Zum Inhalt springen
Unabhängig verifiziert · Quartalsweises Re-Audit
EU VETTED

pCloud Pass

VERIFIZIERT
Passwort-Manager · Switzerland
Gegründet 2022 · pcloud.com/pass ↗

Swiss zero-knowledge password manager (pCloud AG, Baar), client-side AES-256, free single-device tier, Luxembourg or US data residency.

Kurzfassung

pCloud Pass aus der Kategorie Passwort-Manager ist ein europäischer Dienst mit Luxembourg als Hosting-Standort und höchstens geringfügigem, vorübergehendem US-Bezug nach dem CLOUD Act.

Bewertungsnotizen

pCloud Pass is the password-manager product of pCloud AG (Baar, Switzerland, founded 2013 by Tunio Zafer and Anton Titov, ~22M users across the broader pCloud group) — Swiss-incorporated, founder-controlled, with client-side AES-256 zero-knowledge encryption so even pCloud cannot decrypt customer vaults — but pCloud operates two data centres (Luxembourg AND Texas, USA) and customer-data residency depends on the region the user selects at signup, so EU buyers must explicitly choose the Luxembourg region. Key gaps: pCloud Pass does not publish a standalone DPA (the Business Agreement contains no DPA section and no dedicated data-processing document exists for Pass specifically) and no sub-processor list was found at audit. With EU data-residency selected: Swiss-incorporated, EU-hosted, minor CLOUD Act exposure (Swiss entity, no US parent); without explicit EU placement the posture deteriorates materially.

CLOUD ACT
OWNERSHIP
SUB-PROCS
nicht offengelegt
Geprüfte Signale
Jurisdiktion
  • EU-/Angemessenheits-Hosting
  • EU-/Angemessenheits-Betreiber
  • Keine US-CLOUD-Act-Exposition
Transparenz
  • Öffentlicher AVV
  • Unterauftragsverarbeiter offengelegt
  • Open-Source-Clients
  • Zertifizierung durch Dritte
JUMP TO
OVERVIEW

Über pCloud Pass

pCloud Pass is the standalone password-manager product from pCloud AG, a Swiss cloud-storage group headquartered in Baar (canton of Zug) and founded in 2013 by Tunio Zafer (CEO) and Anton Titov. The broader pCloud group reports more than 22 million users worldwide, primarily for its consumer cloud-storage product but increasingly through Pass and the wider Suite bundle. pCloud Pass launched in 2022 as a separate offering with zero-knowledge client-side encryption — passwords are encrypted on the user's device before any data leaves it, so pCloud has no ability to read customer vaults under any circumstance — and bundles features standard for the category: AES-256 encryption, password generation, secure sharing, auto-fill across browsers and mobile, biometric unlock, and recovery flows.

For an EU-sovereignty audit the picture is nuanced. The legal entity (pCloud AG) is Swiss-incorporated, founder-controlled, and operates under Swiss law — Switzerland holds an EU adequacy decision so cross-border transfers between EU and CH need no SCCs. But pCloud operates two data centres globally — Luxembourg (EU) and Texas (USA) — and the customer selects their data-residency region at signup. Buyers who choose EU placement get a clean Swiss-Luxembourg posture; buyers who choose US placement (or default to it without thinking) end up with their encrypted vault on US infrastructure. Per the strict-ownership stance the customer-side choice matters: with explicit EU placement, CLOUD Act exposure is minor (Swiss entity, EU at-rest); with US placement, it would be material. The score reflects the EU configuration; the Luxembourg-only data-residency point should be a procurement instruction on the actual listing page.

Pricing is competitive and lifetime-friendly: the free tier covers one device with basic features; Premium is €29.99/year (annual) or available as a lifetime one-time payment (a distinguishing feature in the password-manager category, where most competitors are subscription-only). Best fit: pCloud Suite customers already on the platform, Swiss / EU SMBs wanting a Swiss-entity password manager without setting up a separate vendor relationship, and consumers who prefer lifetime pricing over subscription. Procurement-grade buyers needing the cleanest possible posture should prefer Proton Pass (CH, Proton Foundation-owned, no US DC option), Passbolt (FR, self-hostable open-source), or Psono (DE, open-source self-host) — all covered elsewhere on this directory.

SUB-PROCESSORS

Unterauftragsverarbeiter-Karte · nicht offengelegt

Anbieter veröffentlicht keine Liste der Unterauftragsverarbeiter. Schrems-II-Konformität und CLOUD-Act-Risiko lassen sich ohne sie nicht unabhängig prüfen.
CERTIFICATIONS

Rahmenwerke & Zertifizierungen · keine gelistet

Wir haben die Website des Anbieters und die Register der Zertifizierungsstellen geprüft. Keine aktiven Zertifizierungen gefunden zum Zeitpunkt der letzten Prüfung (2026-05-11).
FEATURES

Funktionsmatrix

Passkeys Ja
Autofill Ja
Leak-Überwachung Nein
Familienfreigabe Ja
Datenexport Ja
Geräte Unbegrenzt
Plattformen iOS macOS Windows Android Linux Web
INTEGRATION & ZUGRIFF
REST API No
SSO (SAML / OIDC) No
COMPLIANCE & GOVERNANCE
Audit log No
Self-host / on-prem option No
PRICING

Preise & Tarife

FREEMIUM
ab €30/Monat
Preisseite ansehen ↗
PUBLIC DOCUMENTS

Öffentliche Dokumente

Anbieter veröffentlicht keinen öffentlichen AVV. Ohne öffentlich zugänglichen Auftragsverarbeitungsvertrag können kleine EU-Kunden den Verarbeitervertrag nicht selbst abschließen — dies wird als fehlender öffentlicher AVV vermerkt (siehe So prüfen wir).
Anbieter veröffentlicht keine Liste der Unterauftragsverarbeiter. Schrems-II-Konformität und CLOUD-Act-Risiko lassen sich ohne sie nicht unabhängig prüfen.
  • Auftragsverarbeitungsvertrag (AVV)
    — fehlt
    fehlt
  • Liste der Unterauftragsverarbeiter
    — fehlt
    fehlt
  • Nutzungsbedingungen
    www.pcloud.com/terms_of_service.html…
    Öffnen ↗
ALTERNATIVES

Alternativen in dieser Kategorie

KeePassXC
Germany · Gegründet 2016
EU-SOUVERäN

GPLv3 fully-offline desktop password manager (KeePassXC Team, Weimar DE, est. 2016) — no cloud, no servers, no telemetry; structurally zero CLOUD Act exposure.

Öffentl. AVV Subprozessoren Open Source
FROM
CLOUD ACT
NONE
LC-Pass
Germany
EU-SOUVERäN

German-hosted business password manager from LC by vBoxx GmbH; collections, group sharing, central management, unlimited devices; an EU-hosted 1Password / LastPass alternative.

Öffentl. AVV Subprozessoren Open Source
FROM
€3.99/Mt.
CLOUD ACT
NONE
NordPass
Lithuania · Gegründet 2019
EU-GEHOSTET

Lithuanian password manager by Nord Security, zero-knowledge XChaCha20, ISO 27001 + SOC 2 — but hosted on AWS (US): material CLOUD Act exposure.

Öffentl. AVV Subprozessoren Open Source
FROM
€2/Mt.
CLOUD ACT
MATERIAL