Aller au contenu
EU VETTED

Jottacloud

Partage de fichiers · Norvège
Fondé en 2008 · jottacloud.com

Norwegian cloud storage & backup (Jotta Group AS, est. 2008), 100% Norway-hosted on renewable power, server-side AES-256, public DPA, files stay in Norway.

Jottacloud est un service européen hébergé en Norvège, avec tout au plus une exposition américaine mineure et transitoire au titre du CLOUD Act. Référencé dans la catégorie Partage de fichiers.

Notes d’évaluation

Jottacloud is operated by Jotta Group AS (Øvre Slottsgate 5, Oslo, Norway; org. no. 992 603 615), founded 2008 by Roland Rabben, a Norwegian company that stores all customer files in Norway, in the ISO/IEC 27001-certified Green Mountain SVG1 facility at Rennesøy, powered by renewable hydropower, with a publicly linked pre-signed DPA and an explicit statement that the US CLOUD Act does not reach a Norwegian operator; the sub-processor list published on the vendor's own GDPR page (re-read 2026-08-26, page updated 28 May 2026) is the reason the score moved down from 4 to 3, because it names seven processors of which six are US-owned — Stripe (payments), Intercom (support), Microsoft (Office Online document editing), Google Firebase and Crashlytics (analytics), Mailchimp (customer communication) and Slack/Salesforce (internal) — which crosses the rubric's ≥3-US-sub-processors threshold; storage itself never leaves Norway, so CLOUD Act exposure is minor rather than material, but the Microsoft Office Online path means file content can reach a US-owned processor on demand, and the remaining gaps are unchanged: server-side (not zero-knowledge) encryption with company-held keys, and no vendor-level ISO 27001.

Constats

CLOUD Act
Actionnariat
Sous-traitants
7 · 7 US

Signaux vérifiés

Juridiction
  • Hébergement UE / adéquation: Oui
  • Opérateur UE / adéquation: Oui
  • Aucune exposition au CLOUD Act: Non évalué
Transparence
  • DPA public: Oui
  • Sous-traitants divulgués: Oui
  • Clients open source: Non
  • Certification tierce: Non
Aller à

À propos de Jottacloud

Jottacloud is a Norwegian cloud storage and online-backup service operated by Jotta Group AS, headquartered at Øvre Slottsgate 5, Oslo (organisation number 992 603 615). It was founded in 2008 by Roland Rabben (reportedly motivated by wanting to keep his family's photos safe) and the name is a deliberate misspelling of "Yottabyte." Over more than fifteen years it has grown into one of the larger independent European storage providers, with reported double-digit average annual revenue growth.

The core sovereignty story is strong and simple: all of Jottacloud's server infrastructure is physically in Norway, powered by renewable hydropower and seawater-cooled, and the company explicitly markets that as a Norwegian operator it is outside the reach of the US CLOUD Act. Data is protected under Norwegian and EEA privacy law, a Data Processing Agreement is publicly linked (not gated behind enterprise sales), and the company maintains a transparency page. The main caveat for an encryption-focused buyer: Jottacloud uses server-side AES-256 encryption with company-managed keys, not zero-knowledge / client-side encryption: Jotta can technically access stored data, unlike Proton Drive, Internxt or Tresorit. Jotta holds no ISO 27001 certificate of its own: the ISO/IEC 27001 certification it cites belongs to the Green Mountain SVG1 facility at Rennesøy where the storage sits. A sub-processor list is published, on the vendor's GDPR documentation page rather than its legal pages, and it is the reason this listing is not rated clear of the CLOUD Act. Seven processors are named and six are US-owned, among them Microsoft Office Online, which can see document content when a user opens a file for editing. Files at rest still never leave Norway, so exposure is recorded as Mineure rather than higher.

