The AI notepad for back-to-back meetings. Notes, actions and memory. Without a meeting bot.
Summary from the company’s website.
Publicly advertised compliance posture
As observed on September 8, 2026 on the organization’s public trust center.
-
SOC 2
Independent CPA audit of controls for security, availability, and confidentiality.
-
GDPR
Public claim of alignment with the EU General Data Protection Regulation.
Compliance timeline
-
September 8, 2026
Posture last observed by Trust Index
Subprocessors
Third parties Granola discloses on its trust center. Linked entries have their own profile in the Trust Index.
69% chain trust: 11 of 16 disclosed subprocessors are themselves in the Trust Index.
- Anthropic, PBC AI Processing & Transcription
- OpenAI AI Processing & Transcription
- Google Cloud AI Processing & Transcription
- Amazon Web Services Infrastructure & Hosting
- xAI AI Processing & Transcription
- AssemblyAI, Inc. AI Processing & Transcription
- Deepgram AI Processing & Transcription
- Braintrust AI Processing & Transcription
- Stripe, Inc. Operations & Support
- Plain Operations & Support
- Twilio Operations & Support
- Parallel Web Systems Inc. AI Processing & Transcription
- Fireworks.ai AI Processing & Transcription
- Turbopuffer Infrastructure & Hosting
- ClickHouse Infrastructure & Hosting
- Knock Operations & Support
Named as a subprocessor by
Organizations in the Trust Index that disclose Granola as a subprocessor.
About this data
The Trust Index reports only what organizations publicly advertise. A missing framework here means no public claim was observed as of September 8, 2026; it never means an organization is non-compliant. HIPAA entries reflect a public claim of compliance; no HIPAA certification exists. Corrections are welcome and verified against public evidence. Read the full methodology.
