As of 1 Nov 2026, the panel rates Dropbox 3/5 and Tresorit 3.5/5 in Cloud Storage & File Sharing. Weighted by what each judge cares about, 1 of the 6 judges picks Dropbox and 5 pick Tresorit. Dropbox scores higher on 2 of 7 criteria (Export, API & self-hosting and Sync, clients & file access). Tresorit scores higher on 4 of 7 criteria (European sovereignty, Sharing & external collaboration, Pricing transparency, plus 1 more). Provenance — Dropbox: Rest of world; Tresorit: UK / wider Europe. Ratings are the AI panel’s opinion, formed from public evidence: how scores are made.
Dropbox and Tresorit split this panel along clear lines. Dropbox is ahead on portability and integrations (6.0 to 4.8, six judges leaning Dropbox) and on sync and access (6.3 to 5.7, two leans, four ties). Tresorit is ahead on sovereignty (7.0 to 2.3, six leans), sharing and collaboration (8.8 to 6.7, six leans) and pricing transparency (5.8 to 5.2, four leans, two ties). Encryption and security sits close at 7.8 to 7.5 — one Dropbox lean, three Tresorit leans, two ties — and administration and governance is 7.0 apiece, six ties. Dropbox's verdict cites 256-bit AES at rest, SSL/TLS in transit, Rewind ransomware recovery and listed SOC and ISO certifications; Tresorit's cites primary storage in the EEA or Switzerland with customer-selectable residency, beside terms disclosing sub-processing in the United States and other countries. Five of six weighted totals favor Tresorit; the architecture practice partner's favors Dropbox, 6.3 to 6.1.
Choose Dropbox if
You need clear paths to move files in and out — portability and integrations is Dropbox's strongest lean, 6.0 to 4.8 with six judges leaning Dropbox, and the captured Tresorit pages show no public information on migration tools, bulk export or a self-hosted edition.
Your team syncs multi-gigabyte BIM files — the architecture practice partner scored Tresorit's sync and access at 4 for want of public information on delta sync and previews for such files, while Dropbox's mean on sync and access is 6.3 to 5.7, with two judges leaning Dropbox and four tying.
You weight the architecture practice partner's judgment highest — that judge's total favors Dropbox, 6.3 to 6.1, the one weighted total of the six that Dropbox takes.
You need ransomware recovery tooling in the verdict record — Dropbox's encryption and security verdict cites Rewind ransomware recovery alongside 256-bit AES at rest and SSL/TLS in transit, with one judge leaning Dropbox and two tying at a 7.5 mean.
Choose Tresorit if
You must keep primary storage in the EEA or Switzerland and choose residency per customer — sovereignty is Tresorit's largest gap, 7.0 to Dropbox's 2.3 with six judges leaning Tresorit, against Dropbox's privacy policy stating data may be stored, processed and transmitted in the United States and locations around the world.
You exchange sensitive files with people outside your organization — sharing and collaboration is 8.8 to 6.7 with six judges leaning Tresorit, on encrypted links with password, expiry, open limits, disabled download and print, watermarks, file requests and zero-knowledge office editing.
You require end-to-end encrypted sync and sharing — encryption and security means run 7.8 to 7.5, with three judges leaning Tresorit, one leaning Dropbox and two tying.
You want a published euro entry price — €12 per user per month from 3 users is published, and pricing transparency is 5.8 to 5.2 with four judges leaning Tresorit and two tying, though the pages give different figures for Business storage and leave extra storage and eSign unpriced.
You follow the panel's overall weighting — five of six weighted totals favor Tresorit, 6.7, 7.2, 7.1, 6.9 and 6.7 against Dropbox's 6.3, 6, 5.7, 6.1 and 5.4.
Read this comparison as one judge. Each weighs the same scores by what they care about.
