Zum Inhalt springen
Unabhängig verifiziert · Quartalsweises Re-Audit
EU VETTED

Proton Drive

VERIFIZIERT
Dateifreigabe · Switzerland
Gegründet 2014 · proton.me/drive ↗

Swiss zero-knowledge encrypted cloud (Proton AG, non-profit-foundation-controlled), 11,496 owned servers, ISO 27001 + SOC 2, 5 GB free.

Kurzfassung

Proton Drive aus der Kategorie Dateifreigabe ist ein EU-eigener Dienst mit Switzerland als Hosting-Standort und ohne erkennbares CLOUD-Act-Risiko.

Bewertungsnotizen

Proton AG (Geneva, Route de la Galaise 32, Plan-les-Ouates; founded 2014 by Andy Yen and a team from CERN) is controlled by the non-profit Proton Foundation (since June 2024) with no venture-capital investors anywhere on the cap table, runs 11,496 owned-and-operated servers across 117 countries with Swiss-jurisdiction primary processing, ISO/IEC 27001:2022 + SOC 2 Type II certifications covering all Proton product lines, and zero-knowledge end-to-end encryption that makes the customer the sole keyholder; Swiss-headquartered and non-profit-foundation-controlled, with a public DPA, disclosed sub-processors, and none CLOUD Act exposure under a customer-data-at-rest definition because the US sub-processors (Zendesk for support, Stripe / PayPal / Chargebee for billing) are ancillary and never touch the end-to-end-encrypted file data on Proton's own infrastructure.

CLOUD ACT
OWNERSHIP
SUB-PROCS
7 · 4 US
Geprüfte Signale
Jurisdiktion
  • EU-/Angemessenheits-Hosting
  • EU-/Angemessenheits-Betreiber
  • Keine US-CLOUD-Act-Exposition
  • Zahlung ohne Kreditkarte möglich
    Akzeptiert neben Karten auch Bitcoin und Bargeld per Post.
Transparenz
  • Öffentlicher AVV
  • Unterauftragsverarbeiter offengelegt
  • Open-Source-Clients
  • Zertifizierung durch Dritte
JUMP TO
OVERVIEW

Über Proton Drive

Proton Drive is the encrypted cloud-storage product within the Proton AG ecosystem (Mail, Drive, VPN, Pass, Calendar, Docs, Sheets, SimpleLogin), headquartered at Route de la Galaise 32, 1228 Plan-les-Ouates, Geneva, Switzerland. Founded in 2014 by Andy Yen and a team that originally met at CERN, Proton serves more than 100 million users worldwide and runs the most singular ownership structure in the directory: as of June 2024 the non-profit Proton Foundation (Swiss, Geneva; trustees include Andy Yen, Antonio Gambardella, Carissa Véliz, Tim Berners-Lee, and Dingchao Lu) is the controlling shareholder of Proton AG. The company explicitly takes no venture capital, its non-profit structure is designed to permanently prevent takeover attempts, and there is no path for a US-PE / US-VC investor to influence governance.

Compliance posture is exceptional. Proton holds ISO/IEC 27001:2022 with the ISMS scope covering all product lines (Mail, Drive, Pass, VPN, Calendar, SimpleLogin) and SOC 2 Type II. The infrastructure footprint is also unusual: by February 2025 Proton had 11,496 servers across 117 countries, all owned and operated by Proton itself, not rented from hyperscalers. Primary processing is in Switzerland; named US sub-processors are limited to ancillary functions (Zendesk for customer support, Chargebee for billing automation, Stripe and PayPal for card payments, Atlassian for support-data storage) and do not touch zero-knowledge-encrypted customer files. Standard Contractual Clauses, Binding Corporate Rules, and certifications govern any third-country transfers. Switzerland is not in the EU but holds an EU adequacy decision under Art. 45 GDPR, so transfers EU↔CH require no SCCs.

