Dropbox
Dropbox is a cloud storage and file-sharing platform for teams handling large files, with Dropbox Dash adding AI-powered search and sourced answers across connected work apps. Free 2 GB tier; paid plans start at 9.99 EUR per month.
What is Dropbox?
Dropbox is a cloud storage and collaboration platform built on a simple premise: files live in one place, sync to every device, and can be handed to anyone through a link. The company claims more than 700 million registered users, and its home page sums the promise up as tools that "help you collaborate with ease, move work forward faster, and keep it all safe".
The core product covers storage, multi-device synchronisation, offline access, link and folder sharing with granular permissions, previews for more than 175 file types, and large file transfer: up to 50 GB on Plus, 100 GB on Standard and Advanced, and 250 GB on Enterprise. Around it sits a family of products under the same brand: Dash for AI search, Replay for video review, Sign for electronic signature, DocSend for document sending and tracking, Reclaim.ai for AI scheduling, and Dropbox Fax.
The AI layer is Dash, and it is a product in its own right. Dash indexes roughly twenty connected applications, among them OneDrive, Notion, Gmail, Slack, Jira and Salesforce, and offers universal search across all of them plus a chat that distils documents and threads into sourced answers. It adds Stacks, which are shareable collections, a start page and a company directory. It is worth being precise about the scope: Dash finds and answers, it does not execute tasks on your behalf. Separately, the home page advertises ChatGPT and Claude connectors so those assistants can query Dropbox content, while AI summaries for stored files are still announced as coming soon.
Security is put forward heavily: AES 256-bit encryption at rest, SSL/TLS in transit, end-to-end encryption from the Advanced plan, version history and Dropbox Rewind for rollbacks.
For developers, Dropbox exposes a public API with SDKs for Swift, .NET, Java, JavaScript, Objective-C and Python, and claims 50 billion API calls per month.
The verticals the site addresses (construction with CAD, BIM and PDF workflows, media, technology, professional services, manufacturing and education) match the product's bias toward teams that move heavy files and need to find them again later.
What it does
- Store files and keep them synchronised across every device
- Share large files, up to 250 GB, through a secure link
- Find a file or an answer across all your connected work apps with Dash
- Get documents signed electronically
- Review and approve videos with time-stamped comments in Replay
- Restore deleted files up to one year back
When to use Dropbox / When not to
A quick filter to help you decide if Dropbox is the right fit.
When to use Dropbox
- Creative and media teams moving heavy files around: video, CAD, BIM and PDF
- Small businesses and enterprises that want storage, sharing and e-signature under a single contract
- Distributed teams scattered across many SaaS tools, the target audience for Dash and its cross-app search
- Organisations in the sectors the site addresses directly: construction, technology, manufacturing, media, professional services and education
- Developers embedding file storage and file workflows through a public API
When not to use Dropbox
- Anyone looking for an autonomous general-purpose AI assistant: Dash searches and answers, it does not carry out tasks in your place
- Buyers who need a named list of subprocessors or a data processing agreement available without going through sales
- Teams that want direct email support: no support address is published, only a help centre and web forms
- Users under 13 in the United States, or under 16 in the rest of the world
- Organisations that need data residency outside the regions on offer (United States by default; Australia, EU, Japan and the UK on eligible team plans)
How to use Dropbox
A typical end-to-end flow, from setup to results.
