# Jottacloud Business — Cloud Storage & File Sharing Jottacloud Business by Jotta Group AS holds a panel rating of 2.5/5 from 6 AI judges (category median 3/5), as of 2026-11-01. Provenance: UK / wider Europe; sovereignty: not determined. - Vendor: Jotta Group AS (https://jottacloud.com/en/business) - Category: [Cloud Storage & File Sharing](https://whats-best.ai/software/cloud-storage.md) - Provenance (editorial classification): UK / wider Europe - Canonical page: https://whats-best.ai/software/cloud-storage/jottacloud - Alternatives: https://whats-best.ai/software/cloud-storage/jottacloud/alternatives ([markdown](https://whats-best.ai/software/cloud-storage/jottacloud/alternatives.md)) - Data as of: 2026-11-06 · evaluated 2026-11-01 · oldest source captured 2026-11-01 **AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology ## At a glance - Vendor: Jotta Group AS - Headquarters: Not stated on the vendor’s pages as of 1 Nov 2026 - Data hosting: Default not stated; pages mention Norway [S15] - Free plan: Yes, per the vendor’s own page [S2] ## The panel's verdict Jottacloud Business is cloud storage and file sharing from Jotta Group AS of Oslo. Judges scored it highest on sovereignty at 6-7: all customer data is stored in Norway in data centres the vendor owns and operates, a data processing agreement with EU standard contractual clauses and audit rights is published, and subprocessors Microsoft Office Online and Stripe are named with 30 days' notice of changes — though the captured pages give no locations for those subprocessors and we found no public information on certifications such as ISO 27001, SOC 2 or BSI C5. It is weakest on portability and integrations at 3-4, with no public information on a REST API, open protocols or migration tools. Sharing and collaboration and administration and governance sit at 4: share links are described as public to anyone holding them, and we found no public information on link passwords, expiry, download limits, directory provisioning or remote wipe. Pricing transparency runs 5-6, with public tiers but no published price for additional terabytes. Weighted totals span 4.5 to 4.9 with no material split between judges. **Speaks for it:** - Sovereignty is the highest-scored criterion at 6-7, with all customer data stored in Norway in data centres the vendor owns and operates - A published data processing agreement carries EU standard contractual clauses, audit rights, breach notification and 30 days' notice of subprocessor changes, naming Microsoft Office Online for optional editing and Stripe for payment - Three business tiers are published — Business Small NOK 129 / month for 2 users, Business Medium NOK 179 / month for 10 users and Business Large NOK 459 / month for unlimited users, each with 1 TB storage and prices excluding VAT - Stated security basics cover 256-bit AES in transit and at rest, two-factor authentication, a 30-day recycle bin and the last five versions of every file - Desktop two-way sync with selective sync, automatic mobile backup of photos and videos, a web app and a command-line client for Windows, macOS, Linux and FreeBSD score 4-5 on sync and access **Held against it:** - Share links make data public to anyone who has the link, who can download and forward it, with no public information on link passwords, expiry or download limits - Judges found no public information on certifications such as ISO 27001, SOC 2 or BSI C5, on independent audits, or on ransomware recovery and point-in-time restore - Portability and integrations is the lowest-scored criterion at 3-4, with no public information on a REST API, open protocols such as WebDAV, SFTP or S3, migration tools or bulk export - The administrator cannot access data on members' accounts unless it is shared, and judges found no public information on directory or SCIM provisioning, retention policies, remote wipe or transfer of a leaver's files **Best for:** - Your procurement requires data residency in Norway on vendor-owned and operated infrastructure, backed by a published data processing agreement and a named subprocessor list - You need published fixed-price plans for a defined headcount — 2, 10 or unlimited users at NOK 129, NOK 179 or NOK 459 per month, each with 1 TB - You share very large files by plain link and co-edit documents in real time through Microsoft Office Online - You back up servers, NAS devices or Raspberry Pi units and want a command-line client that runs on Windows, macOS, Linux and FreeBSD and sends webhooks **Avoid if:** - You must send confidential client documents by link — the help pages state