Dropbox
Cloud file storage, sync and sharing for teams, including Dropbox Business admin controls, Dropbox Sign e-signature and Dropbox Backup.
Certifications & Accreditations
| Certification | Certifying Body | Scope | Achieved | Expiry | Status |
|---|---|---|---|---|---|
| ISO/IEC 27001:2022 | Accredited third-party certification body | Dropbox production services and supporting ISMS | — | — | Current |
| ISO/IEC 27017:2015 and ISO/IEC 27018:2019 | Accredited third-party certification body | Cloud security controls and protection of PII in public cloud | — | — | Current |
| ISO 22301:2019 | Accredited third-party certification body | Business continuity management system covering Dropbox services | — | — | Current |
| SOC 1, SOC 2 and SOC 3 Type II | Independent third-party auditor | Dropbox, Dropbox Business and Dropbox Sign. SOC 3 published publicly; SOC 1/2 available under NDA | — | — | Current |
Compliance Frameworks
ISO/IEC 27001:2022
Full
SOC 2 Type 2
Full
ISO 22301:2019
Full
ISO 22301 certified business continuity management system
GDPR 2016/679
Full
Dropbox acts as processor under its DPA; SCCs and UK IDTA available
HIPAA Security
Partial
HIPAA BAA available on eligible Dropbox Business plans
Copyright © 2026 SnapGRC