2022

Dropbox

Impact Fact SheetTable of Contents
A message from our CEO

3

About this report

6

ESG at Dropbox

9

Protecting our users

14

Putting people first

16

Acting with integrity

23

Owning our impact

26

Appendices31

2

A message

from our CEO

3

Dear colleagues, customers, investors, and partners: 

At Dropbox, we’re committed to building a sustainable business that creates long-term value. In 2022, we
continued to make progress executing against our impact initiatives. Over the past year, we have reduced
our carbon footprint and have continued to invest in our employee-focused programs and initiatives. 

2022 marked our second full year as a Virtual First company, and we’re pleased with how it’s progressing so
far. Since our employees’ work experience is primarily remote, we now measure work-from-home (WFH)
emissions, and we’re proud that we have achieved carbon neutrality for our Scope 1, Scope 2, and Scope 3
business travel emissions, as well as our WFH emissions, in 2022. We’ve also sourced 100% renewableelectricity for our operations, including our co-located data centers, in 2022. And I’m especially proud that
we have achieved these goals eight years ahead of our pledge to complete them by 2030. 

We continue to work against our three multi-year commitments to promote diversity and inclusivity within
our organization: building a diverse and inclusive team, developing and advancing equitably, and helping
employees engage in personal growth. We believe that diversity–in backgrounds, experiences, andperspectives–makes us stronger as a company and always strive to be inclusive to all. 

Finally, we’ve believed for many years in the potential for artificial intelligence (AI) to completely transformknowledge work. Our customers have told us how challenging it is to stay organized and find what theyneed to do their best work amidst an overwhelming amount of content, apps, and tabs. We recently
introduced a new generation of personalized AI-powered experiences, Dropbox Dash, our AI-powered
universal search product, and Dropbox AI, in Dropbox to improve our customers' working lives and offer amore focused, efficient, and productive workday. 

At the same time, we recognize the deep responsibility that comes with applying new technology like thison behalf of our customers. To “be worthy of trust” has long been at the center of everything we do at
Dropbox, and in this next era of AI, it’s critical that we hold ourselves accountable in protecting ourcustomers’ privacy, championing fairness, and acting transparently. We published a set of AI Principles toguide our teams as we develop AI products and features responsibly in the years to come.

4

As we expand our use of AI, we’re also mindful of the significant energy consumption required to power
this technology. To address this, we’ll continue to focus on renewable energy sources for our data
centers and will remain transparent about our progress. 

We firmly believe that by prioritizing sustainability, and investing in responsible AI and renewableenergy, we’re building a stronger, more sustainable business that is well positioned to deliver long-termvalue for all our stakeholders.

Thank you for your continued support.

Sincerely,

Drew Houston

CEO and Co-founder, Dropbox"We firmly believe that byprioritizing impact, andinvesting in responsible AI andrenewable energy, we'rebuilding a stronger, moresustainable business that is well
positioned to deliver long-termvalue for all our stakeholders."-Drew Houston
5About this report

6The 2022 Impact Fact Sheet summarizes someof Dropbox’s key environmental, social, andgovernance (ESG) programs and issues, with
updates on our ESG progress andachievements from 2022. We plan to publish afull impact report every other year. For more
information, please visit www.dropbox.com/esg.

Reporting period and boundary
This fact sheet includes information fromJanuary 1, 2022, through December 31, 2022,
unless otherwise indicated. Data in this fact
sheet reflects the activities of Dropbox, Inc. andits wholly owned subsidiaries.

Reporting frameworks

External assurance

The contents of this fact sheet are informed by

Dropbox engaged Ernst & Young LLP (EY) to

our ESG priority assessment, which was

perform an independent review of select ESG

informed by leading sustainability reporting

metrics, including Scope 1, Scope 2 and Scope

standards and frameworks including the Global

3 Category 6 greenhouse gas (GHG) emissions

Reporting Initiative. Our ESG reporting isand select diversity-related metrics. A copy ofaligned with the Sustainability Accounting

the Independent Accountants' Review Report,

Standards Board (SASB) standards. Dropbox isincluding a schedule of reviewed metrics, canalso a signatory of the UN Global Compact

be found in Appendix C.

(UNGC), and this report also serves as our
UNGC Communication on Progress.

