Granola

grano.la

Granola declares 17 subprocessors in its subprocessor list, which we last checked on Nov 11, 2026 (evidence). They include Amazon Web Services, Google Cloud and OpenAI. The list last changed on Oct 28, 2026: 0 added, 0 removed, 1 changed. 8 tracked vendors name Granola as a subprocessor, including Upstash, Speechmatics and Expo.

Subprocessors CSV · Atom DORA draft CSV what's this? · 

17 third parties.

NamePurposeLocationListed since
Amazon Web Services
Infrastructure & Hosting; Purpose of processing – Cloud hosting, data storage, AI and compute Hosting location – United States Entity address – 38 Avenue John F. Kennedy, L-1855 Luxembourg Compliance measures – [AWS Compliance Programs](
United States
Anthropic, PBC AI
AI Processing & Transcription; Purpose of processing – Provision of AI model infrastructure and processing of user inputs/outputs to enable platform functionality. Hosting location – United States Entity address – 548 Market St, PMB 90375, San Francisco, CA 94104, USA Compliance measures – [Anthropic Trust Center](
United States
AssemblyAI, Inc. AI
AI Processing & Transcription; Purpose of processing – Cloud provider for transcription. Hosting location – United States Entity address – 2261 Market Street #4577, San Francisco, CA 94114, USA Compliance measures – [AssemblyAI Security](
United States
Braintrust
AI Processing & Transcription; Purpose of processing – Evaluate and test AI performance Hosting location – United States Entity address – 548 Market St, PMB 96611, San Francisco, CA 94104, USA Compliance measures – [Braintrust Security & Compliance](
United States
ClickHouse
Infrastructure & Hosting; Purpose of processing – Storage of usage and event/telemetry data Hosting location – United States Entity address – 650 Castro St, Ste 120, Mountain View, CA 94041, USA Compliance measures – [Clickhouse Security & Compliance](
United States
Deepgram AI
AI Processing & Transcription; Purpose of processing – Cloud provider for transcription. Hosting location – United States Entity address – 548 Market St, Suite 25104, San Francisco, CA 94104, USA Compliance measures – [Deepgram Security](
United States
Fireworks.ai AI
AI Processing & Transcription; Purpose of processing – Provision of AI model infrastructure and processing of user inputs/outputs to enable platform functionality. Hosting location – United States Entity address – 2635 Broadway St, Redwood City, CA 94063, USA Compliance measures – [Fireworks AI Trust Center](
United States
Google Cloud
AI Processing & Transcription; Purpose of processing – Cloud hosting, AI and compute Hosting location – United States Entity address – 70 Sir John Rogerson's Quay, Dublin 2, Ireland Compliance measures – [Google Cloud Compliance Resources](
United States
Knock
Operations & Support; Purpose of processing – Notification orchestration and delivery (in-app, email, and push messaging). Hosting location – United States Entity address – 175 Varick St, #413, New York, NY 10014, USA Compliance measures – [Knock Security](
United States
OpenAI AI
AI Processing & Transcription; Purpose of processing – Provision of AI model infrastructure and processing of user inputs/outputs to enable platform functionality. Hosting location – United States Entity address – 3180 18th Street, San Francisco, CA 94110, USA Compliance measures – [OpenAI Compliance](
United States
Parallel Web Systems Inc.
AI Processing & Transcription; Purpose of processing – Web search and data enrichment to retrieve external context for AI features. Hosting location – United States Entity address – 2261 Market St, San Francisco, CA 94114, USA Compliance measures – [Parallel AI Trust Center](
United States
Plain
Operations & Support; Purpose of processing – Customer support platform. Hosting location – United Kingdom Entity address – 3rd Floor 1 Ashley Road Altrincham WA14 2DT United Kingdom Compliance measures – [Plain Trust Center](
United Kingdom
Stripe, Inc.
Operations & Support; Purpose of processing – Payment processing, subscription management, and billing. Hosting location – United States Entity address – 354 Oyster Point Blvd, South San Francisco, CA 94080, USA Compliance measures – [Stripe Security](
United States
Turbopuffer
Infrastructure & Hosting; Purpose of processing – Vector search and embeddings storage to enable semantic search and retrieval. Hosting location – United States Entity address – 10-1338 Wellington St. W, Ottawa, ON, Canada K1Y 3B7 Compliance measures – [Turbopuffer Security & Compliance](
United States
Twilio
Operations & Support; Purpose of processing – Telephony connectivity for the in-product calling feature. Hosting location – United States Entity address – 101 Spear St, 5th Floor, San Francisco, CA 94105, USA Compliance measures – [Twilio Compliance](
United States
TypeSafe AI
AI Processing & Transcription; Purpose of processing – Provision of AI model infrastructure and processing of user inputs/outputs to enable platform functionality. Hosting location – United States Entity address – 255 California Street, Suite 1300, San Francisco, CA 94117, United States Compliance measures – [Type Safe Trust Center](
United States
xAI AI
AI Processing & Transcription; Purpose of processing – Provision of AI model infrastructure and processing of user inputs/outputs to enable platform functionality. Hosting location – United States Entity address – 1450 Page Mill Rd., Palo Alto, CA 94304 USA Compliance measures – [X AI Security](
United States

Web TechnologiesCSV · Atom

Granola's homepage made 170 requests to 18 domains, and 10 services controlled by another company.

