

An auditor's report on security, availability, confidentiality, processing integrity and privacy controls.

HeldVendor page

A certified information security management system.

HeldVendor page

Cloud-specific security controls on top of ISO 27001.

HeldVendor page

Protection of personal data in public clouds acting as processors.

HeldVendor page

A certified privacy information management system extending ISO 27001.

HeldVendor page

The vendor supports HIPAA-regulated health data and signs a Business Associate Agreement.

HeldVendor page

Self-certification under the EU-US Data Privacy Framework, with UK and Swiss extensions where noted.

HeldData Privacy Framework ListEU-US, UK extension, Swiss-US; non-HR data and HR data. Notion Labs, Inc.

An attestation against Germany's Cloud Computing Compliance Criteria Catalogue.

HeldVendor page

Registration on Japan's government cloud security list.

HeldUnverifiedVendor page