--- title: "Against encrypted cloud storage · Privatta" description: "Zero-knowledge drives: encrypted, and still somebody else's server." url: "https://royalsoftworks.com/products/privatta/compare/encrypted-storage/" source: "https://royalsoftworks.com" format: "markdown" note: "Markdown rendering of the HTML page at `url`. Same content, same canonical URL." --- Competitive comparison · 4 of 5 # Against encrypted cloud storage. Zero-knowledge drives: encrypted, and still somebody else's server. | Product | No copy | E2E enc. | LAN mode | Internet | Air-gap | Per-user ACL | Groups | Audit log | Device auth | Desktop | Pricing | | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | | Privatta★ This product · tick = every edition | Yes | Yes | Yes | Pro | Yes | Pro | Pro | Enterprise | Pro | Yes | Free · Pro €19/mo · Enterprise: ask us | | Encrypted Private Storage | | | | | | | | | | | | | ProtonDrive | No | Yes | No | Yes | No | Partial | No | No | No | Partial | Free / $9.99/mo | | Filen.io | No | Yes | No | Yes | No | Partial | No | No | No | Yes | Free / $2.99/mo | | Internxt | Partial | Yes | No | Yes | No | No | No | No | No | Yes | Free / $4.99/mo | | Tresorit Send | No | Yes | No | Yes | No | Partial | No | No | No | No | Free (link expiry) | Yes / full support~Partial / via plugin No Data as of June 2026 — verify current product capabilities before purchasing decisions. Contents 1. 01Encrypted Private Storage — Zero-knowledge cloud, still cloud 01 ## Encrypted Private Storage — Zero-knowledge cloud, still cloud ProtonDrive, Filen.io, and Internxt represent a newer category: zero-knowledge encrypted cloud storage. Unlike Dropbox or Google Drive, the vendor genuinely cannot read your files — encryption happens client-side before upload, and the key never leaves your device. This is a meaningful improvement over conventional cloud storage for personal and small-team privacy. These services are still cloud services. Files still live on a server you don't own. There is no LAN mode, no offline mode, and no air-gap capability. They are excellent for persistent storage and backup; they are not designed for direct machine-to-machine transfer with access control, audit trails, or machine authentication. Their sharing model is link-based — generate a link, send it to someone — rather than a named-user permission model with device-level verification. Tresorit Send, which operates on a different model from Tresorit's full product, is essentially a secure version of WeTransfer: generate a link that expires, the recipient downloads from the link. The file still passes through Tresorit's infrastructure. No recipient authentication, no machine whitelist, no audit log of who actually downloaded it. - Zero-knowledge encryption addresses content confidentiality but not cloud dependency or metadata - No LAN mode, offline mode, or air-gap capability in any encrypted storage product - Sharing is link-based, not named-user with device-level authentication - No audit log of specific downloads — only upload/share events may be recorded - Correct for personal backup and storage; not designed for governed point-to-point transfer [Previous Against managed file transfer.](https://royalsoftworks.com/products/privatta/compare/managed-transfer/) [Next Where Privatta stands.](https://royalsoftworks.com/products/privatta/compare/where-privatta-stands/) [All of Privatta compare](https://royalsoftworks.com/products/privatta/compare/)