Knowledge Base & Wiki
Notion Wikis
Rest of world Report an errorPanel rating · 6 judges · How to read the stars
Category median
Sovereignty: 1 of 6 dimensions proven
0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.
by Notion Labs, Inc. · www.notion.com
Compare with Confluence → Report an error on this page Is this your product? →
Link to this page
Add ?theme=dark to the image address for dark backgrounds.
The badge shows the category and the month of the latest evaluation, and EU-Made where
that is the product’s provenance. It never shows a score.
Notion Wikis at a glance
- Vendor
- Notion Labs, Inc.
- Headquarters
- Incorporated in United States source, captured 1 Nov 2026
- Data hosting
- Not stated on the vendor’s pages as of 1 Nov 2026
- Free plan
- Yes, per the vendor’s own page source, captured 1 Nov 2026
- Panel verdict
- The AI panel rates Notion Wikis 3/5, the mean of 6 judges. Notion Wikis, from Notion Labs, Inc. how scores are made
- As of
- Vendor pages captured 1 Nov 2026; evaluated by the panel 1 Nov 2026. all sources
Read this page as one judge. Each weighs the same scores by what they care about.
The panel's verdict
Notion Wikis, from Notion Labs, Inc. of San Francisco, is a knowledge base and wiki judged strongest on access control, 7 to 8, and weakest on sovereignty, 4 to 6. Access control earns the mark: SAML 2.0 single sign-on with any identity provider, an Only SAML SSO login enforcement, SCIM provisioning, six permission levels with subpage inheritance, and an audit log that can feed a SIEM or DLP. Sovereignty is the only criterion spanning two points, and the split is genuine — the same evidence pulls both ways: a published subprocessor list with locations, a data processing agreement covering EU and UK GDPR, and training on customer data being opt-in only count as disclosure, while a US contracting entity, United States hosting by default, and EU residency as an Enterprise-only opt-in that excludes account information, usage data and subprocessor-processed data, including LLM providers, hold it down. Knowledge governance, portability and hosting, and pricing transparency sit at a flat 6; authoring and search and publishing and integrations run 6 to 7.
Speaks for it
- SAML 2.0 single sign-on with any identity provider, an Only SAML SSO login enforcement, SCIM provisioning and an audit log feeding SIEM or DLP are documented in depth
- Page verification with time-boxed or indefinite periods notifies the owner in the Notion inbox and by email when it lapses, with verified pages surfacing higher in search and AI responses
- The Confluence importer covers cloud and server instances up to about 50,000 pages or 30GB, keeping hierarchy, attachments and comments
- Free at €0, Plus at €9.50 per member / month and Business at €19.50 per member / month are publicly priced with their inclusions
- Whole-workspace export to HTML, Markdown and CSV including uploaded files exists, schedulable via the Admin API on Enterprise
Held against it
- EU residency is an Enterprise-only opt-in that excludes account information, usage data, Notion Calendar, Notion Mail, Beta Services and subprocessor-processed data, including LLM providers, from the selected region
- Password protection for published sites is stated as not available at the moment, and publishing exposes contributor names, photos and email addresses in page metadata
- Confluence imports do not carry permissions or page history, so permissions must be reapplied after migration
- SCIM, the audit log and EU data residency sit in the Enterprise plan, listed as Custom pricing, with no public information on minimum seats or VAT treatment
- A workspace cannot be recreated by re-uploading exported content, and export download links expire after 7 days
Best for
- You run an internal wiki where SAML 2.0 single sign-on with any identity provider, SCIM provisioning and a SIEM-connected audit log matter most
- You are migrating from Confluence, cloud or server, and can plan a pass to reapply permissions after the import
- You want page-level verification on a time-boxed cadence, with owners reminded in the Notion inbox and by email when a verification lapses
- You publish documentation to the open web with a custom-domain add-on and SEO controls rather than to a gated customer area
Avoid if
- Your compliance posture requires data to stay in the EU — residency is an Enterprise-only opt-in that excludes account information, usage data, Notion Calendar, Notion Mail, Beta Services and subprocessor-processed data including LLM providers, and the contracting entity is Notion Labs, Inc. of San Francisco
- You need a gated or password-protected help center — password protection is stated as not available at the moment, and publishing exposes contributor names, photos and email addresses in page metadata
- You must be able to recreate your wiki elsewhere from an export — the help states a workspace cannot be recreated by re-uploading exported content, and the download link expires after 7 days
- You must compute a full annual cost before signing — the Enterprise plan, where SCIM, the audit log and EU residency sit, is Custom pricing and premium support is likewise Custom
The scores
| Criterion | Panel median |
|---|---|
| Editor, structure & search | 3.5 of 5 |
| Verification, ownership & freshness | 3 of 5 |
| Permissions, SSO & administration | 4 of 5 |
| Help-center publishing & integrations | 3.5 of 5 |
| Import, export & self-hosting | 3 of 5 |
| European sovereignty | 2.5 of 5 |
| Pricing transparency | 3 of 5 |
Verification, ownership & freshness
Show reasoningHide reasoning
How this is scored
Whether the content stays true: page owners or experts named per page, verification with a review date and a reminder when it lapses, approval or publishing workflows with drafts and reviewers, read confirmations for mandatory pages, analytics on views, searches without a result and stale pages, duplicate detection, archiving rules, and an audit trail of who changed and approved what.
