# Encrypted cloud storage privacy ratings

Cloud storage with client-side encryption.

| Name | Grade | Jurisdiction | Description |
| --- | --- | --- | --- |
| [iCloud Drive](https://privacyratings.com/cloud-storage/icloud-drive/) | B (75/100) | United States (Five Eyes) | Apple's cloud storage for files across Apple devices, Windows and the web. Files are end-to-end encrypted only with the optional Advanced Data Protection setting, which is off by default. |
| [Peergos](https://privacyratings.com/cloud-storage/peergos/) | B (75/100) | United Kingdom (Five Eyes) | Peer-to-peer, end-to-end encrypted file storage and sharing platform with fine-grained access control. Use the hosted peergos.net service or self-host the open source server. |
| [Proton Drive](https://privacyratings.com/cloud-storage/proton-drive/) | B (75/100) | Switzerland | End-to-end encrypted cloud storage from Swiss company Proton, with open-source apps for web, desktop and mobile. |
| [Filen](https://privacyratings.com/cloud-storage/filen/) | C (63/100) | Germany (Fourteen Eyes) | End-to-end encrypted cloud storage from Germany, with open source web, desktop, mobile and CLI clients. Offers a free tier and paid plans. |
| [Dropbox](https://privacyratings.com/cloud-storage/dropbox/) | D (53/100) | United States (Five Eyes) | Cloud storage and file sync service with desktop, mobile and web apps. Files are encrypted at rest with keys Dropbox holds, not end-to-end. |
| [Koofr](https://privacyratings.com/cloud-storage/koofr/) | D (47/100) | Slovenia | Cloud storage from Slovenia with web, desktop, mobile, WebDAV and rclone access. Offers optional open source client-side encryption through Koofr Vault and can connect other cloud accounts. |
| [Google Drive](https://privacyratings.com/cloud-storage/google-drive/) | D (44/100) | United States (Five Eyes) | Cloud storage and file sharing from Google, integrated with Docs, Sheets and other Google services. Files are encrypted at rest with keys Google holds, not end-to-end. |
| [Microsoft OneDrive](https://privacyratings.com/cloud-storage/microsoft-onedrive/) | D (44/100) | United States (Five Eyes) | Cloud storage from Microsoft, built into Windows and Microsoft 365, with desktop, mobile and web apps. Files are encrypted at rest with keys Microsoft holds, not end-to-end. |
| [Tresorit](https://privacyratings.com/cloud-storage/tresorit/) | D (44/100) | Switzerland | End-to-end encrypted cloud storage, file sync and sharing service based in Switzerland, with desktop, mobile and web apps aimed mainly at businesses. |
| [Infomaniak kDrive](https://privacyratings.com/cloud-storage/infomaniak-kdrive/) | D (41/100) | Switzerland | Cloud storage from Swiss company Infomaniak, hosted in its own data centers in Switzerland, with open-source desktop and mobile apps. |
| [Internxt](https://privacyratings.com/cloud-storage/internxt/) | D (41/100) | Spain (Fourteen Eyes) | End-to-end encrypted cloud storage from Spain, with open source web, desktop and mobile clients. Offers a free tier and paid plans. |
| [MEGA](https://privacyratings.com/cloud-storage/mega/) | F (38/100) | Hungary | End-to-end encrypted cloud storage and file sharing service with desktop, mobile and web apps and source-available clients. |
| [Sync.com](https://privacyratings.com/cloud-storage/sync-com/) | F (38/100) | Canada (Five Eyes) | End-to-end encrypted cloud storage and file sharing from Canada, with desktop, mobile and web apps. |
| [Box](https://privacyratings.com/cloud-storage/box/) | F (34/100) | United States (Five Eyes) | Cloud content management and file sharing service for businesses and individuals, with desktop, mobile and web apps. Files are encrypted at rest with keys Box holds, not end-to-end. |
| [pCloud](https://privacyratings.com/cloud-storage/pcloud/) | F (25/100) | Switzerland | Cloud storage from Switzerland with desktop, mobile and web apps. Client-side encryption covers only a separate encrypted folder that needs the paid pCloud Encryption add-on. |
| [Icedrive](https://privacyratings.com/cloud-storage/icedrive/) | F (19/100) | Gibraltar | Cloud storage service with desktop, mobile and web apps, a free tier, and optional client-side encryption of a private folder on paid plans. |

## Criteria

- **Open source** (weight 3): Is all the source code needed to run the product public?
- **No trackers or telemetry** (weight 3): Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
- **No ads or data sales** (weight 2): Is the product funded without advertising, ad targeting or selling user data?
- **Independent audit** (weight 2): Has an independent security or privacy audit been published within the last three years?
- **Transparency report** (weight 2): Does the provider regularly publish how many government and legal requests it receives and how it responds?
- **Tells users about requests** (weight 1): Does the provider promise to tell users about requests for their data, unless a court forbids it?
- **TLS configuration** (weight 2, automated): Does the website pass the Qualys SSL Labs test with a grade of A or better?
- **Security headers** (weight 1, automated): Does the website pass the Mozilla HTTP Observatory test with a grade of A or better?
- **Modern web standards** (weight 1, automated): Does the website score 90% or higher on the Internet.nl website test?

Source: https://privacyratings.com/cloud-storage/