As of 1 Nov 2026, the panel rates Dropbox 3/5 and Tresorit 3.5/5 in Cloud Storage & File Sharing. Weighted by what each judge cares about, 1 of the 6 judges picks Dropbox and 5 pick Tresorit. Dropbox scores higher on 2 of 7 criteria (Export, API & self-hosting and Sync, clients & file access). Tresorit scores higher on 4 of 7 criteria (European sovereignty, Sharing & external collaboration, Pricing transparency, plus 1 more). Provenance — Dropbox: Rest of world; Tresorit: UK / wider Europe. Ratings are the AI panel’s opinion, formed from public evidence: how scores are made.
Dropbox and Tresorit split this panel along clear lines. Dropbox is ahead on portability and integrations (6.0 to 4.8, six judges leaning Dropbox) and on sync and access (6.3 to 5.7, two leans, four ties). Tresorit is ahead on sovereignty (7.0 to 2.3, six leans), sharing and collaboration (8.8 to 6.7, six leans) and pricing transparency (5.8 to 5.2, four leans, two ties). Encryption and security sits close at 7.8 to 7.5 — one Dropbox lean, three Tresorit leans, two ties — and administration and governance is 7.0 apiece, six ties. Dropbox's verdict cites 256-bit AES at rest, SSL/TLS in transit, Rewind ransomware recovery and listed SOC and ISO certifications; Tresorit's cites primary storage in the EEA or Switzerland with customer-selectable residency, beside terms disclosing sub-processing in the United States and other countries. Five of six weighted totals favor Tresorit; the architecture practice partner's favors Dropbox, 6.3 to 6.1.
Choose Dropbox if
You need clear paths to move files in and out — portability and integrations is Dropbox's strongest lean, 6.0 to 4.8 with six judges leaning Dropbox, and the captured Tresorit pages show no public information on migration tools, bulk export or a self-hosted edition.
Your team syncs multi-gigabyte BIM files — the architecture practice partner scored Tresorit's sync and access at 4 for want of public information on delta sync and previews for such files, while Dropbox's mean on sync and access is 6.3 to 5.7, with two judges leaning Dropbox and four tying.
You weight the architecture practice partner's judgment highest — that judge's total favors Dropbox, 6.3 to 6.1, the one weighted total of the six that Dropbox takes.
You need ransomware recovery tooling in the verdict record — Dropbox's encryption and security verdict cites Rewind ransomware recovery alongside 256-bit AES at rest and SSL/TLS in transit, with one judge leaning Dropbox and two tying at a 7.5 mean.
Choose Tresorit if
You must keep primary storage in the EEA or Switzerland and choose residency per customer — sovereignty is Tresorit's largest gap, 7.0 to Dropbox's 2.3 with six judges leaning Tresorit, against Dropbox's privacy policy stating data may be stored, processed and transmitted in the United States and locations around the world.
You exchange sensitive files with people outside your organization — sharing and collaboration is 8.8 to 6.7 with six judges leaning Tresorit, on encrypted links with password, expiry, open limits, disabled download and print, watermarks, file requests and zero-knowledge office editing.
You require end-to-end encrypted sync and sharing — encryption and security means run 7.8 to 7.5, with three judges leaning Tresorit, one leaning Dropbox and two tying.
You want a published euro entry price — €12 per user per month from 3 users is published, and pricing transparency is 5.8 to 5.2 with four judges leaning Tresorit and two tying, though the pages give different figures for Business storage and leave extra storage and eSign unpriced.
You follow the panel's overall weighting — five of six weighted totals favor Tresorit, 6.7, 7.2, 7.1, 6.9 and 6.7 against Dropbox's 6.3, 6, 5.7, 6.1 and 5.4.
Read this comparison as one judge. Each weighs the same scores by what they care about.
The Tax Adviser
Runs a tax practice with eleven staff and 400 clients, bound by professional secrecy under §203 StGB. Receives receipts, payslips and annual accounts from clients who will not install anything, and sends back drafts that must not end up in a forwarded email. Needs upload links, shares with expiry and passwords, a record of who downloaded what, and a provider that cannot read the files it stores.