0 — No way to see who owns a page or when it was last checked beyond the edit date.
3 — Page history and last-edited dates; owners, verification, approvals and content analytics are basic or not described.
5 — An owner or verifier per page, a review interval with reminders, a draft and publish step, page view statistics, and archived pages kept out of search.
8 — Approval workflows with several reviewers, read confirmations for mandatory pages, analytics on failed searches and stale content, duplicate or outdated content flagged automatically, and an exportable audit trail of changes and approvals.
10 — Governance that a regulated organisation runs on: controlled documents with versioned approvals that meet a named standard (ISO 9001, GxP), expiry and review enforced per space, knowledge gaps reported from searches and AI questions, and every published statement traceable to an approved version.
The Operations Lead
This is the piece we lack today: pages can be marked verified for a set period or indefinitely, verified pages become more visible in search and AI responses, and when verification expires the page owner is notified in their Notion inbox and by email — a named owner with a reminder is exactly what our travel rules need. Page analytics show total and unique views plus who created, edited or viewed a page, and the Enterprise tier adds an audit log exportable to a SIEM. We found no public information on read confirmations for mandatory pages or approval workflows with several named reviewers. 16 17 5 10 14
The IT Administrator
Page verification is documented properly: a page can be marked verified for a fixed period or indefinitely, the owner is notified in the inbox and by email when it lapses, and verified pages rank higher in search and AI responses; page analytics show total and unique views and who created, edited or viewed a page when. The Enterprise plan adds an audit log exportable to SIEM. We found no public information on approval workflows with named reviewers, read confirmations for mandatory pages, or automatic flagging of duplicate or stale content. 1 5 10 16 17
The Support Knowledge Manager
This earns its keep for a support team: pages can be marked verified for a set period, and when verification lapses the page owner is nudged in the Notion inbox and by email, with verified pages surfacing higher in search and AI answers. Page analytics show total and unique views plus who created, edited or viewed a page, Enterprise adds admin content analytics and an audit log that can feed a SIEM, and a published article advises mining query data for high-volume searches with no satisfying result. We found no public information on approval workflows with reviewers or read confirmations for mandatory pages, and duplicate or stale content handling appears as advice rather than an automated feature. 1 5 14 16 17
The Engineering Lead
Page verification with time-boxed or indefinite periods, expiry notifications to the owner by inbox and email, verified pages surfaced more strongly in search and AI responses, and page analytics showing total and unique views plus who created, edited or viewed a page give us the review cadence our runbooks need, with admin content analytics on the Enterprise plan. We found no public information on approval workflows with named reviewers, read confirmations for mandatory pages, or automatic flagging of duplicate or stale content. 1 5 14 16 17
The Quality Manager
Page verification with an expiry that notifies the page owner in their inbox and by email is the closest thing to my sign-off sheet, page analytics show total and unique views with who created, edited or viewed when, and an Enterprise audit log with SIEM hand-off is published. We found no public information on approval workflows with several named reviewers or read confirmations for mandatory pages, and no archiving rules that keep stale pages out of search; the audit log is described for security and safety activity rather than content approvals. 1 5 10 16 17
The Skeptic
The verification loop is genuinely documented: a page can be verified for a set period or indefinitely, when it lapses the owner is notified in the Notion inbox and by email, and verified pages rank higher in search and AI responses. Page analytics show total and unique views plus who created, edited or viewed a page when, and Enterprise adds a detailed audit log that can feed a SIEM. We found no public information on approval workflows with reviewers, read confirmations, or automatic detection of stale or duplicate content — the search-query cleanup advice on the enterprise-search page is editorial guidance, not a product feature. 16 17 10 14
Permissions, SSO & administration
Show reasoningHide reasoning
How this is scored
Who may see and edit what, and how the administrator keeps control: roles and permissions per space and per page, restricted or private pages, guest and external access, groups synced from Azure AD/Entra ID, Google Workspace or LDAP, single sign-on (SAML, OIDC), SCIM provisioning, two-factor authentication enforced, an audit log of access and permission changes, and admin controls over sharing and public links. Where the data is hosted and certifications are scored under sovereignty.
