Notion agent Memories are private to each user. Decide what they may keep

Notion Agent Memories switch on by default for each person in a workspace once the owner allows them, and every person’s Memories database is private to that person. For a Canadian firm that keeps client files in Notion, that pairing decides the call: leave Notion agent memories off at the workspace level until you have a written rule for what an agent may keep, because the help centre gives the owner one switch and describes no way to see what gets saved.

Key points

How do Notion agent memories get written?

Memories are notes an agent saves during your chats with it: your role, active projects, the people you work with often, pages you open a lot, and corrections you give it. Notion says it doesn’t yet mine your other pages, comments or app connections for them. You can open, edit or delete every entry.

The part worth slowing down on is MCP, the Model Context Protocol. Think of it as a standard plug that lets an AI app outside Notion act inside your workspace with your permissions. Notion’s help page says an agent connected that way can create and read your Memories directly, so a Claude Code session on Tuesday and a ChatGPT chat on Thursday can add to one shared file about you. Notion’s MCP help page sells this as “one shared brain” for every agent you connect. That portability is a fair pitch if you switch tools often.

There is a second detail in the developer guide that changes who owns the habit. Memory through MCP runs on user-backed connections and isn’t available through workspace-owned connections. In plain terms, the memory belongs to a person’s login. A company integration set up by IT doesn’t get it.

Who holds each switch

Three roles can change how Notion agent memories behave, and only one of them can see the contents. The owner decides whether the feature exists in the workspace. Each person decides whether their own agent uses it. Whoever can edit a Custom Agent decides whether that agent learns over time.

Privacy for the individual is a sensible design. It also means the owner of a small accounting or design firm has no documented way to check whether an agent saved a client’s name next to a project note. The owner’s choice is binary, so make it on purpose.

Where does a Canadian workspace’s data sit?

Outside Canada. Notion’s data residency page lists storage regions in Oregon, Frankfurt, Tokyo and Seoul, with backups in Ohio, Ireland, Osaka and Seoul. A workspace stays hosted in the United States until Notion confirms a migration, and the page ties migration requests to the Enterprise plan.

That alone doesn’t stop a Canadian business from using Notion. The privacy commissioner’s cross-border processing guidance is clear that PIPEDA doesn’t prohibit sending personal information abroad for processing, and that the business stays accountable for it in the processor’s hands. What changes with agent Memories is the inventory. Your privacy notice and your Notion contract were written about pages people chose to create. Memories are notes an agent chose to keep. If your notice tells clients their details may be stored outside Canada, check that it was meant to cover that second kind of note too.

We would treat this as a records question for any firm already using Notion with client work. It echoes what we found when Canadian hosting stopped short of the AI features at three Calgary startups.

Notion gives two answers on plans

The developer guide puts MCP memory on “all plans” for user-backed connections. The help centre ties Memories to workspaces where Notion AI is switched on, and lists Notion AI under the Business and Enterprise plans. Both lines may be true for different paths into the same database. A buyer shouldn’t have to guess, so ask your Notion contact which sentence covers your seats, and file the reply with the contract.

What we could not confirm

We have not run Notion Agent or the MCP memory tools ourselves. This column is a buyer’s reading of Notion’s own help and developer pages as of November 5, 2026. Those pages don’t say whether Enterprise audit logs or workspace exports include other people’s Memories, how long entries last, or what happens to a departing employee’s Memories database. If Notion publishes an admin page that covers those three points, or adds a Canadian storage region, the case for leaving the switch off gets much weaker. Our earlier read on how a staff member’s plan decides how long Claude chats stay raised the same retention gap with a different tool.

Agents that act for staff need their own limits, and our case for giving third-party AI agents a key of their own still holds. Memory is the slower version of that problem. We keep our other AI tool reviews for Canadian teams on one page.

Five working days, one test Memories database

Run this before anyone turns Memories on where client files live. It takes one week and two people, and it shows what Notion agent memories actually hold after a normal working week.

1. Set up a separate trial workspace on the same plan as your main one, with Memories on. Load it with ten made-up client records shaped like your real ones: names, phone numbers, a file number, a short note.
2. Pick two staff who use Notion daily. Each connects one outside tool (Claude or ChatGPT) through Notion’s MCP connection, then does ten ordinary tasks a day against the fake records.
3. On Friday, each person opens Settings, then Notion AI, then Memory, and copies out every entry in their Memories database.
4. Count three things: total entries, entries that name a person outside the firm, and entries holding a phone number, file number or other client detail.

Pass mark: zero entries in the last two counts across both people. One hit is enough to keep the workspace switch off for client work and write a rule about what agents may save. A labelled illustration of how that plays out: a Kelowna bookkeeping office that finds its agent saved “prefers calls from Dana at the Lakeview account” has learned more in a week than any vendor demo would tell it. If both people pass, switch Memories on for client work and repeat the Friday read every quarter.

FAQ

Notion details come from its help centre and developer guide, and the privacy point from the commissioner’s cross-border guidance, all read November 5, 2026. No hands-on test of Memories was run for this column.