On this page
The short versionWho touches your dataTraining on your dataControl and leavingRegulated firmsThe short version
- We don't host your data. Your memory lives in your own Notion workspace. Your assistant runs in your own Claude or ChatGPT account.
- A person approves everything that goes out. The assistant drafts; your people send.
- You can leave any time. Your memory is plain pages you can export.
Who touches your data
| Company | What it holds | Security standards (their own pages) |
|---|---|---|
| Notion | Your memory: people, rules, projects, routines | SOC 2 Type 2 and ISO 27001; Notion AI is in scope of both |
| Anthropic (Claude) or OpenAI (ChatGPT) | Your conversations with the assistant | See each company's trust page |
| Google or Microsoft | Your email and calendar, read through connectors you approve | Your existing accounts |
| The Modern Admin | Nothing, in your setup. We help you build it; it stays in your accounts. | — |
Training on your data
- Notion: doesn't train on customer data by default, and neither do its AI subprocessors.
- Claude: on Team, Enterprise and API plans, inputs and outputs aren't used for training by default. On personal plans it depends on the Model Improvement setting, which you control.
- ChatGPT: Business and Enterprise workspace content isn't used for training by default. On personal accounts, a setting called "Improve the model for everyone" controls it, and you can turn it off.
Our recommendation for firms:
use the business tier of your AI (Claude Team or ChatGPT Business) so training is off by default and an admin controls the workspace.
Control and leaving
People only see the Notion pages they're given access to, using permissions you already manage. Remove someone and their access goes with them. Notion keeps page history, so changes can be reviewed and undone; how far back depends on your Notion plan. If you stop, you keep everything: export your pages and point any AI at them.
Regulated firms
If your industry has recordkeeping rules for client communication, they still apply. The assistant drafts and your people send from your usual systems, so messages land where your archiving already captures them. We set this up with your compliance team before rollout.
Sources, checked 11 Oct 2026:
Notion security: notion.com/security · Notion AI security: notion.com/help/notion-ai-security-practices
Claude training (commercial): privacy.claude.com/…/7996868 · (consumer): privacy.claude.com/…/10023580
ChatGPT memory and training: help.openai.com/…/8590148
Notion security: notion.com/security · Notion AI security: notion.com/help/notion-ai-security-practices
Claude training (commercial): privacy.claude.com/…/7996868 · (consumer): privacy.claude.com/…/10023580
ChatGPT memory and training: help.openai.com/…/8590148
