Trust center
How Granur looks after your data
Granur holds your contracts and vendor records, so you should know exactly where that data lives, who can see it and how the AI uses it. Here's the plain version. The full details are in our Privacy Policy.
Where your data lives
- Database: Neon, on AWS in US East (Ohio).
- Application and website: hosted on Vercel in the United States.
- Encrypted in transit: every connection to Granur uses HTTPS.
Who can see it
- Each organization's data is kept separate. No one outside your organization can see your contracts or vendors.
- Four roles: owner, admin, member and viewer. Viewers can look but can't change anything.
- Sign in with email and password (stored only as a secure hash), or with Google or Microsoft.
- An audit log records the actions taken in your workspace.
How the AI works with your documents
- Granur uses Anthropic's Claude to read contracts and SOC 2 reports, flag risks and answer questions.
- Under Anthropic's commercial terms, your documents aren't used to train its models. We don't train AI on them either.
- Every AI result is shown to a person to review before it's relied on.
- Ask Granur answers only from your own data in Granur.
Built-in safeguards
- Vendors upload documents through private links that expire, without needing an account.
- Webhooks to your own systems are signed, and API keys give read-only access.
- Card payments are handled by Stripe. Card details never reach our servers.
- Browser security headers protect against clickjacking and content-type sniffing.
Your data, your control
- We keep your data while your account is active. When an owner closes the account, we permanently delete its data after 30 days. If a free trial ends without a paid plan, we permanently delete its data 90 days later.
- You can ask to access, correct, export or delete personal information through our privacy request form.
- We only use the cookies Granur needs to work. No advertising or tracking cookies.
Subprocessors
The service providers that process data to run Granur, under contracts that require them to protect it.
| Provider | What it does | Location |
|---|---|---|
| Vercel | Hosting of the website and application, and website analytics | United States |
| Neon | Database hosting | United States (AWS US East, Ohio) |
| Anthropic | AI analysis of documents | United States |
| Resend | Sending email | United States |
| Stripe | Payment processing | United States |
Certifications and security reviews
Granur doesn't have its own SOC 2 report or ISO 27001 certification yet. If your security review needs more than this page, get in touch and we'll take you through how Granur is set up.