Arc’yon

Vendor profile

Dropbox: where is customer data stored and processed?

Dropbox stores files in US data centres by default for all users. Customers outside the EU/EEA can choose storage in the United Kingdom, Australia or Japan, and team users may request EU storage, with moves to EU approved by Dropbox support. Processing may occur in the USA, but no specific processing sites are stated. The data processing agreement has not been read, and Dropbox does not state where backup, identity, support or notifications are processed. Sub-processors such as AWS, Google and Intercom are listed without countries. The customer group is not stated, and the service is a business product with a 'Business Agreement' mentioned but not read.

Checked 13 October 2026 · based on the vendor's own public documents

See the map and sources

Where data is stored and processed

ActivityIn the EU/EEAOutside the EU/EEA
StorageEurope (country not stated)–
Only for customers in other regions: USA, United Kingdom, Australia, Japan
Processing––
Only for customers in other regions: USA

Ownership and agreements

OwnerDropbox, Inc. (USA)
HeadquartersUSA
Data processing agreementNot found on the vendor's website
CertificationsISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018, ISO/IEC 27701, ISO 22301, SOC 1, SOC 2, SOC 3

Sub-processors (23)

NameCountryPurpose
Amazon Web Services, Inc.–Lagring av fildata (AWS)
CloudConvert (Lunaweb, Inc.)–Ikke oppgitt
Concord Technologies Corporation–Ikke oppgitt
Dropbox, Inc.USAKonsernselskap
ElasticSearch–Ikke oppgitt
FileStack–Ikke oppgitt
FullContact–Ikke oppgitt
Google LLC–Ikke oppgitt
IDnow GmbH–Ikke oppgitt
Intercom, Inc.–Ikke oppgitt
Mailgun Technologies, Inc.–Ikke oppgitt
MaxMind–Ikke oppgitt
Metrics Enterprises, Inc. (Kissmetrics)–Ikke oppgitt
NG Communications bvba–Ikke oppgitt
OpenAI, Inc.–Ikke oppgitt

Sources