Analytics (5): Google Cloud, Amplitude, LinkedIn, Meta; usually detected as Analytics: Plausible AnalyticsAdvertising (3): Microsoft, OpenAI, PodscribeCookie compliance (1): iubendaOther (1): Surveys: Tally

10 third parties by category: Analytics 5Advertising 3Cookie compliance 1Other 1

Third parties 10 · 46 requests
iubenda iubenda 10% of the page's requests 17
Google Cloudsubprocessor Google Analytics Google Tag Manager 4% of the page's requests 6
Amplitude Amplitude 3% of the page's requests 5
Microsoft Microsoft Advertising 2% of the page's requests 4
LinkedIn Linkedin Insight Tag 2% of the page's requests 3
Meta Facebook Pixel 2.9.435 2% of the page's requests 3
OpenAIsubprocessor ChatGPT Ads Measurement Pixel 2% of the page's requests 3
Podscribe Podscribe 2% of the page's requests 3
Plausible Analytics plausible.io <1% of the page's requests 1
Tally Tally <1% of the page's requests 1
First party 1 · 124 requests
Granola Framer Motion GSAP HSTS Lucide Next.js 15.5.28 Next.js App Router Open Graph PWA Plausible Priority Hints React Sentry Vercel Vercel Analytics Vercel Speed Insights 1.2.0 Webpack core-js 3.32.2 73% of the page's requests 124

5 tracked companies loaded by the homepage are not in Granola's subprocessor list. A website can use a service without it processing customer data.

Subprocessor of (8)CSV · Atom

8 companies
  • Alation alation.com AI Notepad & Meeting Productivity
  • CallHippo callhippo.com Meeting Recorder
  • Climatiq climatiq.io Automated meeting note taking; Collaboration
  • Expo expo.dev Meeting transcription and note-taking
  • Ready ready.net AI meeting notes; Collaboration
  • Speechmatics speechmatics.com AI Assistant
  • Trigger.dev trigger.dev AI-powered note-taking service provider
  • Upstash upstash.com

ComplianceCSV · Atom

Certified
Says it complies with

Certifications as Granola's trust center lists them; reports are usually shared on request (evidence)

Service statusCSV · Atom

Aug 14: no incident reportedAug 15: no incident reportedAug 16: 1 incident (1 major)Aug 17: no incident reportedAug 18: no incident reportedAug 19: no incident reportedAug 20: no incident reportedAug 21: no incident reportedAug 22: no incident reportedAug 23: no incident reportedAug 24: no incident reportedAug 25: no incident reportedAug 26: no incident reportedAug 27: no incident reportedAug 28: no incident reportedAug 29: no incident reportedAug 30: no incident reportedAug 31: no incident reportedSep 1: no incident reportedSep 2: no incident reportedSep 3: no incident reportedSep 4: 1 incident (1 major)Sep 5: no incident reportedSep 6: no incident reportedSep 7: no incident reportedSep 8: no incident reportedSep 9: no incident reportedSep 10: no incident reportedSep 11: no incident reportedSep 12: no incident reportedSep 13: no incident reportedSep 14: no incident reportedSep 15: no incident reportedSep 16: no incident reportedSep 17: no incident reportedSep 18: 1 incident (1 no impact stated)Sep 19: no incident reportedSep 20: no incident reportedSep 21: no incident reportedSep 22: no incident reportedSep 23: no incident reportedSep 24: no incident reportedSep 25: no incident reportedSep 26: no incident reportedSep 27: no incident reportedSep 28: no incident reportedSep 29: no incident reportedSep 30: no incident reportedOct 1: no incident reportedOct 2: no incident reportedOct 3: no incident reportedOct 4: no incident reportedOct 5: no incident reportedOct 6: no incident reportedOct 7: no incident reportedOct 8: 2 incidents (2 major)Oct 9: no incident reportedOct 10: no incident reportedOct 11: no incident reportedOct 12: no incident reportedOct 13: no incident reportedOct 14: no incident reportedOct 15: no incident reportedOct 16: no incident reportedOct 17: no incident reportedOct 18: no incident reportedOct 19: no incident reportedOct 20: no incident reportedOct 21: 1 incident (1 major)Oct 22: no incident reportedOct 23: no incident reportedOct 24: no incident reportedOct 25: no incident reportedOct 26: no incident reportedOct 27: no incident reportedOct 28: 1 incident (1 no impact stated)Oct 29: 1 incident (1 major)Oct 30: no incident reportedOct 31: no incident reportedNov 1: no incident reportedNov 2: no incident reportedNov 3: no incident reportedNov 4: no incident reportedNov 5: no incident reportedNov 6: no incident reportedNov 7: no incident reportedNov 8: no incident reportedNov 9: no incident reportedNov 10: no incident reportedNov 11: no incident reported

