Notion AI Data Residency and Prompt Confidentiality Controls
Enterprise plans get zero-retention AI by default, others don't.
Marcus Abubakar-Osei
Section
8 stories in Product Security.
Enterprise plans get zero-retention AI by default, others don't.
OpenAI's security controls differ between API and ChatGPT Enterprise, requiring separate audits.
Workday publishes AI governance docs, but independent verification remains incomplete.
AI agents inherit their platform's permission gaps, exposing data at machine speed.
Enforcement gaps and data scope questions emerge as Glean scales from search to AI agents.
Salesforce masks data before sending prompts to external AI models.
Widespread adoption masks a security perimeter that legacy code scanners can't see.
The AI tool exposes existing overpermissioning problems faster than humans ever could.