0 — Everyone in a workspace sees and edits everything; no permissions of any kind.
3 — Admins, members and guests, or private and shared pages; per-space or per-page rights, SSO and an audit log are basic or not described.
5 — Permissions per space and per page, guest access with limits, single sign-on through Google or Microsoft, two-factor authentication, groups, and admin control over public sharing.
8 — SAML or OIDC single sign-on with any identity provider, SCIM provisioning or LDAP and directory group sync, enforced 2FA, an audit log of views, edits and permission changes, IP or domain restrictions, and permissions honoured by search and AI answers.
10 — Access control an enterprise auditor accepts as documented: granular roles with inheritance explained, just-in-time and external access with expiry, every access and permission change logged and exportable to a SIEM, and the permission model published with its limits.
The Operations Lead
Permissions run per teamspace and per page with six levels from full access down to can view, subpages inherit the parent, guests are invited by email for single pages with plan-based limits, and admins can hide pages from search and set link expiry. SAML 2.0 single sign-on works from the Business plan up with just-in-time provisioning, an "Only SAML SSO" login enforcement and documented owner-bypass rules, and SCIM provisioning, MFA, fine-grained admin roles and an audit log with DLP/SIEM integration sit on the higher tiers. We found no public information on IP or domain-based access restrictions. 18 19 5 10 4
The IT Administrator
SAML 2.0 single sign-on with any identity provider is documented in detail — that covers our Entra ID — with Just-in-Time provisioning and an enforceable Only SAML SSO login method, and SCIM on Enterprise manages users and groups, which is the group sync I need. Permission levels run from full access down to can view, subpages inherit, teamspaces carry their own permissions, and organisation-wide policies cover guests, public sharing and exports with an Enterprise audit log feeding SIEM. MFA is offered but I found no public information on organisation-wide enforcement or IP restrictions, so I hold at this level. 1 4 5 10 18 19
The Support Knowledge Manager
The permission model is documented down to six levels from full access to can view, with teamspace and page-level rights, subpage inheritance, guests who need their own Notion account, link expiry and a request-access flow — and the quirks are published too, such as guests being excluded from SAML login. SAML 2.0 single sign-on with any identity provider (Business and up, up to 25 configurations on Enterprise), Just-in-Time provisioning, SCIM user and group provisioning, admin roles and an audit log exportable to SIEM or DLP are all evidenced. We found no public information on IP or domain restrictions, and enforcing two-factor authentication across the workspace is not documented as an explicit admin policy. 1 5 10 18 19
The Engineering Lead
This is enterprise-grade as documented: SAML 2.0 with any identity provider, Just-in-Time provisioning, up to 25 SAML configurations, an SSO-only login enforcement, SCIM provisioning, six permission levels with subpage inheritance, guest limits per plan and expiring public links, plus an audit log that feeds a SIEM or DLP. MFA is described as available rather than enforced, and we found no public information on IP restrictions. 4 5 10 18 19
The Quality Manager
SAML 2.0 single sign-on with any identity provider, just-in-time provisioning and an SSO-only login enforcement are documented in depth, SCIM covers users and groups, permissions run per page and per teamspace with inheritance and six named levels from full access to view-only, and the Enterprise audit log can feed a SIEM. Guest limits, expiring public links, a request-access approval flow and fine-grained admin roles round it out; we found no public information on IP restrictions or enforced two-factor authentication as such. 4 5 10 18 19
The Skeptic
SAML 2.0 with any identity provider, enforcement of SAML-only login, just-in-time provisioning, SCIM user and group provisioning, six page permission levels with subpage inheritance, teamspace-level permissions, guest access by email with plan limits, expiring public links, and an Enterprise audit log with SIEM and DLP integration are all documented. The gaps an auditor would probe: enforcement of two-factor authentication is not stated as enforceable, guests in a SAML-enabled workspace cannot log in via SSO, and we found no public information on IP-based restrictions. 18 19 4 10
Help-center publishing & integrations
Show reasoningHide reasoning
How this is scored
How knowledge reaches people outside the editor: public or password-protected sites and help centers with a custom domain, branding and SEO controls, an in-app widget or contextual help, ticket deflection in a help desk, multilingual publishing, integrations with Slack, Microsoft Teams, Jira, Google Drive, help desks and CRMs, a browser extension, a documented REST or GraphQL API, webhooks, and an MCP server or connector for AI assistants.
0 — Content cannot be shared beyond the editor and nothing connects to it.
