Cloud Storage & File Sharing
pCloud Business
UK / wider Europe Report an error0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.
by pCloud International AG · www.pcloud.com
Report an error on this page Is this your product? →
Link to this page
Add ?theme=dark to the image address for dark backgrounds.
The badge shows the category and the month of the latest evaluation, and EU-Made where
that is the product’s provenance. It never shows a score.
pCloud Business at a glance
- Vendor
- pCloud International AG
- Headquarters
- Not stated on the vendor’s pages as of 1 Nov 2026
- Data hosting
- Not stated on the vendor’s pages as of 1 Nov 2026
- Free plan
- Not stated on the vendor’s pages as of 1 Nov 2026
- Panel verdict
- The AI panel rates pCloud Business 2.5/5, the mean of 6 judges. pCloud Business, from pCloud International AG, scores strongest on pricing transparency, sync and access, and sharing and collaboration, all running 5 to 6: Business is published as 3 users / 3 TB at 9.99 EUR per user and Business Pro at 14.98 EUR per user with 6 TB, with the 25% discount scope, 30-day trial and 14-day money-back spelled out. how scores are made
- As of
- Vendor pages captured 1 Nov 2026; evaluated by the panel 1 Nov 2026. all sources
Read this page as one judge. Each weighs the same scores by what they care about.
The panel's verdict
pCloud Business, from pCloud International AG, scores strongest on pricing transparency, sync and access, and sharing and collaboration, all running 5 to 6: Business is published as 3 users / 3 TB at 9.99 EUR per user and Business Pro at 14.98 EUR per user with 6 TB, with the 25% discount scope, 30-day trial and 14-day money-back spelled out. Those rest on unlimited file size upload, a virtual drive that keeps files off the local disk, password-protected links, file requests and six built-in editors. Scoring runs lowest on sovereignty at 3 to 5 — the default data region unstated, no public information found on subprocessors or a data processing agreement — with administration and governance and portability and integrations at 4 to 5 and no public information on provisioning, retention, legal hold or remote wipe. Encryption and security spans 4 to 6, its lower scores citing undocumented key custody; the captured pages give different recovery figures — 180 days of file versioning on the business pages, up to 30 days on the pricing page. Persona-weighted totals span 4.5 to 5.6, with no flagged splits flagged.
Speaks for it
- Unlimited file size upload plus a desktop virtual drive that works without taking up local storage.
- Both business tiers published with exact per-user prices — 9.99 EUR for Business, 14.98 EUR for Business Pro — plus a 30-day trial, 14-day money-back and no setup fees.
- A documented API over HTTP/JSON and a binary protocol, with OAuth 2.0 and SDKs in five languages, giving a programmatic path in and out.
- Client-side encryption that locks files before they leave the device is included in the business plan, with 180-day file versioning stated on the business pages.
- Sharing covers shared folders, password-protected links, file requests, branded links, comments with approvals and real-time co-editing in six built-in editors.
Held against it
- We found no public information on who holds the encryption keys, what happens when a key is lost, two-factor authentication or single sign-on.
- The captured pages give different recovery figures — 180 days of file versioning on the business pages, up to 30 days ago on the pricing page.
- We found no public information on link expiry, download limits, a no-download view, watermarking or a per-share access log.
- We found no public information on directory or SCIM provisioning, retention policies, legal hold, remote wipe or transferring a leaver's files.
- The vendor's own pages do not state the entity's jurisdiction or the default data region for new accounts, and we found no public information on subprocessors or a data processing agreement.
Best for
- You move very large files — raw footage, CAD or BIM models, media libraries — and need unlimited-size uploads with a virtual drive that keeps local disks free.
- You want both business tiers priced publicly before committing, with a 30-day trial and 14-day money-back to test them.
- Your team's daily work is external sharing and in-browser co-editing — file requests, branded links and the six built-in editors.
- You have developers who can use the documented API and SDKs to script a migration in and, later, an exit.
Avoid if
- Your sign-off requires documented governance — directory or SCIM provisioning, retention policies, legal hold, remote wipe — where administration and governance scores run 4 to 5.
- Your procurement must see a subprocessor list, a data processing agreement and a confirmed default data region before contracting — sovereignty scores span 3 to 5.
- You need key custody, two-factor authentication and single sign-on answered before relying on the client-side encryption claim — encryption and security spans 4 to 6.
- You need fewer than the three users the published tiers start at.
