Dropbox

dropbox.com

Dropbox declares 11 subprocessors, plus 1 of its own affiliates, in its subprocessor list, which we last checked on Nov 11, 2026 (evidence). They include Amazon Web Services, Google Cloud and OpenAI. No published changes since we first read it on Sep 22, 2026. 42 tracked vendors name Dropbox as a subprocessor, including HubSpot, Freshworks and SolarWinds.

Includes: DocSend, Dropbox Sign

Subprocessors CSV · Atom DORA draft CSV what's this? · 

11 third parties, 1 affiliate.

NamePurposeLocationListed since
Amazon Web Services, Inc. Infrastructure, Customer Support, Search, Large Language Model Processing (e.g. summarization, enhanced search)United States
Google LLC Customer Support, Large Language Model Processing (e.g. summarization, enhanced search)United States
Groq, Inc. AILarge Language Model Processing (e.g. summarization, enhanced search)United States
Microsoft Corporation Large Language Model Processing (e.g. summarization, enhanced search)United States
OpenAI AILarge Language Model Processing (e.g. video captioning, summarization, enhanced search)United States
Oracle America, Inc. Billing and Customer SupportUnited States
Parallel Web Systems Inc. Large Language Model Processing (e.g. summarization, enhanced search)United States
Salesforce.com, Inc. Customer SupportUnited States
Teleperformance A.E. Customer SupportGreece
Zendesk, Inc. Customer SupportUnited States
Zoom Video Communications, Inc. Customer SupportUnited States
Dropbox affiliates (1)
NamePurposeLocationListed since
Dropbox, Inc. AffiliateUnited States

Web TechnologiesCSV · Atom

Dropbox's homepage made 462 requests to 33 domains, 15 services controlled by another company, and 4 domains not identified.

Advertising (6): Google Cloud, X Corp., StackAdapt, Reddit, Inc., LY Corporation; reviewed: Bidtellect IncAnalytics (3): LinkedIn, Meta, ZoomInfoMarketing automation (2): Adobe; usually detected as Marketing automation: 6Sense Insights, Inc.A/B Testing (1): CoframeOther (3): reviewed as Recruitment & staffing: XING; Search engines: Coveo; Surveys: Qualtrics

15 third parties by category: Advertising 6Analytics 3Marketing automation 2A/B Testing 1Other 3

Third parties 15 · 146 requests
Google Cloudsubprocessor DoubleClick Floodlight Google Analytics Google Sign-in Google Tag Manager 9% of the page's requests 41
Adobe Marketo 8% of the page's requests 35
6Sense Insights, Inc. 6sc.co 3% of the page's requests 16
Bidtellect Inc bttrack.com 3% of the page's requests 13
X Corp. Twitter Ads 2% of the page's requests 9
LinkedIn Linkedin Insight Tag 2% of the page's requests 7
Coframe Coframe 1% of the page's requests 6
StackAdapt StackAdapt <1% of the page's requests 4
Meta Facebook Pixel 2.9.433 <1% of the page's requests 3
Qualtrics Qualtrics <1% of the page's requests 3
Reddit, Inc. Reddit Ads <1% of the page's requests 3
ZoomInfo Zoominfo <1% of the page's requests 3
Coveo Coveo <1% of the page's requests 1
LY Corporation Yahoo! JAPAN Ads <1% of the page's requests 1
XING xingcdn.com <1% of the page's requests 1
Unknown 4 · 7 requests

knotch-cdn.comemjcd.comknotch.commpc-prod-28-1053047382554.us-central1.run.app

First party 1 · 309 requests
Dropbox Envoy HSTS HTTP/3 Lenis 1.0.42 Lodash Priority Hints Sentry core-js 3.45.1 67% of the page's requests 309

7 tracked companies loaded by the homepage are not in Dropbox's subprocessor list. A website can use a service without it processing customer data.

