Swiss zero-knowledge encrypted cloud (Proton AG, non-profit-foundation-controlled), 11,496 owned servers, ISO 27001 + SOC 2, 5 GB free.
- FROM
- €4/mo
- CLOUD ACT
- NONE
A single roll-up of ownership and CLOUD Act exposure.
Aer Software Solutions B.V.
Dutch client-document exchange tool (Aer Software Solutions B.V.) for requesting, receiving and sending confidential files, with browser-side encryption and 7-day default retention, hosted on Hetzner in Nuremberg. Not general cloud storage.
Doqubox, in the File sharing category, is an EU-owned service with Germany as its hosting location and no identified CLOUD Act exposure.
Doqubox is a client-document exchange service run by Aer Software Solutions B.V. (KvK 27332530, registered 2009, business address Koepelplein 1E, Haarlem), Dutch and privately held. The application, database, object storage, backups and outbound mail all run on Hetzner Online GmbH in Nuremberg, Germany (confirmed from the server's IP range and the object-storage endpoint), with no CDN or US proxy in front. The other named processors are Dutch (Bird B.V. for SMS verification codes, Mollie B.V. for payments); the one US-parented name, Google Ireland, covers consent-gated analytics on the public website only and never sees customer documents. The DPA, sub-processor list, retention policy and security page are all public without a login. EU-owned, EU-hosted, no CLOUD Act exposure, so 5/5 under the rubric. The vendor holds no certification of its own and says so; Hetzner's ISO 27001 and BSI C5 attestation cover the infrastructure only. Encryption claims are worded more strongly on the homepage than in the privacy policy, which says not every workflow is fully end-to-end encrypted.
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
Where ultimate control over the operating company sits.
Doqubox is a narrower tool than the cloud drives in this category. It is built for one job: getting confidential documents from and to external clients without email attachments. It is a product of Aer Software Solutions B.V., a Dutch software company (KvK 27332530, registered March 2009, statutory seat Amsterdam, business address in Haarlem). There are three flows. A permanent upload address can sit on a website or in an email signature; a document request sends one client a checklist of the files needed; and secure sending delivers files through an expiring link that can be revoked, with optional SMS verification of the recipient. Clients use a browser link and need no account. Account users sign in with passkeys. Documents are meant to pass through, not stay: the default retention for incoming uploads and outgoing transfers is seven days, and the storage quotas are sized for that. Teams that need a shared drive, sync clients or version history should look at the general-purpose storage entries instead.
On jurisdiction the setup is simple and checkable. The application, database, object storage, backups and outbound mail run on Hetzner Online GmbH in Nuremberg, Germany; the server answers from Hetzner's Nuremberg cloud range and the app's content-security policy points uploads at Hetzner's Nuremberg object storage, with no CDN or US proxy in between. The published sub-processor list adds Bird B.V. (Netherlands) for SMS verification codes and Mollie B.V. (Netherlands) for payments. Google Ireland is listed for website analytics, which load only after consent and only on the public marketing pages. The DPA, sub-processor list, retention policy and security page are all public. Files are encrypted in the sender's browser with a key created by the recipient, so the platform stores ciphertext; the app code uses the browser's own cryptography (AES-GCM with ECDH key agreement). The privacy policy is more careful than the homepage, though: it says not every workflow is fully end-to-end encrypted, without naming the exceptions, and request details, recipient data and logs are necessarily processed server-side. Doqubox holds no certification of its own and states that plainly; Hetzner's ISO 27001 certificate and BSI C5 attestation cover the infrastructure, not the vendor.
Pricing is published and monthly. Essential is free for one user with a secure upload portal, 100 MB of storage and 500 MB of transfer per month. Professional costs EUR 4.95 per month and adds document requests, secure sending and your own logo (300 MB storage, 1 GB transfer). Business costs EUR 16.95 per month for five users, with SMS verification, a custom domain and sender address (1 GB storage, 3 GB transfer, 10 SMS); extra users are EUR 3.95 and extra transfer EUR 1 per GB. Best fit: accountants, financial advisers, estate agents and healthcare practices that want a branded, EU-hosted intake and delivery route for client documents.
Ancillary: website analytics on public marketing pages, loaded only after consent; no customer documents or exchange metadata (EU subsidiary of US-headquartered Alphabet).
SMS one-time codes for recipient verification (phone number and SMS metadata only). Engaged when a sender enables SMS verification (Business plan).
Application hosting, database, object storage, backups and outbound SMTP. Holds all customer file content (client-side encrypted in supported flows), account data and exchange metadata, in Nuremberg. Always engaged.
Subscription payments, recurring-payment mandates and invoices (billing identifiers only, no document content).
| Vendor | Country | Purpose | Owner |
|---|---|---|---|
| Google Ireland Limited | Ireland | Ancillary: website analytics on public marketing pages, loaded only after consent; no customer documents or exchange metadata (EU subsidiary of US-headquartered Alphabet). | US |
| Bird B.V. | Netherlands | SMS one-time codes for recipient verification (phone number and SMS metadata only). Engaged when a sender enables SMS verification (Business plan). | EU |
| Hetzner Online GmbH | Germany | Application hosting, database, object storage, backups and outbound SMTP. Holds all customer file content (client-side encrypted in supported flows), account data and exchange metadata, in Nuremberg. Always engaged. | EU |
| Mollie B.V. | Netherlands | Subscription payments, recurring-payment mandates and invoices (billing identifiers only, no document content). | EU |
Held by the provider that operates the hosting, not by Doqubox itself.
Swiss zero-knowledge encrypted cloud (Proton AG, non-profit-foundation-controlled), 11,496 owned servers, ISO 27001 + SOC 2, 5 GB free.
Swiss-Post-owned (state-anchored) E2E encrypted enterprise cloud storage (Tresorit AG, Zurich), Swiss + EU DC options, ISO 27001.
Swiss kDrive cloud (Infomaniak, Geneva, since 1994), own Swiss DCs, ISO 27001 + B Corp 2025, district-heating heat recycling.