3 — Sharing a page by public link and a few integrations such as Slack; a branded help center, an API and webhooks are basic or not described.
5 — A published site or help center with custom domain and branding, integrations with Slack or Teams and Google Drive or Microsoft 365, a documented API, and embeds of common tools.
8 — A help center with SEO controls, multilingual publishing, access for logged-in customers and analytics, a widget or contextual help inside the customer's product, help desk integration with ticket deflection, webhooks, and a connector or MCP server for AI assistants.
10 — Knowledge delivered wherever it is needed from one source: internal and public audiences served from the same pages with per-audience rules, a complete API with SDKs and rate limits stated, a marketplace of integrations, and every channel measured in one report.
The Operations Lead
Any page publishes to the web on a free notion.site domain or a paid custom-domain add-on, with SEO controls, themes, Google Analytics and the option to embed published pages into other websites; behind it sit a documented API with a JavaScript SDK, webhooks, a connection marketplace and an MCP server for AI assistants. As a customer help center it thins out: the vendor's own help pages answer the password-protection question with "Unfortunately, not at the moment," and we found no public information on access for logged-in customers, an in-app widget or help-desk ticket deflection. 20 21 9 3 2
The IT Administrator
Any page can be published as a site on a notion.site or custom domain (an add-on at $10 per month, $8 per month with annual billing, per domain up to 25 domains), with SEO title and description editing, Google Analytics and embeds of published pages into other websites; the public API, webhooks and an MCP server for AI assistants are all documented alongside Slack, Jira and Figma integrations and a marketplace. The help center states password protection is not available at the moment and that publishing exposes contributor names, photos and email addresses in page metadata, and we found no public information on multilingual publishing, ticket deflection or an in-product widget. 1 3 4 5 9 20 21
The Support Knowledge Manager
Publishing to the web is real: any page becomes a Notion Site with a custom domain add-on, branding and logo removal, editable SEO title and description, search-engine indexing, Google Analytics and embeds of published pages into other sites — behind it sit webhooks, a documented API with a JavaScript SDK, a marketplace and an MCP server for AI assistants. But the help-center gaps matter for my use case: the captured pages state password protection is not available at the moment, and we found no public information on multilingual publishing, an in-product help widget, or help-desk ticket deflection — Jira and Slack are present as integrations, not as a deflection flow. 3 5 9 20 21
The Engineering Lead
The API story is what I want for the pipeline: a documented public API with a JavaScript SDK and Postman workspace, webhooks for page updates and new comments, and an MCP server for AI assistants, while Notion Sites publish pages to the web with a custom-domain add-on at $10 per month, SEO editing and Google Analytics on paid plans. The captured pages state that password protection for published sites is not available at the moment, and we found no public information on multilingual publishing, access for logged-in customers, or help-desk integration with ticket deflection. 1 3 5 9 20 21
The Quality Manager
Any page publishes as a Notion Site with a custom domain add-on, SEO controls and Google Analytics on paid plans, published pages can be embedded into our own website, and there is a documented API with webhooks, a JavaScript SDK and an MCP server for AI assistants. Password-protected or logged-in customer areas are stated as not available at the moment, and we found no public information on multilingual publishing or help-desk ticket deflection. 3 5 9 20 21
The Skeptic
Any page publishes as a site on a notion.site domain with a paid custom-domain add-on ($10 per month, or $8 per month with annual billing), SEO title and description editing, search-engine indexing, embedding of published pages elsewhere, webhooks, a JavaScript SDK and an MCP server — the plumbing is strong. The help-center side thins out: password protection is answered "not at the moment", publishing exposes contributor names, profile photos and email addresses in page metadata, and we found no public information on multilingual publishing, logged-in customer access with analytics, an in-product widget, or help-desk ticket deflection. 20 21 9 3
Import, export & self-hosting
Show reasoningHide reasoning
How this is scored
What arriving and leaving would cost: import from Confluence, Notion, Google Docs, Word and Markdown with structure, attachments and links kept, a full export of every space in an open format (Markdown, HTML, XML, PDF) with attachments and history, an API that reaches all content, a stated migration path from Confluence Server or Data Center, open-source code under a named licence, and a self-hosted or on-premise edition with its own documentation.
0 — Content cannot be imported or exported; it can only be read in the vendor's interface.
3 — Single pages export to PDF or Word and some files can be imported; a full export, a Confluence import and self-hosting are basic or not described.
5 — Import from Confluence or Notion and from Word or Markdown, a full workspace export to Markdown or HTML with attachments, a documented API covering pages, and a stated retention of data after cancellation.