7

Forward-looking statements and materiality disclaimer
Certain statements in this report constitute “forward-looking statements,” which are made pursuant to thesafe-harbor provisions of Section 21E of the Securities Exchange Act of 1934 and other federal securities laws.
These statements are based on management’s opinions, expectations, beliefs, plans, objectives, assumptions,or projections regarding future events or results as of the date of this report, including, but not limited to, our
ESG commitments, strategies, initiatives, and goals, and the impact of those commitments, strategies,
initiatives, and goals on our business; our business plans and strategy; our business operations; ourtechnology and services; our opportunities for growth; and our stakeholder engagement efforts. These
forward-looking statements are only predictions, not historical facts, and involve certain risks anduncertainties, as well as assumptions. Actual results, levels of activity, performance, achievements, and events
could differ materially from those stated, anticipated, or implied, by such forward-looking statements. While
Dropbox believes that its assumptions are reasonable, there are many risks and uncertainties that could cause
actual results to differ materially from forward-looking statements, including the risks discussed under theheading “Risk Factors” in our Annual Report on Form 10-K for the year ended December 31, 2022, filed with
the U.S. Securities and Exchange Commission (SEC) as well as other factors described in our filings with theSEC. Dropbox undertakes no obligation to update or revise any forward-looking statement contained in thisreport, except as otherwise required by law.  
While Dropbox believes that our ESG goals and initiatives are important, we currently do not believe that our
ESG goals, initiatives, or risks are material to our financial results and results of operations, except to theextent referenced in our annual report on Form 10-K and subsequent 10-Q filings. This report also contains
human capital measures or objectives that may be different from or are in addition to the human capital
measures or objectives that Dropbox is required to disclose in its U.S. SEC filings. For a discussion on humancapital measures or objectives that Dropbox focuses on in managing its business, please see the “Human
Capital” section in our most recent annual report on Form 10-K.

Acknowledgements
Thank you to the external partners who helped Dropbox develop this Fact Sheet
Orrick Herrington & Sutcliffe LL
Persefon
WSP
8ESG at Dropbox
ESG highlights

10

Our ESG priorities

11

ESG commitments

129Environmental highlights
Developed our Deep Sleep technology,
which was critical in lowering our electricity
usage by an estimated 5.1 million kilowatt
hours in our data centers in 2022.
Sourced 100% renewable energy for thesecond year in a row.2,
Achieved carbon neutrality for Scope 1,
Scope 2 (market-based), and Scope 3
business-travel emissions and work-fromhome (WFH) emissions.4,5Social highlights
Expanded our fertility and family formation
benefits internationally to support
employees trying to grow their families
Launched a new mandatory leadershipdevelopment program for all managers
called “High Impact Leadership” to help
foster a culture focused on ownership andaccountability for results
Saw an increase of 91.5% in employee
volunteer hours from 2021.6

Governance highlights 
Published our inaugural ESG Impact Reportin 2022
Expanded the Office of the Data Protection
Officer.

1 For more information on Deep Sleep technology, please see Appendix C.

2 For more information on our renewable energy goal, see Appendix C.

3 For more information on our data center infrastructure, see Appendix C.

4 For information on the methodology used to estimate WFH emissions, see Appendix C.

5 We purchased an equivalent quantity of carbon credits to neutralize Scope 1 and Scope 3 category 6 emissions.

6 This increase is attributed to an increase of in-person events following the COVID-19 pandemic, as well as a strategic focus toincrease volunteer hours for climate-related nonprofits.

10Our ESG priorities
In 2021, Dropbox conducted an ESG priority topic assessment and identified 12 ESG priority topics(listed below). Based on these 12 priority topics, we established four key impact areas in 20227:
protecting our users, putting people first, acting with integrity, and owning our impact. For detailed
information about our approach to each of these topics, please read our 2021 ESG Impact Report.

Impact areas

Priority topics

Protecting our users

Privacy and data securit
Product responsibility and data ethics

Putting people first

Talent attraction and engagemen
Employee health, safety, and well-bein
Diversity, equity, and inclusio
Equal pay and wage ga
Accessibility

Acting with integrity

Business ethics and integrit
Human and labor right
Risk management

Owning our impact

IT infrastructure sustainabilit
Energy, emissions, and climate

This fact sheet includes an update on our recent progress for certain ESG priorities. For detailed information
about our approach to each of these topics, please read our 2021 ESG Impact Report.

7 In 2022, we updated the titles and groupings of our ESG impact areas and priority topics to organize the information more clearly andconcisely for ease of understanding. The content and topics we prioritize substantively remain the same.

11

ESG commitments
Sustainability goals
In 2020, we set the following sustainability
goals to be completed by 2030. And weachieved each of them in 2022.
Achieved carbon neutrality for Scope 1 andScope 2 (market-based) emissions, as wellas Scope 3 business travel emissions and
WFH emissions
Sourced 100% renewable energy for
operations, including data centers
Supported organizations working forclimate action, such as the Environmental
Justice Foundation and Surfrider
Foundation.
Mobilized employees to use volunteer time
off for environmental causes.
We regularly review our sustainability goals and our progress towards those goals, so we may update oursustainability goals in the future to reflect developments in our ESG program and strategy.

