Tresorit applies comprehensive protections to safeguard customer data and maintain full compliance with regulatory frameworks.
As outlined in GDPR Recital 78, demonstrating compliance requires internal policies and measures that uphold the principles of data protection by design and by default. When developing, selecting, or using applications and services based on personal data processing, producers are encouraged to take data protection rights into account. Taking the state of the art into consideration ensures that controllers and processors can fully meet their data protection obligations.
Technical measures
Tresorit stands out with a security-by-design architecture, eliminating the vulnerabilities of patchwork solutions that remain prone to misconfigurations, human error, or software bugs. Client-side encryption ensures that no one else can access uploaded content – not even Tresorit. Secure file sharing by design and the Tresorit Encryption Whitepaper provide a complete technical overview.
Organisational measures
Tresorit maintains an Information Security Management System (ISMS) that undergoes independent annual audits against ISO 27001 standards. We also apply rigorous operational controls to safeguard customer information throughout our business relationship. Tresorit Security Measures explains how our security measures comply with Article 32 of the GDPR.