8 — A Confluence migration tool or service that keeps hierarchy, permissions and attachments, a full export with history in an open format, a self-hosted or on-premise edition with installation and update documentation, and data returned or deleted on termination under stated terms.
10 — The customer owns the content end to end: open-source code under a named licence that runs fully self-hosted with feature parity stated, a complete export another tool can import without loss, and the deletion of every copy on termination documented.
The Operations Lead
The Confluence importer is real and well documented — cloud and server instances, up to roughly 50,000 pages or 30GB, keeping hierarchy, attachments and simple tables — but the vendor states permissions must be reapplied in Notion afterwards and history is not imported. Whole workspaces export to HTML, Markdown and CSV including uploaded files (link valid 7 days, processing up to 30 hours, pages the exporter cannot see excluded), with an Enterprise beta to schedule exports via the admin API, and the API covers pages, databases, comments and files. We found no public information on a self-hosted or on-premise edition. 22 6 9 23 12
The IT Administrator
The Confluence import is documented in unusual detail — cloud and server instances, page hierarchy, attachments and simple tables come across, up to about 50,000 pages or 30GB — but the vendor's own import documentation states permissions are not imported: pages land private to the importing user and permissions must be reapplied, and history, private pages and most macros do not survive. A full workspace export to Markdown, HTML and CSV with uploaded files exists, though it can take up to 30 hours, excludes pages the exporter cannot see, and the help states you cannot recreate the workspace by reuploading the export. We found no public information on a self-hosted or on-premise edition, on open-source code, or on any export of page history. 6 7 22
The Support Knowledge Manager
Arriving is well served: a documented Confluence importer covering cloud and server instances that keeps hierarchy, attachments and comments (permissions explicitly must be reapplied), plus Word, Markdown, CSV, Evernote, Trello and ZIP imports with published size limits. Leaving is honest but not painless — a full workspace export to Markdown, HTML and CSV with uploaded files, even schedulable via the admin API on Enterprise, though the documentation says a workspace cannot be recreated by re-uploading an export, comments only export in HTML, and we found no public information on page history in exports. We found no public information on a self-hosted or on-premise edition. 6 7 9 22 23
The Engineering Lead
The Confluence migration path is deep — pages, hierarchy, images, attachments, simple tables, comments and user mapping up to roughly 50,000 pages or 30GB, multi-space imports on Business and Enterprise, cloud and server instances — but the documentation itself states that permissions, private pages and history are not imported and permissions must be reapplied afterwards. Full workspace export to Markdown, HTML and CSV including uploaded files is documented and schedulable through the Admin API on Enterprise, yet the help centre also states a workspace cannot be recreated by re-uploading exported content, and we found no public information on a self-hosted or open-source edition. 6 7 12 22 23
The Quality Manager
A Confluence importer handles cloud and server instances up to about 50,000 pages keeping hierarchy, attachments, comments and user mapping, and a whole workspace exports to Markdown, HTML and CSV with uploaded files, even schedulable through the Admin API on Enterprise. The importer documentation itself states permissions and history are not brought over, a workspace export cannot be re-uploaded to recreate the workspace, and we found no public information on a self-hosted or on-premise edition. 6 9 22 23
The Skeptic
Arriving is well documented — a Confluence importer for cloud and server instances keeping hierarchy, attachments, comments and user mapping up to about 50,000 pages or 30GB, plus Word, Markdown, HTML, PDF, CSV, ZIP, Evernote and Trello — but Confluence permissions are explicitly not imported, and the migration lands everything private to whoever ran it. Leaving exists — a whole-workspace export to HTML, Markdown and CSV including uploaded files, with an Enterprise beta Admin API to schedule it — yet the export excludes pages the exporter cannot access, admins can disable exporting entirely, the download link expires after 7 days, and the vendor states "You can't instantly recreate your workspace by reuploading your exported workspace content". We found no public information on export of page history, a self-hosted or open-source edition, or data return and deletion terms after cancellation. 22 7 6 9
European sovereignty
panel opinion
Show reasoningHide reasoning
How this is scored
Who the contracting entity and the parent company are, where pages, attachments and search indexes are stored and processed, and who the subprocessors are (hosting, CDN, search, email, support, payment, and the AI model provider that reads pages for answers and summaries, with whether content is used for training). Independently sourced by the sovereignty pipeline; a wiki holds internal processes, customer data and trade secrets, so the whole chain counts, not only the database. A self-hosted or open-source edition the customer runs on its own European servers counts as the customer's chain, whatever the vendor's seat.
0 — Non-EU vendor and contracting entity, hosting unstated, subprocessors unnamed, and no data processing agreement offered.