Subprocessor of (42)CSV · Atom

42 companies
  • Ahrefs ahrefs.com Cloud storage
  • Anaphora anaphora.tech Digital signatures for forms and waivers in the Anaphora platform
  • Archbee archbee.com Collaboration & Productivity
  • Ashby ashbyhq.com Electronic Signatures via Dropbox Sign
  • Blissbook blissbook.com Cloud storage
  • ClearlyRated clearlyrated.com
  • Cloudmersive cloudmersive.com Productivity Software
  • CS DISCO csdisco.com File transfer tool
  • DocSend docsend.com Affiliate
  • Dot Compliance dotcompliance.com
  • Dropbox Sign dropboxsign.com Affiliate
  • Eptura eptura.com Optional file sharing service
  • EventUp Planner eventupplanner.com
  • EverTrue evertrue.com Cloud file storage & management
  • Fastmail fastmail.com Support services and Business operations
  • Freshworks freshworks.com Share the quote for signature, the quote is sent for signature through DropboxSign. Only Opt out facility for the customers is not to send for signatory.
  • Friendbuy friendbuy.com File storage provider
  • GaggleAMP gaggleamp.com File storage tool
  • Greenhouse greenhouse.com E-signature platform for Greenhouse Onboarding
  • HubSpot hubspot.com E-Signature Functionality
  • Klaviyo klaviyo.com File Hosting for Professional Services and Enablement
  • Leapsome leapsome.com Digital signature provider
  • LearnUpon learnupon.com Document storage and file transfer
  • MangoApps mangoapps.com Documents (optional)
  • Massed Compute massedcompute.com File storage and collaboration
  • Maxio maxio.com File storage and collaboration; File storage integration
  • Meltwater meltwater.com Facilitating e-signatures
  • Moqups moqups.com Cloud Drive
  • Noonlight noonlight.com Cloud Services – Document Storage
  • Ontra ontra.ai File Sharing Provider; File sharing and document management
  • Pin Payments pinpayments.com File storage
  • Podfather thepodfather.com Dropbox International Unlimited Company, One Park Place, Floor 5 Upper Hatch Street, Dublin 2, Ireland Cloud storage and file sharing.
  • SalesScreen salesscreen.com
  • Sign In Solutions signinsolutions.com SIC: Signatures and Verifications
  • SolarWinds solarwinds.com Secure file sharing, Analytics & E-Signatures
  • Spekit spekit.com Document signing
  • Swantide swantide.com Cloud Storage
  • Telnyx telnyx.com Cloud storage for file sharing and collaboration; personal data processed could include names, email addresses, and any data contained in files stored on Dropbox.
  • Together AI together.ai Contract administration and signature tool and file sharing
  • Tropic tropicapp.io Data storage and secure data transfer
  • Verda verda.com Document management; Privacy policy:
  • Zearn zearn.org Provides secure file transfer for School Account partners that choose to roster students using spreadsheets.

ComplianceCSV · Atom

Certified
Says it complies with

Security program

How Dropbox says it manages cybersecurity risk, in its annual report to the SEC.

Led by
Head of Security · 25+ years of experience
quote This team includes senior leaders from our legal, privacy, information security, information technology, infrastructure, and compliance teams, including our Chief Legal Officer, who also serves as our Chief Privacy Officer, our Chief Technology Officer, and our Head of Security.Our Head of Security joined Dropbox in 2022 and has more than 25 years of experience in security and intelligence, including a decade in leadership roles across the financial services and technology sectors.
Board oversight
Audit Committee
quote Additionally, our Audit Committee oversees programs and policies related to cybersecurity risks and initiatives.
Frameworks named
  • ISO 27001
  • SOC 2
quote Our cybersecurity risk management approach is supplemented by external and internal management audits against commonly accepted frameworks, including SOC-2 and ISO/IEC 27001, which are designed to test the effectiveness of our security controls.
Outside review
Engages outside assessors or consultants
quote Our cybersecurity risk management approach is supplemented by external and internal management audits against commonly accepted frameworks, including SOC-2 and ISO/IEC 27001, which are designed to test the effectiveness of our security controls.
Its own suppliers
Reviews their security
quote We also maintain a vendor risk management program designed to identify and mitigate risks associated with third-party suppliers and business partners.
Practices named
  • Incident response plan
  • Tabletop exercises
  • Penetration testing
  • Red team
  • Bug bounty
  • Vulnerability management
  • Threat intelligence
  • Security training
Read Item 1C in full

Risk Management and Strategy

We recognize the importance of assessing, identifying, and managing material risks associated with cybersecurity threats. These risks include, among other things, operational risks; intellectual property theft; fraud; extortion; harm to employees or customers; violation of privacy or security laws and other litigation and legal risk; and reputational risks. We have implemented a variety of cybersecurity processes, technologies, and controls to aid in our efforts to identify, assess and manage such material risks. Our approach includes: (1) an enterprise risk management program, which includes cybersecurity risks and is periodically refreshed; (2) security and privacy reviews designed to identify risks from new features, software, and vendors; (3) a vulnerability management program designed to identify hardware and software vulnerabilities; (4) an internal red team program, which simulates cyber threats, intended to allow us to address vulnerabilities before threat actors identify them; and (5) a threat intelligence program designed to model and research our adversaries. These processes vary in maturity across the business and are processes we work to continually improve.

