As of 1 Nov 2026, the panel rates Dropbox 3/5 and Tresorit 3.5/5 in Cloud Storage & File Sharing. Weighted by what each judge cares about, 1 of the 6 judges picks Dropbox and 5 pick Tresorit. Dropbox scores higher on 2 of 7 criteria (Export, API & self-hosting and Sync, clients & file access). Tresorit scores higher on 4 of 7 criteria (European sovereignty, Sharing & external collaboration, Pricing transparency, plus 1 more). Provenance — Dropbox: Rest of world; Tresorit: UK / wider Europe. Ratings are the AI panel’s opinion, formed from public evidence: how scores are made.
Dropbox and Tresorit split this panel along clear lines. Dropbox is ahead on portability and integrations (6.0 to 4.8, six judges leaning Dropbox) and on sync and access (6.3 to 5.7, two leans, four ties). Tresorit is ahead on sovereignty (7.0 to 2.3, six leans), sharing and collaboration (8.8 to 6.7, six leans) and pricing transparency (5.8 to 5.2, four leans, two ties). Encryption and security sits close at 7.8 to 7.5 — one Dropbox lean, three Tresorit leans, two ties — and administration and governance is 7.0 apiece, six ties. Dropbox's verdict cites 256-bit AES at rest, SSL/TLS in transit, Rewind ransomware recovery and listed SOC and ISO certifications; Tresorit's cites primary storage in the EEA or Switzerland with customer-selectable residency, beside terms disclosing sub-processing in the United States and other countries. Five of six weighted totals favor Tresorit; the architecture practice partner's favors Dropbox, 6.3 to 6.1.
Choose Dropbox if
You need clear paths to move files in and out — portability and integrations is Dropbox's strongest lean, 6.0 to 4.8 with six judges leaning Dropbox, and the captured Tresorit pages show no public information on migration tools, bulk export or a self-hosted edition.
Your team syncs multi-gigabyte BIM files — the architecture practice partner scored Tresorit's sync and access at 4 for want of public information on delta sync and previews for such files, while Dropbox's mean on sync and access is 6.3 to 5.7, with two judges leaning Dropbox and four tying.
You weight the architecture practice partner's judgment highest — that judge's total favors Dropbox, 6.3 to 6.1, the one weighted total of the six that Dropbox takes.
You need ransomware recovery tooling in the verdict record — Dropbox's encryption and security verdict cites Rewind ransomware recovery alongside 256-bit AES at rest and SSL/TLS in transit, with one judge leaning Dropbox and two tying at a 7.5 mean.
Choose Tresorit if
You must keep primary storage in the EEA or Switzerland and choose residency per customer — sovereignty is Tresorit's largest gap, 7.0 to Dropbox's 2.3 with six judges leaning Tresorit, against Dropbox's privacy policy stating data may be stored, processed and transmitted in the United States and locations around the world.
You exchange sensitive files with people outside your organization — sharing and collaboration is 8.8 to 6.7 with six judges leaning Tresorit, on encrypted links with password, expiry, open limits, disabled download and print, watermarks, file requests and zero-knowledge office editing.
You require end-to-end encrypted sync and sharing — encryption and security means run 7.8 to 7.5, with three judges leaning Tresorit, one leaning Dropbox and two tying.
You want a published euro entry price — €12 per user per month from 3 users is published, and pricing transparency is 5.8 to 5.2 with four judges leaning Tresorit and two tying, though the pages give different figures for Business storage and leave extra storage and eSign unpriced.
You follow the panel's overall weighting — five of six weighted totals favor Tresorit, 6.7, 7.2, 7.1, 6.9 and 6.7 against Dropbox's 6.3, 6, 5.7, 6.1 and 5.4.
Read this comparison as one judge. Each weighs the same scores by what they care about.
The Skeptic
Has seen "end-to-end encrypted" on a service that switches it off for shared folders, "hosted in Germany" on storage whose accounts and support run from the US, and "lifetime" plans from a company two years old. Reads that a product is "GDPR-compliant" and asks who holds the keys, whether ten years of folders, versions and shares can be exported in a form another provider imports — and what leaving would cost.
