# Can you license your company's Notion workspace to AI companies?

URL: https://sellmydatatoai.net/data-rights/notion
Reviewed: 2026-11-08
Covers: Notion workspaces on Free, Plus, Business and Enterprise plans

Notion's help center says "You own your Customer Data, including any content you submit or upload," and any workspace can export pages as HTML, Markdown and CSV. We could not confirm whether Notion's developer terms restrict AI training on data pulled through its API, so the position for API extraction is unclear. Confirm your position with your own counsel before licensing.

## Notion data rights at a glance

| Data available | Export method | Plan needed | AI-training restriction in the terms |
| --- | --- | --- | --- |
| Workspace pages and databases | Workspace export from Settings, as HTML or Markdown and CSV, with files | Any plan, member with workspace settings access | Unclear: Agreement text not retrieved. Help center: "You own your Customer Data" |
| Pages with comments | HTML export, which includes page and block comments | Any plan | Unclear: Agreement text not retrieved |
| Data pulled through the Notion API | An integration using the Notion API | Any plan | Unclear: Developer Terms not retrieved in readable form |

## Who owns your Notion workspace under Notion's terms?

Notion says your company owns its workspace content. Notion's [privacy practices page](https://www.notion.com/help/privacy) states "You own your Customer Data, including any content you submit or upload" to the Notion service, and links to the Master Subscription Agreement and Data Processing Addendum that set the contract terms.

On AI, Notion's [AI security and privacy page](https://www.notion.com/help/notion-ai-security-practices) says "neither Notion nor our AI providers use your Customer Data to train any models" by default, and that the prohibition applies to every provider in the chain.

We could not retrieve the current text of the Master Subscription Agreement or the Notion Developer Terms in a readable form when we checked in November 2026, because Notion publishes them as pages that need JavaScript to load. Read both documents directly, or ask Notion, before you rely on this page. Our guide on [whether you can legally sell company data](https://sellmydatatoai.net/guides/can-you-legally-sell-company-data-for-ai) covers the rights questions that sit beyond the contract.

## What can you export from Notion?

Notion's help article [Export your content](https://www.notion.com/help/export-your-content) describes these options:

- Workspace export from Settings, under Workspace and General, covers HTML or Markdown and CSV, plus uploaded files
- Databases export as CSV, with Markdown files for each subpage. You get the current or default view, not every view
- HTML exports include page and block comments, resolved and unresolved
- Pages the exporter cannot access, such as other members' private pages, are left out
- Workspace exports can take up to 30 hours, and the emailed link expires after 7 days

## Do Notion's terms restrict AI training on workspace data?

Notion's position on AI training by customers or their licensees is unclear. Its help center commits that Notion and its AI providers do not train on your Customer Data by default, which covers Notion's own use. It does not say whether you may license an export to someone who will.

We could not review the Developer Terms that govern the Notion API, so we cannot say whether an API extraction carries restrictions like those in the Slack, Zendesk or HubSpot developer terms. A workspace export from Settings is the route with fewer open questions. If a buyer proposes connecting an integration, ask counsel to read the Developer Terms first.

## Which Notion plan and permissions do you need?

Any plan can run a workspace export, but plan level changes what you can include.

- Access to workspace Settings to start a workspace export
- Business or Enterprise to include subpages in PDF exports
- On Enterprise, admins can use content search to grant access to pages so they appear in future exports, and an admin API for scheduled exports is in beta

## What personal data is in a Notion export?

Notion workspaces mix project plans with personal records: meeting notes that name people, hiring pipelines, one-to-one notes, HR wikis and CRM-style databases with contact details.

### The US position

In the US, start with California. The CCPA defines a sale as making personal information available "for monetary or other valuable consideration" (Cal. Civ. Code § 1798.140(ad)(1)), and a license fee from an AI buyer fits that wording on its face. Employee and business-contact data have been in scope since January 1, 2023, when the temporary exemptions expired.

Data counts as deidentified under § 1798.140(m) only if you take reasonable measures so it "cannot be associated" with a person, publicly commit to keep it that way and contractually bind every recipient. Our [de-identification guide](https://sellmydatatoai.net/guides/de-identification-for-ai-training-data) explains how to meet that standard, and our [guide to the CCPA and state privacy laws](https://sellmydatatoai.net/guides/gdpr-and-selling-data-for-ai-training) covers the other states.

Other comprehensive state privacy laws, including those in Virginia, Colorado and Texas, define sales and exemptions in their own words, and several treat employee data differently from California. Map where the people in your export live before you rely on any one state's rules.

If the export could hold health information from a HIPAA covered entity or business associate, HHS recognizes two de-identification methods under 45 CFR 164.514(b): Expert Determination, and Safe Harbor, which removes 18 types of identifiers. Financial institutions under the Gramm-Leach-Bliley Act must explain customers' right to opt out of certain sharing with nonaffiliated third parties, according to the FTC.

Your own privacy promises still bind you. FTC staff wrote on February 13, 2024 that adopting more permissive data uses, such as AI training, through a "surreptitious, retroactive amendment" to terms or a privacy policy could be unfair or deceptive. Check the privacy notice, employee handbook and customer contracts in force when the data was collected.

Workplace messages raise a labor law point too. Daniel Goldberg of Frankfurt Kurnit Klein & Selz wrote in October 2026 that staff messages about pay and working conditions can be "protected concerted activity under Section 7 of the National Labor Relations Act," whether or not staff are unionized.

