Tresorit Review

Tresorit is a strong choice for a small firm that needs its cloud provider excluded from confidential client files. This Tresorit review recommends Business for a firm with at least 3 users, provided you also restrict recipients, recovery administrators and AI access: encryption alone cannot stop someone you authorized from passing a document on.

Tresorit SecureCloud stores, syncs and shares files while encrypting their contents on your device before upload. You organize access around folders, recipient links and company policies; clients can receive files or supply documents without becoming members of your storage subscription. It suits a law practice exchanging case material, an advisory firm collecting financial records or an agency handling confidential client work. Its central benefit is control over who can read the content, rather than a larger collection of office apps. Tresorit's product and encryption overview.

Verified against the makers' live pricing, product pages and support documentation on 28 October 2026. This is a documentation-based evaluation, not a hands-on performance test. The verdict weighs provider access, client-sharing restrictions, staff administration and the boundary around AI use.

Who should pick Tresorit, and who should skip it?

Tresorit earns its place when a client contract or your own policy requires the storage provider to be unable to read confidential files. Pick Tresorit Business for a small legal, finance or agency team that can administer access deliberately; a solo consultant can consider Professional. Prefer Dropbox, a file-sync and sharing service, when familiar file exchange matters more than excluding the provider across your workflow; its optional encrypted team folders deserve consideration, but lose shared links and file requests. Prefer Google Drive in Google Workspace, Google's document collaboration suite, when shared drafting is the main job and your existing permissions meet the confidentiality requirement; Google's client-side encryption is a separate, edition-dependent deployment. Prefer Microsoft 365 with Microsoft Purview sensitivity labels, Microsoft's document classification and protection controls, when the firm already runs Office and can govern document permissions and Copilot centrally. A label called Confidential is not enough by itself: Microsoft says Copilot can use labeled encrypted content when the user has the required VIEW and EXTRACT rights. Dropbox's encrypted-folder restrictions, Google's client-side encryption requirements, Microsoft's Copilot protection model.

The table compares the access boundary, not a security league table. Dropbox and Google both offer stronger encryption options than their default workflows. Microsoft offers document-level controls that can be valuable after sharing. Tresorit's appeal is putting encrypted client exchange at the center of the product. The right comparison is between the configurations you will actually operate, not the word “encrypted” on four homepages. Google's default and optional encryption.

Tresorit review: encryption protects the cloud copy, access rules protect the work

Tresorit describes its model as client-side, zero-knowledge end-to-end encryption: files and relevant file metadata are encrypted before leaving your device, and Tresorit does not receive the keys in readable form. “Zero-knowledge” here means the provider cannot decrypt protected file contents. It does not mean nobody can see account activity, or that the colleague you gave access to cannot read the file. Tresorit's security explanation.

Think of a litigation folder as a locked case that the storage company can carry without opening. Authorized people have the means to open it. Your access decisions determine who those people are, and what happens after they open the case.

A technical distinction matters: Tresorit stores an encrypted roaming profile containing keys so you can sign in on another device. That profile is decrypted locally. “The provider cannot read the keys” is more accurate than the absolute claim that no key material ever leaves a device. Tresorit's user-profile architecture.

Keep each client's working files separate

Tresorit subscription membership does not automatically give an employee access to everyone else's files. Folder permissions do that. Its Viewer role can read and download; Manager can also share, edit and delete. A folder invitation requires a Tresorit account, whereas a recipient link can serve someone without one. Tresorit's user roles and permissions.

For a small advisory practice, create a distinct main folder for each client and invite only the people assigned to the engagement. Put internal advice in a different folder from material the client should receive. Making the entire practice a member of one root folder defeats the reason for separating confidential work.

The payoff is concrete: an employee helping Client A should not be able to stumble into Client B's payroll documents simply because both engagements use the same subscription. Use sample files to verify that separation before importing records. Do not treat the word Viewer as a promise that a document cannot leave the viewer's device.

