Obsidian is a local application with no hosting by default: notes live on the device, and nothing syncs while the app is closed. Its optional Sync add-on runs on four server regions, and only one of them, San Francisco, sits in the United States; the product carries no SOC 2, no HIPAA agreement, no FedRAMP, StateRAMP, or GovCloud status, citing only third-party audits on its own behalf. Notion, by contrast, names a single US region, US-West-2 in Oregon, and holds its own SOC 2 Type II and ISO certifications, with a HIPAA Business Associate Agreement included at no extra cost on Enterprise. Scope compared, criterion by criterion. Checked 7 September 2026.





Obsidian is a local Markdown application: notes are saved on the device, no account is required, and nothing syncs while the app is closed. There is no server-side state to certify in the first place, which puts every regulated-cloud question this comparison usually asks on a different footing than for any other tool in this set.
Obsidian’s optional Sync add-on offers four server regions: Europe in Frankfurt, Germany; North America in San Francisco; Asia in Singapore; and Oceania in Sydney, plus an automatic option. Of those four named regions, one sits in the United States, and Sync itself is a paid add-on rather than part of the free application.
Obsidian carries no SOC 2 certification, no HIPAA Business Associate Agreement, and no FedRAMP, StateRAMP, or GovCloud status; what it cites instead are third-party audits, not a certification held in its own name. Notion, on the same ground, holds its own SOC 2 Type II and the ISO 27001 family of certifications, crediting AWS only for physical security, with a HIPAA Business Associate Agreement included at no extra cost on Enterprise; FedRAMP, StateRAMP, and GovCloud are absent from Notion’s list too.
Obsidian’s local files stay intact on the device indefinitely, with or without a subscription; the Sync remote vault, version history included, is kept for one month after the subscription lapses, then deleted. Notion’s own retention runs differently: a refund within three days of a monthly invoice or thirty days of an annual one, trash kept for thirty days, and a deleted workspace gone for good.
Obsidian’s own tax page states it collects sales tax by country and postal code, on licenses, Sync, and Publish, though not on Credit or Catalyst, yet its Terms place all taxes on the customer regardless. The entity behind Obsidian, Dynalist Inc., is not American and operates under Ontario law. Notion’s own sales tax, by comparison, spans twenty-seven US jurisdictions, twenty-four states plus the District of Columbia, Puerto Rico, and Chicago, based on customer address.
Obsidian’s only payment path is self-service, through Stripe, PayPal, WeChat, or AliPay, with PayPal billed in Canadian dollars; there is no invoice, no purchase order, no net-30 term, no ACH option, and no W-9 anywhere. Even its optional commercial license, fifty dollars per user per year, grants no functional benefit and no access to Sync or Publish.
Can't find what you're looking for ? Contact us here
jordan@bulldozer-collective.comGet access to playbooks and feedback from those who are shaping the next wave of marketing and AI.