# luckycloud Business — Cloud Storage & File Sharing

luckycloud Business by luckycloud GmbH holds a panel rating of 2.5/5 from 6 AI judges (category median 3/5), as of 2026-11-01. Provenance: EU-Made; sovereignty: not determined.

- Vendor: luckycloud GmbH (https://luckycloud.de/de/produkte/cloud-services/business)
- Category: [Cloud Storage & File Sharing](https://whats-best.ai/software/cloud-storage.md)
- Provenance (editorial classification): EU-Made
- Canonical page: https://whats-best.ai/software/cloud-storage/luckycloud
- Alternatives: https://whats-best.ai/software/cloud-storage/luckycloud/alternatives ([markdown](https://whats-best.ai/software/cloud-storage/luckycloud/alternatives.md))
- Data as of: 2026-11-06 · evaluated 2026-11-01 · oldest source captured 2026-11-01

**AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology

## At a glance

- Vendor: luckycloud GmbH
- Headquarters: Not stated on the vendor’s pages as of 1 Nov 2026
- Data hosting: Default not stated; pages mention Germany [S7]
- Free plan: Not stated on the vendor’s pages as of 1 Nov 2026

## The panel's verdict

luckycloud Business is a German cloud storage service whose persona-weighted totals run from 5.0 to 5.8. It is strongest on sovereignty at 6-7, pricing transparency at 6-7, and administration and governance at a uniform 6: the vendor is a GmbH registered in Berlin, hosts exclusively on its own servers in Germany in ISO-certified data centres, publishes a transparency report and a documented route to a GDPR data processing agreement, prices Business from 4,50 € per person per month with a 30% saving at twelve months, and provides a Business admin panel with predefined roles, delegable department administration and detailed access logs. Weakest are portability and integrations, flat at 4, and sync and access at 4-5, where we found no public information on WebDAV, SFTP or S3, migration tools from named providers, files-on-demand or block-level sync. Encryption and security lands at 5-6: zero-knowledge end-to-end encryption is optional per folder, and external sharing is unencrypted only. Scores spread by at most one point on every criterion, and the captured pages give different figures for storage included on Business.

**Speaks for it:**
- Zero-knowledge end-to-end encryption for individual folders, with the encryption password stated not to be stored on the vendor's servers so even administrators cannot read the content.
- Services run exclusively on the vendor's own servers in Germany in ISO-certified data centres, with a published transparency report and a documented data processing agreement under EU-GDPR.
- A Business admin panel with four predefined roles, delegable department administration, per-area storage quotas, and access logs with an Excel export of the rights overview.
- Public per-user prices — Business from 4,50 € per person per month, Teams from 2,50 € per user — with terms from one to 24 months, a 30% saving at twelve months and a 14-day free trial.
- Desktop sync clients for Windows, macOS and Linux including a headless command-line client for servers, plus iOS and Android apps.

**Held against it:**
- Sharing with external users is documented as possible unencrypted only, and encrypted sharing requires provisioning the recipient as a user.
- We found no public information on WebDAV, SFTP or S3 access, migration tools from named providers, SDKs, webhooks or a self-hosted edition.
- We found no public information on directory or SCIM provisioning, retention policies, legal hold, remote wipe or SIEM integration.
- The captured pages give different figures for storage included on Business, the Enterprise and Enterprise Plus tiers carry no public price, and we found no public information on VAT treatment.
- Administrator-deleted directories are documented as unrestorable, and we found no public information on a recycle bin or a ransomware recovery path.

**Best for:**
- You need a cloud hosted exclusively on the vendor's own servers in Germany, with a documented GDPR data processing agreement and a published transparency report.
- You organise work in departments and need delegable administration, per-area storage quotas, predefined roles and exportable rights overviews.
- You can provision every collaborator as a user in your own cloud and want zero-knowledge end-to-end encryption for internal folders.
- You want public per-user pricing with flexible terms and a 14-day free trial before committing.

