Cloud Storage & File Sharing
Infomaniak kDrive
UK / wider Europe Report an error0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.
by Infomaniak Network SA · www.infomaniak.com
Report an error on this page Is this your product? →
Link to this page
Add ?theme=dark to the image address for dark backgrounds.
The badge shows the category and the month of the latest evaluation, and EU-Made where
that is the product’s provenance. It never shows a score.
Infomaniak kDrive at a glance
- Vendor
- Infomaniak Network SA
- Headquarters
- Not stated on the vendor’s pages as of 1 Nov 2026
- Data hosting
- Default not stated; pages mention Switzerland source, captured 1 Nov 2026
- Free plan
- Not stated on the vendor’s pages as of 1 Nov 2026
- Panel verdict
- The AI panel rates Infomaniak kDrive 3/5, the mean of 6 judges. Infomaniak kDrive is Swiss cloud storage and file sharing from Geneva-based Infomaniak Network SA. how scores are made
- As of
- Vendor pages captured 1 Nov 2026; evaluated by the panel 1 Nov 2026. all sources
Read this page as one judge. Each weighs the same scores by what they care about.
The panel's verdict
Infomaniak kDrive is Swiss cloud storage and file sharing from Geneva-based Infomaniak Network SA. Strongest is sync and access, scored 7 throughout: clients for Windows, macOS and Linux, selective sync, full-text search, WebDAV and NAS synchronisation. Weakest is administration and governance at 4 to 5: the Manager covers users, access and statistics, but the vendor states a global backup of the organisation's folders is deliberately not offered because administrators cannot reach users' private data, and we found no public information on directory or SCIM provisioning, retention or remote wipe. Encryption and security, and portability and integrations, sit at 6, while sharing and collaboration, sovereignty and pricing transparency run 6 to 7. The flagged split analysis flagged none; the spread never exceeds one point, and the rationales explain why: the tax adviser's extra points on sharing and administration reflect drop boxes and access logs meeting client-file duties, the skeptic's 6 on sovereignty weighs subprocessors named without locations and no public certification information, and the skeptic and IT lead hold pricing at 6 because minimum users and add-on prices are not public.
Speaks for it
- Sync and access scored 7 throughout, with Windows, macOS and Linux desktop clients, selective sync, mobile apps with photo backup and document scanning, full-text search and WebDAV with Synology and QNAP synchronisation.
- Sovereignty scored 6 to 7 on pages stating data is stored and processed exclusively in Switzerland in the company's own data centres, with no outsourcing or foreign intermediaries and staff in Geneva and Zurich.
- Pricing transparency scored 6 to 7 on public tiers — kDrive Solo CHF 5.54 monthly, kDrive Team CHF 11.11 monthly, kDrive Pro CHF 7.40 per user per month — with a 35 GB free offer for life, storage from 3 TB in 5 TB steps starting from CHF 36.00 / month for 5 TB, and 10 to 20 percent term discounts.
- A free REST API with OAuth 2, JSON, a downloadable OpenAPI file and a 60-requests-per-minute limit, plus WebDAV, import from Dropbox and OneDrive, and stated deletion of data including backup copies after termination.
- Version retention published per plan, kDrive Pro at 200 versions / 120 days, a recycle bin of 3 months to 1 year, and restore of the entire file organisation to a previous state.
Held against it
- Administration and governance scored 4 to 5, the weakest criterion, with the vendor stating that a global backup of the organisation's folders is deliberately not offered because administrators cannot access users' private data.
- We found no public information on directory or SCIM provisioning, group and role administration, retention policies, legal hold, remote wipe or exportable audit logs.
- Encryption is server-side, AES-128-CBC at rest with a unique key per kDrive space, and we found no public information on client-side or end-to-end encryption or on ISO 27001, SOC 2 or BSI C5 certification.
- Subprocessors including Checkout, PayPal, Twilio, MaxMind, Awin, Trustindex and Google reCAPTCHA are named without their locations, and we found no public information on a published data processing agreement.
- We found no public information on minimum users, the minimum term or the price of the Custom Brand option, the captured pages give different indications of which plans include content search, and file size limits are referenced without figures.
Best for
- You want a drive whose captured pages state data is stored and processed exclusively in Switzerland, contracted with a Geneva-registered company majority-held by the Infomaniak Foundation.
- You exchange files with outside clients — drop boxes accept uploads without an account, and links carry password, expiry and download toggles with view, edit and manage rights.
- You need broad client coverage without a directory server: Windows, macOS and Linux desktops, iOS and Android apps, WebDAV and Synology/QNAP synchronisation.
- You want public per-tier pricing and a free documented API, with stated deletion of data including backup copies after termination.
Avoid if
- You must centrally back up the whole organisation — the vendor states a global backup is not offered and administrators cannot reach users' private data.
- You need files the provider cannot read — the documented encryption is server-side, AES-128-CBC at rest with a unique key per kDrive space.