anyone with the link can download the data and forward it - Your organisation needs central control over members' files — the terms state the administrator cannot reach data on members' accounts unless it is shared with them - You need to budget an archive growing past 1 TB — ask the vendor: the public pages we read do not show it ## Scores by judge and criterion Scores out of 5, each judge scoring independently against the published rubric (v1). "n/r" = not rated: the vendor publishes no price, or the judge found no public information on that criterion. | Criterion | The IT Lead | The Data Protection Officer | The Architecture Practice Partner | The Tax Adviser | The Agency Producer | The Skeptic | | --- | --- | --- | --- | --- | --- | --- | | Sync, clients & file access | 2.5/5 | 2.5/5 | 2/5 | 2/5 | 2.5/5 | 2/5 | | Sharing & external collaboration | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 | | Encryption, key custody & recovery | 2.5/5 | 2/5 | 2.5/5 | 2/5 | 2.5/5 | 2/5 | | Administration, audit & governance | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 | | Export, API & self-hosting | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 | 1.5/5 | | European sovereignty | 3.5/5 | 3.5/5 | 3.5/5 | 3/5 | 3.5/5 | 3.5/5 | | Pricing transparency | 3/5 | 2.5/5 | 3/5 | 2.5/5 | 3/5 | 2.5/5 | | **Weighted verdict** | **2.5/5** | **2.5/5** | **2.5/5** | **2.5/5** | **2.5/5** | **2.5/5** | ### The judges - **The IT Lead** (v1.0): Runs IT with one colleague for a 180-person machine builder with three sites and a sales office in Poland. Is retiring the old file server and wants every account provisioned from Entra ID, team folders that stay with the company when someone leaves, an audit log they can hand to the auditor, a lost laptop wiped remotely, and a way back to the last clean state if ransomware ever encrypts a share. - **The Data Protection Officer** (v1.0): External data protection officer for a hospital group, two care providers and a payroll bureau, where the files are patient letters and salary statements. Reads who holds the keys before the feature page, asks whether end-to-end encryption survives a share link and the office editor, and wants the subprocessor list, the storage location and the contracting entity in writing before a single folder moves. - **The Architecture Practice Partner** (v1.0): Partner in a 25-person architecture practice in Hamburg whose CAD and BIM models run to several gigabytes each, worked on from the office, from home and on the building site. Needs files on demand so laptops do not fill up, sync that sends only what changed, a drive letter the CAD software accepts, phones that open plans offline in a basement, and structural engineers who can pick up a folder without an account. - **The Tax Adviser** (v1.0): Runs a tax practice with eleven staff and 400 clients, bound by professional secrecy under §203 StGB. Receives receipts, payslips and annual accounts from clients who will not install anything, and sends back drafts that must not end up in a forwarded email. Needs upload links, shares with expiry and passwords, a record of who downloaded what, and a provider that cannot read the files it stores. - **The Agency Producer** (v1.0): Producer at a 30-person video and design agency in Cologne that sends cuts, layouts and raw footage to customers every day and collects their feedback. Wants review links that play in the browser, comments on the file, transfers of 100 GB that do not stall, freelancers added for one project and removed after it, connections to Slack and the project tool, and a storage bill that does not jump when one shoot fills a terabyte. - **The Skeptic** (v1.0): Has seen "end-to-end encrypted" on a service that switches it off for shared folders, "hosted in Germany" on storage whose accounts and support run from the US, and "lifetime" plans from a company two years old. Reads that a product is "GDPR-compliant" and asks who holds the keys, whether ten years of folders, versions and shares can be exported in a form another provider imports — and what leaving would cost. ## European sovereignty — proven facts Built only from facts on the vendor's own pages; a dimension we could not prove is left open, never scored as zero. Headline: not determined. | Dimension | Finding | Points | Source | |---|---|---|---| | Legal entity | Not determined | — | — | | Hosting location | Not determined | — | — | | Hosting options | Not determined | — | — | | Open source | Not determined | — | — | | Data processing agreement | Not determined | — | — | | Transfer impact assessment | Not