The Architecture Practice Partner
Partner in a 25-person architecture practice in Hamburg whose CAD and BIM models run to several gigabytes each, worked on from the office, from home and on the building site. Needs files on demand so laptops do not fill up, sync that sends only what changed, a drive letter the CAD software accepts, phones that open plans offline in a basement, and structural engineers who can pick up a folder without an account.
Dropbox
This judge's pick
Tresorit
Criterion by criterion
Sync, clients & file access
Dropbox
Online-only files that still appear in the file explorer and offline folders on iOS and Android are exactly what our laptops and site phones need, and desktop sync for Windows and Mac, full-text and image search, a quota-based file-size limit and a commissioned sync benchmark are all documented. We found no public information on a Linux client, on block-level or delta sync for multi-gigabyte models, or on access via WebDAV, SFTP or S3.
Tresorit
Clients for Windows, macOS, Linux, iOS and Android with camera upload, offline and online access, a web interface, cloud files reachable from the local file manager, an S3-compatible API and stated per-plan file size limits of 15 GB and 20 GB cover the basics. For the parts that decide whether multi-gigabyte BIM models actually work day to day, we found no public information on files on demand, selective sync, delta sync for large files, previews or search.
Sharing & external collaboration
Dropbox
Link controls with password, expiry and disabled downloads, watermarking and file locking, upload links that let external engineers hand over files without an account or sight of anything else, folder-level view or edit rights, and a transfer service up to 100 GB with download tracking cover most of our external work. Admin-level link restrictions to groups and an external sharing report are documented; we found no public information on guest accounts with their own permissions or an Outlook add-in.
Tresorit
Encrypted links with expiry, password, open limit, disabled downloads and dynamic watermarks, allowed-viewer and require-email controls, file requests for people without a Tresorit account — my structural engineers could pick up and hand back folders without ever registering — plus data rooms, comments, co-editing of Word, Excel and PowerPoint with the Collabora editor named, and free Outlook, Teams and Gmail plug-ins. Revocation that reaches copies already opened and recipient identity verification are only partially described, and we found no public information on file locking.
Encryption, key custody & recovery
Dropbox
The pages document SSL/TLS in transit, 256-bit AES at rest, two-factor and single sign-on, version history with plan-dependent restore windows, ransomware detection and an account or folder rewind to a point in time, plus an advanced encryption scheme with team keys rotated every twelve months and revocation requiring three team admins. Who holds the keys is described — top-level keys are generated by AWS's key management service on hardware security modules and namespace keys sit in Dropbox's database — and SOC and ISO certifications are listed, though we found no public information stating the certification scope.
Tresorit
Zero-knowledge, client-side AES-256 encryption is documented down to the RSA-4096 key scheme with a published whitepaper, the vendor states it cannot decrypt files or recover passwords, a Recovery Administrator can regain cryptographic access with user consent, two-factor authentication and SSO with Azure AD and Okta exist, previous versions and deleted files are restorable, and ISO 27001:2022 certification is stated. We found no public information on an independent audit, a penetration test or ransomware recovery, the length of version history is not stated, and folder names are not end-to-end encrypted.
Administration, audit & governance
Dropbox
An admin console with a dashboard, reports on storage, activity and members including two-factor status, an exportable filterable activity log, retention policies, legal holds, data classification with real-time DLP alerts (detection available for Germany), device approvals, remote wipe and instant transfer of leavers' accounts are all documented. We found no public information on provisioning through Entra ID, Google, LDAP or SCIM, or on a stated SIEM integration.
Tresorit
Azure AD provisioning via SSO and SCIM with Active Directory integration, exportable central audit logs of who accessed, shared or modified files, SIEM streaming to Microsoft Sentinel, approved devices, IP filtering and preconfigured policy templates at team and organization level, plus admin password reset and revoking lost devices — that is most of what I run a practice on. We found no public information on retention policies, legal hold, quotas or data loss prevention.
