As of 1 Nov 2026, the panel rates Proton Drive 3/5 and Tresorit 3.5/5 in Cloud Storage & File Sharing. Weighted by what each judge cares about, 0 of the 6 judges pick Proton Drive and 5 pick Tresorit, 1 calls it a tie. Proton Drive scores higher on 3 of 7 criteria (European sovereignty, Encryption, key custody & recovery and Sync, clients & file access). Tresorit scores higher on 3 of 7 criteria (Sharing & external collaboration, Administration, audit & governance and Export, API & self-hosting). Provenance — Proton Drive: UK / wider Europe; Tresorit: UK / wider Europe. Ratings are the AI panel’s opinion, formed from public evidence: how scores are made.
Proton Drive holds the security bench: encryption and security averages 8.7 to 7.8, with five judges leaning its way and one tie, and sovereignty runs 8.0 to 7.0 on six leans — its verdict records a Swiss entity, self-owned data centres in Switzerland and Germany, and a published GDPR data processing agreement, with payment and support subprocessors such as Stripe and Zendesk processing in the United States under standard contractual clauses. Tresorit takes sharing and collaboration 8.8 to 5.8 and administration and governance 7.0 to 5.8 on six leans each, plus portability and integrations 4.8 to 4.0 on five leans with one tie. Sync and access, 5.8 to 5.7, and pricing transparency, level at 5.8, split one lean either way with four ties each. On weighted totals, five judges put Tresorit ahead; the architect scores both 6.1.
Choose Proton Drive if
You rank encryption and security first: five judges lean Proton Drive there, 8.7 to 7.8, and the verdict records contents, names and metadata encrypted on the device with keys never leaving it.
Your procurement wants a Swiss footing: the verdict records Proton AG contracted under Swiss law, self-owned data centres in Switzerland and Germany, and a published GDPR data processing agreement, and six judges lean Proton Drive on sovereignty, 8.0 to 7.0.
You need long recovery windows: the verdict records ten years of version recovery on paid plans.
You want code you can inspect: the verdict records open-source apps with published Securitum audits and a bug bounty reaching USD 100,000.
Choose Tresorit if
Your work runs through external sharing: six judges lean Tresorit on sharing and collaboration, 8.8 to 5.8, on encrypted links with password, expiry, disabled download and print, watermarks, and file requests for recipients without an account.
You administer a team: six judges lean Tresorit on administration and governance, 7.0 to 5.8.
You weight portability and integrations: five judges lean Tresorit there, 4.8 to 4.0, with one tie.
Your team edits documents in place: the verdict records zero-knowledge office editing on Collabora.
Read this comparison as one judge. Each weighs the same scores by what they care about.
The Data Protection Officer
External data protection officer for a hospital group, two care providers and a payroll bureau, where the files are patient letters and salary statements. Reads who holds the keys before the feature page, asks whether end-to-end encryption survives a share link and the office editor, and wants the subprocessor list, the storage location and the contracting entity in writing before a single folder moves.
Proton Drive
Tresorit
This judge's pick
Criterion by criterion
Sync, clients & file access
Proton Drive
Windows and macOS apps with on-demand placeholders, per-file offline pinning and automatic upload of offline edits are documented, alongside mobile apps with automatic photo backup, a web interface and a command-line client for Windows, macOS and Linux; transfers are stated to run without file size limits and large uploads resume after interruptions. We found no public information on block-level sync, full-text search, previews, or access through WebDAV, SFTP or S3, so this sits just above the middle level.
Tresorit
Clients are offered for Windows, macOS and Linux, with iOS and Android apps carrying camera uploads and document scanning, and the download pages describe working with cloud files directly in the local file manager. Maximum file sizes are stated per plan (10 GB to 20 GB), offline and online access is claimed, and an S3-compatible API is offered on higher licences. We found no public information on block-level or delta sync, full-text search, WebDAV or SFTP access, preview behaviour, or performance figures for large folders.
Sharing & external collaboration
Proton Drive
Links with password and expiry, viewer and editor roles, uploads into shared folders by recipients without an account, one-click revocation that takes effect immediately, download counting and real-time co-editing in the in-house editor are all documented. For patient letters and salary statements I still want the controls an administrator sets, download limits, watermarking, a per-share access log, file locking and comments — we found no public information on any of these.
Tresorit
Encrypted links carry passwords, expiry, open limits, disabled download and print, allowed-viewer and email-verification controls and dynamic watermarking, and the zero-knowledge model is stated to remain intact when sharing externally and through in-app office editing built on Collabora Online. Revocation at any time, link activity reports, per-share access logs, encrypted file requests for recipients without an account, and free Outlook, Teams and Gmail plug-ins replacing attachments are all documented. We found no public information on file locking, and whether revocation reaches copies a recipient has already opened is not stated.
Encryption, key custody & recovery
Proton Drive
On-device end-to-end encryption covering contents, names and metadata, keys that never leave the user's device, OpenPGP with Curve25519, open-source apps audited by Securitum with published reports, a public bug bounty, ISO 27001 and SOC 2 Type II, ten-year version recovery and rollback described as ransomware recovery — and the provider states in writing it cannot decrypt content and cannot recover data after a lost password. I stop short of the top because the certifications are stated without scope or date, and no key-recovery path for an organisation is documented, which is a double-edged sword for clinical files.
