Granola
low riskAI Meeting Assistantgranola.so, granola.aiverified 2026-03-29
Data-handling profile
- Trains on input
- No — does not train on customer inputs
- Retention
- Data is retained on secure AWS servers until deleted by the user or upon account closure. Subprocessors (OpenAI and Anthropic APIs) retain data for a maximum of 30 days solely for abuse monitoring before deletion.
- Data region
- United States (AWS)
- Certifications
- SOC 2 Type II
- DPA available
- Yes
- Breach history
- none
- EU AI Act
- Granola acts as an AI-powered meeting notepad. Under the EU AI Act, it is generally classified as a minimal or low-risk AI system, as it does not engage in prohibited practices or high-risk biometric identification.
Sources
Every fact above is drawn from the vendor's public documentation, reviewed by a human, and version-stamped. Monitored daily for changes.
Change history
No material changes recorded since monitoring began.