The AI boundary is the authorized device

Tresorit can keep a cloud provider from reading the encrypted copy; it cannot make readable information invisible to every program on an authorized computer. If a person downloads a document and supplies it to an AI service, that is a new disclosure. An assistant with access to a synced local folder may also be operating after decryption. This is the practical consequence of client-side access, not a claim that Tresorit scans or blocks every AI tool.

For an agency using AI to draft proposals, keep approved reference material separate from confidential client originals. Give an automation a dedicated account and only the folders its task needs, if you choose to connect it. Do not hand it the managing partner's everyday account. The same boundary applies to the choices discussed in local versus cloud AI for confidential work: where the model runs and which documents it can read are separate decisions.

Tresorit file sharing: collect documents without opening the client folder

Tresorit's file requests are the strongest starting workflow for confidential intake: the recipient uploads through a link without a Tresorit account and cannot browse or download the destination folder's contents. Requests have a 5 GB upload limit per session, and there can be only one request per destination folder. Tresorit's file-request documentation.

For a finance firm collecting statements, that distinction matters more than a generic shared folder. The client needs an upload entrance, not permission to inspect everything already stored behind it. For a legal practice, it avoids inviting a witness into a broader matter folder just to collect one set of documents.

1. 1

   Create a destination for the client

   Use a dedicated intake folder. Create its file request and give the request a recognizable title, so the client can distinguish it from an unexpected upload invitation.

2. 2

   Set expiry and verify the sender

   Use an expiration date appropriate to the engagement and enable email verification where the workflow needs it. A typed email address alone is weaker evidence than a verified address.

3. 3

   Review the incoming files

   Check uploads in File Requests and accept the material into the intended workflow. Confirm the client has supplied the expected records before closing intake.

Returning a document needs a different restriction

Tresorit Business and higher plans can restrict a shared link to specific email addresses, email domains or members of the subscription. In the access dropdown, choose Allowed users only, enter the intended addresses and add them to the allowed list. Tresorit's recipient-restriction instructions.

For a settlement draft, allow the named client and instructed counsel. Allowing an entire company domain is a broader decision: it is useful for an organization-wide resource, but a poor substitute for a named recipient when the document concerns one employee or transaction.

Passwords and expiration dates add protection, but they solve different problems. A password limits who can use a link; expiry limits how long that link remains available. Neither fixes the wrong recipient list. Tresorit supports these link settings, alongside revocation and access controls. Tresorit's shared-link guide.

There is a setup detail worth getting right immediately: Tresorit says changing recipient restrictions after creation depends on having detailed access logs and email verification enabled when you created the link. For repeat client exchanges, make the correctly restricted link your standard starting point. Do not rely on tightening an unrestricted link after it has circulated.

Tresorit document editing: useful for review, limited for simultaneous drafting

Tresorit now supports browser editing of DOCX, XLSX and PPTX files, including commenting and redlining. That makes a document-review workflow possible inside SecureCloud rather than requiring every change to become another email attachment. It does not establish equivalence with a shared live document editor: Tresorit says simultaneous editors save their changes as separate versions. Custom styles and nonstandard fonts may also revert or disappear. Tresorit's current document-editing guide.

For a law firm reviewing a draft engagement letter, assign a clear editing sequence: associate prepares it, partner reviews it, client responds. That workflow can benefit from keeping the document and versions together. For an agency with several people editing a pitch at once, separate simultaneous versions create a reconciliation job. The firm should test its actual templates, fonts and revision process before making this the default editor.

Cooperative links let a client return changes

Tresorit cooperative links let an external recipient verify their email, view a single file, edit or download it, and upload a new version without creating an account. They are limited to next-generation folders and files up to 5 GB. Crucially, download disabling and watermarking are unavailable on cooperative links; a company policy that disables downloads prevents their creation. Tresorit's cooperative-link rules.

For a client completing a questionnaire, use a cooperative link when returning edits is the job. For a confidential report the client only needs to inspect, use a restricted viewing workflow instead. Granting modification rights because it feels convenient also grants a route to take the file away.

