File hosting services

tresorit

End to end encrypted file storage from Switzerland

SwitzerlandEFTAEU controlledHigh non-EU dependency

Operational dependency warning

Relies heavily on non-European providers

Current public evidence shows 8 non-European infrastructure or email dependencies across 7 providers: Adobe Marketo, Cloudflare, HubSpot, Microsoft, Salesforce, Salesforce Pardot, Zendesk. The reviewed operational path is therefore not entirely European.

Review dependencies ↓

Tresorit is a file hosting service focused on data security. Files are encrypted on the client before upload and the keys stay with the user, so the provider cannot read them even if someone gains access to the servers. It covers sync across devices, controlled sharing with external partners, large file transfer and electronic signatures, with desktop, mobile and web clients.

Tresorit does not run its own data centres: encrypted content is stored on Microsoft Azure, by default in Ireland, or in Swiss data centres for Swiss customers, with a choice of residency region on the larger plans. It is a European alternative to US cloud storage for organisations whose first requirement is that the provider cannot read the data.

External verification

EU verification badge

eu-alt.eu independently verified this service's European ownership. Choose a badge style and link it back to the dated evidence on this page.

Evidence last checked:

Horizontal · Blue

Download SVG
tresorit: EU ownership independently verified by eu-alt.eu
Embed code

Horizontal · Black

Download SVG
tresorit: EU ownership independently verified by eu-alt.eu
Embed code

Horizontal · White

Download SVG
tresorit: EU ownership independently verified by eu-alt.eu
Embed code

Compact · Blue

Download SVG
tresorit: EU ownership independently verified by eu-alt.eu
Embed code

Compact · Black

Download SVG
tresorit: EU ownership independently verified by eu-alt.eu
Embed code

Compact · White

Download SVG
tresorit: EU ownership independently verified by eu-alt.eu
Embed code

Data and operations

Infrastructure and email path

Verified operational dependencies, shown separately from ownership and from the service's core data hosting.

Public website

Cloudflare

Non-European provider
Observed
A 199.60.103.4, 199.60.103.104 · AS209242

Why this matters

Public DNS routes website visits through Cloudflare. Visitor IP addresses and request metadata can reach this non-European provider; this does not identify the core service's data location.

Incoming business email

Microsoft 365

Non-European provider
Observed
MX 0 tresorit-com.mail.protection.outlook.com · 10 tresorit-com.mail.eo.outlook.com

Why this matters

Published MX records route incoming business email through Microsoft 365. Correspondent details and message content can therefore enter this non-European provider's systems; MX does not reveal the configured storage region.

Authorised outbound email

Microsoft 365

Non-European provider
Observed
SPF spf.protection.outlook.com

Why this matters

This domain authorises Microsoft 365 to send email. If active, recipient details and message content can be processed by this non-European provider. SPF does not reveal its configured storage region.

Authorised outbound email

Adobe Marketo

Non-European provider
Observed
SPF mktomail.com

Why this matters

This domain authorises Adobe Marketo to send email. If active, recipient details and message content can be processed by this non-European provider. SPF does not reveal its configured storage region.

Authorised outbound email

Zendesk

Non-European provider
Observed
SPF mail.zendesk.com

Why this matters

This domain authorises Zendesk to send email. If active, recipient details and message content can be processed by this non-European provider. SPF does not reveal its configured storage region.

Authorised outbound email

Salesforce Pardot

Non-European provider
Observed
SPF aspmx.pardot.com

Why this matters

This domain authorises Salesforce Pardot to send email. If active, recipient details and message content can be processed by this US-controlled provider. SPF does not reveal its configured storage region and does not prove that all customer data is stored in the United States.

Authorised outbound email

Salesforce

Non-European provider
Observed
SPF _spf.salesforce.com

Why this matters

This domain authorises Salesforce to send email. If active, recipient details and message content can be processed by this US-controlled provider. SPF does not reveal its configured storage region and does not prove that all customer data is stored in the United States.

Authorised outbound email

HubSpot

Non-European provider
Observed
SPF 144472103.spf08.hubspotemail.net

Why this matters

This domain authorises HubSpot to send email. If active, recipient details and message content can be processed by this non-European provider. SPF does not reveal its configured storage region.

Public DNS records identify visible providers and routes, not every backend location or private data-region setting.

Infrastructure checked:

More in File hosting services

View all →

More from Switzerland