Dutch vBoxx-operated Leitz-branded business cloud, German DCs shared with ITZBund, ISO 27001 + ISO 9001 + ISAE 3402.
- SCORE
- 4.0
- FROM
- —
- CLOUD ACT
- NONE
Microsoft-owned cloud storage, part of Microsoft 365. Direct CLOUD Act exposure.
DISCLOSURE Some links on this site are affiliate links. We may earn a commission at no extra cost to you. Compliance scores and editorial rankings are never influenced by affiliate relationships.
Listed for transparency. Every product on this page is benchmarked against this baseline.
Microsoft-owned cloud storage, part of Microsoft 365. Direct CLOUD Act exposure.
All 11 alternatives ranked by compliance score, benchmarked against Microsoft OneDrive.
| Product | Score | Owner | CLOUD Act | Cert. | Pricing | Action |
|---|---|---|---|---|---|---|
|
Microsoft OneDrive
benchmark · US
|
1.0/5 | OWNERSHIP
Where ultimate control over the operating company sits.
|
CLOUD ACT EXPOSURE
How exposed customer data is to US authorities under the CLOUD Act.
|
SOC 2 no EU framework |
Freemium | your current |
|
LeitzCloud (vBoxxCloud)
Netherlands
|
VERIFIED SIGNALS
Jurisdiction
Transparency
|
OWNERSHIP
Where ultimate control over the operating company sits.
|
CLOUD ACT EXPOSURE
How exposed customer data is to US authorities under the CLOUD Act.
|
ISO/IEC 27001
|
Paid | View profile → |
|
kDrive (Infomaniak)
Switzerland
|
VERIFIED SIGNALS
Jurisdiction
Transparency
|
OWNERSHIP
Where ultimate control over the operating company sits.
|
CLOUD ACT EXPOSURE
How exposed customer data is to US authorities under the CLOUD Act.
|
ISO/IEC 27001
|
Paid
€4 / mo
|
View profile → |
|
luckycloud
Germany
|
VERIFIED SIGNALS
Jurisdiction
Transparency
|
OWNERSHIP
Where ultimate control over the operating company sits.
|
CLOUD ACT EXPOSURE
How exposed customer data is to US authorities under the CLOUD Act.
|
ISO/IEC 27001
|
Paid | View profile → |
|
Nextcloud
Germany
|
VERIFIED SIGNALS
Jurisdiction
Transparency
|
OWNERSHIP
Where ultimate control over the operating company sits.
|
CLOUD ACT EXPOSURE
How exposed customer data is to US authorities under the CLOUD Act.
|
— |
Freemium
€6 / mo
|
View profile → |
|
STRATO HiDrive
Germany
|
VERIFIED SIGNALS
Jurisdiction
Transparency
|
OWNERSHIP
Where ultimate control over the operating company sits.
|
CLOUD ACT EXPOSURE
How exposed customer data is to US authorities under the CLOUD Act.
|
ISO/IEC 27001
|
Paid
€6 / mo
|
View profile → |
|
Tresorit
Switzerland
|
VERIFIED SIGNALS
Jurisdiction
Transparency
|
OWNERSHIP
Where ultimate control over the operating company sits.
|
CLOUD ACT EXPOSURE
How exposed customer data is to US authorities under the CLOUD Act.
|
ISO/IEC 27001
|
Paid
€10 / mo
|
View profile → |
|
Koofr
Slovenia
|
VERIFIED SIGNALS
Jurisdiction
Transparency
|
OWNERSHIP
Where ultimate control over the operating company sits.
|
CLOUD ACT EXPOSURE
How exposed customer data is to US authorities under the CLOUD Act.
|
— |
Freemium
€1 / mo
|
View profile → |
|
Icedrive
United Kingdom
|
VERIFIED SIGNALS
Jurisdiction
Transparency
|
OWNERSHIP
Where ultimate control over the operating company sits.
|
CLOUD ACT EXPOSURE
How exposed customer data is to US authorities under the CLOUD Act.
|
— |
Freemium
€6 / mo
|
View profile → |
|
Jottacloud
Norway
|
VERIFIED SIGNALS
Jurisdiction
Transparency
|
OWNERSHIP
Where ultimate control over the operating company sits.
|
CLOUD ACT EXPOSURE
How exposed customer data is to US authorities under the CLOUD Act.
|
— |
Freemium
€7 / mo
|
View profile → |
|
Proton Drive
Switzerland
|
VERIFIED SIGNALS
Jurisdiction
Transparency
|
OWNERSHIP
Where ultimate control over the operating company sits.
|
CLOUD ACT EXPOSURE
How exposed customer data is to US authorities under the CLOUD Act.
|
ISO/IEC 27001
SOC 2
|
Freemium
€4 / mo
|
View profile → |
|
pCloud
Switzerland
|
VERIFIED SIGNALS
Jurisdiction
Transparency
|
OWNERSHIP
Where ultimate control over the operating company sits.
|
CLOUD ACT EXPOSURE
How exposed customer data is to US authorities under the CLOUD Act.
|
— |
Freemium
€5 / mo
|
View profile → |
Ranked by feature parity + compliance score. Migration friction is weighted higher than feature breadth.
Dutch vBoxx-operated Leitz-branded business cloud, German DCs shared with ITZBund, ISO 27001 + ISO 9001 + ISAE 3402.
Swiss kDrive cloud (Infomaniak, Geneva, since 1994), own Swiss DCs, ISO 27001 + B Corp 2025, district-heating heat recycling.
Berlin-based German zero-knowledge cloud (luckycloud GmbH, 2015), own DCs in Berlin/Nuremberg/Frankfurt, ISO 27001 BSI.
For every product we read the public DPA, sub-processors document, hosting region declaration, and corporate ownership records. Each is timestamped. Compliance score is editorial, re-verified quarterly. We never accept self-attestation.
Reviewed by the EU Vetted editorial team · Editorial guidelines