Zum Inhalt springen
EU VETTED

Koofr

Dateifreigabe · Slowenien
Gegründet 2013 · koofr.eu

Slovenian cloud storage (Koofr d.o.o., est. 2013), German ISO 27001 data centres, optional client-side encryption via the open-source Koofr Vault, 10 GB free.

Koofr ist ein europäischer Dienst mit Hosting in Deutschland und höchstens geringfügigem, vorübergehendem US-Bezug nach dem CLOUD Act. Gelistet unter Dateifreigabe.

Bewertungsnotizen

Koofr is operated by Koofr d.o.o. (Stegne 23A, Ljubljana, Slovenia; founded 2013, based in Technology Park Ljubljana), a fully EU-incorporated, EU-owned company that stores all data in ISO 27001-certified data centres in Germany, is GDPR-compliant by default, runs no file scanning or tracking, and offers optional client-side encryption via the Koofr Vault product; EU-owned and Germany-hosted with optional zero-knowledge encryption via Koofr Vault; CLOUD Act exposure was re-read down from none to minor in August 2026 once the privacy policy was read in full, because payments run through Braintree, part of PayPal, Inc. (US) — a single transient processor with no access to stored files, which is exactly the rubric's minor case rather than the clean none previously assumed; no Cloudflare and no US hyperscaler is named anywhere. The key documentation gap remains the absence of a public DPA, and the privacy policy that carries the processor disclosure has not been revised since 16 May 2018.

Befund

CLOUD Act
Eigentümer
Unterauftragsverarbeiter
0 keine offengelegt

Geprüfte Signale

Jurisdiktion
  • EU-/Angemessenheits-Hosting: Ja
  • EU-/Angemessenheits-Betreiber: Ja
  • Keine US-CLOUD-Act-Exposition: Nicht bewertet
Transparenz
  • Öffentlicher AVV: Nein
  • Unterauftragsverarbeiter offengelegt: Ja
  • Open-Source-Clients: Nein
  • Zertifizierung durch Dritte: Nein
Springen zu

Über Koofr

Koofr is a Slovenian cloud storage service operated by Koofr d.o.o., based at Stegne 23A in Ljubljana and a long-time member of Technology Park Ljubljana. Founded in 2013, it celebrated its tenth year of service in 2023 and is one of the cleaner small-vendor EU storage listings in this directory, fully Slovenian-incorporated, EU-owned, with no US parent, no US VC, and no PE on record.

The infrastructure story is solid: Koofr stores all customer data in ISO 27001-certified data centres in Germany, markets itself as "GDPR compliant by default," and explicitly commits to not scanning, indexing or tracking customer files. Standard transport encryption and encrypted storage apply to all accounts. For users who want true zero-knowledge encryption, Koofr offers Koofr Vault, a client-side-encrypted layer where files are encrypted in the browser/app before upload, so Koofr cannot read them. Koofr Vault is fully open-source, so its encryption can be independently audited. The apps and web UI are localised into more than 20 languages, including most major EU languages (German, French, Italian, Spanish, Dutch, Polish, Portuguese, Swedish, and others) alongside Slovenian and several global languages. A distinctive feature is that Koofr can connect and unify external clouds (Dropbox, Google Drive, OneDrive, Amazon) into a single interface, which is useful for migration but should be understood by privacy-focused buyers as an opt-in bridge to non-EU services.

For an EU-sovereignty audit the open question is documentation, not infrastructure. Koofr still publishes no DPA, and that is what caps this listing. It does name its processors, but only in prose inside a privacy policy that has not been revised since 16 May 2018, and only two of the four are named at all: Braintree Payments, described there as part of PayPal, Inc. (US), for card payments, and Headway for website services, alongside an unnamed accounting provider and a bank. No Cloudflare, no AWS, GCP or Azure and no US hyperscaler appears anywhere, and koofr.eu answers from plain Apache with no US CDN in front of it. That one transient US payment processor, which has no access to stored files, is why CLOUD Act exposure is recorded as Gering rather than clear. The rest of the signal mix is strong: Slovenian entity, German ISO 27001 certified hosting, no file scanning, optional client-side encryption via Koofr Vault.

Pricing is freemium and unusually granular: 10 GB free forever; "Briefcase" tiers from €0.50/month (25 GB) and €1/month (100 GB); "Suitcase" tiers €4-10/month (250 GB to 1 TB); "Crate" tiers €20-35/month (2.5-5 TB) plus custom 10 TB+. Note that subscriptions are currently billed yearly and prices include 22% Slovenian VAT. Long-term subscribers can also join a Loyalty Program offering subscription discounts of up to 50%. The former free-storage referral scheme has been discontinued; there is no monetary affiliate programme. Best fit: privacy-conscious EU individuals and small teams who want German-hosted storage from an independent Slovenian vendor, especially those who will use Koofr Vault for sensitive files.

Unterauftragsverarbeiter-Karte · keine offengelegt

Quelle
Anbieter gibt null Unterauftragsverarbeiter an. Die gesamte Datenverarbeitung erfolgt im eigenen Haus.

Rahmenwerke & Zertifizierungen · keine gelistet

Wir haben die Website des Anbieters und die Register der Zertifizierungsstellen geprüft. Keine aktiven Zertifizierungen gefunden zum Zeitpunkt der letzten Prüfung (2026-08-26).

Funktionsmatrix

Tabelle 1Funktionen von Koofr

Kostenloser Speicher 10 GB
Bezahlter Speicher (ab) 25 GB
Max. Dateigröße Unbegrenzt
Fotosynchronisierung Ja
Dateiversionierung Ja
Link-Freigabe Ja
Plattformen iOS macOS Windows Android Linux Web

Integration & Zugriff

REST API Ja
SSO (SAML / OIDC) Nein

Compliance & Governance

Audit log Nein
Self-host / on-prem option Nein

Preise & Tarife

ab 0.50 €/Monat
Freemium · jährliche Abrechnung
Preisseite ansehen

Öffentliche Dokumente

Anbieter veröffentlicht keinen öffentlichen AVV. Ohne öffentlich zugänglichen Auftragsverarbeitungsvertrag können kleine EU-Kunden den Verarbeitervertrag nicht selbst abschließen. Dies wird als fehlender öffentlicher AVV vermerkt (siehe So prüfen wir).
  • Auftragsverarbeitungsvertrag (AVV)
    — fehlt
    fehlt
  • Liste der Unterauftragsverarbeiter
    koofr.eu/privacy…
    Öffnen
  • Nutzungsbedingungen
    koofr.eu/tos…
    Öffnen

Alternativen in dieser Kategorie

  • Proton Drive
    Schweiz · 4 €/Mt.
    EU-ansässig
    Öffentl. AVV: Ja Subprozessoren: Ja Open Source: Nein
  • Tresorit
    Schweiz · 10 €/Mt.
    EU-gehostet
    Öffentl. AVV: Ja Subprozessoren: Ja Open Source: Nein
  • kDrive (Infomaniak)
    Schweiz · 4 €/Mt.
    EU-souverän
    Öffentl. AVV: Ja Subprozessoren: Nein Open Source: Nein
Alle dateifreigabe-Alternativen ansehen

In diesen Übersichten gelistet