kDrive (Infomaniak)
A single roll-up of ownership and CLOUD Act exposure.
-
EU-Sovereign This listing EU/EEA/Switzerland-owned and -operated, with no identified CLOUD Act exposure.
-
EU-Based EU-operated, with at most minor or transient US exposure.
-
EU-Hosted EU hosting available, but a US parent or hyperscaler sub-processor creates material exposure.
-
US-Linked Operated by a US-incorporated entity, directly subject to US jurisdiction.
Swiss kDrive cloud (Infomaniak, Geneva, since 1994), own Swiss DCs, ISO 27001 + B Corp 2025, district-heating heat recycling.
kDrive (Infomaniak) is an EU-owned service hosted in Switzerland, with no identified CLOUD Act exposure. It is listed under File sharing.
Assessment notes
Infomaniak Group SA (Geneva, Switzerland; founded 1994 by Boris Siegenthaler and Fabian Lucchi, growing out of a 1990 user group; still independent, privately held, founder-led) operates kDrive on its own Swiss-built and Swiss-operated data centres: ISO 27001 certified since June 2018 plus ISO 9001 + ISO 14001 + ISO 50001 + B Corp certified (2025), all customer data stays in Switzerland, and the latest DC recycles 100% of its electricity into the local district heating network (enough to warm ~6,000 homes annually); Swiss-headquartered and founder-led, own Swiss data centres, public DPA, ISO 27001 + multi-ISO certifications, B Corp, and no CLOUD Act exposure.
Findings
- CLOUD Act
- CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
-
- Ownership
- Ownership
Where ultimate control over the operating company sits.
-
EU-owned EU-incorporated and EU-controlled; no significant US ownership.
-
European This listing Swiss/EEA-owned, with no significant US ownership; treated as European.
-
EU HQ, US-funded EU-headquartered but US venture- or PE-controlled.
-
EU subsidiary, US parent European operating company owned by a US parent company.
-
US-owned The operating company itself is US-headquartered.
-
- Sub-processors
- — not disclosed
Verified signals
-
EU / adequacy hosting: Yes
-
EU / adequacy operator: Yes
-
No US CLOUD Act exposure: Yes
-
Public DPA: Yes
-
Sub-processors disclosed: No
-
Open-source clients: No
-
Third-party certification: Yes
Jump to
About kDrive (Infomaniak)
kDrive is the cloud-storage and collaboration product of Infomaniak Group SA, the independent Swiss technology company founded in Geneva in 1994 by Boris Siegenthaler and Fabian Lucchi (growing out of a 1990 user group). Infomaniak is one of the longest-running independent European hosting companies, privately held, founder-led, with no venture-capital or private-equity investors anywhere on the cap table. The company designs, builds, and fully operates its own Swiss data centres with all customer infrastructure and servers under its direct control, and ships an integrated ecosystem of products: kDrive (cloud storage and sync), kMail / Mail, kSuite (office and collaboration), Public Cloud (compute), Web Hosting, Streaming, Newsletter, kMeet (video conferencing), and more.
For an EU-sovereignty audit Infomaniak is among the most defensible Swiss listings in this directory. The compliance footprint is unusually broad: ISO/IEC 27001 since June 2018, ISO 9001 (quality), ISO 14001 (environmental), ISO 50001 (energy), plus B Corp certification in 2025, the international label that recognises strong social, environmental, governance, and transparency standards. Switzerland holds an EU adequacy decision under Art. 45 GDPR, so transfers EU↔CH are SCC-free. All customer data is stored exclusively on Swiss-located infrastructure operated by Infomaniak itself; the latest data centre is built into the basement of a participatory housing cooperative and recycles 100% of consumed electricity as heat into the local district-heating network warming approximately 6,000 homes per year, among the most genuinely sustainable hosting operations in Europe.
kDrive pricing in EUR: Solo kDrive ~€4.42/month for 3 TB; my kSuite tiers bundle Drive with Mail / Documents / Meet / Spreadsheets / Presentation for from ~€7/month; business and Pro tiers above scale by users and storage. Best fit: every Swiss-jurisdiction-aware EU procurement-grade buyer; particularly compelling for environmentally-conscious organisations, public-sector procurement, and any team wanting an independent founder-led Swiss vendor with broad-stack collaboration (Drive + Mail + Docs + Meet) under a single provider. Together with Proton Drive and Tresorit, kDrive completes the directory's three-pillar Swiss-sovereignty file-sharing shortlist.
Sub-processor map · not disclosed
Frameworks & certifications
Capability matrix
Table 1Capabilities of kDrive (Infomaniak)
Integration & access
Compliance & governance
Pricing & tiers
Public documents
Alternatives in this category
-
Switzerland · €4/moEU-BasedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor This listing A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: Yes Open source: No -
-
Switzerland · €10/moEU-HostedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: Yes Open source: No -
-
Spain · €10/moEU-BasedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor This listing A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: Yes Open source: Yes -
| Product | Sovereignty | CLOUD Act | Signals | From |
|---|---|---|---|---|
Proton Drive
Switzerland
|
EU-Based | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: Yes
Open source: No
|
€4/mo |
Tresorit
Switzerland
|
EU-Hosted | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: Yes
Open source: No
|
€10/mo |
Internxt
Spain
|
EU-Based | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: Yes
Open source: Yes
|
€10/mo |