**Avoid if:**
- You must deliver confidential files to outside parties over links — external sharing is documented as possible unencrypted only.
- Your recovery expectations include restoring deleted directories — the help pages state administrator-deleted directories cannot be restored.
- Your team moves heavy traffic every month — included traffic is 120% of booked storage, with excess billed at 0,0396 € per GB.

## Scores by judge and criterion

Scores out of 5, each judge scoring independently against the published rubric (v1). "n/r" = not rated: the vendor publishes no price, or the judge found no public information on that criterion.

| Criterion | The IT Lead | The Data Protection Officer | The Architecture Practice Partner | The Tax Adviser | The Agency Producer | The Skeptic |
| --- | --- | --- | --- | --- | --- | --- |
| Sync, clients & file access | 2.5/5 | 2/5 | 2/5 | 2/5 | 2/5 | 2.5/5 |
| Sharing & external collaboration | 2.5/5 | 2.5/5 | 2/5 | 2/5 | 2.5/5 | 2.5/5 |
| Encryption, key custody & recovery | 3/5 | 3/5 | 3/5 | 2.5/5 | 2.5/5 | 3/5 |
| Administration, audit & governance | 3/5 | 3/5 | 3/5 | 3/5 | 3/5 | 3/5 |
| Export, API & self-hosting | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 |
| European sovereignty | 3.5/5 | 3.5/5 | 3/5 | 3.5/5 | 3.5/5 | 3/5 |
| Pricing transparency | 3.5/5 | 3.5/5 | 3.5/5 | 3/5 | 3/5 | 3/5 |
| **Weighted verdict** | **3/5** | **3/5** | **2.5/5** | **2.5/5** | **2.5/5** | **2.5/5** |

### The judges

- **The IT Lead** (v1.0): Runs IT with one colleague for a 180-person machine builder with three sites and a sales office in Poland. Is retiring the old file server and wants every account provisioned from Entra ID, team folders that stay with the company when someone leaves, an audit log they can hand to the auditor, a lost laptop wiped remotely, and a way back to the last clean state if ransomware ever encrypts a share.
- **The Data Protection Officer** (v1.0): External data protection officer for a hospital group, two care providers and a payroll bureau, where the files are patient letters and salary statements. Reads who holds the keys before the feature page, asks whether end-to-end encryption survives a share link and the office editor, and wants the subprocessor list, the storage location and the contracting entity in writing before a single folder moves.
- **The Architecture Practice Partner** (v1.0): Partner in a 25-person architecture practice in Hamburg whose CAD and BIM models run to several gigabytes each, worked on from the office, from home and on the building site. Needs files on demand so laptops do not fill up, sync that sends only what changed, a drive letter the CAD software accepts, phones that open plans offline in a basement, and structural engineers who can pick up a folder without an account.
- **The Tax Adviser** (v1.0): Runs a tax practice with eleven staff and 400 clients, bound by professional secrecy under §203 StGB. Receives receipts, payslips and annual accounts from clients who will not install anything, and sends back drafts that must not end up in a forwarded email. Needs upload links, shares with expiry and passwords, a record of who downloaded what, and a provider that cannot read the files it stores.
- **The Agency Producer** (v1.0): Producer at a 30-person video and design agency in Cologne that sends cuts, layouts and raw footage to customers every day and collects their feedback. Wants review links that play in the browser, comments on the file, transfers of 100 GB that do not stall, freelancers added for one project and removed after it, connections to Slack and the project tool, and a storage bill that does not jump when one shoot fills a terabyte.
- **The Skeptic** (v1.0): Has seen "end-to-end encrypted" on a service that switches it off for shared folders, "hosted in Germany" on storage whose accounts and support run from the US, and "lifetime" plans from a company two years old. Reads that a product is "GDPR-compliant" and asks who holds the keys, whether ten years of folders, versions and shares can be exported in a form another provider imports — and what leaving would cost.