Dropbox
Tresorit
This judge's pick
Criterion by criterion
Sync, clients & file access
Dropbox
Desktop sync for Windows and Mac with online-only files viewable in the file explorer, offline folders on desktop and mobile, full-text search and stated file sizes are all documented. We found no public information on a Linux client, block-level or delta sync, or access through open protocols such as WebDAV, SFTP or S3 — the one performance claim is a commissioned study, not a technical figure.
Tresorit
Clients for Windows, macOS, Linux, iOS and Android are documented, with camera upload, document scanning, sync across devices, files reachable from the local file manager, and stated file-size limits (10, 15 and 20 GB by plan; secure links up to 5 GB); an S3-compatible API exists but only for Business Pro and Enterprise. We found no public information on selective sync, block-level or delta sync, file previews, or search of any kind, so the access mechanics beyond the clients themselves are thin on the captured pages.
Sharing & external collaboration
Dropbox
Links with password, expiry and disabled downloads, admins able to restrict link access to groups, file requests for people without an account, view-only and edit permissions, watermarking, file locking and transfers up to 100 GB are documented. We found no public information on guest accounts with their own permissions, an access log per share, or a download-count limit, and the browser co-editing claim does not name its editor.
Tresorit
This is close to data-room territory on paper: link expiry, passwords and open limits, disabled download and print, dynamic watermarks, access logs and link activity reports, auto-deletion when a link is revoked or expires, encrypted file requests from people without an account, end-to-end office editing built on Collabora, branded data rooms, and free Outlook, Teams and Gmail plug-ins. The zero-knowledge page states revocation immediately prevents previously authorized users from opening shared files, and sharing keeps the zero-knowledge model intact. We found no public information on file locking or full recipient identity verification beyond requiring an email to view.
Encryption, key custody & recovery
Dropbox
TLS and 256-bit AES are stated, version recovery runs to ten years on the governance pages with plan-specific restore windows, ransomware detection and Rewind of a whole account or folder are documented, and a whitepaper plus SOC and ISO 27001 certifications are named — though their scope is not shown. The key custody documentation is candid about who holds the keys: top-level keys from AWS KMS and namespace keys stored encrypted in Dropbox's database, so this is provider-managed encryption, and revocation is permanent and irreversible.
Tresorit
The core is strong and specific: AES-256 client-side zero-knowledge encryption with the scheme published (RSA-4096 with OAEP padding, a tree of symmetric keys, non-convergent cryptography, HMAC or AEAD integrity), an encryption whitepaper, passwords Tresorit itself cannot recover, admin key recovery only with user consent, two-factor authentication, version restore and deleted-file recovery, and ISO 27001:2022 stated. What a skeptic wants and does not find: no independent audit, penetration test or bug bounty is named, certification scope is not stated, folder and room names are by the terms' own statement not end-to-end encrypted and may be visible to Tresorit for support, and we found no public information on ransomware detection or restoring an account to a point in time.
Administration, audit & governance
Dropbox
The admin console offers a filterable, exportable activity log, reports on storage, external links, member access and two-factor status, retention policies and a legal hold silent to end users, device approvals, remote wipe, offboarding transfers and data classification with real-time alerts. We found no public information on provisioning through SCIM or a directory, on IP restrictions, or on streaming the audit log to a SIEM — only a vague "integrations with best in-class security solutions".
Tresorit
A central admin console with exportable audit logs of who accessed, shared or modified files, provisioning through Azure AD SCIM, Okta and Active Directory, SIEM streaming to Microsoft Sentinel, device and IP policies with remote blocking of lost devices, and granular policy templates at team and organization level are all documented. We found no public information on retention policies, legal hold, eDiscovery export, or data loss prevention and classification, and the audit log's retention period and completeness are not stated — so a regulated buyer can manage access here, not records.