determined | — | — | ## Key facts Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources). **Compliance** - Authorities disclosure: Norway · yes [S8] - Data at rest encryption: yes [S14] - Data breach notification: yes [S9] - DPA audit rights: yes [S9] - DPA available: yes [S1] - DPA available: yes [S4] - DPA available: yes [S7] - DPA effective date: 2022-12-27 [S9] - DPA entity: 992 603 615 · Jotta AS [S9] - Encryption: 256 [S3] - Encryption at rest: yes [S15] - Encryption in transit: 256 · yes [S14] - Encryption transit: 256 · AES [S15] - GDPR: yes [S14] - GDPR compliance: yes [S9] - GDPR norwegian law: yes · yes [S3] - GDPR rights: access · correction · deletion · limited treatment · objection · data portability · withdraw consent [S7] - Https only: yes [S14] - Https only: 100 [S9] - Liability cap: amount paid in last 12 months [S8] - Pci: no · Stripe [S14] - Scc annex: 2021/915 [S9] - Ssl labs rating: A+ [S9] - Subprocessor change notice: 30 [S9] - Subprocessor list URL: https://docs.Jotta.com/en/articles/1937299-general-data-protection-regulation-gdpr-at-Jotta#sub-processors [S9] - Supervisory authority: https://www.datatilsynet.no · Data Inspectorate (Datatilsynet) [S7] - Terms change notice: 30 [S8] - Terms dated: 2019-07-01 [S8] - Tls rating: yes · A+ [S14] - Tls ssl: yes · A+ [S3] - Transparency act: Publishes transparency statement under Norwegian transparency act (åpenhetsloven) 2025 [S6] **Data** - Account deletion self service: Settings > Account and profile · yes [S8] - Deletion after termination: 90 [S8] - Family deletion after expiry: 90 [S8] - Metadata viewing support: no · yes [S7] - No individual datastores: no [S9] - No selling email: no [S7] - Personal data categories: Name · Email Address · Telephone number (optional) · Personal data included in stored files [S9] - Personal data collected: name, email address, phone number [S7] - Processing duration: 90 [S9] - Retention after cancellation: 90 [S7] - Ssl transfer: SSL [S7] - Stored in norway: yes [S9] - Trash retention days: yes · 30 [S11] **Hosting** - Data centers location: Norway [S9] - Data centers norway: Norway · yes [S3] - Data location: Norway · Norwegian privacy laws [S15] - Data location: Norway [S14] - Datacenter location: deep within the Norwegian mountains · NATO ammunition storage facility [S4] - Disaster resilience: extreme weather · heavy rain · forest fires · nuclear bombs · thick layers of rock and concrete [S4] - Own datacenters: yes [S14] - Own infrastructure: 100 [S4] - Private network: yes [S14] - Self owned infrastructure: yes [S9] - Self owned servers norway: Norway · yes · yes [S1] - Stored in norway: Norway · yes [S2] **Integrations** - Selective sync: yes [S2] **Legal** - Address: Jotta Group AS · Øvre Slottsgate 5, 0157 Oslo, Norway · 992 603 615 [S7] - Address: Oslo · Øvre Slottsgate 5 · Norway · 0157 [S8] - Address: Øvre Slottsgate 5, 0157 Oslo, Norway [S9] - Company: Jotta Group AS · 992 603 615 · Øvre Slottsgate 5, 0157 Oslo, Norway · Norway [S4] - Company: Øvre Slottsgate 5, 0157 Oslo, Norway · 992 603 615 · Jotta Group AS [S5] - DPA: yes [S2] - DPA: yes [S3] - DPA available: yes [S5] - DPA available: yes [S6] - Entity: Jotta Group AS · 992 603 615 · Øvre Slottsgate 5, 0157 Oslo, Norway [S1] - Entity: Jotta Group AS · Øvre Slottsgate 5, 0157 Oslo, Norway · 992 603 615 [S2] - Entity: Jotta AS [S7] - Entity: Jotta Group AS · 992 603 615 · Øvre Slottsgate 5, 0157 Oslo, Norway [S3] - Entity name: Jotta Group AS · Øvre Slottsgate 5, 0157 Oslo, Norway · 992 603 615 [S6] - Entity name: Jotta AS [S8] - Founding year: 2008 [S6] - Governing law: Norway · Court of Oslo, Norway [S8] - Group entity: Jotta Group AS · 992 603 615 [S9] - Org number: 992 603 615 [S8] - Transparency act: yes [S2] **Pricing** - Account types: Free · Individual · Family · Business [S8] - Billing periods: monthly · yearly [S1] - Billing periods: 1 · 12 · yes [S8] - Billing toggle: monthly · yearly [S2] - Billing toggle: monthly · yearly [S5] - Business billing: yes · monthly · yearly [S8] - Business large: unlimited · 1 · 459 · yes · yes · yes [S1] - Business medium: 10 · 1 · 179 · yes · yes · yes [S1] - Business small: 2 · 1 · 129 · yes · yes · yes [S1] - Family users: 5 [S8] - Free account: 0 · yes [S8] - Free account ads: yes [S8] - Free account inactivity: 12 [S8] - Free plan: 0 · 1 · 5 GB · Email and chat · Free [S2] - Free plan: Free · 1 · email and chat · 5 · yes [S5] - Home 5tb plan: Home 5 TB · 5 · phone, email and chat · 5 · 159 · no [S5] - Personal unlimited throttle: Jottacloud Personal · unlimited · 5 [S8] - Price change notice days: 30 [S8] - Pro