We’re happy to report that we achieved all four of
our Sustainability Goals in 2022, eight years aheadof schedule!

8 We support the Environmental Justice Foundation and the Surfrider Foundation through our partner, the Dropbox Foundation, andemployee gift matching.

12Diversity, equity, andinclusion goals

We continue to work toward our three multi-year
commitments to promote diversity and inclusivity
within our organization
Continue building a diverse and inclusive teamDevelop and advance equitably
Engage in personal growth.

You can read about our progress towards thesecommitments in our 2022 Diversity Report.

Expanding our carbon neutrality goal
Dropbox became a Virtual First9 company in 2021, a move that positioned us asearly adopters of remote work. Just as we've iterated on Virtual First over theyears to ensure we're continuing to set our employees up for success, we also
want to make sure our operating model aligns with our ESG priorities. In 2022,
we expanded our carbon neutrality goal to cover GHG emissions associatedwith virtual work. We're proud to announce that we neutralized all our estimated
WFH emissions using carbon offsets and removals in 2022.

9 At Dropbox, “Virtual First” means that remote work is the primary experience for Dropbox employees. This does not mean Dropbox has no
office: we have Dropbox Studios, which are flexible spaces that can be used for occasional in-person collaboration, meetings, and events,and on-demand workspaces through third-parties.

13

Protecting our users
Data privacy, security, and reliability

15

14

Data privacy,
security, andreliability
Our number one value at Dropbox is “Be worthyof trust,” and we don’t take that lightly. We
believe it’s vital that data, teams, and devices
are protected wherever they are. At the core of
all our products is our comprehensive security,
compliance, and privacy program—the Dropbox
Trust Program. Our program is constantly
evolving to respond to market changes and newchallenges. Up-to-date resources regarding
compliance with security, data storage, andprivacy standards and regulations are available
on our website.  
Our Privacy Policy describes the handling andprotection of user information, including how
we collect, use, and store your personal datawhen you use Dropbox services.  

Evolving our approach
We’re continuously improving our approach tocompliance, security, privacy, and data protection.
A few of our achievements from 2022 are included
below
Achieved adherence to the EU Cloud Code of
Conduct for Dropbox Business
Created a new Privacy Engineering teamdedicated to building out privacy related
technical controls and capabilities
Implemented a global right to opt-out of sharing
personal information for targeted advertising
purposes
Made ransomware detection available tocustomers on Dropbox Advanced, Dropbox
Enterprise, and Dropbox Standard with Dropbox
Security add-on, which helps prevent malicious
ransomware attacks from spreading bydetecting suspicious activity early.

More information about our approach to data
privacy, security, and reliability is also available
in our 2021 ESG Impact Report, Privacy andData Protection whitepaper, Dropbox Business
Security Whitepaper, Acceptable Use Policy(AUP), biannual Transparency at Dropbox
report, and Guiding Principles for responding togovernment data requests.

15

Putting people first
Talent attraction and engagement

17

Diversity, equity, and inclusion

18

Health, safety, and wellbeing 20

Social impact

21

16

Talent attractionand engagement
We want all employees to grow, develop, andthrive in their careers at Dropbox. Moreinformation about our talent attraction andengagement is available below and on our
employee perks webpage.

Measuring employee
engagement at Dropbox

Twice a year, we conduct an employee
engagement survey called “Soapbox” which
provides employees and company leaders witha formal channel for submitting feedback on
what’s going well and where we need to
improve. In 2022, 91% of employees
responded to the Soapbox survey. We alsoreached record-high positive scores on our
employee engagement survey, with employees
citing that Virtual First has contributed tobetter engagement, productivity, effectiveness,
and wellbeing.

Designing an impactful
workforce

In 2022, weDeveloped a new hiring philosophy—The
Dropbox Way—composed of six hiring
principles to drive a culture of hiring highimpact talent, which are: work with thebest, hire equitably, assess with purpose,
invest in success, treat candidates likecustomers, and Dropbox delivers
Launched a “High Impact Leadership”
program to help foster a culture with alaser-focus on ownership andaccountability for results and driving theright outcomes for our business.
17

Diversity, equity,and inclusion
We strive to cultivate a community that is
authentic, inclusive, and connected. Moreinformation about our approach to diversity,
equity, and inclusion is available in our 2021
ESG Impact Report, Diversity at Dropbox
webpage, and 2022 Diversity Report.

Representation of Women at Dropbox1010

DropboxLeadershipManagers

39%

44%

43%

Non-tech

Tech

54%

28%

For more information on how Dropbox defines certain Diversity terminology, please see Appendix C.

