cloud storage

Tresorit vs Box

Zero-knowledge encryption means not even Tresorit can read your files. Swiss-hosted, ISO 27001 certified, and owned by Swiss Post — the most secure cloud storage for businesses that take data protection seriously.

🏢 Tresorit AG 📍 Switzerland GDPR Compliant
Our Rating
4.4/5
Your Rating

Why Switch from Box to Tresorit?

Box is a widely used cloud storage and collaboration platform, particularly popular in enterprise environments. However, Box stores your files on US-based servers under US jurisdiction, meaning your data is subject to the CLOUD Act and can be accessed by US government agencies. While Box offers encryption at rest and in transit, Box itself holds the encryption keys — meaning Box employees and any entity with legal authority can access your files.

Tresorit, a Swiss-Hungarian company now owned by Swiss Post, takes a fundamentally different approach. Every file is encrypted on your device before it ever reaches the cloud, using zero-knowledge end-to-end encryption. Tresorit cannot read your files, cannot hand them over even if compelled by a court order, and stores everything in Swiss data centers protected by some of the strongest privacy laws in the world.

Feature Comparison

FeatureTresoritBox
End-to-end encryption✅ All files, zero-knowledge❌ Server-side only (Box holds keys)
Data locationSwitzerland 🇨🇭United States 🇺🇸
GDPR compliant✅ By design⚠️ Requires configuration
Zero-knowledge architecture✅ Yes❌ No
ISO 27001 certified✅ Yes✅ Yes
SOC 2 certified✅ Yes✅ Yes
Real-time co-editing❌ No✅ Yes (Box Notes, integrations)
Encrypted file sharing✅ With password and expiry⚠️ Basic link sharing
Desktop sync✅ Windows, macOS, Linux✅ Windows, macOS
Admin controls✅ Granular policies✅ Extensive admin tools
Third-party integrations~20 integrations1,500+ integrations

Pricing

Tresorit’s pricing reflects its premium security positioning, while Box offers lower entry prices with less encryption:

  • Tresorit Personal: €11.99/month — 1 TB storage, end-to-end encrypted, up to 10 devices
  • Tresorit Professional: €15.99/month — 4 TB storage, encrypted link tracking, priority support
  • Tresorit Business: €15.99/user/month — 1 TB per user, admin console, activity logs, DLP policies
  • Tresorit Enterprise: Custom pricing — unlimited users, advanced admin, SSO, custom integrations
  • Box Personal: Free — 10 GB, 250 MB file upload limit
  • Box Business: From $15/user/month — unlimited storage, 5 GB upload limit
  • Box Enterprise: From $35/user/month — advanced security, unlimited integrations

Tresorit is more expensive per user than Box’s entry-level plans. However, the price difference buys you zero-knowledge encryption that Box simply does not offer at any tier. For organizations handling sensitive data — legal, healthcare, financial, or IP-heavy industries — the security premium is a fraction of the cost of a data breach.

Privacy & Data Sovereignty

Tresorit’s privacy architecture is among the strongest of any cloud storage provider:

  • All files are encrypted with AES-256 on your device before upload — Tresorit never sees unencrypted data
  • Zero-knowledge key management means encryption keys exist only on your devices, not on Tresorit’s servers
  • Data is stored in Swiss data centers, protected by Swiss FADP and fully GDPR compliant
  • Tresorit is owned by Swiss Post, a Swiss federal institution, providing stability and institutional trust
  • No data mining, no advertising, and no third-party access to file contents
  • Encrypted sharing links prevent data exposure even if a link is intercepted
  • Tresorit has undergone independent security audits and publishes transparency reports on data requests

Migration Guide

Moving from Box to Tresorit requires planning but is straightforward:

