GDPR checklist for file storage tools.
File storage services hold whatever your team uploads, including documents about customers and staff. Compare 3 common tools and see what to check for each.
Compared at a glance
Dropbox
Backblaze
WasabiWhat to check for file storage tools
- Decide which personal data may be stored and who can share files.
- Check retention of deleted files and version history.
- Review external sharing settings.
- Record the region and any transfer outside the EEA.
All file storage tools
Questions, answered.
What should I check before using a file storage tool under the GDPR?
Decide which personal data may be stored and who can share files. Check retention of deleted files and version history. Review external sharing settings. Record the region and any transfer outside the EEA.
Do I need a data processing agreement with a file storage provider?
If the provider handles personal data on your behalf, yes: Article 28 of the GDPR requires a written contract. Some providers publish the text, others give it to you inside your account. Providers that decide their own purposes may act as independent controllers instead, so check the role.
Which file storage tools does Privacyboard cover?
Dropbox, Backblaze, Wasabi. Each has a page with its agreement, usual role and data location, checked on 1 November 2026.
Other categories
Privacyboard is not affiliated with these vendors. Checked on 1 November 2026. This is guidance, not legal advice.