- You require independently audited security — the pages state intrusion tests once a year without describing them as independent, and we found no public information on ISO 27001, SOC 2 or BSI C5 certification.
- You must compute a full annual team cost in advance — kDrive Team is priced per month and kDrive Pro per user without a stated scaling rule, and minimum user counts are not public.
The scores
| Criterion | Panel median |
|---|---|
| Sync, clients & file access | 3.5 of 5 |
| Sharing & external collaboration | 3 of 5 |
| Encryption, key custody & recovery | 3 of 5 |
| Administration, audit & governance | 2 of 5 |
| Export, API & self-hosting | 3 of 5 |
| European sovereignty | 3.5 of 5 |
| Pricing transparency | 3.5 of 5 |
Sync, clients & file access
Show reasoningHide reasoning
How this is scored
How files reach the people who work with them: desktop clients for Windows, macOS and Linux, files on demand (virtual drive) and selective sync, offline access, mobile apps with camera upload and offline folders, a web interface, block-level or delta sync for large files, sync of folders outside the main folder, file size limits, preview of common formats, full-text search, and access through open protocols (WebDAV, SFTP, S3) or a mounted network drive.
0 — Not a file storage or sync product; files cannot be stored and synced with it.
3 — A web interface and apps for some platforms to upload and download files; desktop sync, files on demand, offline access and limits are basic or not described.
5 — Desktop sync clients for Windows and macOS, files on demand or selective sync, mobile apps with offline files and camera upload, a web interface with previews, file size limits stated, and search by file name.
8 — Clients for Windows, macOS and Linux, a virtual drive with files on demand, block-level or delta sync documented, full-text search inside documents, access via WebDAV, SFTP or S3, large-file handling stated, and LAN sync or a performance figure for big folders.
10 — File access that a whole organisation runs on: every platform covered with feature parity stated, sync conflicts and their resolution documented, open protocols and a mountable drive on every desktop, search across content and metadata with OCR, and sync behaviour and limits published in technical documentation.
The IT Lead
Desktop clients for Windows, macOS and Linux with selective sync and a Lite Sync on-demand mode, mobile apps with real-time photo backup and document scanning, full-text search of document contents, and WebDAV access are all documented — that covers my three sites and the Polish office. I found no public information on block-level or delta sync, LAN sync or a performance figure for large folders, and file-size limits are only referred to as existing, not stated. 2 11 16 4 1
The Data Protection Officer
Desktop clients for Windows, macOS and Linux with selective sync and an on-demand mode that frees local disk, mobile apps with real-time photo backup and document scanning, browser editing, full-text search through document contents, and WebDAV access give a payroll bureau most of what it needs to move salary statements. We found no public information on block-level or delta sync, on how sync conflicts are resolved, or on a performance figure for large folders; the on-demand mode is not available on Linux and file size limits are referenced without a number. 2 11 16 4
The Architecture Practice Partner
Clients exist for Windows, macOS and Linux with selective sync, and Lite Sync gives files on demand on Windows 10 1709+ and macOS, which keeps our laptops from filling with CAD models; mobile apps back up photos in real time, search covers the contents of documents, and WebDAV plus Synology and Qnap synchronisation is documented. Lite Sync is not available on Linux, and we found no public information on offline folders in the mobile apps, on block-level or delta sync for multi-gigabyte files, or on the actual file size limit — the limits are only said to exist. 1 2 4 11 15 16
The Tax Adviser
Desktop apps for Windows, macOS and Linux with selective sync and offline work, a Lite Sync virtual-drive mode (documented as unavailable on Linux), iOS and Android apps with real-time photo backup and document scanning, a browser app with editing and full-text search across document contents, plus WebDAV and Synology/QNAP synchronisation. That covers every platform my staff and I touch client files on. We found no public information on delta sync, SFTP or S3 access, or the actual figures behind the file size limits. 2 4 11 16
The Agency Producer
Desktop apps for macOS, Windows and Linux with selective sync, offline work and files on demand via Lite Sync (not on Linux), iOS/Android apps with real-time photo and video backup, and a web app that searches the contents of documents and images are all documented. WebDAV is supported, but we found no public information on block-level or delta sync, SFTP or S3 access, LAN sync or a performance figure for big folders — the captured pages only note that limits on file size exist without stating them, which matters when a shoot fills a terabyte. 2 11 16 4 1 15
The Skeptic
Clients for Windows, macOS and Linux with selective sync, offline work and bidirectional synchronisation; Lite Sync gives files on demand, though the support pages themselves state Lite Sync and the right-click menu are unavailable on Linux. Mobile apps for iOS and Android carry automatic photo and video backup and document scanning, the browser edits Office files and searches document contents, and WebDAV plus Synology and Qnap synchronisation are supported. We found no public information on block-level or delta sync, SFTP or S3 access, stated file-size limits or performance figures for large folders, and the captured pages give different indications of which plans include content search. 2 4 11 16 1
Sharing & external collaboration
Show reasoningHide reasoning
How this is scored
How files are shared inside the team and with people outside it: shared team folders or spaces, share links with password, expiry, download limits and view-only or no-download mode, upload links (file requests) for customers, guest or external user accounts, link and access reports, notifications, watermarking, comments and file locking, editing of office documents in the browser together, large-file transfer, and an Outlook or Teams add-in for sending links instead of attachments.
