As of 1 Nov 2026, the panel rates Dropbox 3/5 and Tresorit 3.5/5 in Cloud Storage & File Sharing. Weighted by what each judge cares about, 1 of the 6 judges picks Dropbox and 5 pick Tresorit. Dropbox scores higher on 2 of 7 criteria (Export, API & self-hosting and Sync, clients & file access). Tresorit scores higher on 4 of 7 criteria (European sovereignty, Sharing & external collaboration, Pricing transparency, plus 1 more). Provenance — Dropbox: Rest of world; Tresorit: UK / wider Europe. Ratings are the AI panel’s opinion, formed from public evidence: how scores are made.
Dropbox and Tresorit split this panel along clear lines. Dropbox is ahead on portability and integrations (6.0 to 4.8, six judges leaning Dropbox) and on sync and access (6.3 to 5.7, two leans, four ties). Tresorit is ahead on sovereignty (7.0 to 2.3, six leans), sharing and collaboration (8.8 to 6.7, six leans) and pricing transparency (5.8 to 5.2, four leans, two ties). Encryption and security sits close at 7.8 to 7.5 — one Dropbox lean, three Tresorit leans, two ties — and administration and governance is 7.0 apiece, six ties. Dropbox's verdict cites 256-bit AES at rest, SSL/TLS in transit, Rewind ransomware recovery and listed SOC and ISO certifications; Tresorit's cites primary storage in the EEA or Switzerland with customer-selectable residency, beside terms disclosing sub-processing in the United States and other countries. Five of six weighted totals favor Tresorit; the architecture practice partner's favors Dropbox, 6.3 to 6.1.
Choose Dropbox if
You need clear paths to move files in and out — portability and integrations is Dropbox's strongest lean, 6.0 to 4.8 with six judges leaning Dropbox, and the captured Tresorit pages show no public information on migration tools, bulk export or a self-hosted edition.
Your team syncs multi-gigabyte BIM files — the architecture practice partner scored Tresorit's sync and access at 4 for want of public information on delta sync and previews for such files, while Dropbox's mean on sync and access is 6.3 to 5.7, with two judges leaning Dropbox and four tying.
You weight the architecture practice partner's judgment highest — that judge's total favors Dropbox, 6.3 to 6.1, the one weighted total of the six that Dropbox takes.
You need ransomware recovery tooling in the verdict record — Dropbox's encryption and security verdict cites Rewind ransomware recovery alongside 256-bit AES at rest and SSL/TLS in transit, with one judge leaning Dropbox and two tying at a 7.5 mean.
Choose Tresorit if
You must keep primary storage in the EEA or Switzerland and choose residency per customer — sovereignty is Tresorit's largest gap, 7.0 to Dropbox's 2.3 with six judges leaning Tresorit, against Dropbox's privacy policy stating data may be stored, processed and transmitted in the United States and locations around the world.
You exchange sensitive files with people outside your organization — sharing and collaboration is 8.8 to 6.7 with six judges leaning Tresorit, on encrypted links with password, expiry, open limits, disabled download and print, watermarks, file requests and zero-knowledge office editing.
You require end-to-end encrypted sync and sharing — encryption and security means run 7.8 to 7.5, with three judges leaning Tresorit, one leaning Dropbox and two tying.
You want a published euro entry price — €12 per user per month from 3 users is published, and pricing transparency is 5.8 to 5.2 with four judges leaning Tresorit and two tying, though the pages give different figures for Business storage and leave extra storage and eSign unpriced.
You follow the panel's overall weighting — five of six weighted totals favor Tresorit, 6.7, 7.2, 7.1, 6.9 and 6.7 against Dropbox's 6.3, 6, 5.7, 6.1 and 5.4.
Read this comparison as one judge. Each weighs the same scores by what they care about.
The Data Protection Officer
External data protection officer for a hospital group, two care providers and a payroll bureau, where the files are patient letters and salary statements. Reads who holds the keys before the feature page, asks whether end-to-end encryption survives a share link and the office editor, and wants the subprocessor list, the storage location and the contracting entity in writing before a single folder moves.
