Dropbox
Your own published record, as at 2026-08-11.
Your Details
The Macro Picture34
What Is Published8
Your Own Words3
When it comes to third country transfers from Dropbox to affiliated and third-party subprocessors, Dropbox indicated that it relies on the appropriate data transfer safeguards as provided by Chapter V GDPR. The Monitoring Body received information confirming that Dropbox relies on Adequacy Decisions and Standard Contractual Clauses ("SCCs"), of which the latter applies overarchingly. Details on the technical, organisational and contractual measures put in place to safeguard international data transfers were also provided to the Monitoring Body.
When transferring data from the European Union, the European Economic Area, the United Kingdom and Switzerland, Dropbox relies upon a variety of legal mechanisms, such as contracts with our customers and affiliates, Standard Contractual Clauses, the EU-US Data Privacy Framework, the UK Extension to the EU-US Data Privacy Framework, the Swiss-US Data Privacy Framework and the European Commission's adequacy decisions about certain countries, as applicable.
If you use Dash Answers, we may manually review questions you ask and the responses you receive. If we determine that nonsensical or unhelpful answers are being provided, we may then modify the machine learning models that power Answers to eliminate or reduce unhelpful and incorrect answers.
Parties You Name12
Register Check3
AI Role By Offering2
Assessment Basis
Produced under Method v1.6 from the entity's fact record. 8 of 8 observations were measured under that generation; the rest read Not Measured, which is a fact about this register's coverage and not a finding about the entity.
Read from 24 first-party surface(s) across 2 assessed offering(s), found by the entity's own link graph and sitemap rather than by guessed paths.
- Fact Record
- Version 1.0, dated 2026-08-11
- Standards Commit
- 66058de9d9a2
- Register Control Quality
- Both Views
Verification And Challenge
Every finding on this record is a statement about what could be read on your own published surfaces as at 2026-08-11. Correspondence route as recorded on this card input: ror@blacksnowintel.com.
What A Machine Could Not Establish2
2 questions are open and 6 are established, read as at 2026-08-11 under method v1.6.
Publish it: say whether customer data is used to train AI models.
Training Exclusion Instrument: None
Where To Put It
This was read on your own page at https://help.dropbox.com/accounts-billing/security/privacy-policy-faq. That is the page a reader already reaches for and does not find it on, so it is the page to correct first.
Where Others Stand
24 organisations in the register say whether customer data is used to train AI models. You do not.
What A Published Answer Looks Like
We will not use your data to train our AI or language models. We will not store your data except for the purpose of providing you with access to our platform and to the AI Functionality.
A question answered plainly in public, by an organisation read as Strong on it. It is not an endorsement of the position the sentence states — Black Snow reads what is published and never recommends what to practise. Read on published terms. Claim tier Quoted. The organisation that published it is not named. A name in the original is replaced; nothing else in the sentence is changed.
One is named here, and one is deliberate. The rest of the open questions are listed below without a prescription; what to publish for each, in what order, and drafted machine-readable evidence for all of them, is the Deep Dive.
Still Open
Deep Dive
The full assessment, plus consulting on what to fix.