SaaS transparency ranking · Content, media and collaboration
Cloud storage software
28 vendors · updated 2026-10-16 · 5 without enough data for a score
File storage and sharing services, ranked by what they publish about how they handle your files.
Public transparency score, not a product or security rating. Transparency means: published on the vendor's own site, readable without a login, found by us at the addresses we checked.
+5points above the median of every category we measure
- Cloud storage22
- All categories17
- A0 0%
- B0 0%
- C0 0%
- D4 17%
- E5 22%
- F14 61%
- Data processing agreement3, filter to these
- Subprocessor list1, filter to these
- Data location stated7, filter to these
- Status page with history9, filter to these
-
1
Dropboxdropbox.comTransparency 48/100 DBand D
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: found
6 found6 gapsGaps Data processing agreement, Subprocessor list, +4Transparency alternatives
-
2
Egnyteegnyte.comTransparency 43/100 DBand D
- Data processing agreement: not found
- Subprocessor list: found
- Data location stated: not found
- Status page with history: found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: found
5 found7 gapsGaps Data processing agreement, Data location stated, +5Transparency alternatives
-
3
Proton Driveproton.meTransparency 43/100 DBand D
- Data processing agreement: found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): found
- Notice before subprocessors change: found
- Named privacy contact: not found
5 found7 gapsGaps Subprocessor list, Data location stated, +5Transparency alternatives
-
4
Sync.comsync.comTransparency 43/100 DBand D
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
5 found7 gapsGaps Data processing agreement, Subprocessor list, +5Transparency alternatives
-
5
Filenfilen.ioTransparency 39/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
4 found8 gapsGaps Data processing agreement, Subprocessor list, +6Transparency alternatives
-
6
Megamega.ioTransparency 36/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not measured
- Notice before subprocessors change: not found
- Named privacy contact: found
4 found7 gaps1 not measuredGaps Data processing agreement, Subprocessor list, +5Transparency alternatives
-
7
Koofrkoofr.euTransparency 35/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: found
4 found8 gapsGaps Data processing agreement, Subprocessor list, +6Transparency alternatives
-
8
ownCloudowncloud.comTransparency 35/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): found
- Notice before subprocessors change: not found
- Named privacy contact: not found
4 found8 gapsGaps Data processing agreement, Subprocessor list, +6Transparency alternatives
-
9
RushFilesrushfiles.comTransparency 26/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
3 found9 gapsGaps Data processing agreement, Subprocessor list, +7Transparency alternatives
-
10
Backblazebackblaze.comTransparency 22/100 FBand F
- Data processing agreement: found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
2 found10 gapsGaps Subprocessor list, Data location stated, +8Transparency alternatives
-
11
Jottacloudjottacloud.comTransparency 22/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): found
- Notice before subprocessors change: not found
- Named privacy contact: not found
3 found9 gapsGaps Data processing agreement, Subprocessor list, +7Transparency alternatives
-
12
Livedrivelivedrive.comTransparency 22/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
3 found9 gapsGaps Data processing agreement, Subprocessor list, +7Transparency alternatives
-
13
Tresorittresorit.comTransparency 22/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: not found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): found
- Notice before subprocessors change: not found
- Named privacy contact: found
4 found8 gapsGaps Data processing agreement, Subprocessor list, +6Transparency alternatives
-
14
Wasabiwasabi.comTransparency 22/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
3 found9 gapsGaps Data processing agreement, Subprocessor list, +7Transparency alternatives
-
15
Icedriveicedrive.netTransparency 17/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
2 found10 gapsGaps Data processing agreement, Subprocessor list, +8Transparency alternatives
-
16
Storjstorj.ioTransparency 17/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
2 found10 gapsGaps Data processing agreement, Subprocessor list, +8Transparency alternatives
-
17
IDriveidrive.comTransparency 13/100 FBand F
- Data processing agreement: found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
1 found11 gapsGaps Subprocessor list, Data location stated, +9Transparency alternatives
-
18
pCloudpcloud.comTransparency 13/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
2 found10 gapsGaps Data processing agreement, Subprocessor list, +8Transparency alternatives
-
19
Filestashfilestash.appTransparency 10/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not measured