Revoking the link can stop subsequent access through that link. It cannot retrieve a copy the recipient already downloaded. Plan the relationship around what the recipient is permitted to retain, rather than expecting revocation to reverse a completed disclosure.

Tresorit eSign closes the handoff, with a finite allowance

Tresorit eSign is offered alongside the business plans, but the advertised 16 free signatures are a starter allowance: 10 electronic signatures and 6 EU qualified electronic signatures for the subscription as a whole, not for each employee or every month. Continued use involves sender licenses and purchased signature quotas. Tresorit's eSign licensing explanation.

For an agency sending engagement agreements, that is enough to evaluate the signing handoff, not evidence of an unlimited contract-signing service included with storage. Budget ongoing signing separately, based on who sends requests and the signature types your agreements require. Do not buy a higher storage plan expecting it to turn that introductory quota into a recurring allowance.

Tresorit administration: plan recovery and departures before the first upload

Tresorit Business adds the company controls that make it a better default for a firm than separate individual subscriptions: policies for authentication, devices, sessions and sharing, plus single sign-on, which lets people use the firm's identity system. Central rules matter because asking every employee to remember every sharing restriction is a fragile operating model. Tresorit's team policies.

For a small law practice, make two-factor authentication compulsory, limit allowed devices to the ones you intend to support and define how staff may share client documents. Then separate routine administration from recovery authority. Someone who invites new employees need not automatically hold the power to recover their files.

Advanced Control is a deliberate tradeoff. With it enabled and accepted, an Owner or Co-Owner can reset passwords and take over folders; a Co-Admin cannot. Business Pro and Enterprise support the Co-Owner role. This is useful for continuity, but the person entrusted with recovery is inside your access boundary. Do not promise staff that no company administrator can ever access their files while enabling recovery powers. Tresorit's current admin-role matrix.

For a departing consultant, transfer ownership of the client folders before deleting the account. Without Advanced Control, that normally requires the user's cooperation; with the appropriate accepted recovery setup, the owner can take over and transfer them. Deleting an account without preserving its owned folders can destroy the records you intended to retain. Tresorit's folder-takeover instructions.

There is a second offboarding task: review the departing person's shared links and file requests. Tresorit says these can remain active under their original settings when the destination folder still exists. Removing an employee is therefore not the same operation as closing every external access path they created. Tresorit's account-deletion behavior.

Data residency covers content, not every trace of activity

Tresorit's data residency options let eligible business subscriptions choose where encrypted content is stored. The listed locations include Canada, the United States, the United Kingdom, Germany and Switzerland. The default is Ireland for non-Swiss customers and Switzerland for Swiss customers. Operational and access-related metadata is stored separately in Ireland. Tresorit's storage-location documentation.

For a Canadian advisory firm, the useful question is whether its client requirement concerns document contents or also logs, identifiers and operational records. Selecting Canada for encrypted files does not establish that every associated record stays there. Put the actual requirement beside the storage documentation before agreeing to a client's residency clause.

Business offers residency options; Business Pro adds user-level options. Choose the latter when different staff groups need different content locations. A firm with one location requirement should not upgrade merely because finer granularity exists.

Tresorit pricing: Business is the practical starting point for a firm

Tresorit's Business plan is the fit for this review's reader because it combines shared administration, recipient restrictions and residency options. Professional is a one-user plan. The public plan cards state minimum seats for Business and Business Pro, rather than a maximum team size. The figures below are USD monthly equivalents with yearly billing, verified on the live business pricing page.

Professional: $27.49/month billed yearly, one user, 4 TB storage and a 10 GB maximum file size. It includes encrypted sharing and requests, cooperative links, Office editing, version history, sync, audit logs and branding. Its wall is the absence of the Business plan's shared company-control package.

