Security / trust page — Tresorit

Cited by

Facts read from this source

• E2e encryption Report an error

  “Using end-to-end encryption, Tresorit encrypts every file and relevant file metadata on your devices with unique randomly generated encryption keys.”

• Zero knowledge auth Report an error

  “Tresorit uses an authentication scheme in which your password never leaves your device, keeping you in control of your most confidential security information.”

• Cryptography Report an error

  “This key sharing is based on, among others, RSA-4096 with OAEP padding scheme (see RFC2437) and PKI certificates, combining it with a tree of symmetric keys.”

• Integrity protection Report an error

  “Tresorit clients apply cryptographic authentication (in the form of HMAC or AEAD) to all encrypted data.”

• Swiss privacy laws Report an error

  “Tresorit handles data under Swiss privacy laws that provide more substantial protection than similar laws in the US or even the EU.”

• Non convergent cryptography Report an error

  “The non-convergent cryptography used by Tresorit makes it impossible to determine when your content matches others’ content in the cloud”

• Data residency options Report an error

  “Tresorit offers you options to set up data residency per user and ensure compliance.”

• ISO 27001 Report an error

  “Tresorit has certification for compliance with ISO 27001:2022. Tresorit was audited and certified by TÜV Rheinland, an independent third-party auditor.”

• GDPR DPA Report an error

  “your encryption keys that unlock your data are stored on the client-side, on your device.”

• HIPAA Report an error

  “Tresorit signs HIPAA Business Associate Agreements (BAA) with customers seeking HIPAA compliance to safeguard Protected Health Information (PHI).”

• CCPA Report an error

  “Tresorit has supported the CCPA since its inception and can help companies remain compliant.”

• Security policies Report an error

  “Policy templates include 2-Step Verification, IP filtering, Timeout policies, Allowed Devices, and Sharing policies.”

• Revoke access Report an error

  “Tresorit Advanced Control enables Tresorit Business admins to enhance their organization’s security by resetting their users’ lost passwords and revoking access from lost or stolen devices.”

• Device monitoring Report an error

  “Admins can monitor and decide which devices are allowed to be used to access files within your company, and where users are allowed to log into their company account from”

• SSO Report an error

  “SSO integration with Azure AD and Okta allows one-step sign-in to Tresorit for your employees and streamlined administration for your admins.”

• External collaboration Report an error

  “File downloads can be limited and access revoked at any time.”

• Version history Report an error

  “Previous versions and deleted files can be restored quickly, ensuring no information is lost. Detailed reporting allows admins to see who had accessed files and when.”

• Outlook plugin Report an error

  “Replace risky email attachments and generate end-to-end encrypted secure links directly in Outlook with the Tresorit plugin.”

• Active directory Report an error

  “connect your directory service to our Active Directory integration to synchronize users and Tresor memberships.”

• Trial Report an error

  “Secure your business-critical workflows with Tresorit Start your free trial”

• Products Report an error

  “SecureCloud for Businesses SecureCloud for Private Use Engage FileSharing eSign add-on Basic”

Scores citing this record

• The Agency Producer Encryption, key custody & recovery
• The Agency Producer Administration, audit & governance
• The Architecture Practice Partner Encryption, key custody & recovery
• The Architecture Practice Partner Administration, audit & governance
• The Data Protection Officer Encryption, key custody & recovery
• The Data Protection Officer Administration, audit & governance
• The IT Lead Encryption, key custody & recovery
• The IT Lead Administration, audit & governance
• The Skeptic Encryption, key custody & recovery
• The Skeptic Administration, audit & governance
• The Tax Adviser Encryption, key custody & recovery
• The Tax Adviser Administration, audit & governance