Baseline
- Company name
- Granola
- Category
- AI SaaS / meeting notes and productivity
- Website
- https://www.granola.ai
- Evidence status
- Candidate signal
- Current maturity stage
- maturing AI meeting-notes trust surface
- Last checked
- 2026-06-27
Company profile
Granola
Granola is a strong AI meeting-data trust case: SOC2 Type II, DPA, privacy/AI training disclosures, trust center, and public security incident reports. Good for teardown and retrospective validation.
Observed evidence
Compliance and security claims observed
SOC 2 Type II; GDPR / UK GDPR; DPA; Trust Center access to reports
Enterprise features observed
Trust Center request flow, DPA, SOC2, local/no-bot meeting model, US data residency, vulnerability disclosure, security reports/post-mortems
Evidence surfaces
Evidence surface links
Website
Trust Center
Security
Subprocessors
AI / Data Usage
Interpretation
Observed evidence gap
Data residency outside US not available; sensitive meeting transcripts increase procurement friction.
Structured conclusion
Granola is a strong AI meeting-data trust case: SOC2 Type II, DPA, privacy/AI training disclosures, trust center, and public security incident reports. Good for teardown and retrospective validation.
Caution
False-positive note
Security reports can be trust-positive or risk-positive depending on buyer; do not frame as negative without context.
Sources
Source URLs
- https://trust.granola.ai/
- https://www.granola.ai/security
- https://docs.granola.ai/help-center/policies/privacy-policy
- https://docs.granola.ai/help-center/policies/data-processing-addendum
- https://docs.granola.ai/help-center/consent-security-privacy/security-privacy-data-faqs
- https://www.granola.ai/updates/granola-is-soc2-type-2-compliant