Business: $19/user/month billed yearly, minimum 3 users, 2 TB per user and a 15 GB maximum file size; the minimum subscription is $684/year. The advertised starting storage is 6 TB across those initial seats. It adds custom admin policies, SSO, restricted-recipient link settings, a Co-Admin, domain verification, residency options and marking files as being edited.

Business Pro: $24/user/month billed yearly, minimum 5 users, 3 TB per user and a 20 GB maximum file size; the minimum subscription is $1,440/year. Starting storage is 15 TB. It adds user-level residency, dynamic watermarks, document analytics, automatic-deletion policies, Co-Owner recovery delegation, custom domains, directory provisioning and Microsoft Sentinel integration for security-event monitoring.

Enterprise: custom annual pricing, with negotiated user count, storage and maximum file size. It adds custom deployment, bring-your-own Azure infrastructure, a dedicated account manager and advanced support arrangements to the Business Pro package. These are quote-dependent requirements, not reasons for a small firm to begin at the top tier.

For the same illustrative five-person firm, Business works out to $1,140/year and Business Pro costs $300 more per year. That is calculated from the listed annual-billing seat rates, before tax or extras. Spend the difference when delegated recovery, watermarks, document analytics or differing residency needs solve an actual operating problem. Storage capacity alone is a weak reason if the firm has nowhere near filled its allowance.

The plan cards also advertise free-trial data rooms. Treat that as a way to evaluate Tresorit Engage, its client-project workspace, rather than a promise of unlimited ongoing rooms included with storage. The finite eSign allowance is likewise separate from a recurring signing budget.

Trial terms: payment details and automatic conversion

Tresorit offers a 14-day trial of the selected plan. Its pricing FAQ requires payment information, and its trial documentation says the account automatically converts to a paid subscription on the selected monthly or annual cycle unless you cancel or change the plan before expiry. Cancelling during the trial avoids the charge and downgrades the account to Basic. Tresorit's free-trial terms.

The billing FAQ says subscriptions converted from an expired trial are non-refundable. Set a decision reminder before the trial ends, and make that decision after testing recipient access and recovery, not after merely uploading a folder. Tresorit's payment and cancellation FAQ.

Tresorit's limitations that should affect the purchase

Tresorit's limits are manageable when the firm selects it for confidential exchange. They are frustrating when the firm expects every existing workflow to transfer unchanged.

• Editing is not unrestricted live coauthoring. Simultaneous edits become separate versions, and custom document styles or fonts may change. Trial the firm's actual contract and presentation templates.
• Editable links cannot also prohibit downloads. Cooperative links explicitly lack download disabling and watermarking. That prevents a tempting but unsupported “edit this, never keep it” policy.
• Large storage allowances do not remove smaller transfer ceilings. File-request sessions and cooperative-link files have their own 5 GB limits, below the Business storage-upload ceiling. An agency collecting a large media project needs to plan the transfer path, not just count terabytes.
• Offboarding has more than one switch. Preserve folder ownership, revoke employee access and review surviving links and requests. Deleting the user alone does not close every client-facing door.
• Recovery creates privileged access. Advanced Control solves continuity by trusting designated people with additional power. Those people and their devices need protection appropriate to that role.
• Residency does not cover all metadata. A content-location option cannot satisfy a contract requiring every operational record to stay in the same country.

Tresorit's API creates an AI access path you must govern

Tresorit's S3-compatible API, an interface compatible with common storage tools, runs in containers on your own premises or private-cloud infrastructure. Encryption and decryption happen there. It requires a Tresorit account and administrator enablement under allowed devices; its current single-upload ceiling is 5 GB, with no multipart uploads. Tresorit's API documentation.

That architecture can support a controlled document-processing workflow. It also means “we store it in Tresorit” does not answer whether an AI agent can read it. The account's permissions, the locally exposed interface and the downstream system decide that. For a legal firm, connect only an approved document set, using an account whose permissions match the narrow task. The local document-agent guide considers the separate question of processing documents without sending their contents to a cloud model.