Our process for identifying and assessing material risks from cybersecurity threats (our “Cybersecurity Process”) operates alongside our broader overall risk assessment process, covering other risks facing the company. As part of our Cybersecurity Process appropriate disclosure personnel will collaborate with subject matter specialists, as necessary, to gather insights for identifying and assessing material cybersecurity threat risks, their severity, and potential mitigations.

We also maintain an incident response program to prepare for, detect, respond to, and recover from cybersecurity incidents, which include processes to triage, assess the severity of, escalate, contain, investigate, and remediate identified incidents, as well as to comply with potentially applicable legal obligations and mitigate brand and reputational damage. Further, we conduct periodic tabletop exercises to test and fortify the controls of our cyber incident response program. The incident response team assesses the severity and priority of incidents, with escalations of cybersecurity incidents provided to our management team. If a cybersecurity incident is determined to be a material cybersecurity incident, our incident response plan and cybersecurity disclosure controls and procedures define the process to disclose such a material cybersecurity incident.

Our cybersecurity risk management approach is supplemented by external and internal management audits against commonly accepted frameworks, including SOC-2 and ISO/IEC 27001, which are designed to test the effectiveness of our security controls. We conduct penetration testing on a periodic basis and have established an external bug bounty program through which security researchers can help identify vulnerabilities in our systems before threat actors do. We also maintain a vendor risk management program designed to identify and mitigate risks associated with third-party suppliers and business partners. This program includes pre-engagement diligence, contractual security and notification provisions, and ongoing monitoring, as appropriate.

We describe whether and how risks from identified cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition, under the heading “We have in the past and may continue to experience privacy and data security breaches or incidents” included as part of our risk factor disclosures at Item 1A of this Annual Report on Form 10-K.

Governance

Our Board of Directors is actively involved in overseeing cybersecurity risk management. At least once a year, the Board of Directors discusses our programs and policies related to cybersecurity and risk initiatives and considers them closely both from a risk management perspective and as part of Dropbox’s business strategy. Additionally, our Audit Committee oversees programs and policies related to cybersecurity risks and initiatives. Our Audit Committee is comprised entirely of independent directors who evaluate these issues at least quarterly.

We have also established a cross-functional leadership team to oversee our information security and privacy programs and practices, as well as to assess, identify, manage, and mitigate security and privacy risks. Members of this team also report periodically to the Board of Directors, Audit Committee, and members of our senior leadership team. This team includes senior leaders from our legal, privacy, information security, information technology, infrastructure, and compliance teams, including our Chief Legal Officer, who also serves as our Chief Privacy Officer, our Chief Technology Officer, and our Head of Security. Our Chief Legal Officer and Chief Privacy Officer has held various roles advising Dropbox and two other large publicly-traded technology companies on a variety of privacy, regulatory, and product counseling issues since 2010. Our Chief Technology Officer joined Dropbox in March 2025 and has more than 25 years of experience leading engineering and product functions at top technology companies. Our Head of Security joined Dropbox in 2022 and has more than 25 years of experience in security and intelligence, including a decade in leadership roles across the financial services and technology sectors.

Members of senior leadership are informed about and monitor the prevention, mitigation, detection, and remediation of cybersecurity incidents through their management of, and participation in, the cybersecurity risk management and strategy processes described herein, including the operation of our incident response plan. Additionally, all employees are required to complete annual information security and privacy training, which are reviewed and updated annually. They also receive ongoing security awareness education via informational emails, talks and presentations, and resources available on our intranet.

Certifications as Dropbox's trust center lists them; reports are usually shared on request (evidence) Security program from DROPBOX, INC.'s Form 10-K for fiscal 2025, filed Feb 20, 2026, Item 1C, in its words (evidence)

Security recordCSV · Atom

What public security catalogs list for Dropbox, in their words.

Cybersecurity incidents reported to the SEC

Material cybersecurity incidents DROPBOX, INC. reported under Form 8-K Item 1.05, and amendments, in the filing's words.