The scores
| Criterion | Panel median |
|---|---|
| Sync, clients & file access | 3 of 5 |
| Sharing & external collaboration | 3 of 5 |
| Encryption, key custody & recovery | 3 of 5 |
| Administration, audit & governance | 2 of 5 |
| Export, API & self-hosting | 2.5 of 5 |
| European sovereignty | 2.5 of 5 |
| Pricing transparency | 3 of 5 |
Sync, clients & file access
Show reasoningHide reasoning
How this is scored
How files reach the people who work with them: desktop clients for Windows, macOS and Linux, files on demand (virtual drive) and selective sync, offline access, mobile apps with camera upload and offline folders, a web interface, block-level or delta sync for large files, sync of folders outside the main folder, file size limits, preview of common formats, full-text search, and access through open protocols (WebDAV, SFTP, S3) or a mounted network drive.
0 — Not a file storage or sync product; files cannot be stored and synced with it.
3 — A web interface and apps for some platforms to upload and download files; desktop sync, files on demand, offline access and limits are basic or not described.
5 — Desktop sync clients for Windows and macOS, files on demand or selective sync, mobile apps with offline files and camera upload, a web interface with previews, file size limits stated, and search by file name.
8 — Clients for Windows, macOS and Linux, a virtual drive with files on demand, block-level or delta sync documented, full-text search inside documents, access via WebDAV, SFTP or S3, large-file handling stated, and LAN sync or a performance figure for big folders.
10 — File access that a whole organisation runs on: every platform covered with feature parity stated, sync conflicts and their resolution documented, open protocols and a mountable drive on every desktop, search across content and metadata with OCR, and sync behaviour and limits published in technical documentation.
The IT Lead
The virtual drive, offline access, multi-device sync and mobile gallery backup are all stated, with unlimited file size upload and search by word or phrase, which covers the day-to-day side of replacing our file server. No captured page names which desktop operating systems the client covers, and I found no public information on WebDAV, SFTP or S3 access, block-level sync, or published sync limits for big CAD folders. 1 7 17
The Data Protection Officer
A desktop virtual drive that keeps files off the local disk, offline access, multi-device sync, mobile apps with gallery backup, unlimited file size upload and a phrase-level search are documented, and a Linux installation guide is among the captured pages. We found no public information on block-level or delta sync, on access through WebDAV, SFTP or S3, or on sync-conflict handling and performance figures for large folders. 1 7 17 19
The Architecture Practice Partner
A virtual drive that works without taking up local disk, offline access, sync across devices, mobile apps with gallery backup and unlimited file size upload are all stated, and there is even a capture on installing the desktop drive on Linux — that covers my files-on-demand and site-basement needs. But I found no public information on block-level or delta sync, which decides whether a small edit to a multi-gigabyte BIM model re-uploads the whole file, and none on WebDAV, SFTP or S3 access, and the captured pages never name the desktop client platforms directly. 1 7 17 19
The Tax Adviser
A desktop virtual drive that works without filling the local disk, offline access, sync across all devices and phone gallery backup are all documented, with unlimited file size upload stated outright. Search is described as finding files by a word or phrase you remember, which reads as more than a file-name search. We found no public information on which desktop operating systems are covered, block-level sync, or access through WebDAV, SFTP or S3. 1 7 17
The Agency Producer
Unlimited file size upload, the virtual drive that runs "without taking up actual HDD storage", offline access and phone gallery backup speak straight to our 100 GB raw-footage transfers, and the built-in video and music player means cuts stream without a download. A Linux install guide is among the captured pages, but we found no public information on block-level sync, access via WebDAV, SFTP or S3, or search inside document contents — the search line only says to "type a word or phrase you remember". 1 7 17 19
The Skeptic
A virtual drive that keeps files off the local disk, offline access, multi-device sync, phone gallery backup and an enhanced word-or-phrase search are all stated, with upload file size called unlimited and a page on installing the drive on Linux in the captured set. What I cannot find anywhere in these pages is block-level or delta sync, access via WebDAV, SFTP or S3, named desktop platforms, or any performance figure for large folders — a buyer should assume those are undocumented until the vendor says otherwise. 7 1 17 6 19
Sharing & external collaboration
Show reasoningHide reasoning
How this is scored
How files are shared inside the team and with people outside it: shared team folders or spaces, share links with password, expiry, download limits and view-only or no-download mode, upload links (file requests) for customers, guest or external user accounts, link and access reports, notifications, watermarking, comments and file locking, editing of office documents in the browser together, large-file transfer, and an Outlook or Teams add-in for sending links instead of attachments.