## European sovereignty — proven facts

Built only from facts on the vendor's own pages; a dimension we could not prove is left open, never scored as zero. Headline: not determined.

| Dimension | Finding | Points | Source |
|---|---|---|---|
| Legal entity | Not determined | — | — |
| Hosting location | Not determined | — | — |
| Hosting options | Not determined | — | — |
| Open source | Not determined | — | — |
| Data processing agreement | Not determined | — | — |
| Transfer impact assessment | Not determined | — | — |

## Key facts

Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources).

**Compliance**
- Audited standards: recognized security standards · yes [S13]
- Certifications: Additional IT security measures and certifications are documented [S5]
- Disclosure conditions: gültige Rechtsgrundlage · richtige Form · zuständige Behörde · Anfangsverdacht · Erforderlichkeit [S4]
- DPA available: Documentation on obtaining a data processing agreement in accordance with EU-GDPR is provided. [S14]
- DPA available: Art. 28 DSGVO · yes [S8]
- E2e password not stored: no [S2]
- Encryption documentation: Documentation on how data is encrypted at luckycloud, including end-to-end encryption [S5]
- Encryption zero knowledge: yes · yes [S1]
- EU GDPR processing: Data processing is documented in accordance with EU-GDPR and BDSG. [S14]
- GDPR: yes [S1]
- GDPR: yes · no [S8]
- GDPR DPA documentation: Documentation page explains how to obtain a data processing agreement (Auftragsverarbeitungsvertrag) per EU-DSGVO [S5]
- GDPR posture claim: Vendor claims to exceed current data protection regulations [S5]
- GDPR processing guidance: Documentation covers data processing according to EU-DSGVO and BDSG [S5]
- ISO datacenters germany: Deutschland · yes [S1]
- Legal basis disclosure: Disclosure of master data only under TTDSG §22(2)-(4) conditions [S4]
- No data as payment: Customers pay only with money, not with their data [S5]
- Open source: yes [S1]
- Open source software: Use of open source software is documented [S5]
- Transparency report: transparency report on law enforcement and government data requests [S13]
- Triple encryption zero knowledge: triple · yes · yes [S2]

**Data**
- Collected: Collects no customer data besides email address; additional data only voluntarily in support cases [S4]
- Deletion policy: yes · yes [S7]
- No permanent accesslogs: no [S7]
- Retention periods: Retention periods are documented [S5]
- Trial deletion: no · 14 [S8]

**Hosting**
- Germany operation: Germany [S13]
- Redundant data centers: Failure protection via separated data centers in the server cluster [S5]
- Server location: Deutschland · yes [S7]

**Integrations**
- API available: yes [S18]
- API file management: Upload, download and edit of files and folders via API [S17]
- API URL business: Business · https://storage.luckycloud.de [S18]
- API URL enterprise: Enterprise · individual domain · https://cloud.kundendomain.de [S18]
- API URL one teams: One · Teams · https://sync.luckycloud.de [S18]
- Mobile apps: yes · yes [S1]
- Rest API: yes [S17]

**Legal**
- Business no withdrawal: no [S8]
- Consumer withdrawal: 14 [S8]
- Contract retention: 2 [S8]
- Eula: luckychat End User License Agreement exists [S5]
- Jurisdiction: German law · Berlin [S8]
- Lei: 894500P8QJYDVRILPY68 [S6]
- Register court: Amtsgericht Charlottenburg (Berlin) [S6]
- Register number: HRB 169276 B [S6]
- VAT id: DE301776461 [S6]