Drive pricing in EUR: Free includes 5 GB encrypted storage plus Docs and Sheets; Drive Plus is from approximately €4/month for 200 GB and file-version recovery; Proton Unlimited at ~€10/month adds 500 GB, Mail with 15 custom addresses, VPN, Pass, and Proton Sentinel advanced account protection; Duo (2 TB, 2 users), Family (3 TB, 6 users), and Drive Professional (1 TB/user for business). Best fit: every EU and Swiss procurement-grade buyer requiring zero-knowledge encrypted file sharing with the strongest sovereignty story in the directory; particularly compelling for journalists, NGOs, regulated industries, and any organisation needing genuine "no one outside the customer can access this data" guarantees.

SUB-PROCESSORS

Unterauftragsverarbeiter-Karte · 7

Quelle ↗
  • Chargebee, Inc. US
    United States

    Payment data processing (billing automation); ancillary

  • PayPal US
    United States

    Payment data processing; ancillary

  • Stripe, Inc. US
    United States

    Payment data processing; ancillary

  • Zendesk, Inc. US
    United States

    Customer support data processing; ancillary

  • Atlassian Pty Ltd non-US
    Australia

    Customer support data storage (EU/US/UK processing locations)

  • ProtonLabs DOOEL Skopje non-US
    North Macedonia

    Customer support and direct communications (Proton group company)

  • ProtonLabs Taiwan Co., Ltd non-US
    Taiwan

    Customer support and direct communications (Proton group company)

4 von 7 Unterauftragsverarbeitern sind in den USA registriert. Dies sind ergänzende Verarbeiter, die keine geschützten Kundendaten speichern, und ändern daher die Bewertung nicht. Das CLOUD-Act-Risiko wird mit „keines“ bewertet.
CERTIFICATIONS

Rahmenwerke & Zertifizierungen

ISO/IEC 27001
AKTIV
SOC 2
AKTIV
Hinweis · US-Rahmenwerk
FEATURES

Funktionsmatrix

Kostenloser Speicher 5 GB
Bezahlter Speicher (ab) 200 GB
Max. Dateigröße Unbegrenzt
Fotosynchronisierung Ja
Dateiversionierung Ja
Link-Freigabe Ja
Plattformen iOS macOS Windows Android Web
INTEGRATION & ZUGRIFF
REST API Yes
SSO (SAML / OIDC) Yes
COMPLIANCE & GOVERNANCE
Audit log Yes
Self-host / on-prem option No
PRICING

Preise & Tarife

FREEMIUM
ab €4/Monat
Preisseite ansehen ↗
PUBLIC DOCUMENTS

Öffentliche Dokumente

  • Auftragsverarbeitungsvertrag (AVV)
    proton.me/legal…
    Öffnen ↗
  • Liste der Unterauftragsverarbeiter
    proton.me/legal…
    Öffnen ↗
  • Nutzungsbedingungen
    proton.me/legal…
    Öffnen ↗
ALTERNATIVES

Alternativen in dieser Kategorie

Tresorit
Switzerland · Gegründet 2011
EU-GEHOSTET

Swiss-Post-owned (state-anchored) E2E encrypted enterprise cloud storage (Tresorit AG, Zurich), Swiss + EU DC options, ISO 27001.

Öffentl. AVV Subprozessoren Open Source
FROM
€10/Mt.
CLOUD ACT
MATERIAL
kDrive (Infomaniak)
Switzerland · Gegründet 1994
EU-SOUVERäN

Swiss kDrive cloud (Infomaniak, Geneva, since 1994), own Swiss DCs, ISO 27001 + B Corp 2025, district-heating heat recycling.

Öffentl. AVV Subprozessoren Open Source
FROM
€4/Mt.
CLOUD ACT
NONE
Internxt
Spain · Gegründet 2020
EU-ANSäSSIG

Valencia-based open-source zero-knowledge encrypted cloud (Internxt, 2020), post-quantum crypto, lifetime plans, 1 GB free, 1M+ users.

Öffentl. AVV Subprozessoren Open Source
FROM
€10/Mt.
jährliche Abrechnung
CLOUD ACT
MINOR