Tresorit's 16 October announcement also describes an Engage AI connector planned for November 2026. It says an administrator must enable it and configure the firm's own model provider; only selected content and the user's prompt are sent, not files, attachments or unrelated room content. As of this review's verification date, that is an announced upcoming feature, not a shipped capability credited in the verdict. Supplying selected text to a model still supplies readable information to that model. Tresorit's Office-editing and AI announcement.

Verdict: choose Tresorit when provider exclusion is a requirement

Tresorit Business is a defensible choice for a small firm that shares confidential documents regularly and will own its access policies. Its combination of encrypted storage, upload-only intake, restricted recipient links and central administration fits that job. Choose Business Pro when a specific added control, particularly recovery delegation, analytics or user-level residency, earns its cost.

The decision flips when the firm mainly wants better habits inside its existing office suite. If the requirement is to stop oversharing among employees and govern an already deployed assistant, evaluate the permissions and protection controls you already own before adding another repository. Tresorit cannot compensate for granting broad access to the wrong person or automation.

Tresorit reviews: what this verdict measures

The case for buying rests on documented access controls and the cost of the plan that provides them. There is no measured sync-speed claim, usability score or assertion that a client completed onboarding in a particular number of minutes. Those outcomes depend on the firm's devices, connection, file sizes and recipient behavior; the trial should resolve them.

For the first working week, choose one representative client workflow and use sample documents. Verify upload-only intake, delivery to a named recipient, rejection of the wrong recipient, the return of an edited file and the effect of revoking the link. Then rehearse ownership transfer with a disposable test account. Keep confidential production records out of that rehearsal until the people responsible can explain who can recover, download and forward them.

Frequently asked questions

Is Tresorit trustworthy?

Tresorit publishes a clear provider-excluding encryption model and documents its administrative exceptions and sharing controls. That supports considering it for confidential client exchange. Trust still depends on your configuration, endpoint security and recipients; this review did not independently audit the cryptography. The current security explanation is the starting point for technical due diligence.

What's the most secure cloud storage?

There is no universal winner without defining who must be unable to read the files. Tresorit is a strong candidate when provider access is the concern. If the concern is an employee or AI operating with authorized access, permissions, recovery powers and device controls also decide the outcome.

What is web Tresorit?

It is Tresorit's browser access to stored files and supported collaboration workflows. Browser access still involves opening content on an authorized device; it does not make a shared computer or an untrusted browser session safe. Tresorit describes the service in its product overview.

Who owns Tresorit?

Tresorit is part of Swiss Post, according to its current About Tresorit page. Ownership does not change the need to assess the product's access model and your chosen configuration.

How much does Tresorit cost?

The pricing section above gives the current annual-billing rates, storage allowances and minimum commitments. A firm should compare Business with Business Pro, rather than assume the one-user Professional plan provides shared administration. Check the live business pricing page for your currency and billing cycle.

What are the most affordable cloud storage options?

For a firm already paying for Google Workspace or Microsoft 365, first assess the storage and controls in that subscription. An additional service must solve a requirement the existing configuration cannot meet. Compare the full commitment, including minimum seats and administrative work, rather than assuming a low advertised seat price is the whole bill.

Is Tresorit send free?

Yes. Tresorit Send is a separate free transfer service, not the business storage and administration subscription reviewed here. It is useful for occasional transfers; it does not replace the Business plan's company policies. See Tresorit Send's FAQ.

What does Tresorit mean?

Here, Tresorit is the name of the encrypted storage and collaboration service. Older documentation calls its main folders “tresors”; current interfaces use main folders. That terminology is documented in Tresorit's Linux guide.

Is TrueCrypt still safe to use?

TrueCrypt is a separate disk-encryption product, not Tresorit. Its official project page warns that it may contain unfixed security issues. Do not use an old TrueCrypt installation as the basis of a new client-file workflow.

Start a Tresorit trial with a sample client workflow, and decide whether to keep it before automatic billing begins.