90 days agotoday

  • 8 incidents in 90 days
  • 6 major or critical
  • 59 min typical time to resolve
  • 16 h 3 min longest major
BeganIncidentImpactLasted
Phone calls on Granola mobile apps are not workingmajor11 min
Granola app services downno impact stated1 h 38 min
Desktop app transcription and other functions failing for some usersmajor16 h 3 min
Granola MCP not connecting for Claude Code usersmajor59 min
Notes failing to load in Granola desktop appmajor25 min
Third party service experiencing issuesno impact stated11 min
Granola app services downmajor1 h 56 min
AI features in Granola are downmajor45 min

Incidents per month

0 3 6 Dec 2025: 1 incident (1 major) · typical time to resolve 1 h 59 min Jan 2026: 5 incidents (1 critical, 2 major, 2 minor) · typical time to resolve 1 h 20 min Feb 2026: 1 incident (1 major) · typical time to resolve 58 min Mar 2026: 4 incidents (4 major) · typical time to resolve 5 h 7 min Apr 2026: 1 incident (1 minor) · typical time to resolve 3 h 45 min May 2026: 0 incidents Jun 2026: 3 incidents (2 major, 1 minor) · typical time to resolve 2 h 24 min Jul 2026: 1 incident (1 major) · typical time to resolve 2 h 35 min Aug 2026: 3 incidents (1 critical, 2 major) · typical time to resolve 1 h 24 min Sep 2026: 2 incidents (1 major, 1 no impact stated) · typical time to resolve 1 h 56 min Oct 2026: 5 incidents (4 major, 1 no impact stated) · typical time to resolve 59 min Nov 2026: 0 incidents Dec 2025Jan 2026Feb Mar Apr May Jun Jul Aug Sep Oct Nov

critical major minor no impact stated

As Granola's status page reports its own incidents (scheduled maintenance left out), read every few hours since (evidence)

Incidents reported by Granola's subprocessorsCSV · Atom

344 reported incidents in the last 30 days, by 12 of the vendors Granola lists as subprocessors.

A subprocessor list names a company, not the service an incident touched. This does not show that Granola was involved.

DateCompanyIncidentImpactLasted
ClickHouseProvisioning and scaling operations may take longer in AWS ap-northeast-1 Tokyo minorongoing
TwilioSMS Delivery Failures from Twilio to Turkcell Turkey minor3 h 54 min
FireworksService Degradation for GLM 5.3 minor24 min
FireworksService Degradation for DeepSeek V4.1 Flash 1017 minor1 h 25 min
TwilioRetroactive Incident Impacting Twilio Usage APIs no impact stated1 min
AnthropicElevated errors on Fable 52 and Mythos 52 no impact stated1 min
TwilioIssue resolved minor1 h 43 min
TwilioSMS Delivery Receipt Delays from Twilio Phone Numbers to Movistar Venezuela minor3 h 26 min
FireworksService Degradation for Kimi K3 minorongoing
FireworksService Degradation for Kimi K3 US minor1 h 5 min
TwilioGateway API (Lookup API) Failure Increase on Verizon in United States minor10 h 23 min
OpenAIIncorrect cost data in Costs API exports no impact stated2 h 20 min
DeepgramFlux TTS high latency and websocket disconnects major9 min
OpenAIElevated Errors On API minor42 min
PlainHelp Center errors no impact stated—
TwilioWhatsApp Business API Message Send Failures minor16 h 29 min
OpenAIElevated ChatGPT Conversation Errors minor52 min
TwilioVoice Call Failures from a Subset of Twilio Phone Numbers to Chile minor19 h 20 min
TwilioVoice Call Audio Quality Degradation, Silent and One-Way Audio between Twilio and Multiple Networks in United Kingdom minor5 h 18 min
TwilioSMS Delivery Delays and Failures from a Subset of Twilio Alphanumeric Sender IDs and Long Codes to Multiple Networks in Italy minor3 h 14 min
TwilioSMS Delivery Delays and Failures from Twilio to Spusu United Kingdom minor3 h 26 min
TwilioSMS Delivery Receipt Delays from Twilio to Bouygues Telecom France minor13 h 31 min
PlainIntermittent API errors on write actions minor2 h 54 min
TwilioSMS Delivery Failures from Network Subscribers in Germany to a Subset of Twilio Long Codes minor8 h 40 min
TwilioSMS Delivery Failures from Twilio to ETL Laos minor16 h 8 min

And 319 more. All of them: CSV · Who is around them.

ChangesCSV · Atom

See the list as we read it on any date: Time machine

  1. Changed subprocessor: TypeSafe AI locations: Engineering → United States; purpose: AI Processing & Transcription, Purpose of processing – Provision of AI model infrastructure and processing of user inputs/outputs to enable platform functionality. Hosting location – United States Entity address – 255 California Street, Suite … evidence list before and after
  2. Added certification: HIPAA evidence
Rating badge for Granola's site

Granola transparency rating

It updates with the rating.

<a href="https://thirdpartyindex.com/vendors/granola"><img src="https://thirdpartyindex.com/badge/granola.svg" alt="Granola transparency rating on Third Party Index" height="20"></a>
[![Granola transparency rating on Third Party Index](https://thirdpartyindex.com/badge/granola.svg)](https://thirdpartyindex.com/vendors/granola)