Granola
Granola (Basic / Business / Enterprise)
Provider: Granola, Inc. · Based in: Granola, Inc., 1151 Walker Rd Ste 417, Dover DE 19904, USA · Provider website
- Plans
- 3
- Sources
- 9
- As of
- 18 Oct
As of 18 Oct 2026. Based on our research on this date and the process described in the methodology. No guarantee of accuracy, not legal advice. The provider’s current documents take precedence. Found an error? Report a correction.
Incomplete. 5 points could not be verified in any provider source (see open points). This does not mean the matter is unproblematic; it means we have not checked it.
At a glance
- Hosting
- US only: all 3 plans
- Training on inputs
- opt-out available: Basic, Businessno: Enterprise
- DPA
- yes: all 3 plans
- Provider
- Granola, Inc. (with Granola Labs Ltd., UK)
- Based in
- Granola, Inc., 1151 Walker Rd Ste 417, Dover DE 19904, USA; Granola Labs Ltd, 4-6 Spicer Street, St. Albans AL3 4PQ, England (contact addresses according to the Privacy Policy, q4). According to the Privacy Policy, Granola operates its services from the United States and the United Kingdom. EU representative under Article 27 GDPR: not publicly documented.
Values from 3 plans, each listed with the plans it applies to. Details and evidence are in the plan table.
Compare Granola
Compare with another toolCompared plan by plan with other tools in the category Meetings & transcription:
Details per plan
Short values per plan. Click a feature to open the evidence and notes for all plans; sources with retrieval dates are under “Evidence”.
| Feature | BasicCompare Granola Basic with another tool | BusinessCompare Granola Business with another tool | EnterpriseCompare Granola Enterprise with another tool |
|---|---|---|---|
| differs by plan | 0 USD/user/mo | 14 USD/user/mo | 35 USD/user/mo |
| Details: Price | 0 USD per user/month | 14 USD per user/month (billing interval and net/gross indication not stated; 'Great for individuals or small teams') | 35 USD per user/month; according to the Enterprise FAQ purchasable in the app with no minimum number of seats, for 50+ seats contact sales (no indication whether net or gross) |
| yes | yes | yes | |
| Details: AI features included | yes (AI meeting notes, AI chat within and across meetings, templates, multi-language support; meeting history 30 days; AI chat 'Auto' only without model selection) | yes (as Basic plus unlimited meeting notes and history, advanced AI models with model selection, integrations including Notion, HubSpot, Zapier, MCP, API access, centralised billing and user management) | yes (as Business plus SSO, SCIM, Audit API, usage analytics, admin controls for MCP, API and integrations, organisation-wide retention and participant notification, HIPAA workspaces, advanced integrations such as Salesforce) |
| yes | yes | yes | |
| Details: DPA | yes (pricing page: 'DPA available' in all plans; security page: DPA 'available upon request'; DPA with EU SCCs Module One or Module Two, Irish law, UK Addendum) Provider’s DPA | yes (pricing page: 'DPA available' in all plans; security page: DPA 'available upon request'; DPA with EU SCCs Module One or Module Two, Irish law, UK Addendum) Provider’s DPA | yes (pricing page: 'DPA available' in all plans; security page: DPA 'available upon request'; DPA with EU SCCs Module One or Module Two, Irish law, UK Addendum) Provider’s DPA |
| differs by plan | opt-out available | opt-out available | no |
| Details: Training on inputs | Privacy Policy: 'We do not allow third parties such as OpenAI or Anthropic to use your Personal Data to train AI models.' Granola uses de-identified, aggregated data to train its own models; opt-out in the account settings. Pricing page: 'Model training opt-out' per user. According to the Privacy Policy, de-identified data already incorporated into models is not removed. | Privacy Policy: 'We do not allow third parties such as OpenAI or Anthropic to use your Personal Data to train AI models.' Granola uses de-identified, aggregated data to train its own models; opt-out in the account settings. Pricing page: 'Model training opt-out' per user. According to the Privacy Policy, de-identified data already incorporated into models is not removed. | Privacy Policy: Enterprise workspaces have admin-enforced settings and are 'opted-out by default' from training; according to the Privacy Policy, Enterprise users 'may opt-in'. Pricing page: model training opt-out 'Workspace-wide'. Enterprise page: 'Your conversation data is never used to train shared AI models.' Third parties such as OpenAI or Anthropic may not use data for training. |
| Privacy Policy: recordings are captured… | Privacy Policy: recordings are captured… | Privacy Policy: recordings are captured… | |
