At a Glance
| Vendor | Notion |
|---|---|
| Category | Embedded AI |
| Default Risk Rating | Medium |
| Default Status for New Clients | Not Managed |
| Recognized By | Its client signature, so it has its own status even on domains it shares with another product |
| Desktop App Inventoried | Web only |
The risk rating and default status are ProctoredAI's starting points for a new client. Each partner sets the status per client.
What to Know About Notion AI
AI inside Notion: writing, Q&A over the workspace. Identified by its inference endpoint, /api/v3/runInferenceTranscript, verified on 2026-10-18 (the endpoint exists and requires sign-in; the rest of notion.so passes through).
Why Embedded AI Tools Need Governing
AI features inside software the client already uses, such as office suites and note apps, send the content of the document to the AI service.
Decide per client whether each embedded feature is approved, and inspect what is sent like any other AI app.
How ProctoredAI Governs Notion AI
- See it. The agent reports every device and account using Notion AI.
- Decide it. Mark it Approved, Unapproved or Blocked for each client. Unapproved use can ask the person for a business reason first.
- Protect what is sent. Prompts and uploads are inspected on the device, and credentials, health and payment data and sensitive documents are stopped, redacted or warned on by the client's rules.
- Prove it. Usage, decisions and blocked events land in the client's monthly report as evidence.
Policy Packs That Fit
- Credentials & Secrets. Block API keys, private keys, passwords and connection strings everywhere.
- Sensitive Documents. Contracts, financial statements, HR and medical records, customer lists and credential files may only go to approved AI apps.