Granola is a data analytics platform that helps businesses gain insights from their data, enabling informed decision-making and strategic planning through visualizations and reports.
Granola is an AI-powered meeting note-taker that transcribes and structures meeting discussions in real-time. Key features include automated action item tracking, speaker identification, and the ability to highlight key decisions and action items. Granola is designed for professionals in distributed teams and remote work environments, providing a comprehensive summary of meetings to improve accountability and transparency. Compared to manual note-taking or generic video conferencing transcripts, Granola's structured output sets it apart, enabling users to quickly review and actionable insights from meetings. With its advanced AI capabilities and intuitive interface, Granola streamlines meeting workflows and enhances team collaboration.
Granola explicitly states that third parties like OpenAI and Anthropic cannot use personal data to train AI models. De-i
No training on user data means no opt-out is necessary.
Low risk across data training, licensing, and sharing dimensions.
Granola explicitly states that third parties like OpenAI and Anthropic cannot use personal data to train AI models. De-identified data may be used for model training, but users can opt-out within account settings. This is enterprise-friendly with clear protections.
“[Privacy] We do not allow third parties such as OpenAI or Anthropic to use your Personal Data to train AI models. We only use De-Identified Data to train AI models, which you can opt-out of within your Granola account settings.”
The DPA and ToS establish that customer data is owned by the customer. Granola's license is strictly limited to providing the services. No sublicensing or perpetual rights are claimed over customer-generated content.
“[ToS] When an Authorized User stores, accesses, uses, modifies, or shares content or information to the Services ('Customer Data'), you acknowledge and agree that such Customer Data is owned by Customer.”
Granola shares data with essential service providers (hosting, transcription, analytics, payment processors) under stated controls. A subprocessor list is published at trust.granola.ai/subprocessors with 10-day notice for new processors. However, some vagueness exists around 'affiliates' and the scope of analytics sharing.
“[DPA] Customer acknowledges and agrees that Granola may engage its Affiliates and the Authorized Subprocessors listed in Exhibit B to this DPA to access and process Personal Data. A list of Granola's current Authorized Subprocessors can be found at trust.granola.ai/subprocessors.”
Retention periods are stated for specific data types (e.g., recordings deleted after transcription, profile data retained while account active), but overall language is somewhat vague ('as long as necessary'). Deletion on request is supported, but no explicit timeline for compliance is specified.
“[Privacy] We retain Personal Data about you for as long as necessary to provide you with our Services or to perform our business or commercial purposes for collecting your Personal Data. Recordings of communications using our Services are captured only for the purposes of providing you a transcription. We do not retain or store such recordings once the transcription is created.”
Customer owns all customer data and generated outputs. Granola claims no ownership rights or license to customer-generated content. The license granted to Granola is strictly for service delivery purposes.
“[ToS] such Customer Data is owned by Customer and the Agreement provides Customer with many choices and control over that Customer Data.”
Granola references a Trust Center (trust.granola.ai) and mentions security measures (encryption, firewalls, VPC, anti-virus), but no specific certifications (SOC 2, ISO 27001, HIPAA) are explicitly claimed in the provided documents. GDPR compliance is addressed via DPA with Standard Contractual Clauses.
“[DPA] Granola shall maintain appropriate technical and organizational measures to ensure a level of security appropriate to the risk of processing Personal Data, as described on Granola's Trust Center, available at: trust.granola.ai.”
Track and measure your AI tools with Olakai's observability platform.
Explore Olakai