Vendor profile
Notion: where is customer data stored and processed?
Notion stores and runs customer content mainly on AWS in several countries, including the USA (Oregon), Germany (Frankfurt), Japan (Tokyo) and South Korea (Seoul), and the customer can choose region, with some regions limited to customers outside the EU/EEA. Embeddings are stored with Turbopuffer in the USA, Germany, Japan and South Korea. Backups are documented in Ireland and Japan (Osaka), while US backup location (Ohio) is not confirmed. Login uses Twilio in the USA (not confirmed), notifications go through Mailgun in the USA (not confirmed), and support is provided from Greece (not confirmed). Analytics and logging via Amplitude, Fivetran, Confluent and StarTree are located in the USA, Germany, Japan and South Korea.
Checked 13 October 2026 · based on the vendor's own public documents
See the map and sources
Where data is stored and processed
| Activity | In the EU/EEA | Outside the EU/EEA |
|---|
| Storage | Germany, Europe (country not stated) | –
Only for customers in other regions: USA, Japan, South Korea |
|---|
| Processing | Europe (country not stated), Germany | –
Only for customers in other regions: USA, Japan, South Korea, United Kingdom, Singapore |
|---|
| Backup | Ireland | –
Only for customers in other regions: USA, Japan |
|---|
| Login and user account | – | USA |
|---|
| Logs and telemetry | Germany | USA, Japan, South Korea |
|---|
| Analytics and metadata | Germany | USA, Japan, South Korea |
|---|
| Notifications and email | – | USA |
|---|
| Support | Greece | – |
|---|
| AI features | Spain, Germany | USA, United Kingdom, South Korea, Japan |
|---|
Only outside the EU/EEA, with no European alternative stated: Login and user account, Notifications and email.
Ownership and agreements
| Headquarters | USA |
|---|
| Data processing agreement | Found and read |
|---|
| Certifications | SOC 2, SOC 3, ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 27017, ISO/IEC 27018, BSI C5 |
|---|
Sub-processors (29)
| Name | Country | Purpose |
|---|
| AWS | USA, EU, Sør-Korea, Japan | Hosting og lagringssystemer |
| Anthropic | – | AI-agenter, språkmodeller, misbrukforebygging |
| Confluent | USA, Tyskland, Sør-Korea, Japan | Kafka-strømming, revisjonslogg og analyse |
| Cloudflare | – | Innholdsdistribusjon, sikkerhet, DNS |
| DeepL | USA | Oversettelse |
| Fireworks | – | Hosting av språkmodeller |
| OpenAI | – | Hosting av språkmodeller, misbrukforebygging |
| Splunk | USA | Sikkerhets- og applikasjonslogging |
| Turbopuffer | USA, Tyskland, Sør-Korea, Japan | Vektordatabase for embeddings |
| Twilio | USA | Tofaktorinnlogging |
| Exa | USA | Websøkresultater |
| Google LLC | – | Hosting av språkmodeller, misbrukforebygging |
| Cerebras Systems Inc. | USA | Hosting av språkmodeller |
| StarTree, Inc. | USA, Tyskland, Sør-Korea, Japan | Lagringsplattform for produktanalyse |
| Baseten Labs, Inc. | – | Hosting av språkmodeller |
Sources