- Create a free account from the Dropbox sign-up page, or sign in if you already have one
- Choose a plan: Basic stays free with 2 GB, while Standard and Advanced offer a "Try for free" trial
- Install the desktop or mobile app, or work entirely from the web interface
- Move your files into Dropbox and let them synchronise across your devices
- Share files and folders through links, then set permissions, passwords and expiry dates
- For a team, set up team folders, groups and roles, then SSO and tiered administration on Advanced
- Try Dash without an account through the public demo, or start the 30-day free trial from the Dash access page
- Connect your work apps to Dash (Gmail, Slack, Notion, Jira and others), then query universal search or the chat
- On Dropbox Standard, Advanced, Business or Business Plus, your Dropbox account connects to Dash automatically for the duration of the Dash subscription
- Developers: create an app in the developer console, read the documentation and use the API explorer or one of the six SDKs
Pros & Cons
Pros
- A permanent free plan (Basic, 2 GB), no trial deadline
- A claimed base of over 700 million registered users, which translates into very wide interoperability
- Certifications and frameworks displayed openly: SOC 1, SOC 2 and SOC 3, HIPAA support, GDPR, and ISO 27001 for Dash
- End-to-end encryption available from the Advanced plan onwards
- A written commitment not to build generative AI models on customer content
- A mature API with SDKs in six languages and public documentation
- Optional data residency in Australia, the European Union, Japan and the United Kingdom for eligible team plans
Cons
- No support email address is published: support runs exclusively through the help centre and web forms
- Dash is billed on top of the Dropbox subscription (19 USD per user per month, or 15 USD on annual billing)
- Dash for Business, at 35 USD per user per month, is available on annual billing only
- No named list of subprocessors is published; the privacy policy only points to categories of third parties in an FAQ
- No data processing agreement was identified in the pages collected
- Contractual liability is capped at the greater of 20 USD or the amount paid on the current plan
- Mandatory arbitration and a class action waiver apply to US residents, with a 30-day opt-out window
Pricing & Plans
Dropbox offers a permanent free plan, Basic, with 2 GB of storage. The lowest paid entry point is Plus at 9.99 EUR per month for a single user with 2 TB. Team plans are priced at 12 EUR per user per month for Standard (14.50 EUR on monthly billing) and 18 EUR per user per month for Advanced, which requires a minimum of three users; Enterprise is quoted on request. Dropbox Dash is billed separately and in US dollars: 19 USD per user per month for Dash for Teams, or 15 USD on annual billing, and 35 USD per user per month for Dash for Business, on annual billing only. Amounts were recorded in euros on the Dropbox pricing page and in US dollars on the Dash pricing page, as the displayed currency depends on the visitor's region. European Union consumers benefit from a 14-day refund window under the terms of service.
- free - 2 GB
- 9.99 EUR/month - 1 user
- 2 TB
- 12 EUR/user/month - 3 TB of team storage
- 18 EUR/user/month - 15 TB of team storage
- custom quote
- 15 to 19 USD/user/month
- 35 USD/user/month
Data, GDPR & hosting
A consolidated view of how Dropbox handles your data.
GDPR overview
Dropbox claims GDPR compliance explicitly, with a dedicated GDPR page and the statement that "GDPR compliance and requirements are a top Dropbox priority". A Data Protection Officer is reachable at privacy@dropbox.com and the policy reminds users of their right to complain to their local supervisory authority. Transfers outside the EU rely on standard contractual clauses, the EU-U.S. Data Privacy Framework and its UK extension, the Swiss-U.S. framework and adequacy decisions; Dropbox, Inc. is certified with the Department of Commerce under FTC oversight, with JAMS recourse then arbitration. Access, rectification, portability, deletion and objection rights are exercised through data subject request forms available with or without an account, and EU consumers get a 14-day withdrawal and refund right. No Article 27 representative is designated. The privacy policy is effective 30 May 2025.
Who owns the data?
Dropbox's terms are explicit that the content you upload stays yours: "Your Stuff is yours. These Terms don't give us any rights to Your Stuff except for the limited rights that enable us to offer the Services." In exchange you give Dropbox permission to host, back up and share that content, and the terms state plainly that Dropbox accesses, stores and scans Your Stuff in order to deliver features such as previews, OCR, search and thumbnails. That permission extends to Dropbox affiliates and to trusted third parties. Outside North America, Dropbox International Unlimited Company is the data controller and acts as a processor for team customers; in North America, Dropbox, Inc. acts as a service provider.
