{
  "slug": "proton-drive",
  "category": "cloud-storage",
  "name": "Proton Drive",
  "description": "End-to-end encrypted cloud storage from Swiss company Proton, with open-source apps for web, desktop and mobile.",
  "website": "https://proton.me/drive",
  "source": "https://github.com/ProtonMail/WebClients",
  "license": "GPL-3.0",
  "platforms": [
    "web",
    "windows",
    "macos",
    "android",
    "ios"
  ],
  "jurisdiction": {
    "code": "CH",
    "name": "Switzerland",
    "eyes": null,
    "eu": false,
    "gdpr": true,
    "cloud_act": null
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "B",
  "score": 75,
  "coverage": 100,
  "summary": "Proton Drive scores 75 out of 100 (grade B) on the encrypted cloud storage criteria. It meets 5 of 8 criteria: no ads or data sales, transparency report, tells users about requests, TLS configuration and security headers. It partly meets open source, no trackers or telemetry and independent audit. It is based in Switzerland: Not in the Five, Nine or Fourteen Eyes; GDPR-style data protection law. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade A+.",
  "url": "https://privacyratings.com/cloud-storage/proton-drive/",
  "markdown": "https://privacyratings.com/cloud-storage/proton-drive/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "partial",
      "evidence": "https://github.com/ProtonMail/WebClients/blob/main/LICENSE",
      "note": "Apps are open source under GPL-3.0. The server is not."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "partial",
      "evidence": "https://proton.me/legal/privacy",
      "note": "Website analytics are self-hosted. The apps include crash reporting, such as Sentry in the Android app, which is on by default and can be turned off."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://proton.me/drive/pricing",
      "note": "Funded by paid plans, with no ads on any plan."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://proton.me/drive/security",
      "note": "Securitum audited the Proton Drive apps and Proton links the report, but its date could not be confirmed. Proton's SOC 2 Type II report is not public."
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://proton.me/legal/transparency",
      "note": "Publishes yearly counts of legal orders received, complied with and contested."
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://proton.me/legal/law-enforcement",
      "note": "Targeted users are notified of data requests, with delays only when Swiss law, a court order or a risk to life requires it."
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://www.ssllabs.com/ssltest/analyze.html?d=drive.proton.me&hideResults=on",
      "note": "Grade A+"
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://developer.mozilla.org/en-US/observatory/analyze?host=drive.proton.me",
      "note": "Grade A+ (115/100+)"
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "pending",
      "evidence": null,
      "note": "Not tested yet."
    }
  },
  "tests": {
    "ssllabs": "A+",
    "observatory": "A+",
    "internetnl_web": null,
    "internetnl_mail": null,
    "trackers": [],
    "tested_at": "2026-10-01T06:39:49.598Z"
  },
  "last_modified": "2026-10-01T06:56:31Z"
}