Dropbox
Tresorit
This judge's pick
Criterion by criterion
Sync, clients & file access
Dropbox
Desktop sync for Windows and Mac with online-only files shown in the file explorer, offline folders on desktop and mobile, photo backup, and full-text and image search are documented, and file size is tied to the storage quota rather than a fixed cap. A 2023 Principled Technologies study commissioned by Dropbox is cited for sync performance. We found no public information on a Linux client, on WebDAV, SFTP or S3 access, or on block-level delta sync.
Tresorit
Clients are offered for Windows, macOS and Linux, with iOS and Android apps carrying camera uploads and document scanning, and the download pages describe working with cloud files directly in the local file manager. Maximum file sizes are stated per plan (10 GB to 20 GB), offline and online access is claimed, and an S3-compatible API is offered on higher licences. We found no public information on block-level or delta sync, full-text search, WebDAV or SFTP access, preview behaviour, or performance figures for large folders.
Sharing & external collaboration
Dropbox
Links with password, expiration and disabled downloads on team plans, view and edit permissions down to subfolders, file requests from people without accounts, watermarking, file locking, and a transfer service up to 100 GB with download tracking are documented, and admins can restrict link access to groups and require passwords and expiry on externally shared links. Office files can be created and edited directly in Dropbox, though we found no public information naming the co-editing suite, on guest accounts with their own permissions, or on a per-link access log.
Tresorit
Encrypted links carry passwords, expiry, open limits, disabled download and print, allowed-viewer and email-verification controls and dynamic watermarking, and the zero-knowledge model is stated to remain intact when sharing externally and through in-app office editing built on Collabora Online. Revocation at any time, link activity reports, per-share access logs, encrypted file requests for recipients without an account, and free Outlook, Teams and Gmail plug-ins replacing attachments are all documented. We found no public information on file locking, and whether revocation reaches copies a recipient has already opened is not stated.
Encryption, key custody & recovery
Dropbox
TLS in transit and 256-bit AES at rest, two-factor authentication, single sign-on, tiered restore windows up to one year plus a stated ten-year recovery option, Rewind of a whole folder or account, documented ransomware recovery steps, and certifications including SOC 1, 2 and 3, ISO 27001 and HIPAA with independent verification are stated. What matters for patient letters: the advanced encryption documentation shows top-level keys generated by Amazon Web Services Key Management Service and namespace keys stored encrypted in Dropbox's own database, so key custody rests with the provider even on tiers marketed as end-to-end encrypted. We found no public information on an externally published audit report of the scheme or a bug bounty.
Tresorit
Client-side AES-256 zero-knowledge encryption is documented with the provider unable to decrypt, backed by a published encryption whitepaper detailing RSA-4096 with OAEP padding, a tree of symmetric keys, non-convergent cryptography and HMAC or AEAD integrity protection, and end-to-end encryption is stated to survive both sharing and office editing. Two-factor authentication, single sign-on with Azure AD and Okta, version restore, deleted-file recovery, an ISO 27001:2022 certification and organisational key recovery through a consent-based recovery administrator are all stated. We found no public information on an independent audit or penetration test of the cryptography, ransomware detection, restore of an account to a point in time, or the scope of the ISO certification.
Administration, audit & governance
Dropbox
An admin console with tiered admin roles, groups, an exportable activity report filterable by event, member and date range, retention policies, legal hold silent to end users, data classification scanning for card and passport numbers with real-time external-sharing alerts, device approvals, device-level restrictions, remote wipe and offboarding transfer are all documented, alongside a reports suite covering external sharing and members' two-factor status. We found no public information on provisioning via SCIM or a directory such as Entra ID or LDAP, or on streaming audit events to a SIEM.
Tresorit
A central admin console with exportable audit logs of who accessed, shared or modified files, provisioning via Azure AD SSO and SCIM plus Active Directory and Okta, and SIEM streaming to Microsoft Sentinel are all documented. Policy profiles per user group enforce two-step verification, IP filtering, timeout, approved devices and sharing rules, devices can be locked out remotely, and an Advanced Control administrator can reset lost passwords and revoke device access. We found no public information on quotas, legal hold, data loss prevention or classification, or account transfer when an employee leaves.
Export, API & self-hosting
Dropbox
A documented API with official SDKs for six languages, webhooks and team endpoints including the audit log, a machine-readable download, deletion initiated 30 days after account deletion, and an inbound migration add-on powered by Movebot sold through the sales team with permission transfer are stated. We found no public information on open-protocol access such as WebDAV, S3 or SFTP, a self-hosted or on-premise edition, open-source code, or a bulk export that includes versions and permissions.