Reuse rights
Dropbox collects account information, the files you store ("Your Stuff"), contacts, usage and device data, cookies, and recipient or viewer analytics, and states these are used to provide, improve, protect and promote its services. The privacy policy is direct about the commercial limit: "We may share information as discussed below, but we won't sell it to advertisers or other third parties." On artificial intelligence, the published AI principles (updated 4 April 2025) commit that Dropbox "will not build generative AI models using customer content without consent" and that customer data will at no point be used as a means to sell it; the Dash pricing page goes further and states flatly that Dropbox does not use your data to build generative AI models. Data may still be shared with trusted third parties such as customer support and IT providers, with other companies in the Dropbox group, with team administrators, and in response to legal requests. A transparency resource on the Trust Center lists the large language models used per product and feature, and a separate transparency report covers government requests.
Data retention & training
Hosting summary
Dropbox states that "files added to a Dropbox cloud storage account are synced to our secure online servers, located in data centers across the United States". Additional storage servers are available in Australia, the European Union, Japan and the United Kingdom for eligible users of Dropbox team plans, and a residency migration can bring data closer to the team's billing address. The privacy policy is broader: information may be stored, processed and transmitted in the United States and worldwide, including outside the user's own country. The server IP address resolved at the time of our check, 162.125.248.18, belongs to AS19679 Dropbox, Inc. and is announced from San Francisco through anycast. In practice, the United States is the default jurisdiction; European, British, Japanese and Australian residency exists but remains an option reserved for eligible team plans rather than the standard configuration.
Things to keep in mind
Risks and trade-offs to weigh before adopting Dropbox.
- Dropbox accesses, stores and scans your content to deliver previews, OCR and search: a trade-off to weigh before storing sensitive material
- Contractual liability is capped at the greater of 20 USD or the amount paid on your current plan, whatever the damage
- US residents are bound to individual arbitration and waive class actions, unless they opt out within 30 days
- Team administrators can access, disclose, restrict or delete the content in a member's account
- A free account left inactive for 12 consecutive months may be suspended or terminated
- No named subprocessor list and no data processing agreement were found in the pages collected, which makes a compliance review harder
- Features described on the Dash site may not be released yet, and AI summaries for stored files are still flagged as coming soon
Setup & Integrations
Technical difficulty
Very low for an individual: create an account, install the desktop or mobile client, and start using it, with no technical prerequisite. Dash is barely harder, since work apps are connected through ready-made connectors and no code is involved. Team deployment steps up a notch, with team folders, groups and roles, then SSO and tiered administration on Advanced and Enterprise, which usually calls for an IT administrator. Only API integration requires genuine developer skills: registering an app, handling keys, working with one of the six SDKs and wiring webhooks.
Deployment
Integrations
Supported languages
Behind Dropbox
Social
Resources
All the official URLs gathered for verification and reference.
Frequently asked questions
Is there a free version of Dropbox?
Does Dropbox train AI models on my files?
Where is my data hosted?
What is the minimum age to use Dropbox?
Does Dropbox have an API?
How much does Dropbox Dash cost?
What happens if I delete my account?
Is Dropbox GDPR compliant?
How do I contact support?
Should you pick Dropbox?
Dropbox is an established player in cloud storage, backed by a claimed base of more than 700 million registered users and a product line that now reaches well beyond a sync folder: sharing, large file transfer, PDF and OCR tooling, video review with Replay, electronic signature with Sign, and a public API with SDKs in six languages.
Its AI layer, Dash, is real, documented and separately priced. It searches across roughly twenty connected applications and returns sourced answers, with Stacks, a start page and a company directory around it. The scope deserves to be stated plainly: Dash finds and answers, it does not act autonomously on your behalf, and it is billed on top of the Dropbox subscription rather than included in it. AI summaries inside storage are still announced as coming soon.
The legal and security framing is unusually well documented: dated terms and privacy policy, a named Data Protection Officer, an explicit GDPR claim, SOC 1/2/3, HIPAA support and ISO 27001 for Dash, AES 256-bit encryption at rest and end-to-end encryption from the Advanced plan.
The gaps are documentary rather than functional. There is no named subprocessor list, no data processing agreement identified in the pages collected, no published support email address and no incorporation date on the site. Add the 20 USD liability cap, the mandatory arbitration clause for US residents and the fact that team administrators can access, restrict or delete a member's content, and you have the fine print to read before a large rollout.
- Choosing a selection results in a full page refresh.
- Opens in a new window.