  • Form 8-K filed event reported:
    On April 24, 2024, Dropbox, Inc. (“Dropbox” or “we”) became aware of unauthorized access to the Dropbox Sign (formerly HelloSign) production environment. We immediately activated our cybersecurity incident response process to investigate, contain, and remediate the incident. … more less

    On April 24, 2024, Dropbox, Inc. (“Dropbox” or “we”) became aware of unauthorized access to the Dropbox Sign (formerly HelloSign) production environment. We immediately activated our cybersecurity incident response process to investigate, contain, and remediate the incident. Upon further investigation, we discovered that the threat actor had accessed data related to all users of Dropbox Sign, such as emails and usernames, in addition to general account settings. For subsets of users, the threat actor also accessed phone numbers, hashed passwords, and certain authentication information such as API keys, OAuth tokens, and multi-factor authentication. Based on what we know as of the date of this filing, there is no evidence that the threat actor accessed the contents of users’ accounts, such as their agreements or templates, or their payment information. Additionally, we believe this incident was limited to Dropbox Sign infrastructure and there is no evidence that the threat actor accessed the production environments of other Dropbox products. We are continuing our investigation.

    When we became aware of the incident, we launched an investigation with industry-leading forensic investigators to understand what happened and mitigate risks to our users. We have notified and are working with law enforcement. As appropriate, we are also notifying regulatory authorities and users with respect to unauthorized access to personal information.

    As of the date of this filing, the incident has not had, and we do not believe it is reasonably likely to have, a material impact on our overall business operations, given our current understanding that this incident is limited to the Dropbox Sign infrastructure. We have not determined that the incident is reasonably likely to materially impact our financial condition or results of operations. We remain subject to various risks due to the incident, including potential litigation, changes in customer behavior, and additional regulatory scrutiny. Our remediation efforts are ongoing.

    Forward-Looking Statements

    This Form 8-K contains forward-looking statements as defined in the Private Securities Litigation Reform Act of 1995. Such forward-looking statements include statements regarding our ongoing investigation of the cybersecurity incident, the nature and known extent of the incident, the isolation of the incident to our Dropbox Sign infrastructure, Dropbox’s mitigation and remediation efforts, the potential disruption to our business or operations, and the potential impact on our operations, financial conditions, and results. These statements involve certain risks and uncertainties that may cause actual results to differ materially from expectations as of the date of this release. Among the factors that could cause actual results to differ materially from those indicated in the forward-looking statements are risks and uncertainties associated with the ongoing investigation of the incident, risks related security breaches or incidents, as well as other risks listed or described from time to time in Dropbox’s filings with the Securities and Exchange Commission (the “SEC”), including Dropbox’s Annual Report on Form 10-K filed with the SEC on February 16, 2024. All forward-looking statements are based on information and estimates available to Dropbox at the time of this Current Report on Form 8-K and are not guarantees of future performance. Except as required by law, Dropbox assumes no obligation to update any of the statements in this Current Report on Form 8-K.

    Filing at SEC EDGAR · Document

Data breaches

  • Dropbox 68,648,009 accounts Email addresses; Passwords

    In mid-2012, Dropbox suffered a data breach which exposed the stored credentials of tens of millions of their customers. In August 2016, they forced password resets for customers they believed may be at risk. A large volume of data totalling over 68 million records was subsequently traded online and included email addresses and salted hashes of passwords (half of them SHA1, half of them bcrypt).

    Have I Been Pwned

Filings: SEC EDGAR, Item 1.05 only (incidents a company hasn't judged material are often reported under Item 8.01, not read here) (evidence) Breach data: Have I Been Pwned (CC BY 4.0), which calls every entry a breach, including data scraped from public pages (evidence)

