Generation Digital

Notion

Notion integrates your workflow into a singular platform, uniting task lists, product roadmaps, and design repositories. Customize your workspace with an array of modular options, limited only by your imagination. Explore and join us in redefining norms as early adopters of this innovative solution.

Features

• Pages & Blocks
• Databases
• Templates
• Collaboration Tooling
• Platform Integrations
• Workspace Organization
• Drag-and-Drop Interface
• Mobile and Desktop Apps
• API support
• Planning

Benefits

• Enhanced Productivity
• Team Collaboration
• Customizability
• Integration Capability
• Information Organization
• Flexibility
• User-Friendly Interface
• Remote Work Friendly
• Improved Security
• Scalability

£7 to £22.50 a user a month

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at gcloud@gend.co. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

179854496113748

Contact

Thomas Sutton
0203 6379 776
gcloud@gend.co

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: Notion is a cloud only SaaS solution. An on-premise deployment is not possible. Notion is not supported on: Internet Explorer 10 Internet Explorer 11 Opera Developer or Beta versions of supported browsers
• System requirements:
  • Google Chrome
  • Mozilla Firefox
  • Safari
  • Microsoft Edge

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: We provide expedited support and aim to respond quickly to questions. Available during business hours Monday to Friday, we will respond to enquiries within one business day or twenty four hours from the date of the receiving the inquiry.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: Web chat
• Web chat support availability: 24 hours, 7 days a week
• Web chat support accessibility standard: WCAG 2.1 AA or EN 301 549
• Web chat accessibility testing: N/a
• Onsite support: Yes, at extra cost
• Support levels: We provide the following support levels: Onboarding plans: Work hand-in-hand with an expert on a custom onboarding plan, timeline, and kickoff. Customer success managers (CSMs): A dedicated partner familiar with your goals, helping you hit them with coaching, calls, and training. Professional services: Additional consulting sessions for on-site training, digital transformations, custom integrations, and more. Custom resources: From onboarding to feature tips, we can provide the right content at the right time to help answer your team’s questions and needs.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: We provide Online Training, Onsite Training, User Guides, etc. To help your team start using Notion, we’ve analyzed what the most successful teams in Notion have in common, channeled the expertise of our Customer Success Managers, and incorporated proven change management strategies. Notion Help: Get how-to help and step-by-step instructions for specific features in Help. Forum: Ask questions, get answers, and join our large community of Notion experts. Notion Guide: Learn how to onboard your team and use Asana to its full potential with quick and easy tips. Notion Use Cases: Learn how other teams like yours use Notion and how to build out projects specific to your team. Notion Developer’s Guide: Learn how to customize the Notion experience, leverage your data with the Notion API, and join our developer community.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: You can export your own data, per project to the text-based file formats JSON or CSV, the latter of which can be viewed in a spreadsheet application like Microsoft Excel or Google Sheets. This can be done via the admin console or by contacting support.
• End-of-contract process: At the end of the contract, licences can be renewed or terminated.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
  • MacOS
  • Windows
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: https://www.notion.so/mobile
• Service interface: No
• User support accessibility: WCAG 2.1 AA or EN 301 549
• API: Yes
• What users can and can't do using the API: https://developers.notion.com/
• API documentation: Yes
• API documentation formats:
  • HTML
  • Other
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Notion offers a wide range of customization options that allow users to tailor the tool to fit their specific needs, whether for personal use, team collaboration, or enterprise management.; ; Templates: Notion provides a variety of templates for different use cases, such as project management, note-taking, task lists, databases, and more.; Pages and Subpages: You can create pages and nested subpages to organize information hierarchically. ; Content Blocks: Notion's block system is highly flexible, allowing you to add various types of content, such as text, to-do lists, images, videos, code blocks, and embeds from other services. ; Databases: Custom databases can be created with properties of various types, such as text, number, date, select, multi-select, person, files, and links. Databases can be viewed as tables, boards (Kanban style), lists, calendars, or galleries.; Integration with Other Tools: Notion supports integrations with tools allowing you to streamline.; Widgets and Embedded Content: Embed content from other services directly into your pages.; Custom Views: Highlight different aspects of your data, such as a filtered view for urgent tasks or a sorted view for upcoming deadlines.; Custom Permissions: Set up detailed access controls for different team members and guests.

Scaling

• Independence of resources: To this day, Notion maintains its commitment to nurturing its community, a strategy that has scaled them to a user base of over 30 million. Within Notion itself, they've created a dedicated page to showcase their community. Here, they highlight key Notion communities and extend invitations to various community events.

Analytics

• Service usage metrics: Yes
• Metrics types: Notion offers several ways to view and manage usage metrics:; ; Dashboard: Displays real-time project and task updates.; Activity Log: Tracks changes made within the workspace.; Admin Tools: Provides usage statistics and user engagement analytics for team or enterprise accounts.; Analytics Integration: Allows connection to external analytics tools like Google Analytics.; Reports and Exports: Enables administrators to generate detailed usage reports.; API Access: Facilitates custom tracking and analysis through tailored solutions.; These tools are designed to enhance productivity for both individual users and teams, helping them optimize their use of Notion.
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

• Supplier type: Reseller providing extra support
• Organisation whose services are being resold: Notion (Generation Digital is an official partner providing additional services)

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Supplier-defined controls
• Penetration testing frequency: At least once a year
• Penetration testing approach: In-house
• Protecting data at rest:
  • Physical access control, complying with another standard
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Data sanitisation type: Explicit overwriting of storage before reallocation
• Equipment disposal approach: In-house destruction process

