Thanks for your interest the alpha of Bring Your Own Key (BYOK) for Notion AI. This guide covers what BYOK does today, how billing works during the alpha, and some important legal and compliance notes. Please share it with the admins and compliance stakeholders on your side who need it. Talk to your account team about access.

What BYOK does

BYOK lets your organization run some Notion AI features on your own model-provider account. Once an organization owner connects your OpenAI, Anthropic, and/or xAI API key, Notion Agent and Custom Agents in your enrolled workspaces uses a model from a connected provider, the primary model call runs on your key.

You'll see the usage in your provider dashboard, and your provider bills you for it directly — Notion AI credits are not consumed (details below).

Setting up

• An organization owner navigates to their Organization Console through Manage Organizations and then Security → Notion AI → Provider credentials.

  

  

  

• Paste an OpenAI key, an Anthropic key, or xAI — each provider is managed independently, and all can be active at once.

  

  

  

• To rotate a key, save a new one for the same provider. To stop using BYOK for a provider, remove its key — your workspaces return to Notion-managed AI for that provider’s models.

• After adding a key, you’ll be asked whether to restrict Notion Agent and Custom Agents across your workspaces to models from your BYOK provider. You can confirm or skip. If you choose to restrict models, you can enable other models again later from each workspace’s model settings.

How your keys are protected

• Keys are encrypted with app-level envelope encryption (AES-256-GCM with AWS KMS) before storage, decrypted only at the moment we call your provider, and never logged, cached, or displayed back in the UI.
• Adding, rotating, and removing keys is recorded in your organization's audit log.

What runs on your key

• On your key: the primary model calls behind Notion Agent and Custom Agent conversations.
• Not on your key: supporting infrastructure calls (safety guardrails such as prompt-injection scanning, agent trigger routing) and independent AI features such as AI Meeting Notes. During the Alpha, these stay on Notion-managed keys.

Model availability

• During the alpha, BYOK covers Notion Agent and Custom Agents only. When those agent experiences use your configured OpenAI or Anthropic key, the model calls are routed to your provider account. BYOK does not automatically apply to every Notion AI feature during the alpha.
• Available models depend on workspace settings. During BYOK setup, admins can restrict models to their BYOK provider or keep other models available. They can change this later in each workspace’s model settings.
• Auto uses a model from your connected BYOK providers whenever an eligible one is available. Only if none can be used, for example, because all are blocked by workspace settings or compliance requirements, may Auto fall back to a Notion-managed model. To guarantee use of your key, explicitly select a model from a provider whose key you’ve connected.

Billing and availability

• BYOK is free to use during the alpha. An agent conversation running on your key consumes zero Notion AI credits. Your only cost is what your provider bills you for the model usage itself.
  • Agents using models from providers that are not BYOK-enabled will still consume Notion credits.