Best End-to-End Encrypted Cloud Storage from Europe (2026)

End-to-end encrypted cloud storage encrypts files on your own device before upload and keeps the keys with you, so the provider stores only ciphertext it cannot read, search or hand over in readable form.

How we rank these tools — 4-step process

1
European ownership, verified
The company is headquartered and incorporated in the EU, EEA, the UK, Switzerland or Israel, and processes customer data in Europe or Israel. A US parent company disqualifies a tool from this page regardless of where its servers are.
2
Category fit and hands-on review
What the tool actually does, who it suits, and where it falls short — checked against the vendor’s own documentation, changelog and pricing page rather than its marketing copy.
3
Compliance and pricing check
GDPR posture, hosting location and the prices quoted on this page are verified against the vendor’s public pricing before publication, and re-checked when we revisit the category.
4
Position on this page
Placement on this page can be paid, and that can affect the order tools appear in. It never buys a listing: a tool that fails the checks above is not here at any price, and payment does not change the shortcomings we write about. A vendor can ask us to correct a factual error — not to remove a criticism.

Vendors can pay for visibility on this page. It never changes what an entry says about a product, including the criticism, and we earn nothing when you click through to a vendor. Vendors can pay for more visibility, higher up on the review pages; it never affects whether a tool is listed. Editorial policy

Editor Sebastiaan Smits

Published 13 November 2026 Last reviewed 13 November 2026 How we review

Key takeaways

Proton Drive encrypts file names as well as file contents, publishes its apps under GPL-3.0 and has a public audit report from Securitum.
Tresorit encrypts file names, folder structures and metadata, and is the only entry with a price starting above €10 a month for 500GB (€10.42, billed annually).
Filen encrypts every file on the device with AES-256, and its free plan of 10GB carries the same security features as paid plans.
TeamDrive keeps the keys with the users wherever the data sits, including on your own servers or on Azure or OneDrive storage you choose.
Icedrive applies zero-knowledge encryption only to files in its encrypted folder, so files outside that folder can in theory be accessed by the provider.

Every provider in this list states end-to-end or zero-knowledge encryption on its tool page, but the statements are not equal in scope.

This ranking orders seven European services by how much of the account the encryption covers and how much of it an outsider can verify: file names as well as contents, published code, a published audit. Icedrive comes last because its encryption applies only to a dedicated folder, and Beebeeb sits near the end because it says outright that no independent audit exists yet.

7 European cloud storage tools compared

European cloud storage tools compared on position, country, entry price and best use
Position	Tool	Established	Entry price	Best for
#1	Proton Drive	Switzerland	Free 5GB / Drive Plus 200GB at €4.99/month or €47.88/year	Encrypted storage with published apps and a public audit
#2	Tresorit	Switzerland	From about €10.42/month (Personal)	Business sharing where metadata must stay encrypted too
#3	Filen	Germany	Free 10GB / from about €1.99/month	Everyday encrypted storage where every file is covered
#4	TeamDrive	Germany	€76/year for 1 user with 10GB (Professional Starter, excl. VAT)	Encrypted team folders with keys held by the users
#5	Internxt	Spain	Free 1GB / from about €0.89/month; lifetime plans available	Zero-knowledge storage with post-quantum key exchange
#6	Beebeeb	Netherlands	Starter €1.99/month (100GB, 1 user), Basic €3.99/month (200GB, 1 user), Pro €10.99/month (1TB, extra TB at €10.99 each up to 99TB); annual billing equals ten months; Teams (€54.95/month, 5TB, 2 seats) announced as coming soon; 14-day free trial, no free plan	Early adopters who accept an unaudited, open source start
#7	Icedrive	United Kingdom	Free 10GB / from about €1.67/month	Design-led storage with an optional encrypted folder

The 7 tools reviewed

#1 Proton Drive

Geneva, Switzerland Founded 2014 Free 5GB / Drive Plus 200GB at €4.99/month or €47.88/year Free 5GB tier; 30-day money-back guarantee on paid plans