Export, API & self-hosting
Dropbox
A documented REST API with SDKs in six languages, webhooks, an API explorer and endpoints for revisions, team management and permanent deletion, plus a migration add-on powered by Movebot that moves files and permissions from on-premise file servers, give us a way in and a way out. The pages state deletion is initiated 30 days after account deletion and that users get an opportunity to export before termination; we found no public information on WebDAV, S3 or SFTP access, a self-hosted edition, or a bulk export of all files with folder structure and versions.
Tresorit
An S3-compatible API for automated transfers (Business Pro and Enterprise, content staying end-to-end encrypted), integrations with Microsoft 365, Outlook, Teams and Gmail, Bring Your Own Azure storage for encrypted content in our own storage account, and deleted folders said to be removed in encrypted form within 90 days give a real integration path. We found no public information on bulk export with folder structure, migration tools from named providers, SDKs, webhooks, an app marketplace or a self-hosted edition.
European sovereignty
Dropbox
The privacy policy states data may be stored, processed and transmitted in the United States and locations around the world including outside your country, with EU-to-US transfers relying on standard contractual clauses and the Data Privacy Framework, and the terms choose California law and San Francisco courts; we found no public information naming a European hosting option, the subprocessors or a data processing agreement. The advanced encryption keys being generated by AWS's key management service places a US provider in the chain.
Tresorit
The contracting entity is Tresorit AG of Zurich, part of Swiss Post, with an EU representative in Budapest; primary storage is stated as within the EEA or Switzerland, encrypted content can be pinned to a customer-selected EU or Swiss location, a data processing addendum and a subprocessor list are published, and ISO 27001:2022 is stated. The same pages say personal data may be transferred outside the EU or Switzerland, subprocessors may operate in the United States, and service data can be processed outside the chosen location, with no data centres named on the captured pages.
Pricing transparency
Dropbox
Standard at "€12 / user / month" with storage that "Starts at 3,000 GB for the team" and Advanced at "€18 / user / month" "Starts at 15 TB for the team", with minimum user counts, restore windows and transfer limits per plan, let me price our 25 seats at a glance — but how storage scales beyond the starting figure and what it costs is not shown. Enterprise is contact-sales only, the migration and governance add-ons are unpriced, and we found no public information on VAT treatment or minimum term.
Tresorit
FileSharing Business is published at €12 / user / month from 3 users and Business Pro at €20 / user / month from 5 users, each with storage and file-size limits, a stated 20% yearly discount, fees stated as exclusive of taxes, and terms covering auto-renewal, refunds and price-change notice. Extra storage, the free tier's limits, the eSign add-on and Enterprise's custom pricing from 50 users are not priced on the captured pages.
Sovereignty, side by side
Dimension
Dropbox
Tresorit
Legal entity
Not determined
Not determined
Hosting location
Not determined
Not determined
Hosting options
Not determined
Not determined
Open source
Not determined
Not determined
Data processing agreement
Not determined
Not determined
Transfer impact assessment
Not determined
Not determined
Facts, side by side
Only facts both products carry under the same definition — anything else would not be a fair row.
Compliance · Certifications
SOC 1 · SOC 2 · SOC 3 · HIPAA/HITECH · ISO 22301 · ISO 27001 · ISO 27017 · ISO 27018 · ISO 27701 · ISMAP1
As of 1 Nov 2026, the panel rates Tresorit higher: 3.5/5 against 3/5. Weighted by what each judge cares about, 1 of the 6 judges picks Dropbox and 5 pick Tresorit. Which one fits depends on the criteria that matter to you; the table on this page shows both side by side, and each judge’s reading has its own page. Both were scored by the same AI bench under the same rubric, from public evidence only, as the methodology describes.
Is Dropbox or Tresorit European?
Dropbox is not European by provenance (Rest of world). Tresorit is European (UK / wider Europe). Provenance is read from each company’s own legal pages: who builds it and who owns it.
Do Dropbox and Tresorit have a free plan?
As of 1 Nov 2026, Tresorit’s own pages state a free plan; Dropbox’s pages as captured do not. Each product page links the pricing page it was read from.