Notion published an official security advisory informing enterprise administrators that third-party artificial intelligence infrastructure vendor Fireworks AI suffered a security incident that compromised data associated with fewer than one percent of Notion workspaces. Notion confirmed it has notified all impacted organizations directly and established an in-app portal for workspace owners to audit exposed interactions.
The incident stems from Notion's architectural reliance on Fireworks AI for three operational roles: running classification workloads for Notion's administrative 'Insights' analytics feature, serving open-weight foundation models within Notion AI, and conducting task-specific model fine-tuning using volunteered corporate data through Notion's Learning and Early Access Program (LEAP). Notion revealed that on November 3, it severed all infrastructure links to Fireworks, purged all corporate records within Fireworks' environment, stopped all inference routing, and terminated all active training runs.
The investigation revealed a critical compliance breakdown regarding data governance: Notion holds strict Zero Data Retention (ZDR) commitments for enterprise customers and had secured binding contractual assurances from Fireworks AI guaranteeing zero endpoint retention for API traffic. However, forensic analysis revealed that Fireworks had retained request and response payloads from the endpoints utilized by Notion's Insights classification pipelines, contradicting contractual stipulations.
To mitigate risk, Notion released self-service auditing tools accessible via desktop clients under workspace settings. Domain-verified administrators can download two structured exports: 'affected_content.csv', reflecting raw exposed chat strings, and 'affected_content_annotated.csv', which appends conversation identifiers, user attributions, and an automated threat analysis column highlighting sensitive tokens like credentials, database connection strings, and API keys for immediate credential rotation. Notion stated that AI Meeting Notes audio and transcripts were unaffected unless explicitly pasted into AI chat threads.
Notion confirmed that its Insights administrative analytics tool remains disabled while broader infrastructure assessments proceed. The company has initiated a forensic audit across all external inference partners and third-party data processors to verify technical enforcement of zero data retention policies.