Best for: Encrypted storage with published apps and a public audit

Operating company. Proton AG
Jurisdiction. Switzerland (adequacy decision, outside the EEA)
Where the data sits. Switzerland and Germany, on server hardware and network Proton owns
Independent checks. ISO 27001 (stated for Proton for Business); Drive apps audited by Securitum, report published
Source code. Open source
Replaces. Google Drive, Dropbox, OneDrive, iCloud Drive

Proton Drive is end-to-end encrypted storage from Proton AG in Geneva, and it encrypts file names as well as the files themselves. The apps for iOS, Android, Windows and macOS are published under GPL-3.0, and Securitum audited them with the report made public. Of the seven services here, it is the one where the encryption claim rests most on material you can open yourself.

Proton owns the server hardware and network in Switzerland and Germany, so no hyperscaler sits underneath. A free 5GB tier exists, and Drive Plus costs €4.99 a month or €47.88 a year for 200GB, with a 30-day money-back guarantee. Docs and Sheets are included, which goes further towards a workspace than most storage with this level of encryption. Switzerland is outside the EEA and relies on an adequacy decision.

What Proton Drive does well

File names encrypted as well as contents
GPL-3.0 apps with a public Securitum audit
Docs and Sheets included

Where Proton Drive falls short

Switzerland is outside the EEA
No server-side search across file contents

Standout feature. Encrypted file names on servers Proton owns, with audited open apps.

Read the full Proton Drive review Visit Proton Drive

#2 Tresorit

Zurich, Switzerland Founded 2011 From about €10.42/month (Personal) 14-day trial, no free tier

Best for: Business sharing where metadata must stay encrypted too

Operating company. Tresorit AG (Swiss Post subsidiary)
Jurisdiction. Switzerland (adequacy decision, outside the EEA)
Where the data sits. Switzerland, Ireland, Netherlands
Independent checks. Independently audited, zero-knowledge
Source code. Closed source
Replaces. Dropbox, Google Drive, OneDrive

Tresorit encrypts files on the user's device before upload and, according to its tool page, also encrypts file names, folder structures and metadata. Each file gets its own key, and those keys are protected by a master key derived from the password. Tresorit AG is a Swiss Post subsidiary based in Zurich, founded in Budapest in 2011.

The sharing controls are the reason to choose it for a company: link passwords, expiry dates, download limits and shared folders with read-only, editor and manager roles, with encryption kept intact for outside recipients. Admin features include SSO through SAML 2.0, device management and audit logs. The client code is closed, and the page names ISO 27001 and independent audits without a public report.

What Tresorit does well

File names, folders and metadata encrypted
Granular link and folder permissions
SSO via SAML 2.0 and audit logs for admins

Where Tresorit falls short

No free tier, only a 14-day trial
Closed source, so the code cannot be read

Standout feature. Encryption that covers metadata, combined with business-grade sharing controls.

Read the full Tresorit review Visit Tresorit

#3 Filen

Germany Founded 2020 Free 10GB / from about €1.99/month Free 10GB tier

Best for: Everyday encrypted storage where every file is covered

Operating company. Filen Cloud Dienste UG
Jurisdiction. EU (Germany)
Where the data sits. Germany
Independent checks. Open-source clients, zero-knowledge
Source code. Open source
Replaces. Dropbox, Google Drive, OneDrive

Filen, from Filen Cloud Dienste UG in Germany, encrypts every uploaded file on the device with AES-256, and the tool page stresses that encryption is not optional or limited to certain folders. Keys derive from your password and never leave the device. The desktop and mobile clients are open source, which lets researchers check the claim that files are encrypted before upload.

The 10GB free plan has all security features, Pro I costs €1.99 a month for 100GB, and lifetime plans exist. Version history, encrypted notes and contacts sync, and search over encrypted metadata run on the device. There is no real-time co-editing or comment system, and the page does not mention an independent audit, so open clients are the verification route.