tier exists: Jottacloud Pro exists; recommended if reduced speed after 5 TB is a concern [S5] - Refunds: yes [S8] - Right of cancellation: 14 · Individual accounts [S8] - VAT excluded: yes · yes [S1] **Product** - Add users: Admins can add users and manage user permissions and storage size [S17] - Age limit: 13 [S8] - AI no training: no [S3] - AI photo search: yes [S5] - AI photo search: yes [S6] - AI photo search: yes [S3] - Album sharing: Albums can be shared with friends [S13] - Apps platforms: Apps available for a wide range of operating systems and devices, downloadable from the download page [S11] - Archive: yes · archive [S2] - Archive: yes [S3] - Audit logs: yes [S14] - Audit logs: yes [S9] - Automatic backup: yes · automatic backup [S2] - Automatic backup: yes [S3] - Backup devices: computers · mobile phones · tablets [S3] - Backup schedule: yes · yes [S3] - Business admin activity logs: yes [S8] - Business admin data access: no [S8] - Business bonus storage: no [S8] - Business user addition: Users can be added to a Business Account [S16] - Business user removal: Users can be deleted from a Business Account [S16] - Cli: yes · Windows · Mac OS · Linux · FreeBSD [S3] - Cli platforms: desktops · servers · NAS devices · Raspberry Pi · Windows · OS X · Linux [S11] - Cli webhooks: yes [S18] - Company since: 2008 · 1.9 [S2] - Data stored in norway: Norway [S1] - Datastore isolation: yes · no [S14] - Desktop backup: Backup · one-way, from computer to Jottacloud [S11] - Desktop sync: Sync · two-way [S11] - Device sync: yes [S3] - Downgrade limit gb: 5 [S8] - Emp protection: yes [S4] - Encryption: yes [S2] - Encryption aes256: 256-bit AES [S1] - Encryption at rest: yes [S9] - Encryption in transit: AES256 in transit [S9] - Family admin access: no [S8] - Family residential requirement: yes [S8] - Fastest backup claim: named fastest backup service in the world by Cloudwards [S1] - File type support: all file types can be stored [S3] - Fire prevention low oxygen: 15 [S4] - Folder sharing: Folders can be shared via Jottacloud with multiple available options [S13] - Free trial: yes [S1] - Green energy: hydroelectric power · yes · 100 [S1] - Incident response: yes [S14] - Jottacloud pro: yes [S6] - Link sharing: yes [S3] - Mobile backup: iOS · Android · yes [S11] - Multiple admins: yes [S17] - Office online integration: yes · yes [S1] - Password encryption: no · yes [S7] - Permission controls: yes [S9] - Permission levels: yes [S14] - Platform support: PC · Mac · Android · iPhone · tablets [S3] - Private encryption keys: no [S15] - Recycle bin: 30 [S3] - Selected features: Automatic backup · Easy recovery · Original and uncompressed quality · Easy sharing [S1] - Selective sync available: desktop app · yes [S10] - Selective sync delete behavior: deletes from computer and Jottacloud account · deletes only from computer [S10] - Selective sync setup after installation: "Sync folder" tab / Sync menu in desktop application · yes [S10] - Selective sync setup during installation: yes [S10] - Share any file size: any size [S1] - Share link visibility: yes [S12] - Share links: Share files and folders by creating a URL to send to others [S12] - Share recipient permissions: yes · no [S12] - Shared albums: yes [S3] - Shared folders: yes [S3] - Sharing: yes · file sharing [S2] - Sharing articles: 2 [S13] - Sharing scope: Users can share files, folders, photos and albums [S13] - Sync folder removable: no · yes [S10] - Transfer notice: email · 30 [S8] - Two factor authentication: yes · yes [S14] - Two factor authentication: yes [S9] - Unchecked folder upload behavior: yes · no [S10] - Unlimited storage per user: Storage per user can be set to a specific amount or Unlimited [S17] - Version history: 5 [S1] - Version history: version history · 5 [S2] - Version history: 5 [S3] - Web 2FA: two-factor authentication (2FA) · profile information · subscription [S11] - Web access: yes [S3] - Web AI search: Photo Timeline · AI-Search [S11] - Web upload download: yes [S11] - Webhook add command: webhook added via 'jotta-cli webhook add [your url]' [S18] - Webhook default status interval: 6 [S18] - Webhook message types: webhook messages sent when jottad starts, stops, and a status message at custom intervals [S18] - Webhook remove command: webhook removed via 'jotta-cli webhook rem [your url]' [S18] - Webhook slack format: webhook messages use Slack rich formatting [S18] - Webhook status interval config: status interval customizable via 'jotta-cli config set webhookstatusinterval' with duration values like 10m, 6h, 5h30m [S18] - Webhook test message: yes [S18] - Welcome