Granite
Security and privacy

Is Granite end-to-end encrypted?

No. Granite uses managed encryption, which is what makes search, the AI knowledge base, live editing, and recovery possible.

No. Granite uses managed encryption: notes are encrypted at rest with a key per vault and per workspace, and Granite's servers hold the keys.

That's a deliberate choice. Managed keys are what make these features work:

  • searching all your notes, and the AI knowledge base for your AI tools,
  • editing a note together live,
  • publishing notes and integrations,
  • admins recovering a departed colleague's notes.

Deleting a workspace destroys its key, so its data can never be decrypted again.