Notice about the Fireworks AI incident that may impact some Notion workspaces
This notice is about the security incident at one of our vendors, Fireworks AI, that may impact some Notion workspaces. For the latest on the Fireworks AI incident, see their official security updates here.
Following an investigation by the Notion security team, we have determined that <1% of Notion workspaces may have been affected by the Fireworks security incident. Some unattributable chat sessions with Notion AI may have been exposed in this incident. “Unattributable” means the chats weren't labeled with who wrote them or which workspace they came from, and the transcripts did not contain tool call results. Beyond what’s in the chat transcript itself, there’s no information tying the chat back to a workspace, user, or company. No other data from within the workspace is affected.
What is Fireworks AI and how we used them
Fireworks is one of the most-used global AI infrastructure platforms powering tens of thousands of customers, and used by hundreds of thousands of developers. We used Fireworks for classification jobs to help customers understand their own AI usage through a feature in Notion called Insights, and we used them as a general inference provider to serve open-weight models inside our product. The Insights feature has been disabled as we investigate this incident, and we are no longer serving open-weight models through Fireworks.
What happened and how we addressed it
We learned from Fireworks about potential incidents earlier this month, and we shut down all connections to their systems out of an abundance of caution.
On November 6, Fireworks notified us that malicious actors may have accessed potential customer data. Our team immediately began another internal investigation. On November 8, Fireworks confirmed this new dataset for us.
Upon analysis of the new data, we discovered that it included unattributable Notion AI chat transcripts used for the Insights feature. Chats weren't labeled with who wrote them or which workspace they came from, and the transcripts did not contain any tool call results. Beyond the words in the chat transcripts themselves, the data contained no information that could specifically identify the workspace, user, or company.
No other Notion data from your workspace is affected, and we continue to monitor this incident.
If neither you nor your workspace owner has heard from us, that means your workspace is not affected, and no action is needed right now.
For the workspaces impacted by the Fireworks AI incident (<1% of the Notion workspaces), we have contacted the workspace owners. Affected customers will be able to retrieve and review the affected data securely inside their workspace.
For the workspaces affected by the Fireworks AI incident, workspace owners can view the affected data by going to their workspace sidebar → ? → Security incident review. To view this data, use the desktop app or a web browser and make sure you’re on the latest version of Notion. This data is not accessible on mobile.
Workspace owners on Enterprise plans can access:
A CSV of your workspace’s data affected by the incident. Only workspace owners can see this data.
An annotated CSV of the same affected workspace data with additional metadata, such as the user associated with each chat transcript, to help you understand and run your own analysis of the impact. These added annotations and metadata were not exposed as part of the incident. Additional annotated fields are marked with
__metadataor__analysisrespectively. Only workspace owners can see this data.Note: These resources are only available if you have managed members for your workspace. Reach out to your account team if you have questions.
Workspace owners on all other plan types can access:
A page that includes a link they can share with affected members to review their own data.
For other workspace roles:
Workspace owners can provide a link to members so members can see their own affected data.
Once shared, the link will provide members with a CSV of only the member's own data affected by the incident.
We recommend that you treat this data as if it were exposed. If you or anyone on your team pasted sensitive information like passwords, API keys, or other credentials into Notion AI during this timeframe, we recommend rotating them right away.
FAQs
What is Fireworks and how did Notion use them?
What is Fireworks and how did Notion use them?
Fireworks AI is one of the most used global AI infrastructure platforms powering tens of thousands of customers and used by hundreds of thousands of developers.
As of November 3rd, we have disconnected our systems from Fireworks, deleted all data in the Fireworks system, and stopped sending all data and traffic to Fireworks. We have also halted all training runs.
We previously used Fireworks for classification jobs to help customers understand their own AI usage through a feature in Notion called Insights and as a general inference provider to serve open-weight models inside our product.
What does “unattributable” mean? Could the conversations still contain sensitive information?
What does “unattributable” mean? Could the conversations still contain sensitive information?
Following an investigation by the Notion security team, we have determined that <1% of Notion workspaces may have been affected by the Fireworks security incident. Some unattributable chat sessions with Notion AI may have been exposed.
"Unattributable" means the chats weren't labeled with who wrote them or which workspace they came from. The transcripts also did not contain tool call results (e.g., Notion page content, or external data pulled in by Notion AI.) Beyond what’s in the chat transcript itself, there’s no information tying the chat back to specific workspaces, users, or companies. No other data from within your workspace is affected.
As a precaution, we recommend that you treat this unattributable data as if it were exposed. If anyone on your team pasted sensitive information like passwords, API keys, or other credentials into Notion AI during this timeframe, we recommend rotating them right away.
How did Notion use Fireworks with the Learning and Early Access Program (LEAP)?
How did Notion use Fireworks with the Learning and Early Access Program (LEAP)?
Customers in the Learning and Early Access Program (LEAP) volunteer their data to help Notion test new AI technology. In the past, we used this volunteered data to experiment with training task-specific models on Fireworks.
Where can I learn more about Notion’s security practices?
Where can I learn more about Notion’s security practices?
Visit our Security page for an overview of Notion’s security and privacy practices. For more information on security policies, security audit reports, penetration test results, and additional resources, visit the Notion Trust Center.