0 — Files cannot be shared with anyone else.
3 — Folders and files can be shared with other users and by public link; link controls, upload links and external accounts are basic or not described.
5 — Shared team folders, share links with password and expiry, view-only links, upload links for external people, permissions per folder (view, edit), notifications on changes, and office documents opened and edited in the browser.
8 — Link policies the administrator sets (forced expiry, passwords, domains allowed), download limits and no-download view, watermarking, guest accounts with their own permissions, an access log per share, file locking and comments, co-editing documented with the editor named, and an Outlook or Teams add-in.
10 — External collaboration at the level of a data room: granular rights including print and download control on shared files, revocation that also reaches copies already opened, recipient identity verification, a complete record of who opened and downloaded what, and end-to-end encryption kept intact when sharing externally and when editing.
The IT Lead
Shared folders, password-protected links, upload requests, branded shares, comments with approvals and real-time co-editing in six browser editors are all documented, which is what my design and sales teams do daily. I found no public information on link expiry or download limits, watermarking, guest accounts, a per-share access log, file locking, or an Outlook or Teams add-in. 1 6 7 17
The Data Protection Officer
Shared folders, password-protected links, file requests, branded links, comments with approvals and real-time co-editing in six built-in editors are documented. We found no public information on link expiry, download limits or a no-download view, guest accounts, watermarking, per-share access logs or an Outlook or Teams add-in, and nothing on whether client-side encryption survives a share link. 1 7 17
The Architecture Practice Partner
Shared folders with access levels, password-protected links, file requests for gathering files from outside, comments with approvals and real-time co-editing in six browser editors are all documented, which lets a structural engineer pick up a folder without an account. I found no public information on link expiry, download limits, view-only or no-download links, watermarking, guest accounts or an Outlook or Teams add-in. 1 6 7 17
The Tax Adviser
Password-protected links, shared team folders, branded shares and file requests for gathering documents from clients are documented, alongside six browser editors with real-time collaboration and detailed activity logs per user and team. As a practice I depend on expiry dates, download limits and a per-share record of who downloaded a draft, and the captured pages give no public information on any of those, nor on view-only or no-download modes. 1 6 7 17
The Agency Producer
Password-protected links, shared folders, file requests for customer uploads, branded share links, comments dropped directly on files with approvals, and real-time co-editing across six built-in editors cover most of our review workflow. We found no public information on link expiry, download limits, a no-download view, watermarking, guest accounts or an access log per share, which is the level a client-facing data room would need. 1 7 17
The Skeptic
Shared folders, password-protected links, file requests, branded shares, comments on files and real-time co-editing through six built-in editors are all documented. We found no public information on link expiry, download limits or a no-download view, guest accounts with their own permissions, an access log per share, file locking, or an Outlook or Teams add-in — the controls a business buyer would ask about first. 7 1 17 6
Encryption, key custody & recovery
Show reasoningHide reasoning
How this is scored
How the files are protected and restored: encryption in transit and at rest, client-side or end-to-end encryption and whether it covers all folders, sharing and office editing, who holds the keys and what happens when a user loses theirs, customer-managed keys, two-factor authentication and single sign-on, version history and its length, a recycle bin, restore of a whole folder or account to a point in time after ransomware, ransomware detection, malware scanning, an independent security audit or penetration test, a bug bounty, and certifications (ISO 27001, SOC 2, BSI C5) with their scope. Where the data is stored is scored under sovereignty.
0 — Files are stored without any stated encryption and no account protection beyond a password.
3 — Encryption is mentioned and a recycle bin or version history exists; key custody, two-factor, restore after ransomware and audits are basic or not described.
5 — TLS in transit and AES encryption at rest stated, two-factor authentication, version history with its length stated, a recycle bin, the restore of deleted or overwritten files, and a security page naming at least one certification or audit.
8 — Client-side or end-to-end encryption documented with who holds the keys (or customer-managed keys), a whitepaper describing the scheme, single sign-on (SAML), restore of a folder or account to a point in time, ransomware detection or recovery documented, an independent audit or penetration test named, and ISO 27001, SOC 2 or BSI C5 stated with scope.