  1. Sign up for Tresorit and install the desktop app on Windows, macOS, or Linux. Choose a plan that matches your storage needs and team size. The 14-day trial allows you to test the full feature set before committing. (15 minutes)
  2. Download your Box files using the Box desktop app or web interface. For large file libraries, use Box’s bulk download feature or sync everything to a local folder first. (Time varies by data volume)
  3. Organize and upload to Tresorit by moving your downloaded files into Tresorit sync folders on your desktop. The Tresorit app will encrypt and upload them automatically. Maintain your folder structure for easy navigation. (1-4 hours depending on volume)
  4. Set up team workspaces (Business plans) by creating shared tresors (encrypted folders) for each team or project. Invite team members and configure permissions — viewer, editor, or manager roles. (30 minutes)
  5. Update shared links by replacing existing Box sharing links with Tresorit encrypted links. Set passwords and expiration dates on sensitive shares. Notify collaborators of the new links. (30-60 minutes)
  6. Decommission Box after verifying all files are accessible in Tresorit. Cancel your Box subscription and uninstall the Box desktop app. (10 minutes)

Estimated time: 3-6 hours depending on data volume and team size. Difficulty: Easy to moderate — no technical expertise required.

Real-World Use Cases

A Zurich-based law firm switched from Box to Tresorit to ensure attorney-client privilege was protected by encryption, not just policy. With zero-knowledge encryption, even a successful server breach would yield nothing but encrypted data. The firm’s partners share case files with clients using password-protected encrypted links, and the Swiss data residency satisfies their compliance requirements.

A Berlin healthtech startup handling patient medical records adopted Tresorit Business to meet GDPR requirements for health data processing. The end-to-end encryption satisfies the “appropriate technical measures” requirement under Article 32 of GDPR, and the German-speaking support team simplified onboarding for non-technical medical staff.

A freelance product designer in Amsterdam uses Tresorit Personal to store and share client design files, brand assets, and contracts. The encrypted sharing links with expiration dates ensure that former clients lose access to files automatically, and the 1 TB of storage accommodates large Figma exports and high-resolution assets.

Company Background

Tresorit was founded in 2011 in Budapest, Hungary, by Istvan Lam, Szilveszter Szebeni, and Gyorgy Szilagyi — three engineers who met at the Budapest University of Technology and Economics. The founders built Tresorit around a core belief that cloud storage security should not depend on trusting the storage provider. Their zero-knowledge architecture was designed from the start to make it technically impossible for Tresorit to access customer data.

The company established its legal headquarters in Zurich, Switzerland, to benefit from Swiss privacy law, while maintaining its engineering center in Budapest. In 2021, Swiss Post — Switzerland’s national postal service and one of the country’s most trusted institutions — acquired Tresorit. The acquisition brought financial stability, access to Swiss Post’s enterprise customer network, and validation of Tresorit’s security-first approach. Tresorit retained its independent engineering team and product direction, with the zero-knowledge architecture remaining unchanged.

Today Tresorit serves over 10,000 organizations across industries including legal, healthcare, finance, and government. The company employs approximately 150 people and continues to develop its encryption-first platform from Budapest, with business operations coordinated from Zurich. Tresorit’s approach has earned recognition from privacy advocates and enterprise security teams alike, positioning it as the gold standard for encrypted cloud storage in Europe.

Security & Compliance

Tresorit maintains some of the most rigorous security certifications and practices in the cloud storage industry:

  • End-to-end encryption with AES-256 — all files encrypted on device before upload, with keys that never leave your control
  • Zero-knowledge architecture — Tresorit’s servers store only encrypted data; the company cannot decrypt your files under any circumstances
  • ISO 27001 certified — information security management system audited and verified by independent third parties
  • SOC 2 Type II certified — security, availability, and confidentiality controls independently audited
  • GDPR compliant by design — data minimization, encryption, and Swiss hosting satisfy the strictest interpretation of EU data protection requirements
  • Swiss FADP compliance — protected by Swiss Federal Act on Data Protection, one of the world’s strongest privacy frameworks
  • Data Loss Prevention (DLP) policies available on Business and Enterprise plans to prevent unauthorized sharing of sensitive content
  • Independent security audits conducted regularly, with Tresorit offering a bug bounty program for responsible vulnerability disclosure