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
1 found10 gaps1 not measuredGaps Data processing agreement, Subprocessor list, +8Transparency alternatives
-
20
Internxtinternxt.comTransparency 9/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
1 found11 gapsGaps Data processing agreement, Subprocessor list, +9Transparency alternatives
-
21
luckycloudluckycloud.deTransparency 9/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
1 found11 gapsGaps Data processing agreement, Subprocessor list, +9Transparency alternatives
-
22
Seafileseafile.comTransparency 9/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
1 found11 gapsGaps Data processing agreement, Subprocessor list, +9Transparency alternatives
-
23
Degoodegoo.comTransparency 4/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: found
1 found11 gapsGaps Data processing agreement, Subprocessor list, +9Transparency alternatives
-
Boxbox.comNot enough data: 5 of 12 criteria measured, so no transparency score
- Data processing agreement: not measured
- Subprocessor list: not measured
- Data location stated: not measured
- Status page with history: found
- Public pricing: not measured
- Certifications named: not found
- Uptime SLA with a figure: not measured
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not measured
- Named privacy contact: not measured
2 found3 gaps7 not measuredGaps No third-party tracking before consent, Certifications named, +1
-
Kiteworkskiteworks.comNot enough data: 4 of 12 criteria measured, so no transparency score
- Data processing agreement: not measured
- Subprocessor list: not measured
- Data location stated: not measured
- Status page with history: not measured
- Public pricing: not measured
- Certifications named: not found
- Uptime SLA with a figure: not measured
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not measured
- Named privacy contact: not measured
0 found4 gaps8 not measuredGaps HTTPS enforced with HSTS, No third-party tracking before consent, +2
-
Nextcloudnextcloud.comNot enough data: 2 of 12 criteria measured, so no transparency score
- Data processing agreement: not found
- Subprocessor list: not measured
- Data location stated: not measured
- Status page with history: not found
- Public pricing: not measured
- Certifications named: not measured
- Uptime SLA with a figure: not measured
- HTTPS enforced with HSTS: not measured
- No third-party tracking before consent: not measured
- security.txt (RFC 9116): not measured
- Notice before subprocessors change: not measured
- Named privacy contact: not measured
0 found2 gaps10 not measuredGaps Data processing agreement, Status page with history
-
SpiderOakspideroak.comNot enough data: 2 of 12 criteria measured, so no transparency score
- Data processing agreement: not measured
- Subprocessor list: not measured
- Data location stated: not measured
- Status page with history: not measured
- Public pricing: not measured
- Certifications named: not measured
- Uptime SLA with a figure: not measured
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not measured
- Notice before subprocessors change: not measured
- Named privacy contact: not measured
1 found1 gap10 not measuredGaps No third-party tracking before consent
-
TeamDriveteamdrive.comNot enough data: 8 of 12 criteria measured, so no transparency score
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: not measured
- Public pricing: not found
- Certifications named: found
- Uptime SLA with a figure: not measured
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not measured
- Notice before subprocessors change: not measured
- Named privacy contact: not found
3 found5 gaps4 not measuredGaps Data processing agreement, Subprocessor list, +3
-
Tick 2 vendors to compare them. 0 of 2 selected 1 of 2 selected 2 of 2 selected More than 2 selected. A comparison sets 2 side by side.
Not in the ranking
We could not measure these products with our method, so they are listed here instead of being scored. This says something about our method, not about the vendor.
- Google Drive – We found no product-specific domain: workspace.google.com covers a whole suite at once.
- Microsoft OneDrive – We found no product-specific domain: microsoft.com carries the legal texts for hundreds of products at once.
Narrow it down
Each of these lists the Cloud storage vendors that meet one condition, with the source for each, and appears only where at least 8 of them meet it.
This category, criterion by criterion
How this market does on each criterion, with its own share and how it compares with the rest.
- Data processing agreement
- Subprocessor list
- Data location stated
- Status page with history
- Public pricing
- Certifications named
- Uptime SLA with a figure
- HTTPS enforced with HSTS
- No third-party tracking before consent
- security.txt (RFC 9116)
- Notice before subprocessors change
- Named privacy contact
Every result links its source on the vendor page. A grey segment means we could not measure it, not that it is missing. See how we score.