Free Notion Workspace Security Check

First, 3 Quick Details

How many people use your Notion?

Count everyone with an account, you included. Don't count guests.

Your role

Your Notion plan

Optional. Not sure? Pick "Not sure".

Nothing in your Notion is accessed. Privacy policy.

Question 1 of 12

Identity and Access

Think of everyone who can log in to your Notion. How do they sign in?

Everyone has 2-step verification turned on, in Notion or in the company Google or Microsoft login they use for Notion. I have 2-step verification on, but I'm not sure about everyone else. Most of us sign in with a password or an email code only. I don't know.

Question 2 of 12

Identity and Access

Does everyone who opens your workspace use their own account, with the right type of access (staff as members, clients and freelancers as guests on specific pages)?

Yes. Everyone has their own account, staff are members, and outsiders are guests on only the pages they need. Own accounts, but some freelancers or clients are full members. Some people share one login. I don't know.

Question 3 of 12

Sharing and Data Exposure

Are any of your Notion pages open to the public, as a published site or with "Anyone on the web with link"?

Only pages we meant to make public, and we checked the full list in the last 3 months. Only pages we meant to make public, but we haven't checked in a while. Probably some old ones nobody has checked. I don't know.

Question 4 of 12

Sharing and Data Exposure

Do any pages hold passwords, API keys, bank or card details, ID scans, or client personal data?

No. Passwords and keys live in a password manager, and client personal data sits only on restricted pages. A few logins or client details, on pages only the right people can open. Yes, on pages the whole team, guests or connected tools can open. I don't know.

Question 5 of 12

Integrations and Third Parties

Think of the apps connected to your Notion (Zapier, Make, Slack, form or calendar tools). Which is closest?

We know every connection, each one has an owner, and we removed unused ones in the last 3 months. A few connections, probably all still used, never reviewed. Many, added by different people over time. I don't know.

Question 6 of 12

Integrations and Third Parties

Have AI tools been connected to your Notion (for example ChatGPT, Claude or AI agents)?

None, or only tools we approved, limited to the pages they need. Yes, I connected one, and it can reach most of the workspace. Yes, people connect their own AI tools and nobody tracks it. I don't know.

Question 7 of 12

People and Offboarding

When someone leaves (staff or contractor), what happens to their Notion access?

Removed on their last day with a checklist, and their pages are handed over first. Removed, but not always right away. Usually forgotten until someone notices. I don't know.

Question 8 of 12

People and Offboarding

When did someone last go through the full list of members and guests and remove who no longer needs access?

In the last 3 months, and it's on a schedule. In the last year. Never. I don't know.

Question 9 of 12

Governance and Admin

How many people are Workspace owners (full admin rights) in your Notion?

Exactly 2, chosen on purpose. Only 1 (usually me). 3 or more, or I'm not sure who. I don't know.

Question 10 of 12

Governance and Admin

When someone new joins your workspace, what can they open on day one?

Only the areas for their role. Finance, HR and client areas are closed off. Everything, but sensitive pages are view-only or locked. Everything, and they can edit or share it. I don't know.

Question 11 of 12

Resilience and Recovery

If a key page were deleted tomorrow, or the person who runs it left, how ready are you to get it back?

Ready. We know how long Trash and version history keep things on our plan, at least 2 people can restore our key pages, and none of them sit in one person's private pages. We know Trash and version history exist, but not how long they keep things or who can restore. We'd have to rebuild from memory or ask Notion support. I don't know.

Question 12 of 12

Resilience and Recovery

If an important page were deleted or overwritten today, could you get it back and see who did it?

Yes. We know how far back our plan goes and we've tested a restore. Probably, through Trash or version history, but we've never tried. I wouldn't know where to start. I don't know.

Where Should We Send Your Result?

Your result is ready. Add your details to see it and get a copy by email.

Your name

Work email

Your result is sent here.

Company

Shown on your result page.

Country

Nothing in your Notion is accessed. Privacy policy.

Self-check based on your answers. General guidance, not a formal audit.