10 — Security that can be verified: zero-knowledge end-to-end encryption by default that stays on for sharing and editing, the cryptography published and externally audited with the report available, key recovery for organisations documented without the provider gaining access, open-source clients or a public bug bounty, and certifications published with their scope and date.
The IT Lead
Client-side encryption is stated on the business pages, file versions restore from up to 180 days in the past, trash and revisions appear in the API, and GDPR and ISO 27001 are claimed — though the captured pages give different figures for the recovery window, with one page saying data can be recovered from up to 30 days ago. No captured page says who holds the encryption keys or what happens on key loss, and I found no public information on two-factor authentication, in-transit or at-rest encryption detail, ransomware detection, restoring a whole share to a point in time, or the certification's scope. 1 6 7 17
The Data Protection Officer
Client-side encryption is stated to lock files before they leave the device and is listed as a Business plan feature, with 180-day file versioning and ISO 27001 as well as ISO 9001 claims. Who holds the keys, what happens when a user loses theirs, two-factor or single sign-on, ransomware recovery and any independent audit are not described in the captured pages, so the scheme cannot be verified from public evidence. 1 7 17
The Architecture Practice Partner
Client-side encryption that locks files before they leave the device is documented and included in the business plan, file versions restorable up to 180 days back are stated, trash handling appears in the API, and ISO 27001 is named alongside GDPR. Who holds the encryption keys, two-factor authentication, single sign-on, ransomware recovery and any independent audit are not described on the captured pages, so the client-side promise stands without its custody detail. 1 6 7 17
The Tax Adviser
Client-side encryption that locks files before they leave the device is listed in the business plan, file versions are restorable from up to 180 days back, and ISO 27001, ISO 9001 and GDPR compliance are named. But who holds the keys, what happens when a staff member loses a key, two-factor authentication and any independent audit or penetration test are all undocumented, so I cannot sign off my professional secrecy duty on the encryption claim alone. 1 7 17
The Agency Producer
Client-side encryption that "locks your files before they leave your device" is included in the Business plan, alongside ISO 27001 and ISO 9001 named and a trash feature visible in the API. The captured pages give different figures for recovery — 180 days of file versioning on the business page, "up to 30 days ago" on the pricing page — and we found no public information on who holds the keys, key recovery, two-factor authentication, single sign-on, ransomware detection or the certifications' scope. 1 3 6 7 17
The Skeptic
Client-side encryption that locks files before they leave the device is claimed, 180-day file versioning is stated for business plans, trash and revisions appear in the API, and ISO 27001 and ISO 9001 are named. But the captured pages give different recovery figures (up to 30 days on the consumer pricing page, 180 days on the business page), and I found no public information on who holds the encryption keys, what happens when a passphrase is lost, two-factor or single sign-on, ransomware detection, or an independent audit and the certification's scope — an encryption claim without custody answers is exactly what I refuse to take on faith. 1 17 7 6
Administration, audit & governance
Show reasoningHide reasoning
How this is scored
What an administrator controls: an admin console with users, groups and roles, provisioning through Entra ID, Google or LDAP with SCIM, quotas per user or team, an audit log of logins, shares and file actions with export, retention policies and legal hold, data loss prevention or classification, device management with remote wipe and unlinking, policies for external sharing, account transfer when someone leaves, team folders that belong to the company rather than to a user, and reports on storage and sharing.
0 — No administration: every account is independent and nobody can manage the team's users or files.
3 — A team plan with an administrator who can invite and remove users; roles, audit log, retention and device controls are basic or not described.
5 — An admin console with users, groups and admin roles, quotas, an activity or audit log, policies for external sharing, file transfer when a user leaves, company-owned team folders, and remote unlinking of lost devices.
8 — Provisioning via SCIM or a directory (Entra ID, Google, LDAP), an exportable audit log covering logins, shares and file actions, retention policies and legal hold, remote wipe, IP or device restrictions, data classification or DLP, and integration with a SIEM.
10 — Governance a regulated organisation can sign off: granular delegated administration per department or tenant, retention and legal hold with eDiscovery export, DLP with content inspection, every admin and user action logged and streamed to a SIEM, and the audit log retention and completeness stated.
