Data

Dropbox and the GDPR: AI training, data location and DPA

Standard: Says it doesn't train on your data. EU hosting available · DPA in the terms.

Vendor: DropboxWorkspace and projectsChecked on How we check

Verdict

Is Dropbox GDPR compliant?

Standard

Business

Says it doesn't train on your data

EU hosting available · DPA in the terms

Price: €12 / user / mo

No tool is GDPR compliant on its own: that depends on how your business uses it. This page shows the vendor's side, from its own pages. It is not legal advice.

Training

Does Dropbox train on your data?

Trains on your data by default?

Vendor says

Says it doesn't train on your data.

No without consent (vendor statement): Dropbox's AI principles say it will not build generative AI models using customer content without consent

Source: dropbox.comPrinciple 'Keep customers in control of their data'Second source: dropbox.comChecked on

Location

Where does Dropbox store your data?

Where data is stored by default

Checked

United States by default; storage is also available in Australia, the EU, Japan and the UK for eligible teams

Source: help.dropbox.comArticle 'Where is my Dropbox data stored?'Checked on

EU hosting on this plan

Checked

EU hosting available.

Yes, with conditions: teams on Standard or higher with at least 10 licences, annual billing and a billing address outside the current storage region can ask support to move file data to the EU; requests are reviewed one by one and cannot be undone

Source: help.dropbox.comSection 'Can I change where my file data is stored?'Checked on

Contract

Does Dropbox sign a data processing agreement?

Data processing agreement (DPA)

Checked

DPA in the terms.

Yes. The Data Processing Agreement is part of the Dropbox Services Agreement for business customers

Source: dropbox.comDefinition of 'Agreement' and section 'Data Processing Agreement'Second source: assets.dropbox.comChecked on

Processors

Who else handles Dropbox data?

Retention

How long does Dropbox keep your data?

How long data is kept

Checked

Files stay as long as the account exists; on termination Dropbox deletes stored data within a commercially reasonable period after an admin asks before termination

Source: assets.dropbox.comSection 'Deletion'Second source: dropbox.comChecked on

Security

Which certifications and admin controls does Dropbox have?

Security certifications

Checked

ISO 27001, 27017, 27018, 27701 and 22301; SOC 1, SOC 2 and SOC 3; CSA STAR; ISMAP; HIPAA/HITECH; NIST SP 800-171 attestation; EU Cloud Code of Conduct

Source: dropbox.comSections 'ISO certifications', 'SOC reports' and followingChecked on

Admin controls for AI

Checked

Partly: admins choose which team members get a Dash (AI search) licence; other switches for AI features were not found

Source: help.dropbox.comArticle 'How to add Dash access to team member accounts' (updated 22 Apr 2026)Checked on

Price

What does Dropbox cost?

Price, as shown in Germany

Checked

€12 / user / mo.

EUR 12 per user/month billed annually; VAT basis not stated

Source: dropbox.comPlan card 'Standard' with 'Jährliche Abrechnung' selectedChecked on

The vendor doesn't say: sub-processors.

Alternatives

Dropbox alternatives that don't train on your data

Other workspace and projects tools whose business plan doesn't train on your data and includes a DPA.

The five marks, in order: No AI training · EU hosting · DPA · Sub-processors listed · DPF or EU vendor. ✓ meets it, ✕ doesn't, – partly, ? not stated.

Tool · PlanVerdictYour five rules
  • Google Chat

    Google Workspace Business Standard · €13.60 / user / mo

    Doesn't train on your dataEU hosting available · DPA in the terms

    ✓✓✓✓✓

  • Miro

    Business · €20 / user / mo

    Doesn't train on your dataEU hosting available · DPA in the terms

    ✓✓✓✓✓

  • monday.com

    Pro · €19 / user / mo

    Doesn't train on your dataEU hosting available · DPA in the terms

    ✓✓✓✓✓

  • Teamwork.com

    Basics · $9.99 / user / mo

    Doesn't train on your dataEU hosting available · DPA on request

    ✓✓✓✓✓

  • Wrike

    Business · $25 / user / mo

    Doesn't train on your dataEU hosting available · DPA in the terms

    ✓✓✓✓✓

Need something your tools can't do?

We design and build what your team is missing, around the way you already work and the data rules you set.

Book a callServices