Is Granola HIPAA compliant?
Granola signs a BAA on its Enterprise plan only, and the BAA covers the desktop apps. The free and Business plans have none.
- Maker
- Granola
- Last checked
- November 11, 2026
Plan by plan
A business associate agreement (BAA) is the contract HIPAA requires before a tool handles patient information.
| Plan | BAA available | Detail |
|---|---|---|
| Basic (free) | No | Granola says HIPAA support is not available on this plan and it should not hold patient information. |
| Business | No | Granola says HIPAA support is not available on this plan and it should not hold patient information. |
| Enterprise | Yes | The BAA is arranged through Granola's sales team, which turns on HIPAA for the workspace. |
What that means in practice
A BAA is available on the Enterprise plan. A customer contacts Granola's sales team to turn on HIPAA for the workspace and sign the agreement.
Granola's help center says HIPAA support is not available on the free or Business plans, and that those accounts should not be used to store or process protected health information.
The BAA has a limit on where it applies. Granola says it currently covers the desktop and laptop apps only.
What the agreement leaves out
The BAA currently covers the Granola desktop and laptop apps only. Granola's mobile apps are not named as covered.
How to read this answer
HIPAA has no certificate a product can hold. The part that can be checked is whether the maker signs a business associate agreement, and for which plans.
A signed agreement is where compliant use starts. The practice still has to set the tool up correctly, control who can use it, and train staff.
This page records what Granola documents. It is not legal advice. See the regulatory compliance guide or the HIPAA status of other AI tools.