Security, privacy, and how it all works
Your security and privacy are of utmost importance to us. Find the most important details below, followed by FAQs, and then links to all our terms and policies at the bottom of this page.
We encourage security vulnerability reports to be sent to security@granola.so for our investigation
The basics
- Granola is an app for Desktop and iPhone, a lot like Apple Notes or Notion. It requires Google Workspace login and integrates with your calendar.
- You have to manually start Granola for a meeting (it won't auto-join or auto-record anything). Granola then accesses your microphone audio, and your meeting audio on your computer, and transcribes it. It does not add a bot to your video call.
- Granola for Desktop works with any meeting platform. Zoom, Meet, Teams, you name it. Granola for iPhone is built for in-person meetings.
- Granola uses best-in-class transcription providers (like Deepgram and Assembly) and AI providers (like OpenAI and Anthropic) to summarize your meeting.
Model training
- We do not allow third parties (like OpenAI or Anthropic) to use your data to train their AI models.
- Granola trains on your anonymized data so we can keep making Granola better. You can opt out of this in your Settings.
- Enterprise users have model training turned off by default.
No stored recordings
- Granola doesn't store the audio from meetings - it transcribes in real time on your computer, or after your meeting on iPhone using temporarily cached audio. It only stores the transcript (and any notes you provide) from a call.
You control who sees your notes
- As a user, you control who sees your notes. Notes are private by default, until you choose to share them with others.
- You can delete individual notes, or request deletion of all your data at any time.
Everything stored in industry standard, encrypted infrastructure
- Notes are stored in our US-hosted AWS Virtual Private Cloud. They are encrypted at rest and in transit. They are backed up daily.
- Granola is built and maintained by our top-tier engineering team, who've built scalable infrastructure for companies like Apple, Amazon, Google, and Meta.
We're here if you need us
- If you have more questions, please reach out to our team.
Data Security
Data Storage & Processing
Terms & Policies
Terms
Privacy
Reports
Google Workspace Session Logout Vulnerability
A post-mortem of a resolved vulnerability with Google Workspace session handling
Legacy Unmanaged Google Accounts Workspace Auto-Join
A post-mortem of a resolved vulnerability with unmanaged Google Workspace accounts
Vulnerability TRA-2025-07
A post-mortem of a resolved vulnerability in our iOS beta app
Need more company-wide controls? Talk to us about Enterprise