Export, API & self-hosting
Dropbox
A documented API with six named SDKs, webhooks, audit-log endpoints and an API explorer is public, a migration add-on powered by Movebot moves files and permissions in from file servers and other clouds through the sales team, and deletion of account data starts 30 days after account deletion with an export opportunity before termination. We found no public information on open-protocol access like WebDAV, S3 or SFTP, on a self-hosted edition, on open-source code, or on a bulk export that carries versions, shares and permissions in a documented format.
Tresorit
What is documented: an S3-compatible API for Business Pro and Enterprise that replaces manual download-and-reupload with automated transfers, Microsoft 365, Outlook, Teams and Gmail integrations, a Bring Your Own Azure Storage arrangement keeping encrypted content in the customer's own storage account, and deletion of encrypted content within 90 days of removing a folder (60 days for technical reasons). We found no public information on a bulk export that preserves folders and versions, migration tools from any named provider, SDKs, webhooks, an app marketplace, or a self-hosted edition — so I cannot tell a buyer what leaving would actually cost in effort.
European sovereignty
Dropbox
Customers outside North America contract with Dropbox International Unlimited Company in Dublin, yet the same terms are governed by California law with disputes in San Francisco courts, the company is subject to FTC oversight, and storage is described only as "in the United States and locations around the world". We found no public information on a European hosting option, a published data processing agreement, or a list of subprocessors and their locations; transfers rest on the Data Privacy Framework and standard contractual clauses.
Tresorit
The chain's head is genuinely European: Tresorit AG of Zurich, part of Swiss Post (covered by the Swiss adequacy decision), primary storage in the EEA or Switzerland, customer-selectable regions, a published subprocessor list and a published data processing addendum, and ISO 27001 stated. The fine print keeps it below the top: the terms acknowledge sub-processing in the United States and other countries, the residency option covers only content uploaded after the customer subscribes and selects a location while service data and metadata may remain outside it, and we found no public information naming the data centres or the location of each subprocessor.
Pricing transparency
Dropbox
Standard at €12 per user per month with 3,000 GB for the team and Advanced at €18 per user per month with 15 TB are public, with minimum users, restore windows and transfer limits stated and single sign-on and advanced encryption sitting in the Advanced tier. But Enterprise is "Contact sales for pricing", the cost of storage beyond "starts at" is not published, the data governance and migration add-ons are sales-only, and we found no public information on VAT treatment or minimum terms.
Tresorit
Per-user prices are public with storage, file-size limits and minimum users for the paid tiers — "€12 / user / month" from 3 users and "€20 / user / month" from 5 users, a 20% yearly discount, fees stated as exclusive of taxes, and auto-renewal, cancellation and no-refund terms in the terms of use. Enterprise is custom-priced from 50 users, and we found no public information on what extra storage costs or what the eSign add-on is priced at, so a full annual cost for a large team is not computable from the captured pages alone.
Sovereignty, side by side
Dimension
Dropbox
Tresorit
Legal entity
Not determined
Not determined
Hosting location
Not determined
Not determined
Hosting options
Not determined
Not determined
Open source
Not determined
Not determined
Data processing agreement
Not determined
Not determined
Transfer impact assessment
Not determined
Not determined
Facts, side by side
Only facts both products carry under the same definition — anything else would not be a fair row.
Compliance · Certifications
SOC 1 · SOC 2 · SOC 3 · HIPAA/HITECH · ISO 22301 · ISO 27001 · ISO 27017 · ISO 27018 · ISO 27701 · ISMAP1
As of 1 Nov 2026, the panel rates Tresorit higher: 3.5/5 against 3/5. Weighted by what each judge cares about, 1 of the 6 judges picks Dropbox and 5 pick Tresorit. Which one fits depends on the criteria that matter to you; the table on this page shows both side by side, and each judge’s reading has its own page. Both were scored by the same AI bench under the same rubric, from public evidence only, as the methodology describes.
Is Dropbox or Tresorit European?
Dropbox is not European by provenance (Rest of world). Tresorit is European (UK / wider Europe). Provenance is read from each company’s own legal pages: who builds it and who owns it.
Do Dropbox and Tresorit have a free plan?
As of 1 Nov 2026, Tresorit’s own pages state a free plan; Dropbox’s pages as captured do not. Each product page links the pricing page it was read from.