Data importing and exporting

• Data export approach: To export data from Notion, follow these steps:; ; Open Notion and navigate to the workspace or page you want to export.; Click on the "..." (more options) button in the upper-right corner of the page.; Select "Export" from the dropdown menu.; Choose the format for your export. Options typically include Markdown, CSV, PDF, and HTML.; Decide if you want to include subpages by checking the relevant box.; Click on "Export" to begin downloading your data.; This process allows you to save your Notion content externally in various formats for backup or use in other applications.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • PDF
  • HTML
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • PDF
  • HTML

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • Legacy SSL and TLS (under version 1.2)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • Legacy SSL and TLS (under version 1.2)

Availability and resilience

• Guaranteed availability: Customer’s sole and exclusive remedy, and Notion’s entire liability, in connection with the failure to meet the Availability requirements (“Downtime”) is to receive a 5% credit of the Subscription Fees for each period of 30 or more consecutive minutes of Downtime provided that (1) the Downtime lasts longer than one hour, and (2) no more than one such credit will accrue per day. Downtime shall begin to accrue as soon as Customer recognizes that Downtime is taking place and continues until the Availability of the Services is restored. In order to receive credit, Customer must notify Notion in writing within 72 hours from the time of Downtime, and failure to provide such notice will forfeit the right to receive credit. Such credit may not be redeemed for cash. The credits may not cumulatively be applied to exceed one week of Subscription Fees in any given month. Notion will only apply a credit to the month in which the incident occurred.
• Approach to resilience: Available upon request
• Outage reporting: https://status.notion.so/; ; Customer must notify Notion in writing within 72 hours from the time of Downtime, and failure to provide such notice will forfeit the right to receive credit.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
  • Username or password
• Access restrictions in management interfaces and support channels: On a quarterly basis, management reviews user access to in-scope systems for continued appropriateness and removes any access that is no longer required. Upon termination of employees, access is removed.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Bay Mountain Security
• ISO/IEC 27001 accreditation date: 30/11/2023
• What the ISO/IEC 27001 doesn’t cover: N/a
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: Yes
• Any other security certifications:
  • HIPAA
  • AICPA SOC2
  • AICPA SOC3
  • ISO 27018
  • ISO 27017
  • ISO 27701

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: SOC 2; ; ISO 27001; ; SOC 3; ; HIPAA; ISO 27701; ; ISO 27018

Operational security

• Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Configuration and change management approach: Version Control: Use of version control systems to keep track of all changes made to the codebase and configuration files.; Automated Testing: They are extensively tested in development and staging environments using automated testing tools to identify and rectify potential issues.; Continuous Integration/Continuous Deployment (CI/CD): Automated deployment pipelines that integrate code changes after they pass tests.; Monitoring and Alerts: Continuous monitoring of the system's performance and health to detect any issues caused by new changes. ; Audit Trails: Maintaining detailed logs of who made what changes and when. ; User Feedback: Incorporating feedback mechanisms for users to report issues.; Security Assessments:
• Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Vulnerability management approach: Notion maintains an ongoing risk management process to proactively identify vulnerabilities within systems and assess new and emerging threats to operations. A vulnerability scanning process both for external and internal systems exists in the production environment. Security team performs scans at least quarterly and remediates vulnerabilities based on rating. Vulnerability scans are also run after any significant change to the production environment as determined by the Head of Security. We work with security professionals to test code for common exploits and use network scanning tools against our production servers. Penetration testing is performed annually. Vulnerabilities are remediated and re-tested.
• Protective monitoring type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Protective monitoring approach: Notion uses specialist monitoring services. Notion monitors the capacity utilization of physical and computing infrastructure both internally and for customers to ensure service delivery matches service level agreements. We have automated security scans on our network and applications. A monitoring script runs weekly to validate code changes were properly reviewed. Notion maintains an Incident Response Plan designed to establish a reasonable and consistent response to security incidents and suspected security incidents involving the accidental or unlawful destruction, loss, theft, alteration, unauthorized disclosure of, or access to, proprietary data or personal data transmitted, or stored.
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: Notion maintains an Incident Response Plan designed to establish a reasonable and consistent response to security incidents and suspected security incidents involving the accidental or unlawful destruction, loss, theft, alteration, unauthorised disclosure of, or access to, proprietary data or personal data transmitted, stored, or otherwise processed by Notion. These incident response procedures detail how Notion Security triages, investigates, remediates, and reports on security incidents. Notion has contracted with third party digital forensics and incident response firms in the case of a data breach.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: Yes
• Connected networks:
  • Public Services Network (PSN)
  • Police National Network (PNN)
  • NHS Network (N3)
  • Joint Academic Network (JANET)
  • Health and Social Care Network (HSCN)
  • Other
• Other public sector networks: UKSBS

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  We are committed to fighting climate change and aim to be carbon neutral

  Tackling economic inequality

  Tackling economic inequality We are committed to tackling economic inequality

  Equal opportunity

  Equal opportunity We are committed to equal opportunity for all

  Wellbeing

  At Generation Digital we are fully committed to promoting Mental Health and wellbeing within our offices and during the delivery of our services

Pricing

• Price: £7 to £22.50 a user a month
• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: 30 day free trial available
• Link to free trial: https://www.gend.co/getintouch

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at gcloud@gend.co. Tell them what format you need. It will help if you say what assistive technology you use.