Dropbox
Tresorit
This judge's pick
Criterion by criterion
Sync, clients & file access
Dropbox
Desktop apps sync to Windows and Mac with online-only storage and offline folders, the mobile apps on iOS and Android carry offline files and photo backup, search covers full text and images, and the file-size allowance is stated as the storage quota starting at 2 GB — that covers how my eleven staff reach client documents on any desk. The captured pages show no Linux client, no block-level or delta sync and no access through WebDAV, SFTP or S3, and the only performance figure is a Dropbox-commissioned 2023 study, so I stay in the middle band.
Tresorit
Desktop clients for Windows, macOS and Linux plus iOS and Android apps with camera upload and secure document scanning, files reachable from the local file manager, offline and online access, and a stated ten-to-twenty-gigabyte cap per file cover a tax office's daily work. The captured pages show an S3-compatible API for automated transfers but say nothing about files on demand, delta sync, previews or full-text search.
Sharing & external collaboration
Dropbox
File request links let clients upload receipts without a Dropbox account and without seeing anything else in our storage, team-plan links take password, expiry and disabled downloads, admins can restrict links to certain groups and require password and expiry on external shares, and Dropbox Transfer delivers up to 100 GB with download tracking — nearly my whole checklist for exchanging client papers. Guest accounts with their own rights, an access log for each individual share and co-editing with a named editor are not documented on the captured pages, which holds it below the top.
Tresorit
Encrypted file requests let clients hand over receipts without an account or any installation, links carry password, expiry, open limits, disabled download and print, dynamic watermarks and automatic deletion once revoked, and detailed access logs with link activity reports show who opened or downloaded what. The zero-knowledge model stays intact when sharing and even when editing Office files in the browser through the named editor Collabora, with free Outlook, Teams and Gmail plug-ins; recipient verification reaches only an allow-list plus a required email address, and we found no public information on file locking.
Encryption, key custody & recovery
Dropbox
TLS in transit and 256-bit AES at rest, two-factor authentication, stated restore windows of 30 days to one year by plan with ten years of version history on the enterprise governance page, Rewind of a whole folder or account, always-on ransomware detection with documented recovery steps, and SOC 1, 2 and 3 plus ISO 27001 and further certificates give me a security file I could put in front of an auditor. The end-to-end encryption on the Advanced plans is described as an advanced key-management system whose top-level keys are generated by AWS KMS on hardware security modules and rotated every twelve months, which a team or security admin must activate, and whose revocation — not ordinary operation — is what removes access even for Dropbox; the provider being unable to read stored files by default is therefore not shown, and the certificate scope is not given.
Tresorit
AES-256 client-side zero-knowledge encryption with the scheme published in an encryption whitepaper, passwords the provider cannot recover, a documented recovery-administrator mechanism with user consent, two-factor authentication and single sign-on, restore of previous versions and deleted files, and ISO 27001:2022 stated. Folder and room names are not end-to-end encrypted and may be visible to Tresorit during support, and the captured pages name no independent audit or penetration test, no certification scope, and nothing on ransomware detection or point-in-time restore of a whole account.
Administration, audit & governance
Dropbox
An admin console with a filterable activity log exported as CSV, member data including role and two-factor status, external sharing and member access reports, retention policies and legal holds silent to end users, PII data classification with real-time alerts, device approvals and remote wipe, and instant deactivation or transfer of a leaver's account — this is governance I could actually evidence for my practice. Directory or SCIM provisioning and streaming logs to a SIEM are not documented on the captured pages, and the sharing alerts cover only team folders.
Tresorit
A central admin console with exportable audit logs of who accessed, shared or modified files, provisioning through Azure AD with SCIM or Active Directory, IP filtering, approved devices and time restrictions, remote blocking of lost devices, policy templates at team and organisation level, and a Microsoft Sentinel SIEM integration cover most of what I must show an auditor. We found no public information on retention policies, legal hold, data loss prevention or transfer of a leaver's files.