3 — A privacy policy and a data processing agreement exist, but hosting location is unstated or non-EU and the subprocessors are not listed.
5 — EU data residency available and an EU contracting entity or EU representative, but parts of the chain (CDN, search, email, support, AI model) run through non-EU providers without a stated safeguard, or EU residency is limited to the higher tiers.
8 — EU hosting on named infrastructure, EU contracting entity, subprocessors listed with their locations including the AI model provider, no training on customer content stated, a data processing agreement published, and security certifications (ISO 27001, SOC 2) stated — or a self-hosted edition documented that keeps every page on the customer's own servers.
10 — Sovereign end to end and evidenced: European ownership, entity, hosting and every subprocessor including AI, or a self-hosted open-source edition with no call home, data export and deletion documented, and certifications published with their scope rather than implied.
The Operations Lead
The contracting entity is Notion Labs, Inc. in San Francisco, data is hosted in the United States by default, and EU residency — Frankfurt or Ireland on AWS — is an Enterprise-plan option that excludes account information, usage data, Calendar, Mail and anything processed by subprocessors, which per the residency documentation includes the LLM providers behind AI features. The subprocessor list is public with locations and no training on customer data is stated with ISO 27001 and BSI C5 among the certifications, but the AI, email, logging and MFA providers sit in the USA or are listed simply as "Global". For a company holding customer drawings, that is a documented American chain with a partially European database, not a European one. 8 11 13 10 12
The IT Administrator
The contracting entity is Notion Labs, Inc. of San Francisco and the privacy policy says data may be transferred, processed and stored anywhere in the world including the United States; EU residency in AWS Frankfurt or Ireland is an Enterprise-only opt-in that is free of charge, but the residency documentation itself lists exclusions — account information, usage data, Calendar, Mail, and customer data processed by subprocessors including LLM providers stay outside the selected region. Credit where due: the subprocessor list is published with locations (Anthropic, OpenAI and Google as Global; AWS in the USA and EU; support in Greece), the data processing agreement is published covering EU GDPR, training on customer data is stated not to occur, and SOC 2, ISO 27001, BSI C5 and ISMAP audits are listed. That is genuine disclosure, but a US entity with a higher-tier residency and a carve-out for the AI chain is not what my regulator means by sovereign. 4 8 10 11 12 13
The Support Knowledge Manager
The chain is unusually transparent: a published subprocessor list with locations including the AI providers (OpenAI, Anthropic and Google all marked Global), a data processing agreement covering EU and UK GDPR, repeated commitments that customer data is never used for training, and SOC 2 Type 2 plus ISO 27001 and its siblings. But the contracting entity is Notion Labs, Inc. of San Francisco, data sits in the United States by default, and EU residency is an Enterprise-only opt-in on AWS Frankfurt or Ireland that excludes account information, usage data, Calendar, Mail and anything processed by subprocessors including the LLM providers — so even a resident workspace's AI features run outside the region. 2 8 10 11 12 13
The Engineering Lead
Hosting is on named AWS regions including Frankfurt and Ireland, but EU residency is an Enterprise-only opt-in, workspaces remain hosted in the United States until migration is confirmed, and account information, usage data, Notion Calendar, Notion Mail and anything processed by subprocessors including LLM providers stay outside the selected region. The contracting entity is Notion Labs, Inc. of San Francisco; on the other side, the subprocessor list is public with locations for every AI provider, training on customer data is opt-in only, a DPA covering EU GDPR and restricted transfers is published, and ISO 27001 and SOC 2 Type 2 attestations are stated. 8 10 11 12 13
The Quality Manager
The contracting entity is Notion Labs, Inc. of San Francisco, data sits in the United States by default, and EU residency in Frankfurt or Ireland is an Enterprise-only option that still excludes account information, usage data and anything the subprocessors process, including the LLM providers behind the AI answers. Credit where due: the subprocessor list with locations is public, a GDPR data processing agreement is published, no training on customer data is stated and SOC 2 and ISO 27001 audits are listed, but no EU entity and the US default hosting keep this mid-table. 8 10 11 12 13
The Skeptic
The contracting entity is Notion Labs, Inc. of San Francisco, hosting is on Amazon Web Services with the default the United States, and EU residency in Frankfurt or Ireland is an Enterprise-only opt-in that excludes Account Information, Usage Data, Notion Calendar, Notion Mail, Beta Services and anything processed by subprocessors — including the LLM providers — from the selected region. To its credit the subprocessor list is published with locations and names the AI providers (OpenAI, Anthropic, Google and others, several with location given only as "Global"), training on customer data is opt-in-only, a DPA covering EU and UK GDPR is published, and SOC 2 Type 2 plus ISO 27001, 27701, 27017, 27018 and BSI C5 are stated. There is no European contracting entity and the EU region does not cover the AI chain, so this lands at residency-available-but-top-tier-only. 8 11 13 12 4
Pricing transparency
Show reasoningHide reasoning
How this is scored
Whether a buyer can compute the real annual cost from public pages alone: price per user and tier, readers or guests free or charged, minimum seats, which features (SSO, SCIM, audit log, verification, help-center publishing, custom domain, AI answers, EU data residency) cost extra, the free tier and its limits, storage limits, the self-hosted edition's licence and support price, minimum term and setup or migration fees.
