# Granola privacy rating

AI notepad for meetings that captures computer audio without a bot joining the call, transcribes it through cloud providers, and turns the user's notes and the transcript into meeting summaries.

## Summary

Granola scores 26 out of 100 (grade F) on the dictation and transcription criteria. It meets 1 of 10 criteria: TLS configuration. It partly meets no ads or data sales, independent audit, security headers and no training on recordings. It does not meet open source, no trackers or telemetry, transparency report, tells users about requests and runs on the device. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A and Mozilla HTTP Observatory grade B.

- Website: https://www.granola.ai
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Platforms: Windows, macOS, iOS
- Home page trackers: Plausible (cookieless analytics)
- Category: [Dictation and transcription](https://privacyratings.com/speech-to-text/)
- Grade: F (26/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | No | The policy allows authorized third parties to use cookies, pixels and tags for analytics and targeted advertising. | https://docs.granola.ai/help-center/policies/privacy-policy |
| No ads or data sales | Partial | Funded by subscriptions and does not sell personal data, but third-party cookies are used to target Granola's own advertising. | https://docs.granola.ai/help-center/policies/privacy-policy |
| Independent audit | Partial | A SOC 2 Type 2 audit is claimed, but the report is not public. | https://www.granola.ai/security |
| Transparency report | No | No transparency report or government request policy is published. |  |
| Tells users about requests | No | No published policy on notifying users about data requests. |  |
| TLS configuration | Yes | Grade A | https://www.ssllabs.com/ssltest/analyze.html?d=www.granola.ai&hideResults=on |
| Security headers | Partial | Grade B (75/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=www.granola.ai |
| Modern web standards | Not tested yet | Not tested yet. |  |
| Runs on the device | No | Audio is sent to cloud transcription providers such as Deepgram and AssemblyAI. | https://www.granola.ai/security |
| No training on recordings | Partial | De-identified data is used for model training unless the user opts out in account settings; enterprise workspaces are opted out by default. | https://docs.granola.ai/help-center/policies/privacy-policy |

Source: https://privacyratings.com/speech-to-text/granola/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/speech-to-text/granola.md