​If file sharing security and privacy are major concerns, you’ve come to the right place: Tresorit delivers total end-to-end encryption. Its zero-knowledge policy means all data is encrypted client-side, in transit, and on Tresorit’s cloud servers, with no encryption keys or passwords stored anywhere in unencrypted form, meaning that only you have access.

Tresorit offers a wide choice of plans for individuals and businesses, and we tried out the Business Plus plan which costs £13 per user per month if paid yearly. This is a great choice if you’re sharing very large files as the maximum single file size is 15GB, and although you don’t get the unlimited cloud storage offered by some competitors, 2TB per user should be enough for most SMBs.

The Business Plus plan brings a lot more into play as along with file sharing, syncing, user and group management plus Outlook integration, it enables custom portal branding, access audit logs, and an unlimited file version history. Businesses that need to keep their data in one country for compliance reasons can also choose from 11 global data centre locations.

Deployment is undemanding as invitations are mailed out from the Admin Center cloud portal and when a user clicks on the link, they can create an account and choose a password. Obviously, users shouldn’t forget this but, with the Advanced Control option enabled in the portal, administrators can perform password resets.

Users are also invited to download the desktop app which, on completion, will create a personal ‘Tresor’ – Tresorit’s name for a secure, encrypted folder. They can add an unlimited number of Tresors up to their storage limit and for swift access, the desktop app creates a Windows Explorer drive mapping or a Finder favorites folder for macOS.

Tresors can be shared by selecting team members from the desktop app contact list and deciding whether they can manage, edit or view them. These functions are also available from the user’s personal web portal which now allows multiple folders to be selected and offers previews of Office documents and PDFs.

There are plenty of ways to securely share files with outside partners and contractors that don’t have a Tresorit account. From the desktop app, you can create a web link or send them directly from any installed email app with the Outlook plug-in adding extra controls such as link expiry dates, download limits, password protection, access logging, and a requirement for recipients to verify their email addresses.

You can also use Tresorit on the move, as the iOS and Android mobile apps provide many of the features in the desktop app. We loved their built-in scanning functions; we used an iPad to take photos of documents, scan them as JPEGs or PDFs, encrypt them, and send them straight to a selected cloud folder.

Tresorit clearly takes security very seriously, and policies created in the Admin Center portal control everything users are allowed to do. These determine what devices they can access their account from, you can stop browsers from storing their login details and apply IP filtering to block access from specific locations.

You can choose which users are allowed to create file links, set login session limits in days, deny them personal Tresors and disable downloads so users can only view files in shared links. Policies can enforce 2-step verification and Tresorit has now added support for SSO (single sign-on) authentication using Azure Active Directory and Okta.

Tresorit may be a little light on collaboration tools but it’s very heavy on security. Affordable and easy to deploy, it’s an ideal choice for SMBs sharing sensitive and confidential information.