Type: Connector disposition
Subject: Granola
Decision requested: Approve the proposed disposition for Granola across its 6 assessed actions
Inherent / residual: High / Moderate
Control owner: Claude Owner / Primary Owner + Granola Enterprise Admin
Context: 6 assessed actions. Runtime settings proposed: Always Allow x5, Needs Approval x1. Class: Remote MCP server (third-party, vendor-hosted). Control point: Claude tool permission + Granola Enterprise admin MCP scopes. Control owner: Claude Owner / Primary Owner + Granola Enterprise Admin.
Risks: R-20 [High inherent / High residual] Meeting recording and transcription consent | R-21 [Moderate inherent / Low residual] Runtime workspace selection and dynamic client registration
Open verification: V-15 [High] The Granola Enterprise MCP member scope configuration - Personal notes, Public notes, both or neither - and confirmation that admins fall outside those member controls.
Ruling:
Amendment or condition: