As of 1 Nov 2026, the panel rates Dropbox 3/5 and Tresorit 3.5/5 in Cloud Storage & File Sharing. Weighted by what each judge cares about, 1 of the 6 judges picks Dropbox and 5 pick Tresorit. Dropbox scores higher on 2 of 7 criteria (Export, API & self-hosting and Sync, clients & file access). Tresorit scores higher on 4 of 7 criteria (European sovereignty, Sharing & external collaboration, Pricing transparency, plus 1 more). Provenance — Dropbox: Rest of world; Tresorit: UK / wider Europe. Ratings are the AI panel’s opinion, formed from public evidence: how scores are made.
Dropbox and Tresorit split this panel along clear lines. Dropbox is ahead on portability and integrations (6.0 to 4.8, six judges leaning Dropbox) and on sync and access (6.3 to 5.7, two leans, four ties). Tresorit is ahead on sovereignty (7.0 to 2.3, six leans), sharing and collaboration (8.8 to 6.7, six leans) and pricing transparency (5.8 to 5.2, four leans, two ties). Encryption and security sits close at 7.8 to 7.5 — one Dropbox lean, three Tresorit leans, two ties — and administration and governance is 7.0 apiece, six ties. Dropbox's verdict cites 256-bit AES at rest, SSL/TLS in transit, Rewind ransomware recovery and listed SOC and ISO certifications; Tresorit's cites primary storage in the EEA or Switzerland with customer-selectable residency, beside terms disclosing sub-processing in the United States and other countries. Five of six weighted totals favor Tresorit; the architecture practice partner's favors Dropbox, 6.3 to 6.1.
Choose Dropbox if
You need clear paths to move files in and out — portability and integrations is Dropbox's strongest lean, 6.0 to 4.8 with six judges leaning Dropbox, and the captured Tresorit pages show no public information on migration tools, bulk export or a self-hosted edition.
Your team syncs multi-gigabyte BIM files — the architecture practice partner scored Tresorit's sync and access at 4 for want of public information on delta sync and previews for such files, while Dropbox's mean on sync and access is 6.3 to 5.7, with two judges leaning Dropbox and four tying.
You weight the architecture practice partner's judgment highest — that judge's total favors Dropbox, 6.3 to 6.1, the one weighted total of the six that Dropbox takes.
You need ransomware recovery tooling in the verdict record — Dropbox's encryption and security verdict cites Rewind ransomware recovery alongside 256-bit AES at rest and SSL/TLS in transit, with one judge leaning Dropbox and two tying at a 7.5 mean.
Choose Tresorit if
You must keep primary storage in the EEA or Switzerland and choose residency per customer — sovereignty is Tresorit's largest gap, 7.0 to Dropbox's 2.3 with six judges leaning Tresorit, against Dropbox's privacy policy stating data may be stored, processed and transmitted in the United States and locations around the world.
You exchange sensitive files with people outside your organization — sharing and collaboration is 8.8 to 6.7 with six judges leaning Tresorit, on encrypted links with password, expiry, open limits, disabled download and print, watermarks, file requests and zero-knowledge office editing.
You require end-to-end encrypted sync and sharing — encryption and security means run 7.8 to 7.5, with three judges leaning Tresorit, one leaning Dropbox and two tying.
You want a published euro entry price — €12 per user per month from 3 users is published, and pricing transparency is 5.8 to 5.2 with four judges leaning Tresorit and two tying, though the pages give different figures for Business storage and leave extra storage and eSign unpriced.
You follow the panel's overall weighting — five of six weighted totals favor Tresorit, 6.7, 7.2, 7.1, 6.9 and 6.7 against Dropbox's 6.3, 6, 5.7, 6.1 and 5.4.
Read this comparison as one judge. Each weighs the same scores by what they care about.
The IT Lead
Runs IT with one colleague for a 180-person machine builder with three sites and a sales office in Poland. Is retiring the old file server and wants every account provisioned from Entra ID, team folders that stay with the company when someone leaves, an audit log they can hand to the auditor, a lost laptop wiped remotely, and a way back to the last clean state if ransomware ever encrypts a share.
Dropbox
Tresorit
This judge's pick
Criterion by criterion
Sync, clients & file access
Dropbox
Desktop sync for Windows and Mac with online-only files visible in the file explorer, offline folders on desktop and mobile, photo backup, full-text and image search, file sizes up to the storage quota starting at 2 GB, and a vendor-commissioned sync study as a performance figure. We found no public information on a Linux client, block-level sync, or access through WebDAV, SFTP or S3 — the protocols I would want for migrating the old file server.
Tresorit
Clients for Windows, Mac and Linux plus iOS and Android with camera upload and document scanning cover my three sites, files appear in the local file manager, sync runs offline and online, and file-size caps are stated at 15 to 20 GB depending on plan. Before retiring the file server I would still want answers: we found no public information on block-level or delta sync, full-text search, or preview of common formats.
Sharing & external collaboration
Dropbox
Team folders, share links with password, expiry and disabled downloads, admins able to restrict links to groups, file requests from people without accounts, watermarking, file locking and Microsoft Office editing in place, plus a Teams integration, tracked large transfers and admin reporting on externally shared content. We found no public information on guest accounts with their own permission set or a per-share access log.
Tresorit
Encrypted links with password, expiry, open limits, disabled download and print, dynamic watermarks, allowed-viewer and email-to-view checks, auto-deletion of shared files, file requests for people without an account, link activity reports and analytics — close to data-room level, with revocation immediately stopping previously authorised users from opening files. Office files edit in the app under end-to-end encryption with Collabora named as the editor and the Outlook, Teams and Gmail plug-ins are free; we found no public information on file locking or whether revocation reaches copies already downloaded.
Encryption, key custody & recovery
Dropbox
TLS in transit, 256-bit AES at rest, two-factor, and a documented advanced encryption scheme with unique team keys generated in AWS KMS, rotated every 12 months and revocable only with three team admins — plus Rewind that rolls an account or folder back to before a ransomware event, with the recovery steps published. ISO 27001, SOC 1/2/3 and more are listed as independently verified; we found no public information on an externally audited cryptography report, a bug bounty, or end-to-end encryption staying on by default at the entry tiers rather than as an Advanced-plan feature.
Tresorit
Client-side AES-256 zero-knowledge encryption with the scheme published (RSA-4096, tree of symmetric keys, non-convergent cryptography, whitepaper), no password recovery by the vendor, organisation key recovery via Advanced Control and a consented Recovery Administrator, two-factor, SSO and ISO 27001:2022 — the captured pages give different pictures of metadata encryption, with the terms stating folder and room names are not end-to-end encrypted. My ransomware worry is unresolved: we found no public information on point-in-time restore of a folder or account, ransomware detection, or a published audit report of the cryptography.
Administration, audit & governance
Dropbox
An exportable, filterable activity log of all team actions delivered as CSV plus an Events API, legal hold that stays silent to users, retention policies, content-scanning data classification with real-time external-sharing alerts, device approvals and restrictions, remote wipe of a lost laptop, and instant transfer of a leaver's account. What I did not find — and need before retiring the file server — is public information on provisioning from Entra ID via SCIM or a directory, IP restrictions, or streaming the audit log to a SIEM.
Tresorit
Provisioning from Azure AD via SSO and SCIM, Active Directory synchronisation of accounts and folder memberships, an exportable central audit log of who accessed, shared or modified any file, Sentinel SIEM streaming, policy templates with IP filtering and approved devices, group-level policy profiles, co-admins, and blocking of lost or stolen devices — this maps almost one-to-one onto my list. Not found on the captured pages: retention policies and legal hold, data loss prevention or classification, and whether a lost device is wiped rather than only blocked.