Integration Ecosystem

Tresorit offers a focused set of integrations designed around secure file management:

  • Desktop sync clients for Windows, macOS, and Linux with selective sync, on-demand file access, and automatic encryption of all synced content
  • Mobile apps for iOS and Android with offline access, encrypted photo backup, and document scanning
  • Microsoft Outlook add-in for sending encrypted file attachments and replacing standard email attachments with secure Tresorit links
  • Gmail add-on for attaching Tresorit-encrypted files directly from your Gmail compose window
  • Active Directory and Azure AD integration for enterprise SSO and automated user provisioning on Business and Enterprise plans
  • Admin API for programmatic user management, policy configuration, and usage reporting
  • Encrypted eSignature workflows for sending and collecting legally binding signatures on documents without exposing file contents
  • MDM compatibility with major mobile device management platforms for enterprise deployment across managed devices

Who Should Switch?

Tresorit is ideal for:

  • Legal and financial firms handling confidential client documents that require encryption beyond provider-side controls
  • Healthcare organizations processing patient data under strict GDPR and national health data regulations
  • Privacy-conscious businesses that want zero-knowledge security without managing their own infrastructure
  • European companies needing Swiss-grade data protection and verifiable GDPR compliance
  • Professionals sharing sensitive IP, contracts, or creative assets with clients and partners

The Bottom Line

Box is a capable collaboration platform with a vast integration ecosystem and strong enterprise adoption. If your primary need is real-time document co-editing with hundreds of app integrations, Box delivers that well.

But if data security is your priority — not just checkbox compliance but genuine protection against breaches, insider threats, and government overreach — Tresorit is in a different league. Zero-knowledge encryption means your files are protected even from Tresorit itself, Swiss data centers provide jurisdictional protection, and Swiss Post’s ownership ensures long-term stability. For any organization handling sensitive data, the premium is well worth the peace of mind.


Looking for more European alternatives in this category? See also: kDrive, Nextcloud, and Filen.

Frequently Asked Questions

How does Tresorit's zero-knowledge encryption work?

Tresorit encrypts all files on your device before they are uploaded to the cloud using AES-256 encryption. The encryption keys are generated and stored locally on your devices and are never transmitted to Tresorit's servers. This means Tresorit employees, server administrators, and even law enforcement with a court order cannot decrypt your files — only you and people you explicitly share with hold the keys.

Can I share encrypted files with people who do not have a Tresorit account?

Yes. Tresorit allows you to create encrypted sharing links that anyone can access through a web browser. You can protect these links with passwords and set expiration dates. Recipients can view and download files without creating a Tresorit account, while the data remains encrypted in transit.

Is Tresorit suitable for team collaboration?

Yes. Tresorit Business plans support team workspaces with granular permission controls, activity logging, and admin dashboards. While Tresorit does not offer real-time document co-editing like Google Docs, it supports version history, file comments, and synced shared folders that work well for team file management and review workflows.

What happened when Swiss Post acquired Tresorit?

Swiss Post acquired Tresorit in 2021 to strengthen its secure digital services portfolio. The acquisition provided Tresorit with long-term financial stability and access to Swiss Post's enterprise customer base, while Tresorit retained its independent engineering team in Budapest and its zero-knowledge architecture. Swiss Post's ownership means Tresorit is backed by one of Switzerland's most trusted institutions.

Can I migrate my files from Box to Tresorit?

Yes. You can download your Box files to your local computer and then sync them to Tresorit using the desktop app. For large migrations, Tresorit's folder sync feature allows you to designate local folders that automatically upload to Tresorit. Business customers can also contact Tresorit's support team for assisted migration.

Was this helpful?

Explore More European Alternatives

150 privacy-first, GDPR-compliant alternatives to US tech services.