Aller au contenu
Vérifié indépendamment · Ré-audit trimestriel
EU VETTED

Koofr

VéRIFIé
Partage de fichiers · Slovenia
Founded 2013 · koofr.eu ↗

Slovenian cloud storage (Koofr d.o.o., est. 2013), German ISO 27001 data centres, optional client-side encryption via Koofr Vault, 10 GB free.

Pourquoi ce score ?

Koofr is operated by Koofr d.o.o. (Stegne 23A, Ljubljana, Slovenia; founded 2013, based in Technology Park Ljubljana) — a fully EU-incorporated, EU-owned company that stores all data in ISO 27001-certified data centres in Germany, is GDPR-compliant by default, runs no file scanning or tracking, and offers optional client-side encryption via the Koofr Vault product; score held at 3/5 because no public DPA or sub-processors list was surfaced at audit (the rubric caps the score when these are not findable), though the underlying posture is otherwise clean and likely a 4-5 once those documents are verified.

SCORE
3.0/5
CLOUD ACT
OWNERSHIP
SUB-PROCS
not disclosed
JUMP TO
OVERVIEW

About Koofr

Koofr is a Slovenian cloud storage service operated by Koofr d.o.o., based at Stegne 23A in Ljubljana and a long-time member of Technology Park Ljubljana. Founded in 2013, it celebrated its tenth year of service in 2023 and is one of the cleaner small-vendor EU storage listings in this directory — fully Slovenian-incorporated, EU-owned, with no US parent, no US VC, and no PE on record. The infrastructure story is solid: Koofr stores all customer data in **ISO 27001-certified data centres in Germany**, markets itself as "GDPR compliant by default," and explicitly commits to not scanning, indexing or tracking customer files. Standard transport encryption and encrypted storage apply to all accounts. For users who want true zero-knowledge encryption, Koofr offers **Koofr Vault** — a client-side-encrypted layer where files are encrypted in the browser/app before upload, so Koofr cannot read them. A distinctive feature is that Koofr can connect and unify external clouds (Dropbox, Google Drive, OneDrive, Amazon) into a single interface, which is useful for migration but should be understood by privacy-focused buyers as an opt-in bridge to non-EU services. For an EU-sovereignty audit the open question is documentation, not infrastructure. At audit no public DPA and no sub-processors list could be surfaced on koofr.eu — under the directory's rubric, missing/unfindable DPA and sub-processor documentation caps the compliance score at 3/5. The underlying posture (Slovenian entity, German ISO 27001 hosting, no file scanning, optional client-side encryption) would otherwise support a 4-5, so this is a documentation gap to resolve on the next pass rather than a structural weakness. Pricing is freemium and unusually granular: 10 GB free forever; "Briefcase" tiers from €0.50/month (25 GB) and €1/month (100 GB); "Suitcase" tiers €4-10/month (250 GB to 1 TB); "Crate" tiers €20-35/month (2.5-5 TB) plus custom 10 TB+. Note that subscriptions are currently billed yearly and prices include 22% Slovenian VAT. The former free-storage referral scheme has been discontinued; there is no monetary affiliate programme. Best fit: privacy-conscious EU individuals and small teams who want German-hosted storage from an independent Slovenian vendor, especially those who will use Koofr Vault for sensitive files.
SUB-PROCESSORS

Carte des sous-traitants · not disclosed

Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
CERTIFICATIONS

Référentiels & certifications · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-05-14).
FEATURES

Matrice de fonctionnalités

INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) No
COMPLIANCE & GOVERNANCE
Audit log No
Self-host / on-prem option No
PRICING

Tarifs & paliers

FREEMIUM
à partir de €1/mois
Voir la page tarifs ↗
PUBLIC DOCUMENTS

Documents publics

Vendor does not publish a public DPA. Without a publicly accessible Data Processing Addendum, small EU customers cannot self-serve the processor agreement — this caps the compliance score (see How we score).
Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
  • Data Processing Addendum (DPA)
    — missing
    missing
  • Sub-processors list
    — missing
    missing
  • Terms of Service
    koofr.eu/tos…
    Open ↗
ALTERNATIVES

Alternatives dans cette catégorie