| Details: Data retention | Privacy Policy: recordings are captured only for transcription and are not retained once the transcript has been created; other data is retained as long as the account is active or as needed to operate the business; de-identified, aggregated data may be retained indefinitely. Security page: only the transcript and notes are stored; individual notes or all data can be deleted on request. DPA: return or deletion after termination of the agreement at the customer's written direction. Pricing page: meeting history in the Basic plan 30 days ('See limited meeting history'); transcript retention and auto-deletion configurable per user. | Privacy Policy: recordings are captured only for transcription and are not retained once the transcript has been created; other data is retained as long as the account is active or as needed to operate the business; de-identified, aggregated data may be retained indefinitely. Security page: only the transcript and notes are stored; individual notes or all data can be deleted on request. DPA: return or deletion after termination of the agreement at the customer's written direction. Pricing page: unlimited meeting history; transcript retention and auto-deletion configurable per user. | Privacy Policy: recordings are captured only for transcription and are not retained once the transcript has been created; other data is retained as long as the account is active or as needed to operate the business; de-identified, aggregated data may be retained indefinitely. Security page: only the transcript and notes are stored; individual notes or all data can be deleted on request. DPA: return or deletion after termination of the agreement at the customer's written direction. Enterprise: organisation-wide retention periods and auto-deletion via admin policy ('Org-wide auto-deletion periods'). |
| US only | US only | US only | |
| Details: Hosting | Security page: notes are stored in a 'US-hosted AWS Virtual Private Cloud'. Privacy Policy: AWS servers 'located in the U.S.' or 'located primarily in the US'; services are hosted and operated 'in the U.S.'. Sub-processor list: all sub-processors with hosting in the US, except Plain (UK). An EU hosting option is not documented; the documentation does not differentiate by plan. | Security page: notes are stored in a 'US-hosted AWS Virtual Private Cloud'. Privacy Policy: AWS servers 'located in the U.S.' or 'located primarily in the US'; services are hosted and operated 'in the U.S.'. Sub-processor list: all sub-processors with hosting in the US, except Plain (UK). An EU hosting option is not documented; the documentation does not differentiate by plan. | Security page: notes are stored in a 'US-hosted AWS Virtual Private Cloud'. Privacy Policy: AWS servers 'located in the U.S.' or 'located primarily in the US'; services are hosted and operated 'in the U.S.'. Sub-processor list: all sub-processors with hosting in the US, except Plain (UK). An EU hosting option is not documented; the documentation does not differentiate by plan. |
| list available | list available | list available | |
| Details: Sub-processors |
|
|
|
| differs by plan | 6 sources | 6 sources | 7 sources |
| Details: Sources with retrieval date |
|
|
|
Compare Granola Basic with another tool
Price and scope
- differs by plan
- 0 USD/user/mo
0 USD per user/month
- yes
yes (AI meeting notes, AI chat within and across meetings, templates, multi-language support; meeting history 30 days; AI chat 'Auto' only without model selection)
Contract and data use
- yes
yes (pricing page: 'DPA available' in all plans; security page: DPA 'available upon request'; DPA with EU SCCs Module One or Module Two, Irish law, UK Addendum)
Provider’s DPA- differs by plan
- opt-out available
Privacy Policy: 'We do not allow third parties such as OpenAI or Anthropic to use your Personal Data to train AI models.' Granola uses de-identified, aggregated data to train its own models; opt-out in the account settings. Pricing page: 'Model training opt-out' per user. According to the Privacy Policy, de-identified data already incorporated into models is not removed.
- Privacy Policy: recordings are captured…
- Privacy Policy: recordings are captured only for transcription and are not retained once the transcript has been created; other data is retained as long as the account is active or as needed to operate the business; de-identified, aggregated data may be retained indefinitely. Security page: only the transcript and notes are stored; individual notes or all data can be deleted on request. DPA: return or deletion after termination of the agreement at the customer's written direction. Pricing page: meeting history in the Basic plan 30 days ('See limited meeting history'); transcript retention and auto-deletion configurable per user.
