{
  "slug": "icloud-drive",
  "category": "cloud-storage",
  "name": "iCloud Drive",
  "description": "Apple's cloud storage for files across Apple devices, Windows and the web. Files are end-to-end encrypted only with the optional Advanced Data Protection setting, which is off by default.",
  "website": "https://www.icloud.com/iclouddrive",
  "license": null,
  "platforms": [
    "web",
    "windows",
    "macos",
    "ios"
  ],
  "jurisdiction": {
    "code": "US",
    "name": "United States",
    "eyes": "Five Eyes",
    "eu": false,
    "gdpr": false,
    "cloud_act": "provider"
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "B",
  "score": 75,
  "coverage": 100,
  "summary": "iCloud Drive scores 75 out of 100 (grade B) on the encrypted cloud storage criteria. It meets 6 of 8 criteria: no trackers or telemetry, no ads or data sales, transparency report, tells users about requests, TLS configuration and security headers. It partly meets independent audit. It does not meet open source. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade A+.",
  "url": "https://privacyratings.com/cloud-storage/icloud-drive/",
  "markdown": "https://privacyratings.com/cloud-storage/icloud-drive/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "no",
      "evidence": null,
      "note": "Closed source."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "yes",
      "evidence": "https://www.apple.com/legal/privacy/data/en/device-analytics/",
      "note": "Device and iCloud analytics are only shared with Apple if the user agrees, and no third-party trackers are included."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://www.apple.com/legal/privacy/en-ww/",
      "note": "Funded by iCloud+ subscriptions and device sales, with no ads in iCloud Drive. Apple states it does not sell personal data."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://support.apple.com/guide/certifications/apple-internet-services-security-apc34d2c0468b/web",
      "note": "Apple's internet services, including iCloud, have yearly ISO 27001 and 27018 certification audits, but only the certificates are public."
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://www.apple.com/legal/transparency/",
      "note": "Publishes counts of government requests for customer data twice a year."
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://www.apple.com/legal/privacy/law-enforcement-guidelines-us.pdf",
      "note": "Apple notifies customers when their account information is sought by legal process, unless prohibited or in emergencies."
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://www.ssllabs.com/ssltest/analyze.html?d=www.icloud.com&hideResults=on",
      "note": "Grade A+"
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://developer.mozilla.org/en-US/observatory/analyze?host=www.icloud.com",
      "note": "Grade A+ (130/100+)"
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "pending",
      "evidence": null,
      "note": "Not tested yet."
    }
  },
  "tests": {
    "ssllabs": "A+",
    "observatory": "A+",
    "internetnl_web": null,
    "internetnl_mail": null,
    "trackers": [],
    "tested_at": "2026-10-01T10:59:54.319Z"
  },
  "last_modified": "2026-10-01T11:14:42Z"
}