0 — Files cannot be shared with anyone else.
3 — Folders and files can be shared with other users and by public link; link controls, upload links and external accounts are basic or not described.
5 — Shared team folders, share links with password and expiry, view-only links, upload links for external people, permissions per folder (view, edit), notifications on changes, and office documents opened and edited in the browser.
8 — Link policies the administrator sets (forced expiry, passwords, domains allowed), download limits and no-download view, watermarking, guest accounts with their own permissions, an access log per share, file locking and comments, co-editing documented with the editor named, and an Outlook or Teams add-in.
10 — External collaboration at the level of a data room: granular rights including print and download control on shared files, revocation that also reaches copies already opened, recipient identity verification, a complete record of who opened and downloaded what, and end-to-end encryption kept intact when sharing externally and when editing.
The IT Lead
Shared team folders on paid plans, share links with password, expiry and a download toggle, drop boxes for collecting files from customers, view/edit/manage permissions, and co-editing with OnlyOffice or Microsoft Office named as the editors are all documented. But I found no public information on administrator-set link policies, download limits per link, watermarking, file locking, comments or an Outlook/Teams add-in. 12 1 4 13
The Data Protection Officer
Team folders, links with password, expiry and download toggles, view/edit/manage rights, upload drop boxes, external users on a free account, and co-editing with OnlyOffice and Microsoft Office Online named, plus an access log and per-plan link quotas, cover the day-to-day sharing of patient letters. We found no public information on administrator-set link policies, watermarking, file locking, comments or an Outlook or Teams add-in, and no end-to-end encryption is claimed that would have to survive the share link or the editor; the office editing runs on the provider's own Swiss servers. 12 4 1 14
The Architecture Practice Partner
Password-protected share links with expiry, an allow-downloading toggle, view/edit/manage rights and drop boxes for file requests mean a structural engineer can pick up a folder or edit an Office file through the link without an account, and co-editing is documented with OnlyOffice and Microsoft Word, Excel and PowerPoint named as the editors. We found no public information on watermarking, download limits, administrator-set link policies, file locking or comments, or an Outlook or Teams add-in. 1 2 4 12
The Tax Adviser
Drop boxes give my clients an upload link without any account, share links carry password, expiry date and an allow-downloading toggle, and external users get view/edit/manage rights with a free account; OnlyOffice and Microsoft Office co-editing are named, and an access log with activity reports shows who did what. We found no public information on administrator-set link policies, watermarking, file locking, comments or an Outlook add-in. 1 2 4 12 14
The Agency Producer
Share links come with password, expiry date and an "allow downloading" toggle, permission levels run view/edit/manage, upload drop boxes let customers send us files without an account, shared folders exist on paid plans, and co-editing is documented with the editors named (OnlyOffice, Microsoft Word, Excel and PowerPoint). We found no public information on comments on files, file locking, watermarking for client proofs or an Outlook/Teams add-in, and administrator link policies are not described. 12 1 4 14 2
The Skeptic
Shared folders on paid plans carry view, edit and manage rights; links offer password, expiry and a download toggle; drop boxes accept files from outside; and co-editing runs in OnlyOffice or Microsoft Word, Excel and PowerPoint, with the editors named. Public Office links can be edited without an account, but folder collaborators must create a free Infomaniak account. We found no public information on watermarking, numeric download limits, file locking, comments, an access log per share, administrator link policies or an Outlook or Teams add-in. 12 13 4 1
Encryption, key custody & recovery
Show reasoningHide reasoning
How this is scored
How the files are protected and restored: encryption in transit and at rest, client-side or end-to-end encryption and whether it covers all folders, sharing and office editing, who holds the keys and what happens when a user loses theirs, customer-managed keys, two-factor authentication and single sign-on, version history and its length, a recycle bin, restore of a whole folder or account to a point in time after ransomware, ransomware detection, malware scanning, an independent security audit or penetration test, a bug bounty, and certifications (ISO 27001, SOC 2, BSI C5) with their scope. Where the data is stored is scored under sovereignty.
0 — Files are stored without any stated encryption and no account protection beyond a password.
3 — Encryption is mentioned and a recycle bin or version history exists; key custody, two-factor, restore after ransomware and audits are basic or not described.
5 — TLS in transit and AES encryption at rest stated, two-factor authentication, version history with its length stated, a recycle bin, the restore of deleted or overwritten files, and a security page naming at least one certification or audit.
8 — Client-side or end-to-end encryption documented with who holds the keys (or customer-managed keys), a whitepaper describing the scheme, single sign-on (SAML), restore of a folder or account to a point in time, ransomware detection or recovery documented, an independent audit or penetration test named, and ISO 27001, SOC 2 or BSI C5 stated with scope.
