Skip to content
Independently verified · Quarterly re-audit
EU VETTED

Jottacloud

VERIFIED
File sharing · Norway
Founded 2008 · jottacloud.com ↗

Norwegian cloud storage & backup (Jotta Group AS, est. 2008), 100% Norway-hosted on renewable power, server-side AES-256, public DPA, no CLOUD Act reach.

In short

Jottacloud, in the File sharing category, is an EU-owned service with Norway as its hosting location and no identified CLOUD Act exposure.

Assessment notes

Jottacloud is operated by Jotta Group AS (Øvre Slottsgate 5, Oslo, Norway; org. no. 992 603 615), founded 2008 by Roland Rabben, a Norwegian company with all server infrastructure in Norway, powered by renewable hydropower, with a publicly linked DPA and an explicit statement that the US CLOUD Act does not reach a Norwegian operator; EEA-incorporated (Norway, not EU) with Norwegian-only hosting, public DPA, and no CLOUD Act exposure; key gaps are server-side (not zero-knowledge) encryption and no ISO 27001 or sub-processors list surfaced at audit.

CLOUD ACT
OWNERSHIP
SUB-PROCS
0 none disclosed
Verified signals
Jurisdiction
  • EU / adequacy hosting
  • EU / adequacy operator
  • No US CLOUD Act exposure
Transparency
  • Public DPA
  • Sub-processors disclosed
  • Open-source clients
  • Third-party certification
JUMP TO
OVERVIEW

About Jottacloud

Jottacloud is a Norwegian cloud storage and online-backup service operated by Jotta Group AS, headquartered at Øvre Slottsgate 5, Oslo (organisation number 992 603 615). It was founded in 2008 by Roland Rabben (reportedly motivated by wanting to keep his family's photos safe) and the name is a deliberate misspelling of "Yottabyte." Over more than fifteen years it has grown into one of the larger independent European storage providers, with reported double-digit average annual revenue growth.

The core sovereignty story is strong and simple: all of Jottacloud's server infrastructure is physically in Norway, powered by renewable hydropower and seawater-cooled, and the company explicitly markets that as a Norwegian operator it is outside the reach of the US CLOUD Act. Data is protected under Norwegian and EEA privacy law, a Data Processing Agreement is publicly linked (not gated behind enterprise sales), and the company maintains a transparency page. The main caveat for an encryption-focused buyer: Jottacloud uses server-side AES-256 encryption with company-managed keys, not zero-knowledge / client-side encryption: Jotta can technically access stored data, unlike Proton Drive, Internxt or Tresorit. No ISO 27001 certification or sub-processors list was surfaced at audit.

An ownership change is in progress and worth watching: in March 2025 Jotta AS and Telenor Software Lab announced a merger to create a larger Norwegian cloud-storage challenger, with founder Roland Rabben as CEO. Telenor is a large, partly Norwegian-state-owned telco; this does not introduce US exposure, but it does change the cap-table and should be re-verified on the next audit pass.

Pricing is freemium: 5 GB free; Home 1 TB at €6.90/month (€69/year); Unlimited at €11.90/month (€119/year); Pro 10 TB at €29.90/month. Best fit: Norwegian and EEA individuals and SMBs who want straightforward backup-and-sync with genuine in-country hosting and a clean CLOUD Act story, and who do not require zero-knowledge encryption. Buyers who need client-side encryption should prefer Proton Drive, Internxt, Filen or Tresorit.

SUB-PROCESSORS

Sub-processor map · none disclosed

Source ↗
Vendor discloses zero sub-processors. All data processing happens in-house.
CERTIFICATIONS

Frameworks & certifications · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-05-14).
FEATURES

Capability matrix

Free storage 5 GB
Paid storage (from) Unlimited
Photo sync Yes
File versioning Yes
Link sharing Yes
Platforms iOS macOS Windows Android Linux Web
INTEGRATION & ACCESS
REST API No
SSO (SAML / OIDC) No
COMPLIANCE & GOVERNANCE
Audit log No
Self-host / on-prem option No
PRICING

Pricing & tiers

FREEMIUM
from €7/mo
View pricing page ↗
PUBLIC DOCUMENTS

Public documents

  • Data Processing Addendum (DPA)
    jottacloud.com/en…
    Open ↗
  • Sub-processors list
    docs.jottacloud.com/en…
    Open ↗
  • Terms of Service
    jottacloud.com/en…
    Open ↗
ALTERNATIVES

Alternatives in this category

Proton Drive
Switzerland · Founded 2014
EU-SOVEREIGN

Swiss zero-knowledge encrypted cloud (Proton AG, non-profit-foundation-controlled), 11,496 owned servers, ISO 27001 + SOC 2, 5 GB free.

Public DPA Sub-processors Open source
FROM
€4/mo
CLOUD ACT
NONE
Tresorit
Switzerland · Founded 2011
EU-HOSTED

Swiss-Post-owned (state-anchored) E2E encrypted enterprise cloud storage (Tresorit AG, Zurich), Swiss + EU DC options, ISO 27001.

Public DPA Sub-processors Open source
FROM
€10/mo
CLOUD ACT
MATERIAL
kDrive (Infomaniak)
Switzerland · Founded 1994
EU-SOVEREIGN

Swiss kDrive cloud (Infomaniak, Geneva, since 1994), own Swiss DCs, ISO 27001 + B Corp 2025, district-heating heat recycling.

Public DPA Sub-processors Open source
FROM
€4/mo
CLOUD ACT
NONE