Security, privacy, and how it all works

Your security and privacy are of utmost importance to us. Find the most important details below, followed by FAQs, and then links to all our terms and policies at the bottom of this page.

We encourage security vulnerability reports and maintain a public Vulnerability Disclosure Policy with reporting guidelines and procedures.

The basics

  • Granola is an app for Desktop and Mobile (iPhone and Android), a lot like Apple Notes or Notion. It works with Google Workspace or Microsoft login and integrates with your calendar.
  • You have to manually start Granola for a meeting (it won't auto-join or auto-record anything). Granola then accesses your microphone audio, and your meeting audio on your computer, and transcribes it. It does not add a bot to your video call.
  • Granola for Desktop works with any meeting platform. Zoom, Meet, Teams, you name it. Granola for Mobile is built for in-person meetings.
  • Granola uses best-in-class transcription providers (like Deepgram and Assembly) and AI providers (like OpenAI and Anthropic) to summarize your meeting.

Model training

  • We do not allow third parties (like OpenAI or Anthropic) to use your data to train their AI models.
  • Granola trains on your anonymized data so we can keep making Granola better. You can opt out of this in your Settings.
  • Enterprise users have model training turned off by default.

No stored recordings

  • Granola doesn't store the audio from meetings - it transcribes in real time on macOS/Windows, or after your meeting using temporarily cached audio on Mobile. It only stores the transcript and any notes you provide from a call.

You control who sees your notes

  • As a user, you control who sees your notes. Notes are private by default, until you choose to share them with others.
  • You can delete individual notes, or request deletion of all your data at any time.

Everything stored in industry standard, encrypted infrastructure

  • Notes are stored in our US-hosted AWS Virtual Private Cloud. They are encrypted at rest and in transit. They are backed up daily.
  • Granola is built and maintained by our top-tier engineering team, who've built scalable infrastructure for companies like Apple, Amazon, Google, and Meta.

We're here if you need us

Data Security

Granola implements multiple layers of security: All data is encrypted at rest, all communications use TLS encryption (HTTPS), we employ firewalls and virtual private cloud (VPC) configurations, and comprehensive audit logging is implemented across our infrastructure.

Granola stores some data locally on your device, such as your notes and meeting history, for faster access and offline viewing. For transcription and AI summarization, Granola uses secure cloud processing to deliver high-quality results while keeping the app fast and responsive.

We use multiple approaches for vulnerability management: Automated security scanning with Dependabot and Vanta, monthly vulnerability scans across our infrastructure, security code reviews for all internally developed software, and regular application of security patches and updates.

Granola conducts penetration testing on a regular basis. If you'd like to view our latest reports, please contact our sales team.

We achieved full SOC-2 Type 2 compliance in July 2025. You can visit our Trust page for more information.

You can email security@granola.so with details. We'll review it ASAP and get back to you. Thanks for helping keep Granola secure!

Yes, we enforce full disk encryption on all employee devices and deploy anti-virus/malware protection on all systems connected to our services.

Currently not. This is something we may consider as an enterprise feature in future, but currently a lot of the magic of Granola comes in the careful matching of prompts, context, and AI models which we get from retaining controls over this.

We may consider building this in future as an enterprise feature, but not at the moment.

Yes, Granola supports SSO. We work with Google Workspace login, Microsoft login, and Okta as well as several others. If you'd like to set up SSO for your organization, please get in touch with our sales team at sales@granola.so.

Data Storage & Processing

When you delete your account, all your data is permanently removed from our systems within 30 days.

Yes, you can request a full export of all your data at any time. This will include all your meeting notes, transcripts, and account information.

Yes, we back up all data daily to ensure your information is safe. These backups are encrypted and stored securely in our AWS infrastructure.

Notes & transcripts are stored indefinitely by default in Granola's secure cloud, unless deleted by the user. We do offer customer retention periods on our Enterprise plans. To learn more speak to Sales.

Granola's use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

Terms & Policies

Need more company-wide controls?
Talk to us about Enterprise