Zum Inhalt springen

Tresorit

Dateifreigabe · Schweiz
Gegründet 2011 · tresorit.com

Swiss-Post-owned (state-anchored) E2E encrypted enterprise cloud storage (Tresorit AG, Zurich), Swiss + EU DC options, ISO 27001.

Tresorit bietet EU-Hosting in Irland, doch ein US-Mutterkonzern oder Unterauftragsverarbeiter hinterlässt ein materielles CLOUD-Act-Risiko. Gelistet unter Dateifreigabe.

Bewertungsnotizen

Tresorit AG (Zurich, Pfingstweidstrasse 60b; CHE-349.825.210) is the enterprise-grade zero-knowledge end-to-end-encrypted cloud-storage product founded in 2011 by István Lám and Szilveszter Szebeni in Hungary and majority-acquired by Swiss Post (the Swiss state-owned postal operator) in 2021; Swiss Post remains the majority shareholder, and the about page describes Tresorit as part of Swiss Post's digital business services, so the company sits under Swiss state-anchored ownership (a stronger reading that Swiss Post is now the sole shareholder is not confirmable from a primary source, and 2021 coverage has the founders retaining a minority); ISO/IEC 27001:2022 certified by TÜV Rheinland, GDPR + HIPAA + ITAR + FINRA + CCPA + CJIS + DORA + NIS2 + TISAX coverage, customer-selectable Swiss or EU data residency, contracts under Swiss law / Swiss Federal Act on Data Protection. The verified sub-processor list (2026-06) shows Tresorit's primary hosting is Microsoft Azure (a US-owned hyperscaler), which raises CLOUD Act exposure to material on a structural reading; in practice the zero-knowledge end-to-end encryption means Azure stores only ciphertext and Tresorit holds no keys, so compelled disclosure yields no readable content. State-anchored Swiss (Swiss Post) ownership, ISO/IEC 27001:2022 certified by TÜV Rheinland; since the May 2026 audit the Data Processing Addendum is published at a public, login-free URL linked from tresorit.com/legal, closing the documentation gap that previously capped this listing.

Befund

CLOUD Act
Eigentümer
Unterauftragsverarbeiter
15 · 13 US

Geprüfte Signale

Jurisdiktion
  • EU-/Angemessenheits-Hosting: Ja
  • EU-/Angemessenheits-Betreiber: Ja
  • Keine US-CLOUD-Act-Exposition: Nein
Transparenz
  • Öffentlicher AVV: Ja
  • Unterauftragsverarbeiter offengelegt: Ja
  • Open-Source-Clients: Nein
  • Zertifizierung durch Dritte: Ja
Springen zu

Über Tresorit

Tresorit is the enterprise zero-knowledge end-to-end-encrypted cloud-storage product operated by Tresorit AG at Pfingstweidstrasse 60b, 8005 Zurich, Switzerland (CHE-349.825.210), with offices also in Budapest, Hungary and Munich, Germany. Founded in 2011 by Hungarian engineers István Lám and Szilveszter Szebeni, the company built its reputation around mathematically-provable client-side encryption: every file, file name, and metadata is encrypted on the user device before upload, so neither Tresorit nor any data-centre operator can access plaintext customer content. The company serves 11,000+ organisations with 4.9 / 4.5 G2 / Capterra ratings.

For an EU-sovereignty audit Tresorit's ownership story is unusually strong. In July 2021 Swiss Post (the Swiss state-owned postal and digital-services operator) acquired a majority stake, and the about page now describes Tresorit as part of Swiss Post's digital business services under the Swiss Post Digital name. Majority ownership is confirmed; a stronger claim that Swiss Post is now the sole shareholder could not be confirmed against a primary source, and 2021 coverage has the founders retaining a minority. This pushes the directory's other (Switzerland) classification into the highest end of that tier: Swiss jurisdiction with state-owned parent is structurally as close to "sovereign" as a vendor can credibly claim. The compliance footprint matches: ISO/IEC 27001:2022 certified by TÜV Rheinland (covering sales, development, maintenance, and support of E2E-encrypted cloud services), plus alignment with GDPR, HIPAA, ITAR, FINRA, CCPA, CJIS, DORA, NIS2, and TISAX, an unusually broad regulated-industry coverage including US healthcare (HIPAA), US defence-export controls (ITAR), US financial markets (FINRA), and US criminal-justice systems (CJIS) for the rare global customers who need that combination on top of a Swiss-jurisdiction base. Customer-selectable Swiss or EU data residency, contracts under Swiss law and the Swiss Federal Act on Data Protection.