0 — No public prices at all; every customer is a sales call.
3 — A starting price or a free tier exists, but how cost scales with users, readers or features is unclear.
5 — Tiers are public with their price per user and main inclusions, but at least one commonly needed piece (SSO, AI, readers or guests, EU residency, the self-hosted edition) is unpriced or "on request".
8 — Every tier priced publicly with its scaling rule (editors, readers, guests, storage), add-ons priced, the self-hosted edition's licence and support cost stated, minimum seats, term and VAT treatment stated.
10 — Complete price computability: annual cost derivable for a given number of editors and readers and a feature set, with every add-on, AI credit, setup, migration and support fee and the cancellation and data-return terms published.
The Operations Lead
Per-member prices are public — Free at €0, Plus at "€9.50 per member / month", Business at "€19.50 per member / month", Enterprise "Custom" — with guests free but confined to the individual pages they are invited to, so company-wide read access for our workshop means paid members. The add-ons I'd need are priced separately (custom domain at "$10 per month" per domain, AI credits at "$10 per 1,000 monthly Notion credits"), and page history, upload limits and guest limits per plan are stated. What I cannot compute: SCIM, the audit log and EU data residency all live in the unpriced Enterprise plan, and we found no public information on minimum seats, VAT treatment or minimum term. 5 21 8
The IT Administrator
Free (€0 per member / month), Plus (€9.50 per member / month) and Business (€19.50 per member / month) are public with their inclusions, guests are free with per-plan limits, file uploads are 5MB on Free and up to 5GB on paid, and the add-ons are priced at $10 per month per custom domain and $10 per 1,000 monthly Notion credits. But everything my utility actually needs — SCIM, the audit log, EU data residency — sits in Enterprise, which is listed as Custom pricing, and we found no public information on minimum seats, VAT treatment or minimum term. For 900 staff I cannot compute the annual cost from public pages alone. 2 5 8 21
The Support Knowledge Manager
The pricing page is granular: Free at €0, Plus at €9.50 per member / month, Business at €19.50 with SAML SSO included, guests free but limited to pages they are invited to (ten on the free tier), per-member AI credits with overage at $10 per 1,000 monthly Notion credits, and a custom domain add-on at an additional $10 per month or $8 per month on annual billing, per domain. What stops me computing a real annual cost: Enterprise — where SCIM, the audit log, EU data residency (free of charge there) and premium support live — is Custom pricing, and we found no public information on minimum seats, minimum term or VAT treatment. 5 8 21
The Engineering Lead
Free, Plus at €9.50 per member / month and Business at €19.50 per member / month are fully priced with per-member scaling, guests free subject to plan limits, file-upload and page-history limits by tier, AI credits at $10 per 1,000 monthly Notion credits, and the custom-domain add-on at $10 per month. Enterprise carries "Custom pricing", so SCIM, the audit log, EU data residency and premium support all sit behind a quote, and we found no public information on minimum seats or VAT treatment. 2 5 8 21
The Quality Manager
Free at €0, Plus at €9.50 and Business at €19.50 per member per month are public with inclusions, guests are free within plan limits, AI credits are priced at $10 per 1,000 monthly credits, the custom domain add-on at $10 per month with an $8 discounted rate on annual billing, and refund windows including a 14-day EU one are stated. The Enterprise plan, which is where the audit log, SCIM and EU residency sit, is custom pricing only, and we found no public information on minimum seats or VAT treatment. 2 5 8 21
The Skeptic
Free (€0 per member / month), Plus (€9.50 per member / month) and Business (€19.50 per member / month) are public with their inclusions — guests free but limited to invited pages (10 external guests on Free), file-upload limits per plan, page history 7 to 90 days, SAML SSO from Business — and the add-ons are priced: custom domain at $10 per month (or $8 per month with annual billing) and Notion AI at $10 per 1,000 monthly credits. What a buyer still cannot compute: the Enterprise tier is "Custom pricing" and premium support is likewise "Custom" — and that is precisely where EU data residency, SCIM and the audit log sit — while which plans include the 1,500 Standard and 500 Select monthly credits is not stated. We found no public information on minimum seats, contract term or VAT treatment. 5 8 21
European sovereignty — proven facts
1 of 6 dimensions provenBuilt only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.
