Work with us
AI tools / Meeting and writing AI / Notion AI

How to govern Notion AI

Drafting, summarising and Q&A across your team's knowledge base and the confidential pages inside it.

Notion · Reviewed when the vendor ships a capability change or a customer declares the tool

How Notion AI is used

We see three common ways businesses use Notion AI, and we govern each one on its own terms. If your team uses it differently, that is fine: you describe the use in your own words and Certrak works out the governance from what it actually does.

General productivity assistance

Consequence to people: Low

Drafting, summarising, brainstorming, internal Q&A - day-to-day help with internal work

Internal informationEvery output reviewedInternal use only
  • Review rhythm: Annual review
  • Governance is mostly about: Safe everyday use; Checking what it produces; What it may be given

Document analysis and review

Consequence to people: Low

Reviewing contracts, reports, or technical documents

Internal informationEvery output reviewedInternal use only
  • Review rhythm: Annual review
  • Governance is mostly about: Safe everyday use; Checking what it produces; What it may be given

Meeting notes and transcription

Consequence to people: Medium

Recording, transcribing, and summarising meetings, calls, or voice memos

Personal informationEvery output reviewedInternal use only
  • Review rhythm: Quarterly review
  • Governance is mostly about: Safe everyday use; What it may be given; Checking what it produces

Governing Notion AI in practice

  1. Name one person who owns Notion AI in your business. Governance starts with a name.
  2. Write down what Notion AI is used for. Certrak recognises 3 common uses: General productivity assistance, Document analysis and review and Meeting notes and transcription. Yours may differ; write down yours.
  3. Decide what Notion AI may and may not be given. Personal information is in scope for some uses; write the boundary down before it is needed.
  4. Agree that a person reviews every output before it is used, and name who.
  5. Look at this again every quarter, and sooner on any of these: industry incidents, vendor model updates and data classification changes.