Zum Inhalt springen
EU VETTED

Jottacloud

Dateifreigabe · Norwegen
Gegründet 2008 · jottacloud.com

Norwegian cloud storage & backup (Jotta Group AS, est. 2008), 100% Norway-hosted on renewable power, server-side AES-256, public DPA, files stay in Norway.

Jottacloud ist ein europäischer Dienst mit Hosting in Norwegen und höchstens geringfügigem, vorübergehendem US-Bezug nach dem CLOUD Act. Gelistet unter Dateifreigabe.

Bewertungsnotizen

Jottacloud is operated by Jotta Group AS (Øvre Slottsgate 5, Oslo, Norway; org. no. 992 603 615), founded 2008 by Roland Rabben, a Norwegian company that stores all customer files in Norway, in the ISO/IEC 27001-certified Green Mountain SVG1 facility at Rennesøy, powered by renewable hydropower, with a publicly linked pre-signed DPA and an explicit statement that the US CLOUD Act does not reach a Norwegian operator; the sub-processor list published on the vendor's own GDPR page (re-read 2026-08-26, page updated 28 May 2026) is the reason the score moved down from 4 to 3, because it names seven processors of which six are US-owned — Stripe (payments), Intercom (support), Microsoft (Office Online document editing), Google Firebase and Crashlytics (analytics), Mailchimp (customer communication) and Slack/Salesforce (internal) — which crosses the rubric's ≥3-US-sub-processors threshold; storage itself never leaves Norway, so CLOUD Act exposure is minor rather than material, but the Microsoft Office Online path means file content can reach a US-owned processor on demand, and the remaining gaps are unchanged: server-side (not zero-knowledge) encryption with company-held keys, and no vendor-level ISO 27001.

Befund

CLOUD Act
Eigentümer
Unterauftragsverarbeiter
7 · 7 US

Geprüfte Signale

Jurisdiktion
  • EU-/Angemessenheits-Hosting: Ja
  • EU-/Angemessenheits-Betreiber: Ja
  • Keine US-CLOUD-Act-Exposition: Nicht bewertet
Transparenz
  • Öffentlicher AVV: Ja
  • Unterauftragsverarbeiter offengelegt: Ja
  • Open-Source-Clients: Nein
  • Zertifizierung durch Dritte: Nein
Springen zu

Über Jottacloud

Jottacloud is a Norwegian cloud storage and online-backup service operated by Jotta Group AS, headquartered at Øvre Slottsgate 5, Oslo (organisation number 992 603 615). It was founded in 2008 by Roland Rabben (reportedly motivated by wanting to keep his family's photos safe) and the name is a deliberate misspelling of "Yottabyte." Over more than fifteen years it has grown into one of the larger independent European storage providers, with reported double-digit average annual revenue growth.

The core sovereignty story is strong and simple: all of Jottacloud's server infrastructure is physically in Norway, powered by renewable hydropower and seawater-cooled, and the company explicitly markets that as a Norwegian operator it is outside the reach of the US CLOUD Act. Data is protected under Norwegian and EEA privacy law, a Data Processing Agreement is publicly linked (not gated behind enterprise sales), and the company maintains a transparency page. The main caveat for an encryption-focused buyer: Jottacloud uses server-side AES-256 encryption with company-managed keys, not zero-knowledge / client-side encryption: Jotta can technically access stored data, unlike Proton Drive, Internxt or Tresorit. Jotta holds no ISO 27001 certificate of its own: the ISO/IEC 27001 certification it cites belongs to the Green Mountain SVG1 facility at Rennesøy where the storage sits. A sub-processor list is published, on the vendor's GDPR documentation page rather than its legal pages, and it is the reason this listing is not rated clear of the CLOUD Act. Seven processors are named and six are US-owned, among them Microsoft Office Online, which can see document content when a user opens a file for editing. Files at rest still never leave Norway, so exposure is recorded as Gering rather than higher.