Tresorit
Client-side AES-256 zero-knowledge encryption is documented with the provider unable to decrypt, backed by a published encryption whitepaper detailing RSA-4096 with OAEP padding, a tree of symmetric keys, non-convergent cryptography and HMAC or AEAD integrity protection, and end-to-end encryption is stated to survive both sharing and office editing. Two-factor authentication, single sign-on with Azure AD and Okta, version restore, deleted-file recovery, an ISO 27001:2022 certification and organisational key recovery through a consent-based recovery administrator are all stated. We found no public information on an independent audit or penetration test of the cryptography, ransomware detection, restore of an account to a point in time, or the scope of the ISO certification.
Administration, audit & governance
Proton Drive
Three admin roles with a documented permission matrix covering SAML single sign-on, SCIM provisioning, data retention and an exportable activity monitor, plus member, group and storage management, give real delegated administration. We found no public information on external-sharing policies, legal hold, remote wipe, device or IP restrictions, data loss prevention or SIEM streaming, and the documented transfer path concerns emails rather than files.
Tresorit
A central admin console with exportable audit logs of who accessed, shared or modified files, provisioning via Azure AD SSO and SCIM plus Active Directory and Okta, and SIEM streaming to Microsoft Sentinel are all documented. Policy profiles per user group enforce two-step verification, IP filtering, timeout, approved devices and sharing rules, devices can be locked out remotely, and an Advanced Control administrator can reset lost passwords and revoke device access. We found no public information on quotas, legal hold, data loss prevention or classification, or account transfer when an employee leaves.
Export, API & self-hosting
Proton Drive
Import from Dropbox is documented in one direction, documents export to.docx,.html,.txt,.md and.pdf, a command-line tool exists for automation, and the data processing agreement commits to deleting all customer personal data when a service ceases. We found no public information on a REST API, webhooks, bulk export preserving the folder structure, open-protocol access or a self-hosted edition, so leaving looks harder than arriving.
Tresorit
An S3-compatible API on higher licences supports automated transfers with content staying end-to-end encrypted, integrations with Microsoft 365, Outlook, Teams and Gmail are named, and the terms provide for storing encrypted content in the customer's own Azure storage account under Bring Your Own Azure Storage. We found no public information on migration tools from named providers, a REST API with SDKs or webhooks, bulk export preserving folder structure, an app marketplace, or a self-hosted edition; deletion timelines are stated for user-initiated deletion rather than contract termination.
European sovereignty
Proton Drive
The contracting entity is Proton AG in Plan-les-Ouates under Swiss law, storage runs on self-owned hardware in data centres in Switzerland and Germany with biometric access, a GDPR data processing agreement is published, transfers are limited to Switzerland, the EU and adequacy countries, and a Luxembourg representative is named. The subprocessor list is published with locations, but support and payment run through United States processors, with standard contractual clauses and data processing agreements stated as safeguards. I stop one step short of the top because those links of the chain are not European and no self-hosted edition is documented.
Tresorit
The contracting entity is in writing — Tresorit AG of Zurich with its registration number, part of Swiss Post, under Swiss law with a Budapest representative — storage is stated as primarily EEA or Switzerland with customer-selectable EU or Swiss residency, a data processing addendum is published, ISO 27001:2022 is stated and Swiss adequacy is confirmed. The subprocessor list is published at a stated address, but the terms disclose sub-processor processing in the United States and other countries, the privacy policy reserves transfers outside the EU and Switzerland, and some service data and metadata may be handled outside the selected location, with folder and room names visible to Tresorit during support. The data centres behind the residency regions are not named on the captured pages.
Pricing transparency
Proton Drive
The business tier is published at €9.99 shown as €7.99 per user per month with 1 TB per user, consumer plans carry exact annual totals, the free tier and its three-editor-link limit are described, and VAT treatment and the 30-day refund terms are stated. We found no public information on the price of extra storage, minimum user numbers or an enterprise tier, so the annual cost of a growing team is not fully computable from the public pages.
Tresorit
FileSharing Business is published at €12 per user per month from 3 users with 1 TB encrypted storage per user, Business Pro at €20 per user per month from 5 users with from 15 TB, a 20% yearly discount, a free tier and a free trial, and the terms state fees are exclusive of taxes with thirty days' notice on price changes. Enterprise is custom pricing from 50 users billed annually. We found no public information on the price of extra storage or the eSign add-on, so the full annual cost of a given team and feature set cannot be computed from public pages alone.
Sovereignty, side by side
Dimension
Proton Drive
Tresorit
Legal entity
Not determined
Not determined
Hosting location
Not determined
Not determined
Hosting options
Not determined
Not determined
Open source
Not determined
Not determined
Data processing agreement
Not determined
Not determined
Transfer impact assessment
Not determined
Not determined
Facts, side by side
Only facts both products carry under the same definition — anything else would not be a fair row.
As of 1 Nov 2026, the panel rates Tresorit higher: 3.5/5 against 3/5. Weighted by what each judge cares about, 0 of the 6 judges pick Proton Drive and 5 pick Tresorit, 1 calls it a tie. Which one fits depends on the criteria that matter to you; the table on this page shows both side by side, and each judge’s reading has its own page. Both were scored by the same AI bench under the same rubric, from public evidence only, as the methodology describes.
Is Proton Drive or Tresorit European?
Proton Drive is European (UK / wider Europe). Tresorit is European (UK / wider Europe). Provenance is read from each company’s own legal pages: who builds it and who owns it.
Do Proton Drive and Tresorit have a free plan?
As of 1 Nov 2026, both vendors’ own pages state a free plan. Each product page links the pricing page it was read from.