Service statusCSV · Atom

Aug 15: no incident reportedAug 16: no incident reportedAug 17: no incident reportedAug 18: no incident reportedAug 19: no incident reportedAug 20: no incident reportedAug 21: 1 incident (1 minor)Aug 22: no incident reportedAug 23: no incident reportedAug 24: no incident reportedAug 25: 1 incident (1 minor)Aug 26: no incident reportedAug 27: no incident reportedAug 28: no incident reportedAug 29: no incident reportedAug 30: no incident reportedAug 31: no incident reportedSep 1: no incident reportedSep 2: no incident reportedSep 3: 1 incident (1 minor)Sep 4: no incident reportedSep 5: no incident reportedSep 6: no incident reportedSep 7: no incident reportedSep 8: no incident reportedSep 9: 1 incident (1 major)Sep 10: no incident reportedSep 11: no incident reportedSep 12: no incident reportedSep 13: no incident reportedSep 14: no incident reportedSep 15: no incident reportedSep 16: no incident reportedSep 17: no incident reportedSep 18: no incident reportedSep 19: no incident reportedSep 20: no incident reportedSep 21: no incident reportedSep 22: no incident reportedSep 23: no incident reportedSep 24: no incident reportedSep 25: no incident reportedSep 26: no incident reportedSep 27: no incident reportedSep 28: no incident reportedSep 29: no incident reportedSep 30: no incident reportedOct 1: no incident reportedOct 2: no incident reportedOct 3: no incident reportedOct 4: no incident reportedOct 5: no incident reportedOct 6: no incident reportedOct 7: no incident reportedOct 8: no incident reportedOct 9: no incident reportedOct 10: no incident reportedOct 11: no incident reportedOct 12: no incident reportedOct 13: no incident reportedOct 14: no incident reportedOct 15: no incident reportedOct 16: no incident reportedOct 17: no incident reportedOct 18: no incident reportedOct 19: no incident reportedOct 20: no incident reportedOct 21: no incident reportedOct 22: no incident reportedOct 23: no incident reportedOct 24: no incident reportedOct 25: no incident reportedOct 26: no incident reportedOct 27: no incident reportedOct 28: no incident reportedOct 29: no incident reportedOct 30: no incident reportedOct 31: no incident reportedNov 1: no incident reportedNov 2: no incident reportedNov 3: no incident reportedNov 4: no incident reportedNov 5: no incident reportedNov 6: no incident reportedNov 7: no incident reportedNov 8: no incident reportedNov 9: no incident reportedNov 10: no incident reportedNov 11: no incident reportedNov 12: no incident reported

90 days agotoday

  • 4 incidents in 90 days
  • 1 major or critical
  • 6 h 49 min typical time to resolve
  • 59 min longest major
BeganIncidentImpactLasted
Some customers are unable to access certain website routes and features.major59 min
Customer support via telephone may be unavailable for some usersminor6 h 49 min
Some Dropbox Protect features are not working correctlyminor11 h 46 min
Dropbox is not working as expected for some usersminor1 h 54 min
Dropbox is not working as expected for some usersminor24 min
Shared content downloads are degradedminor3 days
Opening a video or audio file might not be working for usersminor2 h 26 min
Availability was impacted across a number of servicesno impact stated—

Incidents per month

0 2 4 Dec 2025: 0 incidents Jan 2026: 2 incidents (2 minor) · typical time to resolve 8 h 30 min Feb 2026: 0 incidents Mar 2026: 0 incidents Apr 2026: 2 incidents (1 major, 1 minor) · typical time to resolve 3 h 22 min May 2026: 2 incidents (1 minor, 1 no impact stated) · typical time to resolve 2 h 26 min Jun 2026: 1 incident (1 minor) · typical time to resolve 3 days Jul 2026: 1 incident (1 minor) · typical time to resolve 24 min Aug 2026: 2 incidents (2 minor) · typical time to resolve 11 h 46 min Sep 2026: 2 incidents (1 major, 1 minor) · typical time to resolve 6 h 49 min Oct 2026: 0 incidents Nov 2026: 0 incidents Dec 2025Jan 2026Feb Mar Apr May Jun Jul Aug Sep Oct Nov

critical major minor no impact stated

Components affected

ComponentIncidents
API1
Desktop Application1
Mobile Application1
Protect1
Support Services1
Website1

As Dropbox's status page reports its own incidents (scheduled maintenance left out), read every few hours since (evidence)

Incidents reported by Dropbox's subprocessorsCSV · Atom

49 reported incidents in the last 30 days, by 3 of the vendors Dropbox lists as subprocessors.

A subprocessor list names a company, not the service an incident touched. This does not show that Dropbox was involved.