The IT Lead
Teams with access levels, custom quotas drawn from the pooled storage and detailed activity logs per user and team are on the business pages, which is a workable start for governance. This is where my project stalls: no captured page shows provisioning from Entra ID, SCIM or LDAP, an exportable audit log, retention or legal hold, remote wipe or unlinking of a lost laptop, or transfer of files when someone leaves. 1 17
The Data Protection Officer
Teams with access levels, custom quotas per user from a shared pool, and detailed activity logs per user and team are documented. We found no public information on directory or SCIM provisioning, export of the audit log, retention policies and legal hold, remote wipe of devices, data classification or SIEM integration, which a regulated organisation needs before sign-off. 1 17
The Architecture Practice Partner
Teams with access control, custom quotas assigned per user from the overall storage pool, and detailed activity logs per user and team are stated, which is the everyday core for a 25-person practice. I found no public information on provisioning through a directory, retention policies or legal hold, remote wipe of lost devices, account transfer when someone leaves, or admin roles beyond team membership. 1 17
The Tax Adviser
Teams with access levels, custom quotas assigned from the overall storage pool, and activity logs per user and team are documented for business accounts. We found no public information on provisioning through a directory or SCIM, retention policies and legal hold, remote wipe or unlinking of lost devices, or transferring files when an employee leaves, which for an eleven-person office with client files is the governance half of the picture. 1 17
The Agency Producer
Teams with access levels, "custom quotas to users from the overall storage pool" — the one control that keeps a single shoot from swallowing the whole bill — and "detailed activity logs per user and team" are confirmed. We found no public information on directory provisioning, retention policies or legal hold, remote wipe or device restrictions, data loss prevention, SIEM streaming, or transferring a leaver's files. 1 17
The Skeptic
Teams with access levels, custom quotas drawn from the pooled storage, and detailed activity logs per user and team are stated on the business pages. We found no public information on directory or SCIM provisioning, audit log export and its retention, external-sharing policies, device management or remote wipe, retention and legal hold, or transferring an account when someone leaves — the activity-log line reads as a feature, not a governance regime. 1 17
Export, API & self-hosting
Show reasoningHide reasoning
How this is scored
Whether the files and their structure can leave and connect: a bulk export or download of all data with folders and versions, open protocols (WebDAV, S3, SFTP) usable for migration, a documented REST API and SDKs, webhooks, migration tools from Dropbox, Google Drive, OneDrive or a file server, integrations with office suites, Microsoft 365 and Teams, Slack, CRM and project tools, an app marketplace, open-source code, a self-hosted or on-premise edition, and deletion of data on termination.
0 — Files can only be downloaded one by one; no export, API or migration path.
3 — Files can be downloaded in bulk or as an archive; an API, migration tools, integrations and self-hosting are basic or not described.
5 — A documented API, bulk download of all files with the folder structure, a migration path from at least one named provider, integrations with named office and collaboration tools, and what happens to data after cancellation stated.
8 — A REST API with SDKs and webhooks, open-protocol access (WebDAV, S3 or SFTP) that makes migration tool-independent, migration tools in both directions or a supported migration service, an app marketplace, a self-hosted or on-premise edition, and deletion on termination under stated terms.
10 — The customer owns the data end to end: open-source code under a named licence that runs fully self-hosted with feature parity stated, a complete export including versions, shares and permissions in a documented format, and the deletion of every copy and backup on termination documented.