**Pricing**
- Agb version: August 2020 [S8]
- Billing intervals: monthly · quarterly · semi-annual · annual · biennial [S8]
- Billing terms flexible: 1 month · 3 months · 6 months · 12 months · longer possible [S2]
- Business 12months discount: 30 · 12 [S1]
- Business free trial: yes · yes [S1]
- Business per person: EUR · 4.5 [S1]
- Business starting price: person/month · EUR · 4.5 [S1]
- Business team size: 1000+ · 2 [S1]
- Configurator default selection: 500 · 2 · 2 · 3 · 12 · 30 [S2]
- Configurator teams per user: EUR · 2.5 [S2]
- Contract lengths standard: 1 · 3 · 6 · 12 · 24 [S8]
- Currency: EUR [S8]
- Dedicated initial term: yes · 12 · 12 [S8]
- Enterprise no trial: luckycloud pro Enterprise · luckycloud pro Enterprise Plus · no [S8]
- Excess traffic: 0.0396 [S8]
- Free trial: yes · yes [S2]
- Paid only: yes [S8]
- Payment methods: invoice · PayPal · Sofortüberweisung · VISA/Mastercard · SEPA direct debit [S8]
- Prepayment: yes [S8]
- Teams starting price: starting price (ab) · 2.5 [S2]
- Trial length: 14 · yes [S8]

**Product**
- Access logs: Admin access logs cover login and file accesses, file changes, access right changes, and shared link calls [S16]
- Admin access logs: login_logs · file_access_logs · file_change_logs · permission_change_logs · shared_link_view_counts [S15]
- Admin cannot read encrypted: no [S7]
- Admin cannot see data: no · yes · yes [S15]
- Admin deactivation: Admins can be (temporarily) deactivated by setting status to Inactive [S16]
- Admin deactivation: Admins können zeitweise deaktiviert werden (Status: Inaktiv) [S15]
- Admin management tools: Management Tools für Daten und Benutzer in Bereichen, Unterbereichen und Gruppen [S15]
- Admin panel: Admin Panel für Verwaltung, Nutzerzahlen, Aktionen und Dateizugriffsprotokolle [S1]
- Admin panel: Business · Enterprise · yes [S16]
- Admin panel available: Business · Enterprise (Plus) [S15]
- Admin panel URL: https://storage.luckycloud.de/org/[useradmin]/ · https://[deine Domain].de/sys/info [S15]
- Admin panel via profile: Admin-Panel-Zugang über Profil-Icon > 'Enterprise Admin' im Benutzerbereich [S15]
- Admin privacy: System administrator sees only directory names; can view data only if directory owner or share recipient; can delete directories [S16]
- Admin user management: create_users · reset_user_passwords · delete_users [S15]
- Anonymous payment: Barzahlung · Überweisung · Paypal · Paypal Preapproved · Kreditkarte · SEPA-Lastschrift [S7]
- Anti theft measures: Anti-theft protection measures are documented [S5]
- API data management: upload/download/edit files and folders · shareable links with optional password protection · file metadata and version history [S18]
- API integration: integration into existing workflows · automated sharing/sync with external systems · custom applications [S18]
- API monitoring: access logs · two-factor authentication settings and password policies · system status and resource usage [S18]
- API user management: create/edit/delete user accounts · assign roles and permissions · create and manage groups [S18]
- Apps: iOS · Android [S4]
- Area admin role: Area administration can be delegated via 'Administration' role within an area [S16]
- Areas hierarchy: Areas support sub-areas (nested departments) for organizing data and users [S16]