Pricing in EUR: the personal ladder was renamed during 2026 and is now Personal Lite (50 GB), Personal Essential (1 TB) and Personal Pro (4 TB), with a monthly or yearly toggle advertising 20 percent off annual billing. The older Personal Plus tier no longer exists, and the amounts now render client-side, so the pricing page is the figure to budget against. Business plans start in the €14-30/user/month range across SecureCloud and Engage tiers; Enterprise is negotiated. Best fit: regulated enterprises (legal, financial-services, healthcare, defence), Swiss public-sector buyers, journalists and NGOs, and any organisation needing a Dropbox / Box / OneDrive replacement with mathematically-provable zero-knowledge encryption from a state-anchored Swiss vendor. Together with Proton Drive, Tresorit forms the directory's Swiss-encrypted file-sharing dual-pick; Proton wins on consumer / freemium and ecosystem breadth (Mail/VPN/Pass/Calendar/Docs), Tresorit wins on enterprise compliance breadth and the unique Swiss-Post state-owned governance.

Unterauftragsverarbeiter-Karte · 15

Quelle
  • Amazon Simple Email Service (SES) US
    Vereinigte Staaten

    Transactional and notification emails (data in Ireland/EU)

  • DocuSign US
    Vereinigte Staaten

    Electronic signatures for agreements

  • Google reCAPTCHA US
    Vereinigte Staaten

    Fraud and misuse prevention during checkout

  • Microsoft Azure US
    Vereinigte Staaten

    Primary hosting (E2E-encrypted content stored in Ireland/EU) and application performance monitoring

  • Pardot (Salesforce) US
    Vereinigte Staaten

    Marketing campaigns for customers and subscribed visitors

  • PayPal US
    Vereinigte Staaten

    Online payments

  • Productboard US
    Vereinigte Staaten

    Customer feedback management

  • Salesforce US
    Vereinigte Staaten

    Customer relationship management (data in Ireland/EU)

  • SendGrid (Twilio) US
    Vereinigte Staaten

    Transactional and notification emails

  • Stripe US
    Vereinigte Staaten

    Payment processing

  • Twilio US
    Vereinigte Staaten

    Two-factor authentication (voice and SMS)

  • Zendesk US
    Vereinigte Staaten

    Customer support tools

  • Zuora US
    Vereinigte Staaten

    Subscription billing, invoicing and management

  • Tresorit GmbH EU
    Deutschland

    Affiliate sub-processor delivering Tresorit services

  • Tresorit Kft. EU
    Ungarn

    Affiliate sub-processor delivering Tresorit services

Quelle: veröffentlichte Unterauftragsverarbeiter-Liste des Anbieters, gelesen am 26 Aug 2026.

13 von 15 Unterauftragsverarbeitern sind in US-Eigentum oder haben ihren Sitz in den USA. CLOUD-Act-Risiko anwendbar.

Rahmenwerke & Zertifizierungen

ISO/IEC 27001
Aktiv

Funktionsmatrix

Tabelle 2Funktionen von Tresorit

Bezahlter Speicher (ab) 50 GB
Max. Dateigröße 2 GB
Fotosynchronisierung Nein
Dateiversionierung Ja
Link-Freigabe Ja
Plattformen iOS macOS Windows Android Linux Web

Integration & Zugriff

REST API Ja
SSO (SAML / OIDC) Ja

Compliance & Governance

Audit log Ja
Self-host / on-prem option Nein

Preise & Tarife

ab 10 €/Monat
Kostenpflichtig
Preisseite ansehen

Öffentliche Dokumente

  • Auftragsverarbeitungsvertrag (AVV)
    web.tresorit.com/l…
    Öffnen
  • Liste der Unterauftragsverarbeiter
    support.tresorit.com/hc…
    Öffnen
  • Nutzungsbedingungen
    tresorit.com/legal…
    Öffnen

Alternativen in dieser Kategorie

  • Schweiz · 4 €/Mt.
    EU-ansässig
    Öffentl. AVV: Ja Subprozessoren: Ja Open Source: Nein
  • Schweiz · 4 €/Mt.
    EU-souverän
    Öffentl. AVV: Ja Subprozessoren: Nein Open Source: Nein
  • Spanien · 10 €/Mt.
    EU-ansässig
    Öffentl. AVV: Ja Subprozessoren: Ja Open Source: Ja

In diesen Übersichten gelistet