Tresorit
An S3-compatible API on higher licences supports automated transfers with content staying end-to-end encrypted, integrations with Microsoft 365, Outlook, Teams and Gmail are named, and the terms provide for storing encrypted content in the customer's own Azure storage account under Bring Your Own Azure Storage. We found no public information on migration tools from named providers, a REST API with SDKs or webhooks, bulk export preserving folder structure, an app marketplace, or a self-hosted edition; deletion timelines are stated for user-initiated deletion rather than contract termination.
European sovereignty
Dropbox
Customers outside North America contract with Dropbox International Unlimited Company in Dublin, but the terms are governed by California law with proceedings in San Francisco courts, and the privacy policy states data may be stored, processed and transmitted in the United States and locations around the world, with EU-to-US transfers relying on Standard Contractual Clauses and the Data Privacy Framework and the parent under FTC oversight. Key generation runs through Amazon Web Services KMS, and we found no public information on a named data-centre location, an EU hosting option, a subprocessor list or a published data processing agreement.
Tresorit
The contracting entity is in writing — Tresorit AG of Zurich with its registration number, part of Swiss Post, under Swiss law with a Budapest representative — storage is stated as primarily EEA or Switzerland with customer-selectable EU or Swiss residency, a data processing addendum is published, ISO 27001:2022 is stated and Swiss adequacy is confirmed. The subprocessor list is published at a stated address, but the terms disclose sub-processor processing in the United States and other countries, the privacy policy reserves transfers outside the EU and Switzerland, and some service data and metadata may be handled outside the selected location, with folder and room names visible to Tresorit during support. The data centres behind the residency regions are not named on the captured pages.
Pricing transparency
Dropbox
Standard at €12 / user / month starting at 3,000 GB for the team and Advanced at €18 / user / month starting at 15 TB are public, with minimum users of 1 and 3, per-tier restore windows and transfer limits, and end-to-end encryption, advanced key management and single sign-on mapped to the Advanced tier. Enterprise is "Contact sales for pricing", and we found no public information on extra-storage pricing, the cost of the data migration add-on, or VAT treatment; the free trial requires a payment method and continues as a paid subscription unless cancelled beforehand.
Tresorit
FileSharing Business is published at €12 per user per month from 3 users with 1 TB encrypted storage per user, Business Pro at €20 per user per month from 5 users with from 15 TB, a 20% yearly discount, a free tier and a free trial, and the terms state fees are exclusive of taxes with thirty days' notice on price changes. Enterprise is custom pricing from 50 users billed annually. We found no public information on the price of extra storage or the eSign add-on, so the full annual cost of a given team and feature set cannot be computed from public pages alone.
Sovereignty, side by side
Dimension
Dropbox
Tresorit
Legal entity
Not determined
Not determined
Hosting location
Not determined
Not determined
Hosting options
Not determined
Not determined
Open source
Not determined
Not determined
Data processing agreement
Not determined
Not determined
Transfer impact assessment
Not determined
Not determined
Facts, side by side
Only facts both products carry under the same definition — anything else would not be a fair row.
Compliance · Certifications
SOC 1 · SOC 2 · SOC 3 · HIPAA/HITECH · ISO 22301 · ISO 27001 · ISO 27017 · ISO 27018 · ISO 27701 · ISMAP1
As of 1 Nov 2026, the panel rates Tresorit higher: 3.5/5 against 3/5. Weighted by what each judge cares about, 1 of the 6 judges picks Dropbox and 5 pick Tresorit. Which one fits depends on the criteria that matter to you; the table on this page shows both side by side, and each judge’s reading has its own page. Both were scored by the same AI bench under the same rubric, from public evidence only, as the methodology describes.
Is Dropbox or Tresorit European?
Dropbox is not European by provenance (Rest of world). Tresorit is European (UK / wider Europe). Provenance is read from each company’s own legal pages: who builds it and who owns it.
Do Dropbox and Tresorit have a free plan?
As of 1 Nov 2026, Tresorit’s own pages state a free plan; Dropbox’s pages as captured do not. Each product page links the pricing page it was read from.