Tresorit

Files and encryption keys are never stored unencrypted — Tresorit is architecturally incapable of reading your content — but it collects app usage analytics, website logs with IP addresses, call recordings that are transcribed by AI, and uses cookies and advertising partners on its website; the collection profile is significantly heavier than privacy-comparable competitors like Proton or Ente.

No personal data is sold to third parties, and Tresorit complies with disclosure requests only under applicable legal provisions — but advertising data flows to Facebook and Google, business-plan admins can access encrypted files via a recovery master key, subprocessor data is hosted globally on US-jurisdiction infrastructure, and a merger or acquisition can transfer all personal data.