### If you hold UK or EU data

UK GDPR and EU GDPR treat names, email addresses and message content about identifiable people as personal data. Licensing it for AI training is a new purpose, so you need a lawful basis under Article 6 and a compatibility assessment under Article 6(4), which the ICO covers in its guidance on compatibility and the reuse of personal information. This page is general information, so confirm your position with your own counsel.

## What third-party content is in a Notion export?

Guests, pages shared from other workspaces, embedded files and web clips bring in content your company did not write. Templates bought from creators may carry their own license terms.

Remove guest pages and client material before export. Buyers of [workplace communications data](https://sellmydatatoai.net/buy-ai-training-data/workplace-communications-data) will ask how you separated them.

## How do you prepare a licensable Notion export?

Preparing a Notion export for a buyer starts with the extraction route and ends with a manifest. Work through these steps in order.

1. **Get access to the pages you mean to license**: On Enterprise, use content search to add pages your company has authority over, and document what remains excluded.
2. **Pick the format for the buyer**: Use HTML when comments matter and Markdown and CSV when structure matters, and keep both if a buyer needs both.
3. **Read the current contracts**: Get the version of the Master Subscription Agreement and the Developer Terms that applies to you, and have counsel review them.
4. **Remove third-party content**: Take out guest pages, pages shared from other workspaces and client documents unless the other party has agreed in writing, and keep privileged legal material out entirely.
5. **De-identify and test**: Replace names, user IDs and email addresses across the Notion export, then run a re-identification test on a random sample, as our [de-identification guide](https://sellmydatatoai.net/guides/de-identification-for-ai-training-data) describes.
6. **Write the manifest**: Record record counts, date ranges, systems, exclusions and the export method in a [data manifest](https://sellmydatatoai.net/guides/how-to-build-a-data-manifest) that matches what you deliver.
7. **Get counsel's sign-off**: Ask your own counsel to review the Notion terms, your order form and your privacy notices together before any buyer sees a sample.

If you want a view on whether your Notion data is licensable and what buyers might pay, start with a [data valuation](https://sellmydatatoai.net/data-valuation). We are a broker, not a law firm, so take independent legal advice before you sign any license.

## Frequently asked questions

### Does Notion train AI models on my workspace?

Notion's AI security and privacy page says that by default neither Notion nor its AI providers use your Customer Data to train any models, and that its contracts with AI providers bar training on customer data at every step of the chain. That covers Notion's own use. It does not say whether you may license your workspace to someone else who will train on it.

### Does a Notion workspace export include private pages?

No. Notion's help center says the export leaves out pages the exporter cannot access, such as other members' private pages, and some content may be excluded by teamspace settings. On Enterprise, admins can use content search to grant themselves or others access to specific pages so those pages are included in future exports. Decide with counsel whether private pages belong in a license at all.

### Can I export a Notion database with all its views?

No. Notion exports the current view or the default view of a database, not all views at once, and form views cannot be exported, so use a table view instead. Full-page databases export as CSV with Markdown files for each subpage. Record which view you exported in your manifest so a buyer can match the structure.

### Is there a Notion API restriction on AI training?

We could not confirm either way. Notion publishes its Developer Terms as a page that did not load in a readable form when we checked in November 2026, so we could not review its clauses on API data. Slack, Zendesk and HubSpot all restrict AI training on API data in their developer terms. Read Notion's Developer Terms yourself before using the API to build a dataset.

## Sources

- [Privacy practices](https://www.notion.com/help/privacy), Notion Help Center, accessed November 2026
- [Notion AI security and privacy practices](https://www.notion.com/help/notion-ai-security-practices), Notion Help Center, accessed November 2026
- [Export your content](https://www.notion.com/help/export-your-content), Notion Help Center, accessed November 2026
- [California Consumer Privacy Act of 2018, Civil Code section 1798.140](https://cppa.ca.gov/regulations/pdf/cppa_act.pdf), California Privacy Protection Agency, accessed November 2026
- [California Consumer Privacy Act employee and B2B exemptions expire January 1, 2023](https://www.morganlewis.com/pubs/2022/10/california-consumer-privacy-act-employee-and-b2b-exemptions-expire-january-1-2023), Morgan Lewis, accessed November 2026
- [AI (and other) Companies: Quietly Changing Your Terms of Service Could Be Unfair or Deceptive](https://www.ftc.gov/policy/advocacy-research/tech-at-ftc/2024/02/ai-other-companies-quietly-changing-your-terms-service-could-be-unfair-or-deceptive), Federal Trade Commission, accessed November 2026
- [Guidance Regarding Methods for De-identification of Protected Health Information](https://www.hhs.gov/hipaa/for-professionals/special-topics/de-identification/index.html), U.S. Department of Health and Human Services, accessed November 2026
- [Gramm-Leach-Bliley Act](https://www.ftc.gov/business-guidance/privacy-security/gramm-leach-bliley-act), Federal Trade Commission, accessed November 2026
- [Selling Company Data for AI Training: What to Know Before You Say Yes](https://technologylaw.fkks.com/post/102o455/selling-company-data-for-ai-training-what-to-know-before-you-say-yes), Frankfurt Kurnit Klein & Selz, accessed November 2026
- [Compatibility and the reuse of personal information](https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/data-protection-principles/compatibility-and-the-reuse-of-personal-information/), Information Commissioner's Office, accessed November 2026
- [Regulation (EU) 2016/679 (General Data Protection Regulation)](https://eur-lex.europa.eu/eli/reg/2016/679/oj), EUR-Lex, accessed November 2026

---

Get a data valuation: https://sellmydatatoai.net/data-valuation