dtwo Policy Store

Policies tagged "notion"

notion · ingress

Block Destructive and Export SQL on Notion Data Sources

Inspects Notion data-source query tool calls (notion-query-data-sources on the hosted server, query-data-source on the official local server) and denies any…

notionguard-warehouse-sqlingresssqlreadonlysoc2

notion · ingress

Constrain Notion Connected-Tool Search

Notion's hosted MCP server (notion-search) does not just search Notion pages — through Notion AI connectors it also searches connected Slack, Google Drive,…

notionconstrain-aggregatoringresssoc2

notion · ingress

Fence Notion Member Directory to Admin & IT

Denies calls to the Notion member-directory tool (notion-get-users, matched by the -get-users suffix) unless the caller's IdP groups include an admin or IT…

notionfence-sensitive-scopesaccess-controlpiiingresssoc2gdpr-ccpa

notion · ingress

Freeze Notion Full-Page Content Overwrites

Denies notion-update-page calls whose command argument is replace content — the one edge on Notion's hosted MCP server that overwrites a page's entire body…

notionfreeze-destructive-opsrecord-integrityingresssoc2

notion · egress

Notion: Redact PII from Read Responses

Scans the responses of the Notion hosted MCP server's content-returning read tools and rewrites personally identifiable information to fixed redaction tokens…

notionredact-piipiidlpredactionegresssoc2hipaagdpr-ccpa