The IT Lead
The API is genuinely documented — HTTP/JSON and binary protocols, OAuth 2.0, SDKs in five languages and methods covering folders, files, archiving, trash and transfer — so migration off our old server could be scripted. I found no public information on WebDAV, SFTP or S3 access, webhooks, a named migration tool, a self-hosted edition, or what happens to our data after cancellation. 1 6 7
The Data Protection Officer
A documented HTTP/JSON and binary API with method categories covering files, revisions, trash, public links, upload links and transfers, OAuth 2.0 and SDKs in five languages are published, alongside a described transfer of content from third-party services. We found no public information on WebDAV, SFTP or S3 access, a bulk export preserving folder structure and versions, named migration sources, webhooks, an app marketplace or a self-hosted edition. 6 7
The Architecture Practice Partner
A documented API over HTTP/JSON and a binary protocol with SDKs in C, Java, JavaScript, PHP and Swift, plus OAuth 2.0 and transfer of content from third-party services, give a real programmatic path in and out. I found no public information on WebDAV, S3 or SFTP access, bulk export with folder structure and versions, migration from a named provider, an app marketplace, or any self-hosted or on-premise edition. 6 7
The Tax Adviser
The API is genuinely documented, with HTTP/JSON and binary protocols, OAuth 2.0 and SDKs in five languages covering folders, files, sharing, revisions and trash, plus separate European and US endpoints. A transfer feature for content originally stored elsewhere is described without any provider being named, and we found no public information on bulk export preserving the folder structure, WebDAV or S3 access, webhooks, a self-hosted edition, or what happens to data after cancellation. 6 7
The Agency Producer
The API is documented in real depth — HTTP/JSON and binary protocols, SDKs in five languages, OAuth 2.0, and a transfer capability described for content "no matter where they were originally stored". We found no public information on Slack or project-tool integrations (a genuine gap for us), webhooks, open protocols for migration, bulk export with the folder structure, an app marketplace or a self-hosted edition. 6 7
The Skeptic
The API is genuinely documented — method categories from folders and revisions to upload links and transfer, HTTP/JSON and binary protocols, OAuth 2.0, and SDKs in five languages — so a scripted exit is at least conceivable. But we found no public information on a bulk export preserving folders and versions, migration from any named provider (the transfer feature names none), webhooks, an app marketplace, a self-hosted edition, or what happens to the data after cancellation; ten years of shares and versions leaving in a documented format is nowhere promised. 6 7
European sovereignty
panel opinion
Show reasoningHide reasoning
How this is scored
Who the contracting entity and the parent company are, where files, metadata and backups are stored and processed, and who the subprocessors are (data centres, CDN, email that carries share notifications, support desk, payment, office editing). Independently sourced by the sovereignty pipeline; files hold the company's documents and personal data, so the whole chain counts, not only the storage. End-to-end encryption with keys only the customer holds reduces what a foreign provider could hand over but does not change who the provider is. A self-hosted edition the customer runs on its own European servers counts as the customer's chain, whatever the vendor's seat.
0 — Non-EU vendor and contracting entity, storage location unstated, subprocessors unnamed, and no data processing agreement offered.
3 — A privacy policy and a data processing agreement exist, but the storage location is unstated or non-EU and the subprocessors are not listed.
5 — EU storage available and an EU contracting entity or EU representative, but parts of the chain (account data, metadata, notifications, support, office editing, payment) run through non-EU providers without a stated safeguard, or the parent company is subject to non-EU disclosure laws.
8 — EU storage on named data centres, EU or EEA or Swiss contracting entity, subprocessors listed with their locations, a data processing agreement published, and security certifications (ISO 27001, BSI C5, SOC 2) stated — or a self-hosted edition documented that keeps every file on the customer's own servers.
10 — Sovereign end to end and evidenced: European ownership, entity, storage and every subprocessor, or a self-hosted open-source edition with no call home, data export and deletion documented, and certifications published with their scope rather than implied.
The IT Lead
An EU data centre is offered as one of two regions, GDPR and ISO 27001 are claimed, and the contracting entity is pCloud International AG, with separate European and US API hosts. But the default region for a new account is not confirmed on the captured pages, the subprocessors are not listed, and I found no public information on a published data processing agreement — for our Polish sales office I need that whole chain on paper. 1 6 17
The Data Protection Officer
An EU data centre is offered as a choice alongside a United States region, ISO 27001 and GDPR compliance are claimed, and the copyright names pCloud International AG, but the captured pages do not state which region is the default for new accounts. We found no public information on the contracting entity's jurisdiction as confirmed on the vendor's own pages, on named data centres, on a subprocessor list or on a data processing agreement, so the chain that would carry patient letters and salary statements is not documented. 1 6 9 17
The Architecture Practice Partner
An EU data centre is offered as an explicit choice against a US alternative, the contracting company is pCloud International AG, and GDPR with ISO 27001 is claimed, which puts a European option on the table for our client data. The captured pages never state which region new business accounts get by default, and the subprocessor chain and a published data processing agreement are unknown, so the guarantee stops at the storage choice. 1 6 17
The Tax Adviser
The business pages state an EU data centre as one of two choices, with GDPR compliance, ISO 27001 and ISO 9001, and the contracting entity is named as pCloud International AG. The captured pages never confirm which region is the default for a new account, the data centres themselves go unnamed, and we found no public information on subprocessors or a published data processing agreement, so the chain beyond storage stays in the dark. 1 6 17
The Agency Producer
An EU data centre is offered as a choice with GDPR, ISO 27001 and ISO 9001 named, separate API hosts exist for Europe and the United States, and the entity is pCloud International AG — but the captured pages do not state the entity's jurisdiction, and the privacy policy presents the EU region as a user choice without stating which region new accounts get by default. We found no public information on subprocessors, a data processing agreement, or where account data, share notifications, support and payment run. 1 6 17
The Skeptic
A choice of two data centres including an EU one is offered, the contracting entity is named as pCloud International AG, and ISO 27001 and ISO 9001 are cited — but the vendor's own captured pages do not confirm the entity's jurisdiction, and the privacy policy presents the EU region as a user choice without stating the default for new accounts, alongside a US region with its own API host. We found no public information on subprocessors and their locations, a published data processing agreement, or where account data, share notifications, support and payment are processed; an EU checkbox means little if the chain around it is invisible. 1 17 6
Pricing transparency
Show reasoningHide reasoning
How this is scored
Whether a buyer can compute the real annual cost from public pages alone: price per user or per plan, storage included per user or pooled, the minimum number of users, what extra storage costs, which features (end-to-end encryption, SSO, audit log, longer version history, data residency, advanced admin) need a higher tier or an add-on, the free tier and its limits, lifetime offers and their terms, the self-hosted edition's licence and support, minimum term and VAT.