10 — Security that can be verified: zero-knowledge end-to-end encryption by default that stays on for sharing and editing, the cryptography published and externally audited with the report available, key recovery for organisations documented without the provider gaining access, open-source clients or a public bug bounty, and certifications published with their scope and date.
The IT Lead
SSL/TLS in transit and AES-128 with a unique key per kDrive space at rest, two-factor, single sign-on, version history stated per plan up to 365 days, a recycle bin, and the ability to restore the entire file organization to a previous version give me a credible ransomware fallback. Intrusion tests once a year are stated, but I found no public information on client-side or end-to-end encryption, who holds the keys, ISO 27001/SOC 2/BSI C5 certifications, or ransomware detection. 14 15 4 9 1
The Data Protection Officer
TLS in transit and AES-128-CBC at rest with a unique key per kDrive space are stated, but the keys sit with the provider: we found no public information on client-side or end-to-end encryption, customer-managed keys, or key recovery. Two-factor authentication, per-plan version history of 60 to 120 days, a recycle bin of three months to a year, restore of the entire drive's file organisation to a previous state, annual intrusion tests and customer isolation are documented; we found no public information on ransomware detection, a published audit report, or ISO 27001, SOC 2 or BSI C5 certification. 14 4 15 9 1
The Architecture Practice Partner
SSL/TLS in transit and AES-128-CBC at rest with a unique key per drive space, two-factor authentication, version history up to 200 versions and 365 days depending on plan, a recycle bin, and the restore of the entire file organisation to a previous state give real ransomware comfort for our project archives. We found no public information on client-side or end-to-end encryption, on who holds the keys, on ransomware detection, or on certifications such as ISO 27001; intrusion tests are stated to run once a year but are not described as independent. 1 4 9 14 15
The Tax Adviser
TLS in transit and AES-128-CBC at rest with a unique key per kDrive space are stated, together with two-factor authentication, version history with published lengths per plan (up to 365 days and 200 versions on kSuite Enterprise), a recycle bin of 3 months to 1 year, restore of the entire file organisation and intrusion tests once a year. We found no public information on end-to-end encryption or customer-held keys — for files under professional secrecy I cannot confirm the provider cannot read them — nor on ISO 27001, SOC 2 or BSI C5 certifications or malware scanning. 1 4 9 14 15
The Agency Producer
SSL/TLS in transit and AES-128-CBC at rest with an individual key per kDrive space are stated, alongside two-factor authentication, per-plan version retention of 60 to 365 days, a recycle bin of 3 months to 1 year, restore of the entire file organisation, annual intrusion tests and customer isolation. We found no public information on client-side or end-to-end encryption, key custody, ransomware detection, or ISO 27001, SOC 2 or BSI C5 certifications. 14 15 4 9 1
The Skeptic
TLS in transit and AES-128-CBC at rest with one key per kDrive space are stated, two-factor exists, version history runs from 30 to 365 days depending on plan, and a previous state of the entire file organisation can be restored — but the encryption is server-side. We found no public information on client-side or end-to-end encryption, who holds the keys, ransomware detection or malware scanning, or any independent audit or certification such as ISO 27001, BSI C5 or SOC 2; the annual intrusion tests described are the vendor's own, and the vendor itself states a global backup of the organisation's folders is not offered. 14 15 4 9
Administration, audit & governance
Show reasoningHide reasoning
How this is scored
What an administrator controls: an admin console with users, groups and roles, provisioning through Entra ID, Google or LDAP with SCIM, quotas per user or team, an audit log of logins, shares and file actions with export, retention policies and legal hold, data loss prevention or classification, device management with remote wipe and unlinking, policies for external sharing, account transfer when someone leaves, team folders that belong to the company rather than to a user, and reports on storage and sharing.
0 — No administration: every account is independent and nobody can manage the team's users or files.
3 — A team plan with an administrator who can invite and remove users; roles, audit log, retention and device controls are basic or not described.
5 — An admin console with users, groups and admin roles, quotas, an activity or audit log, policies for external sharing, file transfer when a user leaves, company-owned team folders, and remote unlinking of lost devices.
8 — Provisioning via SCIM or a directory (Entra ID, Google, LDAP), an exportable audit log covering logins, shares and file actions, retention policies and legal hold, remote wipe, IP or device restrictions, data classification or DLP, and integration with a SIEM.
10 — Governance a regulated organisation can sign off: granular delegated administration per department or tenant, retention and legal hold with eDiscovery export, DLP with content inspection, every admin and user action logged and streamed to a SIEM, and the audit log retention and completeness stated.
