Microsoft vs Tresorit

Microsoft's privacy statement covers an enormous product surface — Windows, Office, Azure, Bing, Xbox, and Copilot — and the data practices vary dramatically across them. The umbrella policy is deliberately vague, deferring almost all specifics to product-level documentation. Cross-product data combination, AI model training on your content, and employer/school access to your files and communications are the key risks most consumers don't realise they're accepting.

Tresorit is an encrypted cloud storage service based in Switzerland that genuinely cannot access your files; it holds ISO 27001 certification, stores data primarily in the EEA, and gives 30 days' notice of material policy changes — but it records and transcribes sales calls with AI bots, uses Facebook and Google for ad targeting, collects app usage analytics, and business-plan admins can access employees' encrypted files via a recovery master key.