Proton Drive vs Tresorit Comparison
| Feature | ||
|---|---|---|
| Overview | ||
| Rating | 7.7 | 6.9 |
| Pricing |
Show billing detailsHide billing details
|
Show billing detailsHide billing details
|
| Free storage | 5 GB | 3 GB |
| Lifetime plan | No | No |
| Established | 2022 | 2011 |
| Platforms | ||
| Encryption & keys | ||
| Who holds the keys | You hold the keysShow detailsHide detailsFile contents, file and folder names and thumbnail previews are encrypted on your device with keys generated there (OpenPGP, Curve25519). Proton can see creation and modification times, permissions, the username that uploaded each file and the size of the encrypted file. The web app receives its encryption code from Proton's servers every time it loads. | You hold the keysShow detailsHide detailsTresorit says files, file names and subfolder names are encrypted on your device, each with its own key. The names of top-level folders, their size and member list, and file size, type and creation time are not end-to-end encrypted. Recipients' public keys are vouched for by Tresorit's own certificate authority. Web Access decrypts files in your browser with code that Tresorit serves on every visit. |
| Also encrypted | File names only | File names only |
| Sharing | Shared files stay encrypted | Shared files stay encrypted |
| If you lose the password | Recovery key you keep | Data is lost |
| Trust & transparency | ||
| Client code | Fully open source | Closed source |
| Server code | Closed source | Closed source |
| Reproducible builds | Not specified | Not specified |
| Security audit | Securitum (2022, paid for by the company)Show detailsHide detailsPenetration tests of the web app (September to October 2021), the Android app with its API (July to August 2022) and the iOS app (August to September 2022); no Drive audit report for the Windows or macOS apps is published | EY Advanced Security Center (2019, paid for by the company)Show detailsHide detailsPenetration tests, a source code review and a cryptographic review of the end-to-end encryption and the web, mobile and desktop apps, carried out in August and September 2019. Commissioned by Tresorit. |
| Jurisdiction | SwitzerlandShow detailsHide detailsOperated by Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Geneva. Proton says it owns its server hardware in Switzerland and Germany; the Drive security page does not say which of the two countries holds Drive files. Proton discloses data only on a binding order from Swiss authorities. | SwitzerlandShow detailsHide detailsTresorit AG is registered in Zurich, and its terms are governed by Swiss law. Files of personal accounts outside Switzerland are stored on Microsoft Azure in Ireland, and files of Swiss customers in Switzerland; account metadata is always stored in Ireland. |
| Owner | Proton FoundationShow detailsHide detailsProton AG's primary shareholder is the non-profit Proton Foundation, based in Geneva. Proton states it has no venture capital investors. | Swiss PostShow detailsHide detailsSwiss Post acquired a majority stake in July 2021. Tresorit says it remains an independent company within the Swiss Post group, which runs it as part of its digital business services. |
| Telemetry | On unless you opt out | On unless you opt out |
| Past data breach | No | No |
| Features & sync | ||
| Desktop sync | Yes | Yes |
| File versions | ExtendedShow detailsHide detailsFree plan: up to 10 versions of each file, kept for up to 7 days. Paid plans: up to 200 versions of each file, kept for up to 10 years, with adjustable settings. | LimitedShow detailsHide detailsPersonal Lite keeps 5 previous versions of each file, Personal Essential 10 and Personal Pro 25. Earlier versions can be downloaded but not set back as the current file. Deleted files and subfolders can be restored from the trash; deleted top-level folders cannot. |
| Collaborative editing | End-to-end encrypted | Not available |