diff --git a/src/documents/views.py b/src/documents/views.py
index a91ad8594..f6bec1f0d 100644
--- a/src/documents/views.py
+++ b/src/documents/views.py
@@ -1099,7 +1099,7 @@ class DocumentViewSet(
             ):
                 return HttpResponseForbidden("Insufficient permissions to delete notes")
 
-            note = Note.objects.get(id=int(request.GET.get("id")))
+            note = Note.objects.get(id=int(request.GET.get("id")), document=doc)
             if settings.AUDIT_LOG_ENABLED:
                 LogEntry.objects.log_create(
                     instance=doc,