Third Party Index

Granola

grano.la

Transparency

Strong

Breakdown
Subprocessor list30 / 30
Processing locations8 / 8
Purposes7 / 7
Data processing addendum12 / 12
Trust centerunreachable0 / 8
Privacy policy6 / 6
security.txt6 / 6
Security page5 / 5
Status page5 / 5
Vulnerability disclosure5 / 5
Pages still reachablesome unreachable this week0 / 8
Total84 / 100

Only documents we can retrieve count: a page behind a login or a broken link scores nothing.

Badge

Granola transparency rating

For Granola's own site; it updates with the rating.

<a href="https://thirdpartyindex.com/vendors/granola"><img src="https://thirdpartyindex.com/badge/granola.svg" alt="Granola transparency rating on Third Party Index" height="20"></a>
[![Granola transparency rating on Third Party Index](https://thirdpartyindex.com/badge/granola.svg)](https://thirdpartyindex.com/vendors/granola)

Documents

DocumentVerifiedChangedEvidence
Trust center vanta failingsnapshot
Subprocessor list vanta snapshot
Data processing addendum snapshot
Privacy policy snapshot
Terms snapshot
Security page snapshot
security.txt snapshot
Status page incident.io snapshot
Security advisories snapshot

Subprocessors

16 third parties. CSV · Atom

NamePurposeLocationListed since
Amazon Web Services **Purpose of processing** – Cloud hosting, data storage, AI and compute **Hosting location** – United States **Entity address** – 38 Avenue John F. Kennedy, L-1855 Luxembourg **Compliance measures** – [AWS Compliance Programs](https://aws.amazon.com/compliance/programs/); Infrastructure & HostingUnited States
Anthropic, PBC **Purpose of processing** – Provision of AI model infrastructure and processing of user inputs/outputs to enable platform functionality. **Hosting location** – United States **Entity address** – 548 Market St, PMB 90375, San Francisco, CA 94104, USA **Compliance measures** – [Anthropic Trust Center](https://trust.anthropic.com/); AI Processing & TranscriptionUnited States
AssemblyAI, Inc. **Purpose of processing** – Cloud provider for transcription. **Hosting location** – United States **Entity address** – 2261 Market Street #4577, San Francisco, CA 94114, USA **Compliance measures** – [AssemblyAI Security](https://security.assembly.com/); AI Processing & TranscriptionUnited States
Braintrust **Purpose of processing** – Evaluate and test AI performance **Hosting location** – United States **Entity address** – 548 Market St, PMB 96611, San Francisco, CA 94104, USA **Compliance measures** – [Braintrust Security & Compliance](https://www.braintrust.dev/docs/security); AI Processing & TranscriptionUnited States
ClickHouse **Purpose of processing** – Storage of usage and event/telemetry data **Hosting location** – United States **Entity address** – 650 Castro St, Ste 120, Mountain View, CA 94041, USA **Compliance measures** – [Clickhouse Security & Compliance](https://trust.clickhouse.com/); Infrastructure & HostingUnited States
Deepgram **Purpose of processing** – Cloud provider for transcription. **Hosting location** – United States **Entity address** – 548 Market St, Suite 25104, San Francisco, CA 94104, USA **Compliance measures** – [Deepgram Security](https://deepgram.com/data-security); AI Processing & TranscriptionUnited States
Fireworks.ai **Purpose of processing** – Provision of AI model infrastructure and processing of user inputs/outputs to enable platform functionality. **Hosting location** – United States **Entity address** – 2635 Broadway St, Redwood City, CA 94063, USA **Compliance measures** – [Fireworks AI Trust Center](https://trust.fireworks.ai/); AI Processing & TranscriptionUnited States
Google Cloud **Purpose of processing** – Cloud hosting, AI and compute **Hosting location** – United States **Entity address** – 70 Sir John Rogerson's Quay, Dublin 2, Ireland **Compliance measures** – [Google Cloud Compliance Resources](https://cloud.google.com/compliance); AI Processing & TranscriptionUnited States
Knock **Purpose of processing** – Notification orchestration and delivery (in-app, email, and push messaging). **Hosting location** – United States **Entity address** – 175 Varick St, #413, New York, NY 10014, USA **Compliance measures** – [Knock Security](https://docs.knock.app/developer-tools/security); Operations & SupportUnited States
OpenAI **Purpose of processing** – Provision of AI model infrastructure and processing of user inputs/outputs to enable platform functionality. **Hosting location** – United States **Entity address** – 3180 18th Street, San Francisco, CA 94110, USA **Compliance measures** – [OpenAI Compliance](https://trust.openai.com/); AI Processing & TranscriptionUnited States
Parallel Web Systems Inc. **Purpose of processing** – Web search and data enrichment to retrieve external context for AI features. **Hosting location** – United States **Entity address** – 2261 Market St, San Francisco, CA 94114, USA **Compliance measures** – [Parallel AI Trust Center](https://trust.parallel.ai/); AI Processing & TranscriptionUnited States
Plain **Purpose of processing** – Customer support platform. **Hosting location** – United Kingdom **Entity address** – 3rd Floor 1 Ashley Road Altrincham WA14 2DT United Kingdom **Compliance measures** – [Plain Trust Center](https://trust.plain.com/); Operations & SupportUnited Kingdom
Stripe, Inc. **Purpose of processing** – Payment processing, subscription management, and billing. **Hosting location** – United States **Entity address** – 354 Oyster Point Blvd, South San Francisco, CA 94080, USA **Compliance measures** – [Stripe Security](https://docs.stripe.com/security); Operations & SupportUnited States
Turbopuffer **Purpose of processing** – Vector search and embeddings storage to enable semantic search and retrieval. **Hosting location** – United States **Entity address** – 10-1338 Wellington St. W, Ottawa, ON, Canada K1Y 3B7 **Compliance measures** – [Turbopuffer Security & Compliance](https://turbopuffer.com/docs/security); Infrastructure & HostingUnited States
Twilio **Purpose of processing** – Telephony connectivity for the in-product calling feature. **Hosting location** – United States **Entity address** – 101 Spear St, 5th Floor, San Francisco, CA 94105, USA **Compliance measures** – [Twilio Compliance](https://security.twilio.com/); Operations & SupportUnited States
xAI **Purpose of processing** – Provision of AI model infrastructure and processing of user inputs/outputs to enable platform functionality. **Hosting location** – United States **Entity address** – 1450 Page Mill Rd., Palo Alto, CA 94304 USA **Compliance measures** – [X AI Security](https://trust.x.ai); AI Processing & TranscriptionUnited States

Listed as a subprocessor by (4)

Purposes as each company states them.

Changes

None since tracking began.