0 — No public prices at all; every customer is a sales call.
3 — A starting price or a free tier exists, but how cost scales with users, storage or features is unclear.
5 — Business tiers are public with their price per user and storage included, but at least one commonly needed piece (extra storage, SSO, audit log, data residency, minimum users) is unpriced or "on request".
8 — Every tier priced publicly with its scaling rule (users, storage), extra storage and add-ons priced, minimum users and term stated, the self-hosted edition's licence and support cost stated, and VAT treatment stated.
10 — Complete price computability: annual cost derivable for a given team size, storage need and feature set, with every add-on, migration, support and overage fee and the cancellation and data-return terms published.
The IT Lead
Both business tiers are public — Business at 9.99 EUR per user per month with 3 users and 3 TB, Business Pro at 14.98 EUR per user with 3 users and 6 TB — alongside a 30-day trial, 14 days money-back, no setup fees and the discount scope spelled out. What I cannot compute from these pages is the VAT treatment, the cost of storage beyond the plan, or the price of anything I might need as an add-on such as single sign-on or audit exports. 1 7
The Data Protection Officer
Both business tiers are public with per-user prices, included storage, a three-user minimum, a 30-day trial, 14-day money-back, cancel-anytime terms and the discount's exclusion scope, alongside lifetime plans quoted as one-time payments. We found no public information on extra storage pricing, add-on prices for features such as single sign-on or audit capability, VAT treatment, or how cost scales beyond the bundled three users. 1 7
The Architecture Practice Partner
The business tiers are public with their storage — Business at 9.99 EUR per user for 3 users and 3 TB, Business Pro at 14.98 EUR per user for 3 users and 6 TB with the 25% discount scope honestly disclosed — plus a 30-day trial, 14-day money-back, no setup fees and lifetime consumer plans with their traffic limits. What I cannot compute from these pages is the cost of scaling the team beyond three users, extra storage, or the VAT treatment, so the real annual bill for my practice stays partly open. 1 7
The Tax Adviser
The business tiers are public with exact figures: 9.99 EUR per user per month for three users and 3 TB, and 14.98 EUR per user per month for Business Pro with 6 TB at 44.94 EUR per month, with the 25 percent discount scope spelled out, a 30-day trial, 14 days money-back and cancel-anytime terms. Extra storage beyond the plans, add-on features and VAT treatment are not priced on the captured pages, so a real annual cost is close but not fully computable. 1 7
The Agency Producer
Business is published as "3 USERS / 3 TB STORAGE" at "9.99 EUR PER USER" and Business Pro at "14.98 EUR PER USER" with 6 TB and 2 TB per user, with the 25% discount scope spelled out down to renewals and seat additions, plus a 30-day trial, 14-day money-back and "no setup fees". We found no public information on VAT treatment, the annual-plan price behind the toggle, or what storage beyond the published tiers costs — which matters when one shoot adds a terabyte. 1 7
The Skeptic
Business is listed at 9.99 EUR per user per month for 3 TB across 3 users and Business Pro at 14.98 EUR per user per month, with the discount's exclusions (existing accounts, renewals, plan changes, seat additions, reactivations) published, plus a 30-day trial, 14-day money-back, cancel anytime and no setup fees. What I could not find priced anywhere is extra storage, any add-on, or VAT treatment; lifetime plans are sold as one-time payments with an FAQ about upgrading later, and we found no public information on what those lifetime terms actually guarantee. 1 7
European sovereignty — proven facts
0 of 6 dimensions provenBuilt only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.