Export, API & self-hosting
Dropbox
A documented HTTP API with six official SDKs, webhooks and team endpoints, a Movebot-powered migration add-on that carries files and permissions off our on-premise file server on a schedule with real-time monitoring, deletion of account data initiated 30 days after cancellation, and an export window before termination. We found no public information on open-protocol access such as WebDAV, S3 or SFTP, a self-hosted edition, or an app marketplace.
Tresorit
An S3-compatible API (Business Pro and up, content stays end-to-end encrypted), Microsoft 365, Outlook, Teams and Sentinel integrations, and documented deletion of encrypted content within 90 days of folder deletion. For the file-server migration I am short: we found no public information on bulk export with the folder structure, migration tools from named providers, SDKs or webhooks, or a self-hosted edition; Bring Your Own Azure Storage is the only self-managed storage option evidenced.
European sovereignty
Dropbox
Customers outside North America contract with Dropbox International Unlimited Company in Dublin, but the captured pages state data may be stored and processed in the United States and around the world, transfers to the US rest on the Data Privacy Framework and standard contractual clauses, and the terms are governed by California law in San Francisco courts. We found no public information on an EU storage option, a subprocessor list with locations, or a published data processing agreement — for our Polish sites that means SCCs and the DPF carry the whole chain.
Tresorit
Tresorit AG of Zurich under Swiss law, part of Swiss Post, primary storage in the EEA or Switzerland, a customer-selectable EU residency option, a published subprocessor list, a Data Processing Addendum and ISO 27001:2022 — a chain I could defend to our auditor. Caveats: residency only covers content uploaded after the customer selects the location, some service data and sub-processing can run in the United States and other countries, and we found no public information naming the data centres.
Pricing transparency
Dropbox
Standard at €12 / user / month with 3,000 GB for the team and Advanced at €18 / user / month starting at 15 TB are public, with minimum users, restore windows and which tier carries single sign-on and end-to-end encryption all stated. But the Enterprise plan is sales-only, and we found no public prices for storage beyond the starting allocation or the Data Governance and migration add-ons, nor any statement of minimum term or VAT — so I cannot compute our real annual cost for 180 people from public pages alone.
Tresorit
The FileSharing tiers are public: €12 / user / month from 3 users with from 6 TB, Business Pro at €20 / user / month from 5 users with from 15 TB, 20% OFF yearly, 1 TB encrypted storage per user on the sharing plans, with minimum users, VAT treatment (fees exclusive of taxes) and renewal and refund rules stated in the terms. Gaps: we found no public price for extra storage, the eSign add-on or the SecureCloud plans, and Enterprise is custom pricing from 50 users.
Sovereignty, side by side
Dimension
Dropbox
Tresorit
Legal entity
Not determined
Not determined
Hosting location
Not determined
Not determined
Hosting options
Not determined
Not determined
Open source
Not determined
Not determined
Data processing agreement
Not determined
Not determined
Transfer impact assessment
Not determined
Not determined
Facts, side by side
Only facts both products carry under the same definition — anything else would not be a fair row.
Compliance · Certifications
SOC 1 · SOC 2 · SOC 3 · HIPAA/HITECH · ISO 22301 · ISO 27001 · ISO 27017 · ISO 27018 · ISO 27701 · ISMAP1
As of 1 Nov 2026, the panel rates Tresorit higher: 3.5/5 against 3/5. Weighted by what each judge cares about, 1 of the 6 judges picks Dropbox and 5 pick Tresorit. Which one fits depends on the criteria that matter to you; the table on this page shows both side by side, and each judge’s reading has its own page. Both were scored by the same AI bench under the same rubric, from public evidence only, as the methodology describes.
Is Dropbox or Tresorit European?
Dropbox is not European by provenance (Rest of world). Tresorit is European (UK / wider Europe). Provenance is read from each company’s own legal pages: who builds it and who owns it.
Do Dropbox and Tresorit have a free plan?
As of 1 Nov 2026, Tresorit’s own pages state a free plan; Dropbox’s pages as captured do not. Each product page links the pricing page it was read from.