The ownership change announced in March 2025 has taken shape as a 50/50 joint venture between Hawk Infinity, the Norwegian technology investor that owns Jotta, and Telenor Amp, combining Jottacloud with Telenor's Min Sky. Founder Roland Rabben leads the combined company, which reports more than 2 million active customers on roughly NOK 200M of 2025 revenue at an enterprise value of about NOK 1.5bn. Telenor is a large, partly Norwegian-state-owned telco, so no US capital enters the structure and the ownership signal is unchanged, but completion was subject to Norwegian Competition Authority approval and could not be confirmed as formally closed from a primary source; the about page still names only Jotta Group AS.

Pricing is freemium and rose in mid-2026: 5 GB free; Home 1 TB at €7.90 per month or €79 a year; Personal Unlimited at €12.90 per month or €129 a year; Home 5 TB at €15.90 or €159; Pro 10 TB at €29.90 per month or €299 a year. Monthly and yearly prices are published side by side, so the entry figure recorded here is the true pay-monthly one. Best fit: Norwegian and EEA individuals and SMBs who want straightforward backup-and-sync with genuine in-country hosting and a clean CLOUD Act story, and who do not require zero-knowledge encryption. Buyers who need client-side encryption should prefer Proton Drive, Internxt, Filen or Tresorit.

Unterauftragsverarbeiter-Karte · 7

Quelle
  • Google Firebase and Crashlytics US
    Vereinigte Staaten

    Application analytics and crash reporting; ancillary telemetry

  • Intercom, Inc. US
    Vereinigte Staaten

    Customer support and communication; ancillary — no access to stored files

  • Mailchimp US
    Vereinigte Staaten

    Customer communication and email campaigns; ancillary

  • Microsoft Corporation US
    Vereinigte Staaten

    Office Online document editing — the only listed processor that can see file content, and only for a document the user opens in it

  • PostHog US
    Vereinigte Staaten

    User-behaviour analysis; ancillary telemetry. Jurisdiction is not stated on the vendor's page — PostHog, Inc. is US-incorporated and an EU-cloud option exists, so this is recorded conservatively as US and needs confirmation

  • Slack (Salesforce) US
    Vereinigte Staaten

    Internal team communication; ancillary

  • Stripe, Inc. US
    Vereinigte Staaten

    Payment processing; ancillary — no access to stored files

Quelle: veröffentlichte Unterauftragsverarbeiter-Liste des Anbieters, gelesen am 26 Aug 2026.

7 von 7 Unterauftragsverarbeitern sind in US-Eigentum oder haben ihren Sitz in den USA. Begrenztes CLOUD-Act-Risiko über diese ergänzenden Unterauftragsverarbeiter.

Rahmenwerke & Zertifizierungen · keine gelistet

Wir haben die Website des Anbieters und die Register der Zertifizierungsstellen geprüft. Keine aktiven Zertifizierungen gefunden zum Zeitpunkt der letzten Prüfung (2026-08-26).

Funktionsmatrix

Tabelle 2Funktionen von Jottacloud

Kostenloser Speicher 5 GB
Bezahlter Speicher (ab) Unbegrenzt
Fotosynchronisierung Ja
Dateiversionierung Ja
Link-Freigabe Ja
Plattformen iOS macOS Windows Android Linux Web

Integration & Zugriff

REST API Nein
SSO (SAML / OIDC) Nein

Compliance & Governance

Audit log Nein
Self-host / on-prem option Nein

Preise & Tarife

ab 8 €/Monat
Freemium
Preisseite ansehen

Öffentliche Dokumente

  • Auftragsverarbeitungsvertrag (AVV)
    jottacloud.com/en…
    Öffnen
  • Liste der Unterauftragsverarbeiter
    docs.jottacloud.com/en…
    Öffnen
  • Nutzungsbedingungen
    jottacloud.com/en…
    Öffnen

Alternativen in dieser Kategorie

  • Proton Drive
    Schweiz · 4 €/Mt.
    EU-ansässig
    Öffentl. AVV: Ja Subprozessoren: Ja Open Source: Nein
  • Tresorit
    Schweiz · 10 €/Mt.
    EU-gehostet
    Öffentl. AVV: Ja Subprozessoren: Ja Open Source: Nein
  • kDrive (Infomaniak)
    Schweiz · 4 €/Mt.
    EU-souverän
    Öffentl. AVV: Ja Subprozessoren: Nein Open Source: Nein
Alle dateifreigabe-Alternativen ansehen