- Automatic sync: yes · yes [S1]
- Available plans: One · Teams · Business · Enterprise [S1]
- Bulk user import: XLSX-Datei zum Benutzerimport ab ca. 10 Benutzern empfohlen [S15]
- Cloud collaboration: shared cloud for secure multi-user collaboration [S2]
- Consultant tool: digital advisor tool to find suitable storage plan [S2]
- Cross platform access: cross-platform access and joint editing in the cloud [S2]
- Custom roles: Enterprise · Enterprise Plus · yes [S16]
- Custom roles: Enterprise · Enterprise Plus · yes [S15]
- Data protection priority: Data protection and security are of the highest priority at luckycloud; the company states it uses advanced security technologies and exceeds current data protection regulations. [S14]
- Department admin role: Bereichsadministrator-Rolle kann an Team-Mitglieder delegiert werden [S15]
- Departments: create_departments · create_sub_departments · allocate_storage_per_department · add_members · delete_departments [S15]
- Device history name: Gerätename erscheint in Geräte-Historie [S9]
- Disk encryption: yes [S7]
- Download link: download · yes [S11]
- End to end encryption: End-to-end encryption is offered and documented, including how to enable it [S5]
- End to end encryption: End-to-end encryption is offered with instructions on when it is useful and how to enable it. [S14]
- External sharing links: yes [S2]
- File access logs: File access logs show users, type, IP/device, date, directory, file/folder [S16]
- File access logs: user · type · ip_device · date · directory · file_or_folder [S15]
- File update logs: File update logs show users, date, directory, and action [S16]
- File update logs: user · date · directory · action [S15]
- Group sharing: group_sharing · yes [S11]
- Groups vs areas: Areas can view sub-areas/groups, create directories, and be data owner; groups cannot [S16]
- Groups vs departments: Bereiche können eigene Verzeichnisse und Gruppen erstellen, Gruppen nicht; Bereiche haben Unterbereichs-/Verzeichnisrechte und Dateneigentümerschaft [S15]
- Linux headless cli: lcs-cli · yes [S9]
- Login logs: Login logs show user name, IP address, status, date, time, directory, and files [S16]
- Login logs: user_name · ip_address · status · date · time · directory · files [S15]
- Mail anonymous account: luckycloud Mail [S7]
- Mobile apps: yes · yes [S6]
- Mobile apps: yes · yes [S2]
- Mobile apps: iOS · Android [S7]
- Mobile apps: iOS · Android [S13]
- Multiple admins: Business · Enterprise · yes [S16]
- Multiple admins: yes [S15]
- No traffic throttle: no [S8]
- Optional folder e2e encryption: einzelne Ordner · yes [S1]
- Own server infrastructure: Deutschland · yes [S1]
- Password reset: Admin can reset user passwords via email link; users can self-reset via Forgot Password [S16]
- Password reset flow: Admin kann Passwort per E-Mail-Link zurücksetzen; User kann selbst über 'Passwort vergessen' ändern; beim ersten Login neues Passwort festlegen [S15]
- Payment not data: Customers pay only with money, not with their data. [S14]
- Permission export: Excel-Export der Rechteübersicht: wer freigegeben hat, für wen, welche Aktion, welche Rechte, aus welchem Verzeichnis [S15]
- Permissions management: yes · yes [S2]
- Predefined roles: 4 · Team · User · Guest+ · Guest [S16]
- Predefined roles: 4 · Team · Benutzer · Gast+ · Gast [S15]