The IT Lead
The Manager covers users, access, storage, statistics and data recovery after an employee leaves, with an access log, user activity reports and per-document change tracking I could show an auditor, and deleted users' data transfers for six months on Pro and Team. For retiring my file server, though, I found no public information on provisioning through Entra ID or SCIM, exportable audit logs, retention policies, quotas or remote wipe of a lost laptop — single sign-on is named without the directory or protocol behind it. 1 14 4 12
The Data Protection Officer
The Manager covers users, access, storage, statistics and recovery of a departed employee's data for six months on Team and Pro, with an access log, an activity report and per-document change tracking. We found no public information on directory or SCIM provisioning, groups and admin roles, audit-log export, retention policies or legal hold, remote wipe, device or IP restrictions, DLP or SIEM streaming; the captured guide states that a global backup of the organisation's folders is not offered, deliberately, because administrators cannot reach users' private spaces — a design choice a hospital group must weigh against its own continuity duties. 1 4 14 15
The Architecture Practice Partner
The Manager console covers users, access, storage, statistics, data recovery when an employee leaves, an access log, an action history and an activity report across the whole drive, which is enough for day-to-day running of a 25-person office. We found no public information on groups and admin roles, directory or SCIM provisioning, external-sharing policies, retention or device wipe, and the vendor states that a global backup of the organisation's folders and personal drives is not offered, since administrators have no access to users' private data. 1 4 12 14 15
The Tax Adviser
The Manager covers users, access, storage, statistics and data recovery after an employee leaves with a six-month transfer window on the paid kDrive plans, and the access log, action history, user activity reports and per-document tracking give me the record of who accessed what that my compliance duties require. The help pages state that a global backup of organisation folders is intentionally not offered because administrators cannot access users' private data. We found no public information on group and role management, SCIM or directory provisioning, retention policies, legal hold, remote wipe or SIEM streaming. 1 4 14 15
The Agency Producer
The Manager administers users, access, storage, statistics and data recovery after an employee leaves, with an access log, action history, user activity reports and per-document change tracking, and departing users' data is transferable for 6 months on Pro and Team. We found no public information on group and role administration, directory or SCIM provisioning, remote wipe or device management, retention policies or legal hold — and the vendor states that a global backup of organisation folders and personal Drives is intentionally not offered, so administrators cannot reach users' private data. 1 14 4 15 12
The Skeptic
The admin area covers users, storage, statistics, an access log and per-document change tracking, plus data recovery six months after a user leaves on Team and Pro. We found no public information on groups and delegated admin roles, provisioning through a directory or SCIM, an exportable audit log, retention policies or legal hold, remote wipe of devices, or administrator policies for external sharing — and the vendor states by design that administrators cannot access users' private data. 1 4 14 15
Export, API & self-hosting
Show reasoningHide reasoning
How this is scored
Whether the files and their structure can leave and connect: a bulk export or download of all data with folders and versions, open protocols (WebDAV, S3, SFTP) usable for migration, a documented REST API and SDKs, webhooks, migration tools from Dropbox, Google Drive, OneDrive or a file server, integrations with office suites, Microsoft 365 and Teams, Slack, CRM and project tools, an app marketplace, open-source code, a self-hosted or on-premise edition, and deletion of data on termination.
0 — Files can only be downloaded one by one; no export, API or migration path.
3 — Files can be downloaded in bulk or as an archive; an API, migration tools, integrations and self-hosting are basic or not described.
5 — A documented API, bulk download of all files with the folder structure, a migration path from at least one named provider, integrations with named office and collaboration tools, and what happens to data after cancellation stated.
8 — A REST API with SDKs and webhooks, open-protocol access (WebDAV, S3 or SFTP) that makes migration tool-independent, migration tools in both directions or a supported migration service, an app marketplace, a self-hosted or on-premise edition, and deletion on termination under stated terms.
10 — The customer owns the data end to end: open-source code under a named licence that runs fully self-hosted with feature parity stated, a complete export including versions, shares and permissions in a documented format, and the deletion of every copy and backup on termination documented.