| Legal entity | Not determined ⚠ unverified | — | uncited Report an error |
|---|---|---|---|
| Hosting location | Not determined ⚠ unverified | — | uncited Report an error |
| Hosting options | Not determined ⚠ unverified | — | uncited Report an error |
| Open source | Not determined | — | uncited Report an error |
| Data processing agreement | Not determined | — | uncited Report an error |
| Transfer impact assessment | Not determined | — | uncited Report an error |
Questions about pCloud Business
Is pCloud Business European?
Yes, though not from the EU. whats-best.ai classifies pCloud Business as UK / wider Europe.
Where does pCloud Business store data?
Not stated on the vendor’s pages as of 1 Nov 2026.
Does pCloud Business have a free plan?
Not stated on the vendor’s pages as of 1 Nov 2026.
What are the best alternatives to pCloud Business?
As of 1 Nov 2026, the panel rates Nextcloud Files (Nextcloud Hub) (4/5), Tresorit (3.5/5) and Proton Drive (3/5) highest among the other 13 Cloud Storage & File Sharing products evaluated. The highest-rated European alternative is Nextcloud Files (Nextcloud Hub) (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: pCloud Business alternatives.
Where this could be wrong
- Evidence ages. The oldest capture behind this page is from 1 Nov 2026. Vendors change pricing and policies without notice; every fact reflects its source as of the capture date shown in the registry.
- Weak sourcing — Hosting location, Hosting options, Legal entity. Not confirmed on the vendor’s own pages as captured.
- AI can misread a source. Extraction and judgement are automated; a citation guarantees traceability, not infallibility. If something here is wrong, say so — no account needed, every report is decided within 5 business days, and accepted corrections are published.
What we left out
A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.
- 108 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 31 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 30 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 22 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 15 data facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 12 hosting facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 3 support facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 2 integrations facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 3 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown. Know more? Tell us
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement. Know more? Tell us
Sources (20)
The pages every claim on this page was read from — each one checked, dated, and kept verifiable.
- 1 Vendor homepage (business plans with pricing) www.pcloud.com Checked 1 Nov 2026 Details →
- 2 Company homepage www.pcloud.com Checked 1 Nov 2026 Details →
- 3 Features page (client-side encryption) www.pcloud.com Checked 1 Nov 2026 Details →
- 4 Security / trust page www.pcloud.com Checked 1 Nov 2026 Details →
- 5 Features page (data regions) www.pcloud.com Checked 1 Nov 2026 Details →
- 6 API documentation docs.pcloud.com Checked 1 Nov 2026 Details →
- 7 Pricing page www.pcloud.com Checked 1 Nov 2026 Details →
- 8 Company page www.pcloud.com Checked 1 Nov 2026 Details →
- 9 Privacy policy www.pcloud.com Checked 1 Nov 2026 Details →
- 10 Terms of service www.pcloud.com Checked 1 Nov 2026 Details →
- 11 Security / trust page (GDPR compliance) www.pcloud.com Checked 1 Nov 2026 Details →
- 12 Sync, clients & file access — found from sitemap www.pcloud.com Checked 1 Nov 2026 Details →
- 13 Sync, clients & file access — found from sitemap www.pcloud.com Checked 1 Nov 2026 Details →
- 14 Sharing & external collaboration — found from sitemap www.pcloud.com Checked 1 Nov 2026 Details →
- 15 Encryption, key custody & recovery — found from sitemap www.pcloud.com Checked 1 Nov 2026 Details →
- 16 Encryption, key custody & recovery — found from sitemap www.pcloud.com Checked 1 Nov 2026 Details →
- 17 Administration, audit & governance — found from sitemap www.pcloud.com Checked 1 Nov 2026 Details →
- 18 Administration, audit & governance — found from sitemap www.pcloud.com Checked 1 Nov 2026 Details →
- 19 Export, API & self-hosting — found from sitemap www.pcloud.com Checked 1 Nov 2026 Details →
- 20 Terms of service — found from the homepage www.pcloud.com Checked 1 Nov 2026 Details →