What Tresorit Is Actually Built For
Product details below reflect Tresorit’s own published information as of 2026 and link to their site; features and pricing can change, so check the current details before deciding.
If you are shopping for a secure way to exchange documents with clients, Tresorit will appear near the top of almost every list, and deservedly so. It is a respected, Swiss-rooted, end-to-end encrypted service with a strong security reputation. The question is not whether Tresorit is good. It plainly is. The question is whether it is built for the job you actually have.
Tresorit describes itself as End-to-End Encrypted Cloud Storage for Businesses: a unified, subscription-based platform covering secure file storage, encrypted team-collaboration workspaces, data rooms, document signing and email encryption. In other words, it is an ongoing, account-based service designed to be the place your team keeps and works on files over time.
That matters because a great deal of UK professional document work is not ongoing storage at all. A solicitor asks a client for proof of funds once. An accountant needs a year-end set of records once. A recruiter collects right-to-work evidence once. These are one-time exchanges, and the security profile they need is different from a shared team drive.
Where Tresorit Is Genuinely Strong
It is only fair to lead with what Tresorit does well, because it does the core security properly. Tresorit uses end-to-end, client-side encryption. As Tresorit puts it, files are encrypted on the user’s device before data is uploaded, the encryption keys remain exclusively in your control and are never shared with Tresorit, and not even Tresorit can access or read your content. That is a true zero-knowledge model, which is exactly the standard sensitive client data deserves.
The cryptography is serious too. Tresorit’s key sharing is based on, among others, RSA-4096 with OAEP padding, and every file and its relevant metadata is encrypted on your devices with unique, randomly generated keys that are never sent to Tresorit’s servers in unencrypted form.
What Tresorit does well
- Genuine end-to-end, client-side encryption with zero-knowledge key handling
- Strong cryptography for key sharing and per-file keys
- A mature platform spanning storage, collaboration, data rooms and signing
If your need is an encrypted home for your team’s working files, with people logging in day after day to collaborate, Tresorit is a strong, well-engineered choice and this article is not trying to talk you out of it.
The Different Job: One-Time Client Exchange
Here is where the jobs diverge. A team storage platform is optimised for files that live somewhere and are worked on repeatedly. A one-time client exchange is optimised for a document that should appear once, be collected once, and then disappear. The whole point is that it does not stick around.
Tresorit does offer a lighter sharing path. Tresorit Send provides robust client-side end-to-end encryption and, importantly, states that there is no Tresorit account required for recipients. It launched as a standalone service usable without registration, with a limit of up to 100 files and up to 5 GB. So no-account sending is genuinely possible through Send.
The distinction is narrower and more practical than “Tresorit cannot do this.” It is that one-time client exchange is the entire job a purpose-built tool is designed around, rather than a feature alongside storage, workspaces and signing. A tool built for this single workflow tends to bake in the parts that matter for regulated client data: the recipient never needs an account, the link is one-time so it cannot be quietly reused or forwarded into a second download, and the file deletes itself automatically after collection rather than living on in a drive.
Just as important for professionals, the exchange runs in both directions. You frequently need to request a document from a client, not only send one. FileSeal is built around both flows: client-side AES-GCM-256 encryption before anything leaves the device, a one-time download, automatic deletion after collection, and no account for the person on the other end. The client clicks a link and either uploads what you asked for or downloads what you sent. Nothing to install, nothing to register.
Built for one-time client exchange, not ongoing storage
Client-side encryption, no recipient account, one-time download, auto-delete. Send and request in one tool.
UK Data Residency: Read the Default
For UK professionals, where data physically sits is a real compliance question, and this is one of the sharpest practical differences. With Tresorit, the default location is not the UK. Tresorit states that customers without a Data Residency Option are automatically assigned to data centres in Ireland, and that the ability to choose a region, including the United Kingdom and Switzerland, is available only for Business and Enterprise customers.