What Filen does well

Every file encrypted, not just a folder
Open source clients
10GB free plan with full security features

Where Filen falls short

No real-time co-editing or comments
No independent audit mentioned on the tool page

Standout feature. Whole-account encryption with search and versioning kept on the device.

Read the full Filen review Visit Filen

#4 TeamDrive

Hamburg, Germany Founded 2008 €76/year for 1 user with 10GB (Professional Starter, excl. VAT) 30-day trial

Best for: Encrypted team folders with keys held by the users

Operating company. TeamDrive Systems GmbH
Jurisdiction. EU (Germany)
Where the data sits. Germany: IONOS SE data centres in Frankfurt for the TeamDrive cloud service; can also run on your own servers or on Azure / OneDrive storage you choose
Independent checks. ISO 27001:2022 (TÜV Nord), EuroPriSe privacy seal
Source code. Closed source
Replaces. Dropbox Business, Box, OneDrive for Business

TeamDrive Systems GmbH in Hamburg, founded in 2008, encrypts on the client with AES-256 and leaves the keys with the users, so TeamDrive stores only ciphertext wherever the data ends up. The hosted service runs in IONOS SE data centres in Frankfurt, and the same encrypted folders can also run hybrid, on your own servers, or on Azure or OneDrive storage you choose.

Outside verification is stronger here than for most: ISO 27001:2022 from TÜV Nord and the EuroPriSe privacy seal. Guest licences are unlimited and free, which suits firms working with clients. It is closed source, and Professional Starter costs €76 a year for one user with 10GB, excluding VAT, which is business pricing rather than consumer pricing.

What TeamDrive does well

Keys stay with users on every storage back end
ISO 27001:2022 and EuroPriSe seal
Unlimited free guest licences

Where TeamDrive falls short

Closed source
€76 a year for 10GB is expensive per gigabyte

Standout feature. The same encrypted team folder can live in Frankfurt, on your hardware or on Azure.

Read the full TeamDrive review Visit TeamDrive

#5 Internxt

Valencia, Spain Founded 2020 Free 1GB / from about €0.89/month; lifetime plans available Free tier

Best for: Zero-knowledge storage with post-quantum key exchange

Operating company. Internxt
Jurisdiction. EU (Spain)
Where the data sits. European Union
Independent checks. HIPAA, ISO 27001, SOC 2, open source
Source code. Open source
Replaces. Google Drive, Dropbox, OneDrive, iCloud

Internxt, founded in 2020 in Valencia, files its encryption under zero knowledge: files are encrypted on the device with AES-256, keys derive from the password, and the company says it cannot access the content. Its distinguishing feature is Kyber 512 post-quantum cryptography for key exchange, which matters for records that must stay confidential for decades.

Client applications are open source, and the tool page lists HIPAA, ISO 27001 and SOC 2 compliance. Storage sits in European data centres. A free 1GB tier exists, paid plans start at about €0.89 a month for 20GB, and lifetime plans are available. The page admits a younger ecosystem, limited third-party integration and no password recovery.

What Internxt does well

Kyber 512 post-quantum key exchange
Open source clients
HIPAA, ISO 27001 and SOC 2 listed

Where Internxt falls short

Only 1GB on the free tier
Limited integrations and no password recovery

Standout feature. Post-quantum key exchange at a low entry price.

Read the full Internxt review Visit Internxt

#6 Beebeeb

Wijchen, Netherlands Founded 2026 Starter €1.99/month (100GB, 1 user), Basic €3.99/month (200GB, 1 user), Pro €10.99/month (1TB, extra TB at €10.99 each up to 99TB); annual billing equals ten months; Teams (€54.95/month, 5TB, 2 seats) announced as coming soon; 14-day free trial, no free plan 14-day free trial, no card or iDEAL needed to start (10 GB of storage during the trial); full access straight away if you pay by card or iDEAL; no free plan

Best for: Early adopters who accept an unaudited, open source start

Operating company. Initlabs B.V.
Jurisdiction. EU (Netherlands)
Where the data sits. Data centres in Germany and Finland, inside the EU (the Netherlands is announced as coming soon)
Independent checks. No independent audit yet (one is planned, findings to be published; code open for review)
Source code. Open source
Replaces. Dropbox, Google Drive, iCloud

Beebeeb is the newest service here and says so itself. Initlabs B.V. in Wijchen, the Netherlands, encrypts files with AES-256-GCM before upload, protects the master key with a 12-word recovery phrase and states that it cannot read contents or file names. The clients and encryption core are open on GitHub.