The IT Lead
A free documented REST API with OAuth 2 and an OpenAPI file to download, WebDAV and NAS synchronization, an import path from Dropbox and OneDrive, and deletion of data including backup copies after termination give me a way in and a way out. I found no public information on SDKs, webhooks, a bulk export preserving folder structure and versions, or a self-hosted or on-premise edition. 3 19 4 1 7
The Data Protection Officer
A documented REST API with OAuth 2.0, JSON, stated rate limits, pagination and a downloadable OpenAPI file, WebDAV access, and import from Dropbox and OneDrive give a workable exit and automation path, and on termination the data is deleted including backup copies. We found no public information on SDKs, webhooks, a bulk export preserving folder structure and versions, an app marketplace or a self-hosted edition; the import tools run one direction only. 3 1 7 4
The Architecture Practice Partner
A documented REST API with OAuth 2.0, JSON, an OpenAPI file to download and a 60-requests-per-minute limit, WebDAV and NAS synchronisation, import from Dropbox and OneDrive, and stated deletion of data including backup copies after termination make both automation and an exit path credible. We found no public information on SDKs, webhooks, an app marketplace, a migration path in the other direction, or a self-hosted edition. 1 3 4 7 19
The Tax Adviser
A documented REST API with OAuth 2, JSON, pagination, a downloadable OpenAPI file and a rate limit of 60 requests per minute — free of charge — plus WebDAV, NAS synchronisation, an import from Dropbox and OneDrive, and deletion of data including backup copies after termination. That is enough for me to automate and, if needed, to leave. We found no public information on SDKs, webhooks, an app marketplace, a migration path back out, or a self-hosted edition. 1 3 4 5 7
The Agency Producer
A documented REST API with OAuth 2, a downloadable OpenAPI file, free access and a limit of 60 requests per minute, plus WebDAV support, import from Dropbox and OneDrive, open formats with documented APIs, and deletion including backup copies after termination, give a workable export and migration story. We found no public information on SDKs, webhooks, an app marketplace, a self-hosted or on-premise edition, or integrations with Slack and project tools, which is what I would need to wire into our production stack. 3 19 4 1 7
The Skeptic
A documented REST API with OAuth 2, JSON, pagination, rate limits and a downloadable OpenAPI file is free to use; WebDAV and NAS synchronisation make access tool-independent; import from Dropbox and OneDrive is offered; and data including backup copies is deleted after termination under the service terms. We found no public information on SDKs, webhooks, migration in the other direction, an app marketplace or a self-hosted edition; bulk export is claimed through open formats and documented APIs, but we found no public information describing a concrete export tool for folders and versions. 3 19 4 1 7
European sovereignty
panel opinion
Show reasoningHide reasoning
How this is scored
Who the contracting entity and the parent company are, where files, metadata and backups are stored and processed, and who the subprocessors are (data centres, CDN, email that carries share notifications, support desk, payment, office editing). Independently sourced by the sovereignty pipeline; files hold the company's documents and personal data, so the whole chain counts, not only the storage. End-to-end encryption with keys only the customer holds reduces what a foreign provider could hand over but does not change who the provider is. A self-hosted edition the customer runs on its own European servers counts as the customer's chain, whatever the vendor's seat.
0 — Non-EU vendor and contracting entity, storage location unstated, subprocessors unnamed, and no data processing agreement offered.
3 — A privacy policy and a data processing agreement exist, but the storage location is unstated or non-EU and the subprocessors are not listed.
5 — EU storage available and an EU contracting entity or EU representative, but parts of the chain (account data, metadata, notifications, support, office editing, payment) run through non-EU providers without a stated safeguard, or the parent company is subject to non-EU disclosure laws.
8 — EU storage on named data centres, EU or EEA or Swiss contracting entity, subprocessors listed with their locations, a data processing agreement published, and security certifications (ISO 27001, BSI C5, SOC 2) stated — or a self-hosted edition documented that keeps every file on the customer's own servers.
10 — Sovereign end to end and evidenced: European ownership, entity, storage and every subprocessor, or a self-hosted open-source edition with no call home, data export and deletion documented, and certifications published with their scope rather than implied.
The IT Lead
Files are stored and processed exclusively in Switzerland in the company's own Tier III+ data centres with replication to at least three locations, the contracting entity is Infomaniak Network SA of Geneva, and there is no outsourcing, no foreign intermediaries, 100% Swiss staff and a stated absence of exposure to extraterritorial laws — even Microsoft Office Online runs hosted in Switzerland on their servers. The privacy policy names subprocessors such as PayPal, Twilio and Google reCAPTCHA for payment and forms but without their locations, and I found no published data processing agreement or security certification such as ISO 27001 on the captured pages. 14 5 6 7 1
The Data Protection Officer
The contracting entity is Infomaniak Network SA of Geneva, files are stored and processed exclusively in Switzerland, backed up to at least three locations in the company's own Tier III+ data centres, with office editing hosted in Switzerland on its own servers, all staff in Geneva and Zurich, no foreign intermediaries and no exposure to extraterritorial laws — the residency, ownership and entity questions I ask before a folder moves are answered in writing. Subprocessors for payment, SMS and captcha (Checkout, PayPal, Twilio, MaxMind, Google reCAPTCHA, Awin, Trustindex) are named in the privacy policy but without their locations, and we found no public information on a published data processing agreement or on ISO 27001, SOC 2 or BSI C5 certification, which is what holds this below the top of my range. 6 7 14 5 16 1
The Architecture Practice Partner
Infomaniak Network SA, registered in Geneva, stores and processes data exclusively in its own Swiss data centres with no outsourcing or foreign intermediaries, all staff in Geneva and Zurich, a foundation as majority shareholder, and a legal framework described as free of exposure to extraterritorial laws. Subprocessors are named with their purposes — payment, SMS verification, captcha, reviews — though without their locations, and we found no public information on a published data processing agreement or on security certifications. 5 6 7 14 16