DateCompanyIncidentImpactLasted
OpenAIUnable to start new Workspace Agent runs criticalongoing
OpenAIElevated errors affecting logins, sign-ups, and ChatGPT features minor8 min
ZoomService Degradation Affecting Zoom Conference Room Connector Services Endpoints in the AMS region. minor2 h 35 min
OpenAIIncorrect cost data in Costs API exports no impact stated2 h 20 min
ZoomService Degradation Affecting a subset of users with ZVA and ZoomMate no impact stated1 min
OpenAIElevated Errors On API minor42 min
OpenAIElevated ChatGPT Conversation Errors minor52 min
ZoomService Degradation Affecting Zoom Inbound SMS Service in the AU region minor1 h
OpenAIElevated errors with image generation minor1 h 49 min
OpenAIElevated error rates with some U.S. business Mastercards no impact stated3 days
ZoomService Degradation Affecting Zoom Mail, Calendar and Scheduler. minor1 h 37 min
Parallel Web Systemsbrief increase in 5xx errors no impact stated—
OpenAIChatGPT Work and Dots Errors minor13 h 6 min
OpenAIElevated error rates across paid ChatGPT plans minor1 h 54 min
ZoomService Degradation Affecting Outbound MMS Services in the US region minor7 h 51 min
OpenAIFile upload errors in ChatGPT minor4 h 52 min
OpenAIElevated errors with search in Dots, ChatGPT Work, and certain ChatGPT thinking experiences minor1 h 35 min
OpenAIElevated errors for GPT Image 2 API image edits minor4 h 1 min
ZoomService Degradation Affecting the Evaluations Acknowledge Button in Zoom Quality Management in the US Region minor16 h 35 min
OpenAI6.1 Sol Degraded Model Performance minor1 h 17 min
OpenAIElevated error rates for most hosted Code Reviews and Security Reviews on private GitHub repositories no impact stated29 min
OpenAIElevated error rates for Ads POST requests minor11 min
OpenAIDegraded experience with ChatGPT app connections using CIMD minor50 min
OpenAIHelp Center Chat Support Degraded no impact stated32 min
ZoomService Degradation Affecting Multiple Zoom Services minor46 min

And 24 more. All of them: CSV · Who is around them.

ChangesCSV · Atom

See the list as we read it on any date: Time machine

  1. Removed certification: ISO/IEC 27018 evidence
  2. Removed certification: SOC 2 Type II evidence
  3. Added certification: CSA STAR evidence
  4. Added certification: EU Cloud Code of Conduct evidence
  5. Added certification: ISMAP evidence
  6. Added certification: ISO 22301 evidence
  7. Added certification: ISO/IEC 27701 evidence
  8. Added certification: SOC 1 evidence
  9. Added certification: SOC 2 evidence
  10. Removed certification: CSA STAR evidence
  11. Removed certification: EU Cloud Code of Conduct evidence
  12. Removed certification: ISMAP evidence
  13. Removed certification: ISO 22301 evidence
  14. Removed certification: ISO/IEC 27701 evidence
  15. Removed certification: SOC 1 evidence
  16. Removed certification: SOC 2 evidence
  17. Added certification: ISO/IEC 27018 evidence
  18. Added certification: SOC 2 Type II evidence
  19. Removed certification: ISO/IEC 27018 evidence
  20. Removed certification: SOC 2 Type II evidence
  21. Added certification: CSA STAR evidence
  22. Added certification: EU Cloud Code of Conduct evidence
  23. Added certification: ISMAP evidence
  24. Added certification: ISO 22301 evidence
  25. Added certification: ISO/IEC 27701 evidence
  26. Added certification: SOC 1 evidence
  27. Added certification: SOC 2 evidence
  28. Removed certification: EU Cloud Code of Conduct evidence
  29. Removed certification: ISMAP evidence
  30. Removed certification: CSA STAR evidence
  31. Removed certification: ISO 22301 evidence
  32. Removed certification: ISO/IEC 27701 evidence
  33. Removed certification: SOC 1 evidence
  34. Removed certification: SOC 2 evidence
  35. Added certification: ISO/IEC 27018 evidence
  36. Added certification: SOC 2 Type II evidence
  37. Added certification: SOC 1 evidence
  38. Added certification: SOC 2 evidence
  39. Added certification: CSA STAR evidence
  40. Added certification: EU Cloud Code of Conduct evidence
  41. Added certification: ISMAP evidence
  42. Added certification: ISO 22301 evidence
  43. Added certification: ISO/IEC 27701 evidence
  44. Removed certification: ISO/IEC 27018 evidence
  45. Removed certification: SOC 2 Type II evidence
  46. Removed certification: SOC 1 evidence
  47. Removed certification: SOC 2 evidence
  48. Added certification: ISO/IEC 27018 evidence
  49. Added certification: SOC 2 Type II evidence
  50. Removed certification: CSA STAR evidence
Rating badge for Dropbox's site

Dropbox transparency rating

It updates with the rating.

<a href="https://thirdpartyindex.com/vendors/dropbox"><img src="https://thirdpartyindex.com/badge/dropbox.svg" alt="Dropbox transparency rating on Third Party Index" height="20"></a>
[![Dropbox transparency rating on Third Party Index](https://thirdpartyindex.com/badge/dropbox.svg)](https://thirdpartyindex.com/vendors/dropbox)