The gap is verification and maturity. Beebeeb says no third-party audit exists yet and plans one with published findings. It was founded in 2026, the macOS and Windows desktop apps are in beta, and iOS, Android and a Linux desktop app are listed as coming soon. Pricing is plain: 1TB costs €10.99 a month, 100GB starts at €1.99, and there is a 14-day trial but no free plan. Data centres are in Germany and Finland.

What Beebeeb does well

Open clients and encryption core
Passkey sign-in and revocable share links
Data centres in Germany and Finland

Where Beebeeb falls short

No independent audit yet
No mobile apps yet and desktop apps in beta

Standout feature. Open code and plain pricing, with an honest statement that the audit is still to come.

Read the full Beebeeb review Visit Beebeeb

#7 Icedrive

Wales, United Kingdom Founded 2019 Free 10GB / from about €1.67/month Free 10GB tier

Best for: Design-led storage with an optional encrypted folder

Operating company. ID Cloud Services Ltd
Jurisdiction. United Kingdom (adequacy decision, outside the EEA)
Where the data sits. UK, Germany
Independent checks. Zero-knowledge (client-side)
Source code. Closed source
Replaces. Dropbox, Google Drive, OneDrive

Icedrive, run by ID Cloud Services Ltd in Wales, uses client-side Twofish encryption for files placed in its encrypted folder. The keys stay on your device, so Icedrive cannot read what is in that folder even if compelled. The tool page is explicit that regular files get standard encryption in transit and at rest and can theoretically be accessed by Icedrive.

That scope is why it ranks last. The rest of the package is attractive: a 10GB free plan including the encrypted folder, Lite at €1.67 a month for 150GB, Pro at €4.17 for 1TB, and a virtual drive with streaming on Windows. The company is British, outside the EU, and the data sits in the UK and Germany. The service is closed source.

What Icedrive does well

10GB free plan includes the encrypted folder
Virtual drive with on-demand streaming
Low entry price

Where Icedrive falls short

Encryption applies only to the encrypted folder
Closed source and UK-based

Standout feature. A generous free plan that includes zero-knowledge encryption for one folder.

Read the full Icedrive review Visit Icedrive

How do you tell real end-to-end encryption from a marketing claim?

Ask where the keys live. In genuine end-to-end storage the keys are derived on your device, and the provider has no way to decrypt without them. TeamDrive states this for every storage back end, Filen and Internxt derive keys from the password, and Beebeeb adds a 12-word recovery phrase. If a provider can reset your password and still show you your files, the keys are not yours.

Then ask what is encrypted. Proton Drive and Tresorit name file names, and Tresorit adds folder structures and metadata. A service that encrypts contents but exposes names still leaks what you store. Icedrive encrypts only the dedicated folder, and kDrive, pCloud and HiDrive offer encryption as an option or an add-on, which makes them different products from the seven ranked here.

What do you lose when the provider cannot read your files?

Everything that needs the server to open a file. Search across file contents, real-time co-editing and cloud-generated previews are limited or absent, and Filen and Proton Drive solve parts of this on the device instead. Third-party integrations are thinner for the same reason, as Filen and Internxt both say on their own pages.

You also lose recovery. Tresorit, Filen and Internxt all state that a forgotten password without a recovery option means permanent loss. Set up the recovery method on the first day and store it somewhere other than the vault.

Which verification evidence should you ask each vendor for?

