Snapshot 185118

Document
Security page
URL
https://www.granola.ai/security
Fetched
HTTP status
200
Content type
text/html; charset=utf-8
Fetch mode
static
Size
173637 bytes
SHA-256 (raw)
2019a0116f9aa8b5192b505d00b498920bec6e05fd6bd009079c7a7abd3b5f0a
SHA-256 (normalized text)
23d9737d75d59ce163dd62a8b3bb9109ba4c29a99a1d4c085807c6bbf52efa7a

Normalized text

Scripts and page chrome removed; this is what change detection compares.

Security, privacy, and how it all works
Your security and privacy are of utmost importance to us. Find the most important details below, followed by FAQs, and then links to all our terms and policies at the bottom of this page.
We encourage security vulnerability reports and maintain a public Vulnerability Disclosure Policy with reporting guidelines and procedures.
SOC 2
We've shown independent auditors that our security practices meet SOC 2 Type 2 standards
See our Trust page
GDPR
We're committed to GDPR compliance and have a Data Processing Agreement available upon request
Read our Privacy Policy
The basics
Granola is an app for Desktop and Mobile (iPhone and Android), a lot like Apple Notes or Notion. It works with Google Workspace or Microsoft login and integrates with your calendar.
You have to manually start Granola for a meeting (it won't auto-join or auto-record anything). Granola then accesses your microphone audio, and your meeting audio on your computer, and transcribes it. It does not add a bot to your video call.
Granola for Desktop works with any meeting platform. Zoom, Meet, Teams, you name it. Granola for Mobile is built for in-person meetings.
Granola uses best-in-class transcription providers (like Deepgram and Assembly) and AI providers (like OpenAI and Anthropic) to summarize your meeting.
Model training
We do not allow third parties (like OpenAI or Anthropic) to use your data to train their AI models.
Granola trains on your anonymized data so we can keep making Granola better. You can opt out of this in your Settings.
Enterprise users have model training turned off by default.
No stored recordings
Granola doesn't store the audio from meetings - it transcribes in real time on macOS/Windows, or after your meeting using temporarily cached audio on Mobile. It only stores the transcript and any notes you provide from a call.
You control who sees your notes
As a user, you control who sees your notes. Notes are private by default, until you choose to share them with others.
You can delete individual notes, or request deletion of all your data at any time.
Everything stored in industry standard, encrypted infrastructure
Notes are stored in our US-hosted AWS Virtual Private Cloud. They are encrypted at rest and in transit. They are backed up daily.
Granola is built and maintained by our top-tier engineering team, who've built scalable infrastructure for companies like Apple, Amazon, Google, and Meta.
We're here if you need us
If you have more questions, please reach out to our team.
Data Security
Granola implements multiple layers of security: All data is encrypted at rest, all communications use TLS encryption (HTTPS), we employ firewalls and virtual private cloud (VPC) configurations, and comprehensive audit logging is implemented across our infrastructure.
Granola stores some data locally on your device, such as your notes and meeting history, for faster access and offline viewing. For transcription and AI summarization, Granola uses secure cloud processing to deliver high-quality results while keeping the app fast and responsive.
We use multiple approaches for vulnerability management: Automated security scanning with Dependabot and Vanta, monthly vulnerability scans across our infrastructure, security code reviews for all internally developed software, and regular application of security patches and updates.
Granola conducts penetration testing on a regular basis. If you'd like to view our latest reports, please contact our sales team.
We achieved full SOC-2 Type 2 compliance in July 2025. You can visit our Trust page for more information.
You can email security@granola.so with details. We'll review it ASAP and get back to you. Thanks for helping keep Granola secure!
Yes, we enforce full disk encryption on all employee devices and deploy anti-virus/malware protection on all systems connected to our services.
Currently not. This is something we may consider as an enterprise feature in future, but currently a lot of the magic of Granola comes in the careful matching of prompts, context, and AI models which we get from retaining controls over this.
We may consider building this in future as an enterprise feature, but not at the moment.
Yes, Granola supports SSO. We work with Google Workspace login, Microsoft login, and Okta as well as several others. If you'd like to set up SSO for your organization, please get in touch with our sales team at sales@granola.so.
Data Storage & Processing
When you delete your account, all your data is permanently removed from our systems within 30 days.
Yes, you can request a full export of all your data at any time. This will include all your meeting notes, transcripts, and account information.
Yes, we back up all data daily to ensure your information is safe. These backups are encrypted and stored securely in our AWS infrastructure.
Notes & transcripts are stored indefinitely by default in Granola's secure cloud, unless deleted by the user. We do offer customer retention periods on our Enterprise plans. To learn more speak to Sales.
Granola's use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.
Terms & Policies
Terms
Platform Terms
The terms you agree to when using Granola
User Terms
Your terms as an individual in a Granola workspace
Application Terms
Your terms as a user of Granola's mobile app
Copyright Dispute Policy
How we handle copyright disputes
Privacy
Privacy Policy
How we protect your privacy and data
Data Processing Agreement
How we handle customer data
Reports
Google Workspace Session Logout Vulnerability
A post-mortem of a resolved vulnerability with Google Workspace session handling
Legacy Unmanaged Google Accounts Workspace Auto-Join
A post-mortem of a resolved vulnerability with unmanaged Google Workspace accounts
Vulnerability TRA-2025-07
A post-mortem of a resolved vulnerability in our iOS beta app
Need more company-wide controls?
Talk to us about Enterprise