| Legal entity | Incorporated in US ⚠ unverified | 0/2 pts | 11 Report an error |
|---|---|---|---|
| Hosting location | Not determined ⚠ unverified | — | uncited Report an error |
| Hosting options | Not determined ⚠ unverified | — | uncited Report an error |
| Open source | Not determined | — | uncited Report an error |
| Data processing agreement | Not determined ⚠ unverified | — | uncited Report an error |
| Transfer impact assessment | Not determined | — | uncited Report an error |
Questions about Notion Wikis
Is Notion Wikis European?
No. whats-best.ai classifies Notion Wikis as Rest of world. Its vendor, Notion Labs, Inc., is incorporated in United States, per the vendor’s page captured 1 Nov 2026.
Where does Notion Wikis store data?
Not stated on the vendor’s pages as of 1 Nov 2026.
Does Notion Wikis have a free plan?
Yes. Notion Wikis has a free plan, per the vendor’s page captured 1 Nov 2026.
What are the best alternatives to Notion Wikis?
As of 1 Nov 2026, the panel rates Document360 (3.5/5), BookStack (3/5) and XWiki (3/5) highest among the other 13 Knowledge Base & Wiki products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is Document360 (UK / wider Europe). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: Notion Wikis alternatives.
Where this could be wrong
- Evidence ages. The oldest capture behind this page is from 1 Nov 2026. Vendors change pricing and policies without notice; every fact reflects its source as of the capture date shown in the registry.
- Weak sourcing — Legal entity. The address appears in the Privacy Policy contact block rather than an imprint or commercial register entry, and no register number is given.
- Weak sourcing — Hosting location, Hosting options, Data processing agreement. Not confirmed on the vendor’s own pages as captured.
- AI can misread a source. Extraction and judgement are automated; a citation guarantees traceability, not infallibility. If something here is wrong, say so — no account needed, every report is decided within 5 business days, and accepted corrections are published.
What we left out
A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.
- 13 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 3 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 2 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 2 data facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 3 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown. Know more? Tell us
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement. Know more? Tell us
Sources (23)
The pages every claim on this page was read from — each one checked, dated, and kept verifiable.
- 1 Vendor product page (wikis) www.notion.com Checked 1 Nov 2026 Details →
- 2 Features page (AI) www.notion.com Checked 1 Nov 2026 Details →
- 3 Features page (published sites) www.notion.com Checked 1 Nov 2026 Details →
- 4 Features page (enterprise) www.notion.com Checked 1 Nov 2026 Details →
- 5 Pricing page www.notion.com Checked 1 Nov 2026 Details →
- 6 Documentation (export) www.notion.com Checked 1 Nov 2026 Details →
- 7 Documentation (import) www.notion.com Checked 1 Nov 2026 Details →
- 8 Documentation (data residency) www.notion.com Checked 1 Nov 2026 Details →
- 9 API documentation developers.notion.com Checked 1 Nov 2026 Details →
- 10 Security page www.notion.com Checked 1 Nov 2026 Details →
- 11 Privacy policy www.notion.com Checked 1 Nov 2026 Details →
- 12 Data processing agreement (dpa) notion.notion.site Checked 1 Nov 2026 Details →
- 13 Subprocessor list notion.notion.site Checked 1 Nov 2026 Details →
- 14 Editor, structure & search — found from sitemap www.notion.com Checked 1 Nov 2026 Details →
- 15 Editor, structure & search — found from sitemap www.notion.com Checked 1 Nov 2026 Details →
- 16 Verification, ownership & freshness — found from sitemap www.notion.com Checked 1 Nov 2026 Details →
- 17 Verification, ownership & freshness — found from sitemap www.notion.com Checked 1 Nov 2026 Details →
- 18 Permissions, SSO & administration — found from sitemap www.notion.com Checked 1 Nov 2026 Details →
- 19 Permissions, SSO & administration — found from sitemap www.notion.com Checked 1 Nov 2026 Details →
- 20 Help-center publishing & integrations — found from sitemap www.notion.com Checked 1 Nov 2026 Details →
- 21 Help-center publishing & integrations — found from sitemap www.notion.com Checked 1 Nov 2026 Details →
- 22 Import, export & self-hosting — found from sitemap www.notion.com Checked 1 Nov 2026 Details →
- 23 Import, export & self-hosting — found from sitemap www.notion.com Checked 1 Nov 2026 Details →