Ask for the thing that fits the claim. For open code, the repository and its licence: Proton Drive uses GPL-3.0, while Filen, Internxt and Beebeeb publish their clients. For an audit, the report itself: Proton Drive links a Securitum report, Tresorit mentions independent audits, and Beebeeb says none exists yet. For process, the certificate: TeamDrive holds ISO 27001:2022 and EuroPriSe, and Internxt lists ISO 27001 and SOC 2.

Check the scope of each document. An ISO certificate covers an organisation and its processes, not the cryptography of one app, and an audit covers a version at a point in time. Treat the strongest case as code plus an audit plus a certificate, and note that no single service here has all three.

How do you move a large archive into encrypted storage?

Start with a copy, not a move. Encryption on the device makes the first upload slower than with an unencrypted provider, because every file is encrypted before it leaves, a cost Filen mentions on its page. Run the initial sync overnight and keep the old storage untouched until a restore test from the new service has worked.

Test a restore on a different device with only the password and the recovery material. A vault you can only open from the laptop it was created on is a single point of failure. Check also the file-size limits of your plan, which Tresorit notes exist on some plans.

When is encrypted storage not worth the trade-off?

When the files are meant to be worked on together in real time. A team that edits spreadsheets and documents jointly all day will find the missing co-editing a daily cost. Proton Drive includes Docs and Sheets, but the broader collaboration of an office suite is a different product class.

It is also not worth paying a premium for public or low-value material. Tresorit at €10.42 a month for 500GB is priced for sensitive files, while Filen, Internxt and Icedrive cost a fraction of that. Match the tier to what you actually store, and keep the sensitive part in the encrypted service.

How we selected and ranked these 7 tools

Every tool on this page is in the European Purpose directory, which means the operating company is established in Europe and we have verified that from the company register or the vendor's own legal notice rather than from a marketing page. Tools headquartered outside Europe are not eligible, however good they are.

Feature verification (weight: 40%). We check each capability against the vendor's own documentation and product pages, and record what the tool does rather than what the category is assumed to include.
Ease of adoption (weight: 30%). Integrations, published API access, trial availability and how much configuration stands between signing and a usable result.
Value and transparency (weight: 30%). Published pricing counts in a vendor's favour; quote-only pricing is recorded as quote-only rather than estimated. We weigh what a buyer gets for the entry price, not the headline feature count.
Editorial review. Every page is researched and drafted with AI assistance, and the compliance and pricing claims are checked against the vendor's documentation before it is published under the founder's editorial responsibility. The three weights above decide the order; a position is a ranking against the other European tools in this category, not an absolute score.

Vendor-reported outcomes — ROI figures, margin uplift, time saved — are labelled as vendor claims wherever they appear on this page. We have not audited them, and neither has anyone else who quotes them. Read our full editorial process for how pages are re-verified.

Frequently asked questions

Which European cloud storage is end-to-end encrypted?

On European Purpose, seven services state end-to-end or zero-knowledge encryption: Proton Drive, Tresorit, Filen, TeamDrive, Internxt, Beebeeb and Icedrive (folder only). kDrive, pCloud and HiDrive offer encryption as an option or paid add-on.

Is there a free end-to-end encrypted option?

Yes. Filen gives 10GB, Icedrive gives 10GB with the encrypted folder included, Proton Drive gives 5GB and Internxt gives 1GB. Tresorit and Beebeeb offer trials only, 14 days each.

Which of these services is open source?

Proton Drive publishes its apps under GPL-3.0. Filen, Internxt and Beebeeb publish their clients, and Beebeeb also publishes its encryption core. Tresorit, TeamDrive and Icedrive are closed source.

Which one has an independent audit?

Proton Drive links a published Securitum audit of its apps. Tresorit says it has had independent security audits, and TeamDrive holds ISO 27001:2022 and the EuroPriSe seal. Beebeeb says plainly that no audit exists yet.

Do any of these store data outside the EU?

Proton Drive stores in Switzerland and Germany, Tresorit in Switzerland, Ireland and the Netherlands, and Icedrive in the UK and Germany. Filen is in Germany, Beebeeb in Germany and Finland, Internxt in the European Union, and TeamDrive in Frankfurt unless you choose another back end.