The Tax Adviser
Infomaniak Network SA is registered in Geneva, files are stored and processed exclusively in the company's own Swiss data centres with backups at several Swiss locations, all staff work in Geneva and Zurich with no outsourcing or foreign intermediaries, the Infomaniak Foundation holds the majority to protect independence, and GDPR and nFADP compliance with a named Data Protection Officer are published. Subprocessors for payment, SMS and captcha are named (Checkout, PayPal, Twilio, MaxMind, Awin, Google reCAPTCHA, Trustindex) but without their locations. We found no public information on a published data processing agreement or ISO/BSI/SOC certifications, which keeps me below the top of the range. 5 6 7 14 16
The Agency Producer
Infomaniak Network SA is registered in Geneva, data is stored and processed exclusively in Switzerland in the company's own TIER III+ data centres with backups to at least 3 locations, designed and operated without outsourcing or foreign intermediaries, the Infomaniak Foundation holds the majority to protect independence, and even the Microsoft Office Online editing runs on their servers in Switzerland. Subprocessors such as Checkout, PayPal, Twilio, MaxMind, Awin, Trustindex and Google reCAPTCHA are named but without their locations, and we found no public information on a published data processing agreement or security certifications, which keeps this short of the top level. 6 5 14 7 1
The Skeptic
Files are stated to be stored and processed exclusively in Switzerland, in the vendor's own data centres replicated to at least three locations, run by a Geneva-registered company whose independence is locked by a foundation charter, with office editing hosted on its own Swiss servers and a named Data Protection Officer. Subprocessors for payment, SMS, fraud checks, captcha and reviews are named but their locations are not stated, and we found no public information on ISO 27001, BSI C5 or SOC 2 certifications or a published data processing agreement for kDrive. 14 5 6 7 1
Pricing transparency
Show reasoningHide reasoning
How this is scored
Whether a buyer can compute the real annual cost from public pages alone: price per user or per plan, storage included per user or pooled, the minimum number of users, what extra storage costs, which features (end-to-end encryption, SSO, audit log, longer version history, data residency, advanced admin) need a higher tier or an add-on, the free tier and its limits, lifetime offers and their terms, the self-hosted edition's licence and support, minimum term and VAT.
0 — No public prices at all; every customer is a sales call.
3 — A starting price or a free tier exists, but how cost scales with users, storage or features is unclear.
5 — Business tiers are public with their price per user and storage included, but at least one commonly needed piece (extra storage, SSO, audit log, data residency, minimum users) is unpriced or "on request".
8 — Every tier priced publicly with its scaling rule (users, storage), extra storage and add-ons priced, minimum users and term stated, the self-hosted edition's licence and support cost stated, and VAT treatment stated.
10 — Complete price computability: annual cost derivable for a given team size, storage need and feature set, with every add-on, migration, support and overage fee and the cancellation and data-return terms published.
The IT Lead
Prices are public: kDrive Solo at CHF 5.54 monthly (CHF 4.99 on a one-year term), kDrive Team at CHF 11.11 monthly (CHF 10.00), kDrive Pro at CHF 7.40 per user per month (CHF 6.66), extra storage in 5 TB steps starting from CHF 36.00 / month for 5 TB, discounts of 10-20% for 1-3 year terms, a 35 GB free tier, and VAT stated as excluded. What blocks me from computing our full annual cost is that the minimum user counts, how storage scales per user on the team plans, and the price of add-ons such as Custom Brand are not stated. 4 1 15 13
The Data Protection Officer
Tiers are public with per-user figures quoted as "kDrive Pro CHF 7.40 6.66 per user per month", storage starts at 3 TB with 5 TB increments "starting from CHF 36.00 / month for 5 TB", VAT is stated as excluded, a 35 GB free tier exists, term discounts run 10 to 20 percent, and per-plan limits for version retention, content search, links and office editing show the buyer where features land. We found no public information on minimum users or minimum term, and the Custom Brand option is marked as paid without a price. 4 1 15
The Architecture Practice Partner
Every kDrive and kSuite tier carries a public price — kDrive Pro at CHF 6.66 per user per month on a one-year term, kDrive Team at CHF 10.00 monthly — with term discounts of 10 to 20 percent, storage expansion from CHF 36.00 / month for 5 TB, a 35 GB free tier for life, and version-retention and link limits broken down per plan; VAT is stated as excluded. What I still cannot compute from the public pages is the minimum number of users or the minimum term for the team plans, and which tier carries single sign-on. 1 4 12 13 15
The Tax Adviser
We found no public information on minimum users, which tier includes single sign-on or the audit features, or the price of the Custom Brand add-on. 1 4 15
The Agency Producer
Prices are public — "kDrive Solo CHF 5.54" monthly, "kDrive Team CHF 11.11" monthly, "kDrive Pro CHF 7.40" per user per month — with term discounts of 10% to 20%, storage from 3 TB expandable "starting from CHF 36.00 / month for 5 TB", a free tier of "35 GB free for life", API use free, and the statement "Prices do not include VAT". Custom Brand is marked as paid without a price, and we found no public information on which tier carries single sign-on or the audit features, so the full annual cost for a given feature set is not fully derivable. 4 1 13 15 19
The Skeptic
Every kDrive plan carries a public price — Solo at CHF 5.54 monthly, Team at CHF 11.11 monthly, Pro at CHF 7.40 per user per month — with storage growth in 5 TB steps from CHF 36.00 per month for 5 TB, VAT stated as excluded, and the free tier's 35 GB plus per-plan version limits published. Custom Brand is marked as paid with no figure, and we found no public information on minimum users for Team and Pro, the minimum term, or which tier includes single sign-on; Team is priced per month while Pro is per user, without a stated scaling rule. 4 1 6 15
European sovereignty — proven facts
0 of 6 dimensions provenBuilt only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.