What this means in practice
Ireland is within the EU, so this is a far cry from data sitting on US servers. But if your firm’s policy or your client’s expectation is specifically UK residency, then on Tresorit you need to be on a Business or Enterprise tier and to actively choose the United Kingdom region.
A tool that keeps UK or EU residency as the default removes that step entirely, which is one fewer thing to check, configure and document when a regulator or client asks where their files live.
Side-by-Side: Two Tools, Two Jobs
The clearest way to see the difference is to line up the design intent of each, rather than scoring points. Both encrypt client-side; the divergence is everything around that.
Tresorit, at a glance
- Primary job: ongoing, account-based encrypted storage and team collaboration
- Pricing shape: per-user, per-month subscription tiers oriented to teams and storage, from Professional for a single user up to Business, Business Pro and Enterprise, per the Tresorit business pricing
- Recipient account: generally account-based, with no-account receiving available specifically through Tresorit Send
- UK residency: Ireland by default; UK region selectable on Business and Enterprise tiers
FileSeal, at a glance
- Primary job: one-time client document exchange, in both send and request directions
- Recipient account: never required; the client just clicks a link
- Link behaviour: one-time download, with automatic deletion after collection
- Encryption: client-side AES-GCM-256 before anything leaves the device
- Data residency: UK and EU hosting
Note the absence of headline storage allowances and seat counts on the FileSeal side. That is not an oversight; it reflects the job. You are not buying a place to keep files. You are buying a clean, single-use channel to move a document and then have it gone.
So Which Should You Choose?
The honest recommendation depends entirely on the shape of your work, and for many firms the answer is “both, for different things.”
Choose Tresorit if your dominant need is a secure, encrypted home where a team logs in regularly to store and collaborate on files, run data rooms, and sign documents inside one subscription platform. It is built for exactly that and does it well.
Choose a purpose-built one-time exchange tool such as FileSeal if your dominant need is moving sensitive documents to and from clients who should never have to create an account, where the link should work once, the file should delete itself afterwards, and UK or EU residency is the default rather than a setting you upgrade for. If you mostly request and send, rather than store and collaborate, that is the tool that fits the job.
Need one-time client exchange, not another storage subscription?
FileSeal is built for the single job of exchanging sensitive documents with clients: client-side encryption, no recipient account, one-time download, automatic deletion, and both send and request flows. Your client just clicks a link.
No credit card required. UK and EU hosting from day one.
Frequently Asked Questions
Is Tresorit a good alternative for one-time client document sharing?
Tresorit is an excellent end-to-end encrypted platform, but it is built primarily as a subscription cloud storage and team collaboration service rather than a one-off exchange tool. For occasional one-time client document exchange, a tool purpose-built for that single job often fits better: no recipient account, UK data residency by default, a one-time download link and automatic deletion after collection. Tresorit Send covers some of this, but the wider Tresorit product is account-based and oriented to ongoing storage.
Does Tresorit store UK client data in the UK?
Not by default. Tresorit states that customers without a Data Residency Option are automatically assigned to data centres in Ireland, and the ability to choose a region such as the United Kingdom or Switzerland is available only for Business and Enterprise customers. If guaranteed UK data residency matters to your firm, you either need a higher Tresorit tier or a provider that keeps UK or EU residency as the default.
Do recipients need a Tresorit account to receive files?
For the main Tresorit platform, sharing typically happens inside the account-based system. Tresorit Send, its standalone end-to-end encrypted sharing service, lets recipients receive files without a Tresorit account and is usable without registration. So no-account receiving is possible through Send specifically, while the core collaboration product is built around accounts and ongoing storage.
The right tool for the right job
Tresorit for team storage. FileSeal for one-time client exchange: no recipient account, one-time download, auto-delete, UK and EU hosting.
Written by the FileSeal security and compliance team. We specialise in document security, GDPR compliance, and data protection for UK professionals. Our guides are reviewed by industry practitioners and updated regularly.