**Support**
- API docs: yes [S18]
- Digital advisor: digitaler Berater zur Planwahl [S1]
- Enterprise SLA: 24/7 · yes [S8]
- Free included minutes: neue Accounts · 15 [S8]
- Hours: Mon-Fri · 9:00-17:00 [S6]
- Paid ticket price: 22.5 [S8]
- Password reset assistance: Support team assists with resetting users' passwords as system administrator [S16]
- Premium support: persönlicher Premium-Support [S1]
- Privacy email: datenschutz@luckycloud.de [S7]
- SLA customizable: availability · support scope · support times · response times [S8]
- Support center: support center / help docs · yes [S2]
- Support center: Support Center with how-to articles and contact option [S13]
- Support email: support@luckycloud.de [S7]

60 more facts on the canonical page: https://whats-best.ai/software/cloud-storage/luckycloud

## Questions

### Is luckycloud Business European?

Yes. whats-best.ai classifies luckycloud Business as EU-Made.

### Where does luckycloud Business store data?

The default storage location for customer data is not stated on the vendor’s pages as of 1 Nov 2026. The vendor’s pages mention Germany as hosting location, per [the vendor’s page captured 1 Nov 2026](https://whats-best.ai/evidence/13262).

### Does luckycloud Business have a free plan?

Not stated on the vendor’s pages as of 1 Nov 2026.

### What are the best alternatives to luckycloud Business?

As of 1 Nov 2026, the panel rates [Nextcloud Files (Nextcloud Hub) (4/5)](https://whats-best.ai/software/cloud-storage/nextcloud-files), [Tresorit (3.5/5)](https://whats-best.ai/software/cloud-storage/tresorit) and [Proton Drive (3/5)](https://whats-best.ai/software/cloud-storage/proton-drive) highest among the other 13 Cloud Storage & File Sharing products evaluated. The highest-rated European alternative is [Nextcloud Files (Nextcloud Hub)](https://whats-best.ai/software/cloud-storage/nextcloud-files) (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [luckycloud Business alternatives](https://whats-best.ai/software/cloud-storage/luckycloud/alternatives).

## Head-to-head

- [luckycloud Business vs STRATO HiDrive Business](https://whats-best.ai/compare/luckycloud-vs-strato-hidrive.md)

## What this page leaves out

- 13 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 7 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 7 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 5 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 1 hosting fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 1 subprocessors fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 1 support fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 3 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown.
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement.

## Sources

- [S1] Vendor homepage (business plans and pricing): https://luckycloud.de/de/produkte/cloud-services/business (checked 2026-11-01)
- [S2] Features page (team plans and pricing): https://luckycloud.de/de/produkte/cloud-services/teams (checked 2026-11-01)
- [S3] Security / trust page: https://luckycloud.de/de/sicherheit (checked 2026-11-01)
- [S4] Security / trust page (transparency report): https://luckycloud.de/de/sicherheit/transparenzbericht (checked 2026-11-01)
- [S5] Documentation (data protection and security): https://docs.luckycloud.de/de/data-protection-and-security (checked 2026-11-01)
- [S6] Legal notice: https://luckycloud.de/de/impressum (checked 2026-11-01)
- [S7] Privacy policy: https://luckycloud.de/de/datenschutz (checked 2026-11-01)
- [S8] Terms of service: https://luckycloud.de/de/agb (checked 2026-11-01)
- [S9] Sync, clients & file access — found from sitemap: https://docs.luckycloud.de/de/software/sync-client (checked 2026-11-01)
- [S10] Sync, clients & file access — found from sitemap: https://docs.luckycloud.de/en/software/sync-client (checked 2026-11-01)
- [S11] Sharing & external collaboration — found from sitemap: https://docs.luckycloud.de/de/cloud-storage/freigaben-erstellen (checked 2026-11-01)
- [S12] Sharing & external collaboration — found from sitemap: https://docs.luckycloud.de/en/cloud-storage/freigaben-erstellen (checked 2026-11-01)
- [S13] Encryption, key custody & recovery — found from sitemap: https://luckycloud.de/en/security (checked 2026-11-01)
- [S14] Encryption, key custody & recovery — found from sitemap: https://docs.luckycloud.de/en/data-protection-and-security (checked 2026-11-01)
- [S15] Administration, audit & governance — found from sitemap: https://docs.luckycloud.de/de/business-and-enterprise/systemadministration (checked 2026-11-01)
- [S16] Administration, audit & governance — found from sitemap: https://docs.luckycloud.de/en/business-and-enterprise/systemadministration (checked 2026-11-01)
- [S17] Export, API & self-hosting — found from sitemap: https://docs.luckycloud.de/de/cloud-storage/rest-api (checked 2026-11-01)
- [S18] Export, API & self-hosting — found from sitemap: https://docs.luckycloud.de/en/cloud-storage/rest-api (checked 2026-11-01)

---

Cite as: whats-best.ai, "luckycloud Business — Cloud Storage & File Sharing", AI panel analysis, as of 2026-11-06. https://whats-best.ai/software/cloud-storage/luckycloud

Corrections: https://whats-best.ai/correct/1212?target=page