email onboarding: New users receive a Welcome email to set password and complete registration [S17] **Subprocessors** - Microsoft office: Microsoft Office Online · optional editing services [S9] - Stripe payments: Stripe · payment processing [S9] **Support** - Uptime: 99.9 [S14] ## Questions ### Is Jottacloud Business European? Yes, though not from the EU. whats-best.ai classifies Jottacloud Business as UK / wider Europe. ### Where does Jottacloud Business store data? The default storage location for customer data is not stated on the vendor’s pages as of 1 Nov 2026. The vendor’s pages mention Norway as hosting location, per [the vendor’s page captured 1 Nov 2026](https://whats-best.ai/evidence/13288). ### Does Jottacloud Business have a free plan? Yes. Jottacloud Business has a free plan, per [the vendor’s page captured 1 Nov 2026](https://whats-best.ai/evidence/13275). ### What are the best alternatives to Jottacloud Business? As of 1 Nov 2026, the panel rates [Nextcloud Files (Nextcloud Hub) (4/5)](https://whats-best.ai/software/cloud-storage/nextcloud-files), [Tresorit (3.5/5)](https://whats-best.ai/software/cloud-storage/tresorit) and [Proton Drive (3/5)](https://whats-best.ai/software/cloud-storage/proton-drive) highest among the other 13 Cloud Storage & File Sharing products evaluated. The highest-rated European alternative is [Nextcloud Files (Nextcloud Hub)](https://whats-best.ai/software/cloud-storage/nextcloud-files) (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [Jottacloud Business alternatives](https://whats-best.ai/software/cloud-storage/jottacloud/alternatives). ## What this page leaves out - 10 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. - 3 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. - 1 compliance fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. - 1 data fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. - 1 hosting fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. - 4 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown. - 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement. ## Sources - [S1] Vendor homepage (business): https://jottacloud.com/en/business (checked 2026-11-01) - [S2] Company homepage: https://jottacloud.com/en/ (checked 2026-11-01) - [S3] Features page: https://jottacloud.com/en/features (checked 2026-11-01) - [S4] Security / trust page: https://jottacloud.com/en/why-jottacloud/server-security (checked 2026-11-01) - [S5] Pricing page: https://jottacloud.com/en/pricing (checked 2026-11-01) - [S6] Company page: https://jottacloud.com/en/about (checked 2026-11-01) - [S7] Privacy policy: https://jottacloud.com/en/privacy (checked 2026-11-01) - [S8] Terms of service: https://jottacloud.com/en/terms-conditions (checked 2026-11-01) - [S9] Data processing agreement (dpa): https://jottacloud.com/en/data-processing-agreement (checked 2026-11-01) - [S10] Sync, clients & file access — found from sitemap: https://docs.jottacloud.com/en/articles/7832394-selective-sync-new-desktop-application (checked 2026-11-01) - [S11] Sync, clients & file access — found from sitemap: https://docs.jottacloud.com/en/articles/1562159-our-apps (checked 2026-11-01) - [S12] Sharing & external collaboration — found from sitemap: https://docs.jottacloud.com/en/articles/3835724-how-to-share-files-and-folders-on-a-link-from-jottaclouds-website (checked 2026-11-01) - [S13] Sharing & external collaboration — found from sitemap: https://docs.jottacloud.com/de/collections/177988-teilen (checked 2026-11-01) - [S14] Encryption, key custody & recovery — found from sitemap: https://docs.jottacloud.com/en/articles/1359359-security-at-jottacloud (checked 2026-11-01) - [S15] Encryption, key custody & recovery — found from sitemap: https://docs.jottacloud.com/en/articles/1292923-does-jottacloud-support-private-encryption-keys (checked 2026-11-01) - [S16] Administration, audit & governance — found from sitemap: https://docs.jottacloud.com/en/collections/177910-business-subscription (checked 2026-11-01) - [S17] Administration, audit & governance — found from sitemap: https://docs.jottacloud.com/en/articles/1292909-how-do-i-add-users-to-my-business-account (checked 2026-11-01) - [S18] Export, API & self-hosting — found from sitemap: https://docs.jottacloud.com/en/articles/1459570-how-to-configure-the-command-line-client-to-send-webhooks (checked 2026-11-01) --- Cite as: whats-best.ai, "Jottacloud Business — Cloud Storage & File Sharing", AI panel analysis, as of 2026-11-06. https://whats-best.ai/software/cloud-storage/jottacloud Corrections: https://whats-best.ai/correct/1221?target=page