​
Overview

LowerPlane connects to Notion using an internal integration token with read-only access. Once connected, LowerPlane syncs your Notion workspace members so they appear in Access Reviews — helping you verify that only current employees have access to your workspace, and that offboarded employees have been removed.

​
What LowerPlane Collects

DataWhat LowerPlane Collects
Workspace membersName and email of each person in the workspace
Access statusWhether each member maps to a current employee (for offboarding)
LowerPlane only reads the member roster (GET /v1/users). It never reads your pages, databases, or content.

​
Prerequisites

You must be a workspace owner to create a connection.

​
Step 1: Create an Internal Connection

Notion manages API connections under Settings → Connections (also reachable via Developer tools → Connections).
  1. In Notion, open Settings → Connections
  2. Click + New connection
  3. Enter a name, for example:
lowerplane-access-review
  1. Under Installable in, select your workspace
  2. Set Auth type to Access token (this is an internal connection with a static token — not OAuth)
  3. Create the connection

​
Step 2: Enable the “Read user info (including email)” Capability

  1. Open the connection’s settings
  2. Under User Capabilities, select Read user info (including email)
  3. Save the changes
Without this capability, Notion returns member names but not emails — and LowerPlane needs emails to match members to your employee records for offboarding checks. The other options, Read user info (not including user’s email address) and No user information, leave emails blank.

​
Step 3: Copy the Integration Token

  1. Back on the Connections list, click the ••• menu next to your connection
  2. Choose Retrieve an internal API token (Notion also calls this the internal connection token)
  3. Copy the token (it starts with ntn_)
Important: Treat this secret like a password. Anyone with it can read the data allowed by the integration’s capabilities.

​
Step 4: Connect in LowerPlane

  1. Go to Integrations in LowerPlane
  2. Find Notion and click Connect
  3. Paste the Integration Token
  4. Click Connect
LowerPlane validates the token and starts the first sync automatically.

​
Automated Checks

When Notion is connected, LowerPlane automatically:
  • Includes Notion members in user access reviews for SOC 2 (CC6.1/CC6.2) and ISO 27001 (A.5.16/A.5.18)
  • Flags Notion accounts belonging to offboarded employees so access can be revoked
  • Confirms every account is traceable to a named individual

​
FAQ

Why don’t I see emails for some members? Notion only returns a member’s email when the integration’s User Capabilities are set to “Read user info (including email)”. Members without a readable email are matched by name where possible. Does LowerPlane read my Notion pages? No. LowerPlane only reads the workspace member list. It never accesses pages, databases, or content. Is MFA checked? No. Notion’s API does not expose per-user MFA status, so LowerPlane cannot verify it for Notion.