| Legal entity | Not determined | — | uncited Report an error |
|---|---|---|---|
| Hosting location | Not determined ⚠ unverified | — | uncited Report an error |
| Hosting options | Not determined | — | uncited Report an error |
| Open source | Not determined | — | uncited Report an error |
| Data processing agreement | Not determined ⚠ unverified | — | uncited Report an error |
| Transfer impact assessment | Not determined | — | uncited Report an error |
Questions about Infomaniak kDrive
Is Infomaniak kDrive European?
Yes, though not from the EU. whats-best.ai classifies Infomaniak kDrive as UK / wider Europe.
Where does Infomaniak kDrive store data?
The default storage location for customer data is not stated on the vendor’s pages as of 1 Nov 2026. The vendor’s pages mention Switzerland as hosting location, per the vendor’s page captured 1 Nov 2026.
Does Infomaniak kDrive have a free plan?
Not stated on the vendor’s pages as of 1 Nov 2026.
What are the best alternatives to Infomaniak kDrive?
As of 1 Nov 2026, the panel rates Nextcloud Files (Nextcloud Hub) (4/5), Tresorit (3.5/5) and Proton Drive (3/5) highest among the other 13 Cloud Storage & File Sharing products evaluated. The highest-rated European alternative is Nextcloud Files (Nextcloud Hub) (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: Infomaniak kDrive alternatives.
Where this could be wrong
- Evidence ages. The oldest capture behind this page is from 1 Nov 2026. Vendors change pricing and policies without notice; every fact reflects its source as of the capture date shown in the registry.
- Weak sourcing — Data processing agreement, Hosting location. Not confirmed on the vendor’s own pages as captured.
- AI can misread a source. Extraction and judgement are automated; a citation guarantees traceability, not infallibility. If something here is wrong, say so — no account needed, every report is decided within 5 business days, and accepted corrections are published.
What we left out
A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.
- 24 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 5 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 3 integrations facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 1 compliance fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
- 1 data fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
- 1 hosting fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
- 2 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown. Know more? Tell us
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement. Know more? Tell us
Sources (20)
The pages every claim on this page was read from — each one checked, dated, and kept verifiable.
- 1 Vendor homepage (kDrive) www.infomaniak.com Checked 1 Nov 2026 Details →
- 2 Features page (desktop and mobile apps) www.infomaniak.com Checked 1 Nov 2026 Details →
- 3 API documentation developer.infomaniak.com Checked 1 Nov 2026 Details →
- 4 Pricing page www.infomaniak.com Checked 1 Nov 2026 Details →
- 5 Company page www.infomaniak.com Checked 1 Nov 2026 Details →
- 6 Legal notice www.infomaniak.com Checked 1 Nov 2026 Details →
- 7 Privacy policy www.infomaniak.com Checked 1 Nov 2026 Details →
- 8 Terms of service www.infomaniak.com Checked 1 Nov 2026 Details →
- 9 Security / trust page (GDPR) www.infomaniak.com Checked 1 Nov 2026 Details →
- 10 Sync, clients & file access — found from sitemap www.infomaniak.com Checked 1 Nov 2026 Details →
- 11 Sync, clients & file access — found from sitemap www.infomaniak.com Checked 1 Nov 2026 Details →
- 12 Sharing & external collaboration — found from sitemap www.infomaniak.com Checked 1 Nov 2026 Details →
- 13 Sharing & external collaboration — found from sitemap www.infomaniak.com Checked 1 Nov 2026 Details →
- 14 Encryption, key custody & recovery — found from sitemap www.infomaniak.com Checked 1 Nov 2026 Details →
- 15 Encryption, key custody & recovery — found from sitemap www.infomaniak.com Checked 1 Nov 2026 Details →
- 16 Administration, audit & governance — found from sitemap www.infomaniak.com Checked 1 Nov 2026 Details →
- 17 Administration, audit & governance — found from sitemap www.infomaniak.com Checked 1 Nov 2026 Details →
- 18 Export, API & self-hosting — found from sitemap www.infomaniak.com Checked 1 Nov 2026 Details →
- 19 Export, API & self-hosting — found from sitemap www.infomaniak.com Checked 1 Nov 2026 Details →
- 20 Self-hosting / on-premises installation docs — found from the homepage www.infomaniak.com Checked 1 Nov 2026 Details →