Hosting and sharing
- US only
Security page: notes are stored in a 'US-hosted AWS Virtual Private Cloud'. Privacy Policy: AWS servers 'located in the U.S.' or 'located primarily in the US'; services are hosted and operated 'in the U.S.'. Sub-processor list: all sub-processors with hosting in the US, except Plain (UK). An EU hosting option is not documented; the documentation does not differentiate by plan.
- list available
- Anthropic, PBC – AI processing (hosting: United States)
- OpenAI – AI processing (hosting: United States)
- Google Cloud – cloud hosting, AI and compute (hosting: United States)
- Amazon Web Services – cloud hosting, data storage, AI and compute (hosting: United States)
- xAI – AI processing (hosting: United States)
- AssemblyAI, Inc. – transcription (hosting: United States)
- Deepgram – transcription (hosting: United States)
- Braintrust – evaluation and testing of AI performance (hosting: United States)
- Fireworks.ai – AI processing (hosting: United States)
- Parallel Web Systems Inc. – web search and data enrichment for AI features (hosting: United States)
- Turbopuffer – vector search and embeddings storage (hosting: United States)
- ClickHouse – storage of usage and telemetry data (hosting: United States)
- Stripe, Inc. – payment processing and billing (hosting: United States)
- Plain – customer support platform (hosting: United Kingdom)
- Twilio – telephony for the in-product calling feature (hosting: United States)
- Knock – notifications (in-app, email, push) (hosting: United States)
Evidence
- differs by plan
- 6 sources
- Pricing plans | GranolaPricing page, retrieved 18 Oct 2026
- Security at GranolaSecurity page, retrieved 18 Oct 2026
- Privacy Policy (Effective from 8th September 2026)Privacy notice, retrieved 18 Oct 2026
- Data Processing Addendum (Last updated: July 17, 2026)DPA, retrieved 18 Oct 2026
- Granola Platform Terms (Last updated: 19th December 2025, PDF)Terms of service, retrieved 18 Oct 2026
- Granola Trust Center: Subprocessors (16 entries, rendered in browser)Sub-processor list, retrieved 18 Oct 2026
not documentedmeans: not publicly documented, not verifiable in any provider source. It does not mean “no”.
Third-country transfers
Granola is not listed on the DPF list (search for 'Granola', active and inactive entries, q9). DPA: transfers to the US and other countries; for data subject to the GDPR the EU SCCs apply (Module One or Module Two), Irish law, courts of Ireland; for the UK the UK Addendum (q5). Privacy Policy: transfers from the EU/EEA/UK/Switzerland on the basis of appropriate mechanisms such as SCCs, 'and not solely on the basis of your access and use of our Services' (q4). Hosting via AWS in the US (q3, q4); sub-processors almost exclusively with hosting in the US (q7).
- Security at Granola (Security page), retrieved 18 Oct 2026
- Privacy Policy (Effective from 8th September 2026) (Privacy notice), retrieved 18 Oct 2026
- Data Processing Addendum (Last updated: July 17, 2026) (DPA), retrieved 18 Oct 2026
- Granola Trust Center: Subprocessors (16 entries, rendered in browser) (Sub-processor list), retrieved 18 Oct 2026
- Data Privacy Framework List (search 'Granola': no entry) (DPF list), retrieved 18 Oct 2026
Certifications (as stated by the provider)
Trust Center: SOC 2 Type II (2025 and 2026 reports via 'Request access'), and 'GDPR', 'EU AI ACT' and 'HIPAA' listed under compliance (q8). Pricing page: 'SOC 2 Type II certified' in all plans, HIPAA workspaces Enterprise only; Enterprise page: BAA via sales (q1, q2). ISO 27001 or ISO 42001 certification: not publicly documented.
- Pricing plans | Granola (Pricing page), retrieved 18 Oct 2026
- Granola for Enterprise (incl. FAQ) (Product page), retrieved 18 Oct 2026
- Granola Trust Center (Overview) (Trust Center), retrieved 18 Oct 2026
AI Act
Functions: AI notepad for desktop, iOS, Android and Apple Watch: transcribes microphone and device audio without a meeting bot (manual start), creates AI notes, pre-meeting briefs, follow-up emails, AI chat across meetings; speaker tagging; integrations, MCP and API. According to the security page and the sub-processor list, AI providers include OpenAI, Anthropic, xAI, Google Cloud and Fireworks; transcription via Deepgram and AssemblyAI (q1, q3, q7).
