Tresorit Due Diligence

Switzerland · tresorit.com · 23 vendors

Resilience scores

Technology vendors

Services catalogue

2 services in catalogue across 2 categories; runs on 23 sub-vendors.

Insights

Last updated 2026-10-25 · revision 1

23 direct vendors, 315 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

11 in-scope frameworks identified; showing 3.

FINRA — Evidence found

Tresorit provides services to broker-dealer firms in the US that are subject to FINRA regulations.

Evidence: https://tresorit.com/blog/end-to-end-encryption-leads-to-security-in-securities, https://tresorit.com/business/secure-collaboration-for-financial-services-institutions, https://tresorit.com/blog/securing-success-how-tresorits-data-rooms-revolutionize-collaboration-in-finance, https://support.tresorit.com/hc/en-us/articles/216113777-What-is-Tresorit, https://tresorit.com/compliance

GDPR (source) — Evidence found

Tresorit has offices in Germany and Hungary and processes the personal data of individuals in the EU.

Evidence: https://tresorit.com/gdpr, https://tresorit.com/security, https://tresorit.com/blog/virtual-data-rooms-protecting-data-with-ease, https://support.tresorit.com/hc/en-us/articles/360017472540-Service-and-data-storage-locations, https://tresorit.com/contact, https://pitchbook.com/profiles/company/58034-80

ISO 27001 (source) — Evidence found

Tresorit's customers in regulated industries expect adherence to internationally recognized information security standards.

Evidence: https://tresorit.com/security, https://tresorit.com/blog/tresorit-receives-iso-27001-certification, https://tresorit.com/blog/tresorit-successfully-passes-iso-270012022-surveillance-audit-reinforcing-commitment-to-continuous-security-excellence, https://support.tresorit.com/hc/en-us/articles/360012204353-Tresorit-ISO-compliance, https://tresorit.com/resources/downloads/security-measures-for-company-personal-data?hs_amp=true, https://tresorit.com/resources/downloads/security-measures-for-company-personal-data

Financials

Three-year financials

Financial Resilience Score: 7/10

Tresorit demonstrates solid financial resilience based on the Hungarian operating entity's filed accounts. The company swung from a HUF 230M loss in FY2023 to a small profit in FY2024 and a solid HUF 223M net profit in FY2025 (margin ~3.8% on total revenue), demonstrating improving operating leverage. Revenue grew approximately 53% from FY2023 to FY2025, showing renewed double-digit growth after a 2021 integration dip. The balance sheet is notably strong, with FY2025 equity of HUF 3.9B against short-term liabilities of only HUF 561M and zero long-term debt across all three reported years. The company benefits from a sovereign-adjacent parent in Swiss Post, a state-owned entity providing stable long-term shareholder support. The SaaS subscription model with over 10,000 enterprise customers in sticky verticals (legal, healthcare, finance) provides recurring revenue predictability. However, the company remains small in absolute scale (group revenue approximately USD 14-48M depending on source) and faces competition from much larger players like Microsoft, Google, Dropbox, and Box. The high fixed-asset intensity (85-90% of total assets) exposes the entity to impairment risk if growth slows, and the company lacks independent capital markets access, being fully dependent on its parent for strategic funding.

Key strengths: Return to profitability with HUF 223M net profit in FY2025 after FY2023 loss, Strong equity cushion of HUF 3.9B with zero long-term debt, Backed by state-owned Swiss Post providing stable long-term shareholder, Scalable SaaS subscription model serving 10,000+ enterprise customers, Revenue grew ~53% from FY2023 to FY2025, Featured on FT1000 as fifth fastest-growing cybersecurity company in Europe

Risk factors: Small absolute scale versus Microsoft, Google, Dropbox, Box competitors, Thin margins and recent loss history (FY2023), High fixed-asset intensity (~85-90% of total assets) with impairment risk, No independent capital markets access, dependent on parent for funding, Regulatory/data-sovereignty risk tied to Swiss adequacy status under GDPR, No consolidated group accounts published publicly

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report