The ownership change announced in March 2025 has taken shape as a 50/50 joint venture between Hawk Infinity, the Norwegian technology investor that owns Jotta, and Telenor Amp, combining Jottacloud with Telenor's Min Sky. Founder Roland Rabben leads the combined company, which reports more than 2 million active customers on roughly NOK 200M of 2025 revenue at an enterprise value of about NOK 1.5bn. Telenor is a large, partly Norwegian-state-owned telco, so no US capital enters the structure and the ownership signal is unchanged, but completion was subject to Norwegian Competition Authority approval and could not be confirmed as formally closed from a primary source; the about page still names only Jotta Group AS.

Pricing is freemium and rose in mid-2026: 5 GB free; Home 1 TB at €7.90 per month or €79 a year; Personal Unlimited at €12.90 per month or €129 a year; Home 5 TB at €15.90 or €159; Pro 10 TB at €29.90 per month or €299 a year. Monthly and yearly prices are published side by side, so the entry figure recorded here is the true pay-monthly one. Best fit: Norwegian and EEA individuals and SMBs who want straightforward backup-and-sync with genuine in-country hosting and a clean CLOUD Act story, and who do not require zero-knowledge encryption. Buyers who need client-side encryption should prefer Proton Drive, Internxt, Filen or Tresorit.

Carte des sous-traitants · 7

Source
  • Google Firebase and Crashlytics US
    États-Unis

    Application analytics and crash reporting; ancillary telemetry

  • Intercom, Inc. US
    États-Unis

    Customer support and communication; ancillary — no access to stored files

  • Mailchimp US
    États-Unis

    Customer communication and email campaigns; ancillary

  • Microsoft Corporation US
    États-Unis

    Office Online document editing — the only listed processor that can see file content, and only for a document the user opens in it

  • PostHog US
    États-Unis

    User-behaviour analysis; ancillary telemetry. Jurisdiction is not stated on the vendor's page — PostHog, Inc. is US-incorporated and an EU-cloud option exists, so this is recorded conservatively as US and needs confirmation

  • Slack (Salesforce) US
    États-Unis

    Internal team communication; ancillary

  • Stripe, Inc. US
    États-Unis

    Payment processing; ancillary — no access to stored files

Source : liste publiée des sous-traitants de l’éditeur, lue le 26 août 2026.

7 sous-traitants sur 7 sont détenus par des capitaux américains ou établis aux États-Unis. Exposition limitée au CLOUD Act via ces sous-traitants accessoires.

Référentiels & certifications · aucune répertoriée

Nous avons vérifié le site de l'éditeur et les registres des organismes de certification. Aucune certification active trouvée à la date du dernier audit (2026-08-26).

Matrice de fonctionnalités

Tableau 2Fonctionnalités de Jottacloud

Stockage gratuit 5 Go
Stockage payant (à partir de) Illimité
Synchro photos Oui
Versionnage des fichiers Oui
Partage par lien Oui
Plateformes iOS macOS Windows Android Linux Web

Intégration & accès

REST API Non
SSO (SAML / OIDC) Non

Conformité & gouvernance

Audit log Non
Self-host / on-prem option Non

Tarifs & paliers

à partir de 8 €/mois
Freemium
Voir la page tarifs

Documents publics

  • Contrat de sous-traitance (DPA)
    jottacloud.com/en…
    Ouvrir
  • Liste des sous-traitants
    docs.jottacloud.com/en…
    Ouvrir
  • Conditions d'utilisation
    jottacloud.com/en…
    Ouvrir

Alternatives dans cette catégorie

  • Proton Drive
    Suisse · 4 €/mois
    Basé UE
    DPA public: Oui Sous-traitants: Oui Open source: Non
  • Tresorit
    Suisse · 10 €/mois
    Hébergé UE
    DPA public: Oui Sous-traitants: Oui Open source: Non
  • kDrive (Infomaniak)
    Suisse · 4 €/mois
    Souverain UE
    DPA public: Oui Sous-traitants: Non Open source: Non
Voir toutes les alternatives partage de fichiers