Provider’s statement: Privacy Policy: 'Our AI system is operated in compliance with the EU Artificial Intelligence Act (Regulation (EU) 2024/1689), including applicable transparency and disclosure obligations under Article 50.' Enterprise page: 'Aligned with the EU AI Act for responsible, transparent AI use.' The Trust Center lists 'EU AI ACT' under compliance. A role classification (provider/deployer) or risk classification by Granola is not publicly documented.
Classification (for review, not legal advice): For review: the customer is typically the deployer (Art. 3(4) AI Act); as deployer, the AI literacy obligation applies (Art. 4). Meeting transcription involving personal data: transparency towards participants (Granola offers notifications); use in a work context should be checked against Art. 5 and Annex III, depending on the feature used. Not legal advice.
- Granola for Enterprise (incl. FAQ) (Product page), retrieved 18 Oct 2026
- Privacy Policy (Effective from 8th September 2026) (Privacy notice), retrieved 18 Oct 2026
- Granola Trust Center (Overview) (Trust Center), retrieved 18 Oct 2026
Current notes 2026
Privacy Policy effective from 8 September 2026 with its own section on AI and the EU AI Act as well as HIPAA/BAA for Enterprise; DPA as of 17 July 2026; Platform Terms as of 19 December 2025. New features: pre-meeting briefs, MCP integration, in-product calling (Twilio), Apple Watch app.
Open points of the review
- Prices only in USD; billing interval (monthly/annual), EUR prices and a net/gross indication are missing.
- No DPF certification and no EU representative under Article 27 GDPR documented; no EU hosting option.
- According to the pricing page the DPA is 'available' in all plans, according to the security page 'upon request'; whether it applies automatically to Basic accounts of individuals is not described.
- Specific retention periods for transcripts and notes without a configured retention setting are not quantified; whether the 30-day history in the Basic plan means deletion is not described.
- According to the FAQ, Enterprise can be purchased in the app without a minimum number of seats (sales only for 50+ seats); the classification as tier 'enterprise' is based on the admin and compliance features. ISO certifications not documented.
Frequently asked questions
Where does Granola store data?
US only (plans: Basic, Business, Enterprise). According to the provider, as of 18 Oct 2026.
Is there a DPA for Granola?
yes in: Basic, Business, Enterprise. According to the provider, as of 18 Oct 2026.
Does Granola use inputs for AI training?
opt-out available in: Basic, Business; no in: Enterprise. According to the provider, as of 18 Oct 2026.
Where is the provider based?
Granola, Inc., 1151 Walker Rd Ste 417, Dover DE 19904, USA; Granola Labs Ltd, 4-6 Spicer Street, St. Albans AL3 4PQ, England. According to the Privacy Policy, Granola operates its services from the United States and the United Kingdom. EU representative under Article 27 GDPR: not publicly documented. Based on our research, as of 18 Oct 2026.
All sources
- 01Pricing plans | GranolaPricing page · retrieved 18 Oct 2026
- 02Granola for Enterprise (incl. FAQ)Product page · retrieved 18 Oct 2026
- 03Security at GranolaSecurity page · retrieved 18 Oct 2026
- 04Privacy Policy (Effective from 8th September 2026)Privacy notice · retrieved 18 Oct 2026
- 05Data Processing Addendum (Last updated: July 17, 2026)DPA · retrieved 18 Oct 2026
- 06Granola Platform Terms (Last updated: 19th December 2025, PDF)Terms of service · retrieved 18 Oct 2026
- 07Granola Trust Center: Subprocessors (16 entries, rendered in browser)Sub-processor list · retrieved 18 Oct 2026
- 08Granola Trust Center (Overview)Trust Center · retrieved 18 Oct 2026
- 09Data Privacy Framework List (search 'Granola': no entry)DPF list · retrieved 18 Oct 2026
More tools in Meetings & transcription with an EU hosting option (in at least one plan)
- Microsoft Teams Premium · Based in: Microsoft Corporation, Redmond, Washington, USA
- tl;dv · Based in: Tldx Solutions GmbH, Kaiser-Friedrich-Allee 51, 52074 Aachen, Germany
- Zoom AI Companion · Based in: San Jose, CA, USA
All tools in Meetings & transcription · Tools with an EU hosting option
Further reading
All tools in the category: Meetings & transcription. Figures across all tools: Data report.