granola-security-basics

# Granola Security Basics ## Overview Granola achieved SOC 2 Type 2 certification in July 2025. It encrypts data with AES-256 at rest and TLS 1.3 in transit. Audio is transcribed server-side and not stored after processing. This skill covers security configuration, compliance posture, and organizational controls. ## Prerequisites - Granola Business or Enterprise plan (for admin/security controls) - Understanding of your organization's compliance requirements - Admin access for workspace-level settings ## Instructions ### Step 1 — Understand Granola's Data Architecture ``` Audio Capture (your device) │ ├─→ Transmitted via TLS 1.3 │ ▼ Granola Cloud (transcription) │ ├─→ Transcript generated (GPT-4o / Claude) ├─→ Audio DELETED after processing (not stored) │ ▼ Encrypted Storage (AES-256 at rest) │ ├─→ Meeting notes (your typed + AI enhanced) ├─→ Transcript text (stored, searchable) ├─→ Attendee metadata │ ▼ Your Device (local cache: cache-v3.json) ``` **Key security properties:** - No bot joins your meeting — audio is captured locally via system audio - Raw audio is **never stored** after transcription - Granola does **not** allow OpenAI or Anthropic to train on customer data - Enterprise plan enforces org-wide AI training opt-out by default - Local cache (`cache-v3.json`) contains meeting data on your device ### Step 2 — Configure Account Security | Control | How to Enable | Plan Required | |---------|--------------|---------------| | Googl...