Swiss-Post-owned (state-anchored) E2E encrypted enterprise cloud storage (Tresorit AG, Zurich), Swiss + EU DC options, ISO 27001.
- FROM
- €10/mois
- CLOUD ACT
- MATERIAL
Synthèse de la propriété et de l’exposition au CLOUD Act.
Swiss zero-knowledge encrypted cloud (Proton AG, non-profit-foundation-controlled), 11,496 owned servers, ISO 27001 + SOC 2, 5 GB free.
Proton Drive, dans la catégorie Partage de fichiers, est un service sous contrôle européen avec Switzerland comme lieu d’hébergement et aucune exposition identifiée au CLOUD Act.
Proton AG (Geneva, Route de la Galaise 32, Plan-les-Ouates; founded 2014 by Andy Yen and a team from CERN) is controlled by the non-profit Proton Foundation (since June 2024) with no venture-capital investors anywhere on the cap table, runs 11,496 owned-and-operated servers across 117 countries with Swiss-jurisdiction primary processing, ISO/IEC 27001:2022 + SOC 2 Type II certifications covering all Proton product lines, and zero-knowledge end-to-end encryption that makes the customer the sole keyholder; Swiss-headquartered and non-profit-foundation-controlled, with a public DPA, disclosed sub-processors, and none CLOUD Act exposure under a customer-data-at-rest definition because the US sub-processors (Zendesk for support, Stripe / PayPal / Chargebee for billing) are ancillary and never touch the end-to-end-encrypted file data on Proton's own infrastructure.
Le degré d'exposition des données clients aux autorités américaines au titre du CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
Où se situe le contrôle ultime de la société exploitante.
Proton Drive is the encrypted cloud-storage product within the Proton AG ecosystem (Mail, Drive, VPN, Pass, Calendar, Docs, Sheets, SimpleLogin), headquartered at Route de la Galaise 32, 1228 Plan-les-Ouates, Geneva, Switzerland. Founded in 2014 by Andy Yen and a team that originally met at CERN, Proton serves more than 100 million users worldwide and runs the most singular ownership structure in the directory: as of June 2024 the non-profit Proton Foundation (Swiss, Geneva; trustees include Andy Yen, Antonio Gambardella, Carissa Véliz, Tim Berners-Lee, and Dingchao Lu) is the controlling shareholder of Proton AG. The company explicitly takes no venture capital, its non-profit structure is designed to permanently prevent takeover attempts, and there is no path for a US-PE / US-VC investor to influence governance.
Compliance posture is exceptional. Proton holds ISO/IEC 27001:2022 with the ISMS scope covering all product lines (Mail, Drive, Pass, VPN, Calendar, SimpleLogin) and SOC 2 Type II. The infrastructure footprint is also unusual: by February 2025 Proton had 11,496 servers across 117 countries, all owned and operated by Proton itself, not rented from hyperscalers. Primary processing is in Switzerland; named US sub-processors are limited to ancillary functions (Zendesk for customer support, Chargebee for billing automation, Stripe and PayPal for card payments, Atlassian for support-data storage) and do not touch zero-knowledge-encrypted customer files. Standard Contractual Clauses, Binding Corporate Rules, and certifications govern any third-country transfers. Switzerland is not in the EU but holds an EU adequacy decision under Art. 45 GDPR, so transfers EU↔CH require no SCCs.
Drive pricing in EUR: Free includes 5 GB encrypted storage plus Docs and Sheets; Drive Plus is from approximately €4/month for 200 GB and file-version recovery; Proton Unlimited at ~€10/month adds 500 GB, Mail with 15 custom addresses, VPN, Pass, and Proton Sentinel advanced account protection; Duo (2 TB, 2 users), Family (3 TB, 6 users), and Drive Professional (1 TB/user for business). Best fit: every EU and Swiss procurement-grade buyer requiring zero-knowledge encrypted file sharing with the strongest sovereignty story in the directory; particularly compelling for journalists, NGOs, regulated industries, and any organisation needing genuine "no one outside the customer can access this data" guarantees.
Payment data processing (billing automation); ancillary
Payment data processing; ancillary
Payment data processing; ancillary
Customer support data processing; ancillary
Customer support data storage (EU/US/UK processing locations)
Customer support and direct communications (Proton group company)
Customer support and direct communications (Proton group company)
| Vendor | Country | Purpose | Owner |
|---|---|---|---|
| Chargebee, Inc. | United States | Payment data processing (billing automation); ancillary | US |
| PayPal | United States | Payment data processing; ancillary | US |
| Stripe, Inc. | United States | Payment data processing; ancillary | US |
| Zendesk, Inc. | United States | Customer support data processing; ancillary | US |
| Atlassian Pty Ltd | Australia | Customer support data storage (EU/US/UK processing locations) | non-US |
| ProtonLabs DOOEL Skopje | North Macedonia | Customer support and direct communications (Proton group company) | non-US |
| ProtonLabs Taiwan Co., Ltd | Taiwan | Customer support and direct communications (Proton group company) | non-US |
Swiss-Post-owned (state-anchored) E2E encrypted enterprise cloud storage (Tresorit AG, Zurich), Swiss + EU DC options, ISO 27001.
Swiss kDrive cloud (Infomaniak, Geneva, since 1994), own Swiss DCs, ISO 27001 + B Corp 2025, district-heating heat recycling.
Valencia-based open-source zero-knowledge encrypted cloud (Internxt, 2020), post-quantum crypto, lifetime plans, 1 GB free, 1M+ users.