Change feed · read Sep 24, 2026

Notion’s sub-processor list changed.

On Sep 24, 2026 we read Notion’s sub-processor list, and it no longer matched the dated copy we held. The lines that moved are below, as the page gave them.

4

lines added

1

removed

In the new copy, not the old.

Added: Service provider for AI agents, hosting large language models and embeddings, and for abuse prevention.

Added: Service provider for AI agents, hosting large language models and embeddings, and for abuse prevention.

Added: Google LLC · Global

Added: Service provider for hosting large language models and embeddings and for abuse prevention.

In the old copy, not the new.

Removed: Google Cloud · Global

Check it yourself.

The page we read, when we read it, and a fingerprint (SHA-256 hash) of each dated copy we compared.

Vendor
Notion
Page
sub-processor list
Read on
Public since
Copy before
fingerprint 1792dfd647903e17ea4b2f3ad772bd1664c3af3abe95a4326f2f10ac0ff7713d
Copy after
fingerprint 149838be6e2383b59ad292d0448cb3983d2cee46bc6920482657fe7a4e3c3344

27 other changed lines held only dates, navigation, pagination, layout, or text that moved without changing. They are not quoted above and are in the list below with the rest.

Every changed line, as recorded (32)
− OverviewDocumentationControlsSubprocessorsUpdatesTerms and PrivacyBug BountyNotion Security & Trust
− Service provider for AI agents, hosting large language models and embeddings.
− ISO/IEC 27001 Certificate
− ISO 27001 Statement of Applicability
− Notion – Accessibility Conformance Report WCAG Edition
− SOC 3 Type II Report
− C5 Cloud Security Attestation Report
− SOC 2 Type II Report
− HIPAA Compliance Attestation Report
− 2026 Notion Mail Penetration Test
− Notion Web, App and Mobile Penetration Retesting Report
− Notion Mail Penetration Retesting Report
− Notion Calendar Penetration Retesting Report
− Service provider for AI agents, hosting large language models and embeddings.
− Google Cloud · Global
− Service provider for hosting large language models and embeddings.
+ OverviewNotion Security & TrustDocumentationSubprocessorsTerms and PrivacyBug BountyControlsUpdates
+ Service provider for AI agents, hosting large language models and embeddings, and for abuse prevention.
+ SOC 2 Type II Report
+ SOC 3 Type II Report
+ ISO/IEC 27001 Certificate
+ ISO 27001 Statement of Applicability
+ HIPAA Compliance Attestation Report
+ C5 Cloud Security Attestation Report
+ Notion – Accessibility Conformance Report WCAG Edition
+ Notion Web, App and Mobile Penetration Retesting Report
+ Notion Calendar Penetration Retesting Report
+ 2026 Notion Mail Penetration Test
+ Notion Mail Penetration Retesting Report
+ Service provider for AI agents, hosting large language models and embeddings, and for abuse prevention.
+ Google LLC · Global
+ Service provider for hosting large language models and embeddings and for abuse prevention.

How to read a date here.

The date is when we read the page.

Not when the vendor edited it. We can't see an edit history. We can say the page held one text before this reading and another on it.

Only changes that matter are listed.

A change is left out when only dates, navigation, pagination or layout moved, or when the difference came from how our reader converted the page, not the page itself.

It is not a finding against the vendor.

A change here records that Notion's page text differed, and nothing more.

How we read pages

30

days late

Everything here went public 30 days after we read it.

Subscribers get an email the morning we read a change that matters on one of their vendors’ pages, with the lines that moved.

Try it free for 30 days

No card. Nothing to cancel.