Grain: security & AI-training scorecard
grain.com ↗ · AI notetaker · Last checked Oct 16, 2026
Does Grain train AI on customer data?
No“On training, Grain does not use your meeting data to train AI models.”
Note: Source is a Grain blog post, not a legal document; privacy policy has no training clause in fetched text.
SOC 2
Independent audit of security controls. Type II covers operating effectiveness over a period.
Type II
“Grain is SOC 2 Type II certified.”
ISO/IEC 27001
Certified information security management system.
Not verified from vendor-owned sources
Note: Only AWS's ISO 27001 is mentioned, not Grain's own.
No vendor source found as of check date.
HIPAA / BAA
Whether the vendor will sign a Business Associate Agreement for PHI.
Not verified from vendor-owned sources
Note: No HIPAA/BAA statement found in fetched sources.
No vendor source found as of check date.
GDPR DPA
Data Processing Agreement/Addendum for personal data.
GDPR listed; DPA not confirmed
“GDPR”
Trains AI on customer data
Whether the vendor says it uses customer data to train AI models.
No
“On training, Grain does not use your meeting data to train AI models.”
Note: Source is a Grain blog post, not a legal document; privacy policy has no training clause in fetched text.
Data retention
What the vendor publishes about how long customer data is kept.
As long as needed to provide the Services
“We will retain Personal Information that we store and process on behalf of our Subscribers for as long as needed to provide the Services to our Subscribers.”
Subprocessor list
Where the vendor lists third parties that process customer data.
All sources checked (4)
Fetched on Oct 16, 2026. Vendor pages can change after this date.
Is this wrong? / Claim this listing
Vendors and readers can send evidence links. Nothing is published without a source.
Informational only, not legal advice or an audit. Summaries reflect Grain's published pages as of Oct 16, 2026; verify with the vendor. Methodology & disclaimer.