Export, API & self-hosting
Dropbox
A documented API with SDKs in six languages, webhooks, endpoints for the team audit log and file requests, a Movebot-powered migration add-on moving files and permissions from on-premise servers and other cloud stores into a team account, and named integrations with Microsoft Teams, Zoom and Dropbox Sign. The way out is thin on these pages: open protocols such as WebDAV, S3 or SFTP, a bulk export with folder structure and versions, an app marketplace and any self-hosted edition are not documented, and after cancellation I find only a thirty-day deletion of account data and the chance to export before a suspension.
Tresorit
An S3-compatible API on the Business Pro and Enterprise plans, integrations with Microsoft 365, Outlook and Teams, and Bring Your Own Azure terms letting encrypted content sit in the customer's own Azure storage account give a real exit path for the files themselves. The captured pages show no migration tool from a named provider, no stated bulk export with folder structure, no SDKs or webhooks and no self-hosted edition, and deletion is documented as within ninety days after a folder is deleted rather than on termination.
European sovereignty
Dropbox
My contract would be with Dropbox International Unlimited Company in Dublin, yet the privacy policy says data may be stored and processed in the United States and locations around the world, transfers to the US rest on standard contractual clauses and the Data Privacy Framework, disputes are heard in San Francisco under California law, and the provider is subject to FTC oversight with top-level keys generated through AWS KMS. I found no public information on an EU hosting option, a subprocessor list or a data processing agreement, so the chain a practice bound by professional secrecy would have to vet is not open to vetting.
Tresorit
Tresorit AG of Zurich, part of Swiss Post, under Swiss governing law with an EU representative in Budapest, storing personal data primarily in the EEA or Switzerland, with customer-selectable residency per user, a published sub-processor list, a data processing addendum and ISO 27001:2022 — the right neighbourhood for a practice under professional secrecy. It stops short of full proof: personal data may also be transferred outside the EU or Switzerland, sub-processors operate in the United States among other regions, some service metadata can be processed outside the chosen location, and no data centres are named on the captured pages.
Pricing transparency
Dropbox
Standard at €12 / user / month from one user with 3,000 GB team storage and Advanced at €18 / user / month from three users with 15 TB are public, with restore windows and transfer limits stated per plan, so I can price my eleven seats at a glance. Enterprise is 'Contact sales for pricing', storage beyond the included 'starts at' amounts and the migration and data governance add-ons are unpriced, and VAT treatment and a minimum term are not stated on the captured pages.
Tresorit
FileSharing Business is stated at €12 / user / month from 3 users with 6 TB, Business Pro at €20 / user / month from at least 5 users with 15 TB, twenty percent off yearly billing, fees exclusive of taxes, and Enterprise from 50 users at custom pricing. The SecureCloud business plans carry no price on the captured pages, extra storage is unpriced, and residency and analytics features sit in higher tiers, so the real annual cost of a given setup is not computable from public pages alone.
Sovereignty, side by side
Dimension
Dropbox
Tresorit
Legal entity
Not determined
Not determined
Hosting location
Not determined
Not determined
Hosting options
Not determined
Not determined
Open source
Not determined
Not determined
Data processing agreement
Not determined
Not determined
Transfer impact assessment
Not determined
Not determined
Facts, side by side
Only facts both products carry under the same definition — anything else would not be a fair row.
Compliance · Certifications
SOC 1 · SOC 2 · SOC 3 · HIPAA/HITECH · ISO 22301 · ISO 27001 · ISO 27017 · ISO 27018 · ISO 27701 · ISMAP1
As of 1 Nov 2026, the panel rates Tresorit higher: 3.5/5 against 3/5. Weighted by what each judge cares about, 1 of the 6 judges picks Dropbox and 5 pick Tresorit. Which one fits depends on the criteria that matter to you; the table on this page shows both side by side, and each judge’s reading has its own page. Both were scored by the same AI bench under the same rubric, from public evidence only, as the methodology describes.
Is Dropbox or Tresorit European?
Dropbox is not European by provenance (Rest of world). Tresorit is European (UK / wider Europe). Provenance is read from each company’s own legal pages: who builds it and who owns it.
Do Dropbox and Tresorit have a free plan?
As of 1 Nov 2026, Tresorit’s own pages state a free plan; Dropbox’s pages as captured do not. Each product page links the pricing page it was read from.