18

US Ethnicity at Dropbox11

11 For more information on how Dropbox defines
certain Diversity terminology, please see Appendix C.

19

Health, safety,
and wellbeing
In April 2021, we transitioned to a Virtual First
operating model in which remote work is theprimary experience for employees. As part ofthis, we committed to maintaining a learning
mindset and sharing our findings as we go.

In that spirit, we conducted our first ever Life in
Virtual First survey in Summer 2022, where we
asked Dropbox employees about theirexperience in Virtual First and what tools theyneeded to be successful. Through this we found
93% of respondents to the survey agreed thatthey can effectively work from home. The full
results, which gave us valuable, encouraging
insights about our pivot to Virtual First, areshared in this blog post. It’s our hope that theinsights gathered may provide additional
guidance to individuals and companies looking
to continue to optimize their hybrid or remote
work experience.

More information about our approach to health,safety, and wellbeing is available in our 2021
ESG Impact Report.

12 These are US benefits. Across the globe, we provide
financial and wellness benefits in the context of what isrelevant and beneficial locally.

Holistic wellness
Our benefits include medical,
dental, and vision plans,
retirement planning and 401k
programs, life and disability
coverage, and coaching andtherapy options offered throughModern Health.1220

Social impact

At Dropbox, we’re committed to leveraging ourpeople, products, and resources for good, which
we believe positively contributes to our work
culture and helps us recruit and retain talented
employees.

2022 highlights

Increased employee
volunteer hours by 91.5%.

Began our third apprenticeshipprogram in partnership with Next
Chapter, an organization creating amore equitable workplace forformerly incarcerated individuals.13

Hosted three global Impact
Days—dedicated time toempower employees to give backto their communities

13 Our third cohort of Next Chapter apprentices completed
the program in July 2023.

21

Dropbox for Good

Dropbox for Good is an employee-led group that encourages people to use their skills and time to serve
their communities. We provide 32 hours of volunteer time off per year to all full-time employees, allow all
full-time employees to donate our products to nonprofits annually, and offer charitable gift matching of
employee donations up to $2,000 per year per full-time employee.

At a glance­—Dropbox for Good

2021

2022

Hours of employee volunteer time

1,910

3,657

Employee donations and corporate gift matching14 (USD)

$1.7M

$1.6M

Dropbox Foundation

We partner with the Dropbox Foundation,
which provides unrestricted grants for up to
three years and empowers Dropbox employees
to give back through skills-based volunteering.
As of December 31, 2022, the Dropbox
Foundation had donated over $5 million tohuman rights organizations since 2018.

You can read about some of the skills-based
volunteering projects our employees worked on
during our 2022 Hack Week in this blog post.

14 These amounts are rounded to the nearest hundred thousand dollars.

22

Acting with integrity
Business ethics and integrity

24

Corporate governance25

23

Business ethics
and integrity
We’re not just changing the way people work,
we’re designing a more enlightened way ofworking—and that starts from within.

Our Worldwide Code of Business Conduct andEthics (Code of Conduct) is designed to deter
wrongdoing and promote integrity, honesty,
compliance with laws, rules, and regulations,fiscal responsibility, and accountability. Our Codeof Conduct, which has been adopted by ourboard, applies to all our employees, officers,
contingent workers, and directors and is reviewed
annually and updated as necessary. Our Audit
Committee is responsible for reviewing andmonitoring compliance with the Code of Conduct.

Our employees are required to complete anannual code of conduct training, in addition toannual information security and privacy trainings.
In 2022, 99% of full-time employees completed
these trainings. Employees are also required tocomply with our information security and privacy
policies, which are reviewed and updated
annually.

More information about our approach to businessethics and integrity is also available in our 2021
ESG Impact Report, FCPA and Anti-Bribery
Policy, and Supplier Code of Conduct.

24

Corporate governance
At Dropbox, we’re committed to strong corporate governance to support our mission of designing a moreenlightened way of working. More information about our approach to corporate governance is available
in our 2021 ESG Impact Report, 2022 Proxy Statement, and Corporate Governance webpage.

ESG governance and oversight
In May 2022, our company’s board of directors
delegated oversight of Dropbox’s ESG
activities, programs, and disclosures to its
Nominating and Corporate Governancecommittee. The board also delegated oversightof Dropbox’s human capital management
activities to its Talent and Compensationcommittee. Additionally, the Audit Committee
oversees initiatives related to our operational

infrastructure, particularly reliability, business
continuity, cybersecurity, and data privacy, as
well as our enterprise-risk management
program, which is further described in the“Role of Board in Risk Oversight Process” inour 2021 ESG Impact Report.  
More information about our approach to ESG
governance and oversight is also available inour 2021 ESG Impact Report.

Director tenure

Director independence

11
7 of 8

Director nominees
who areindependent

2

5 years

Average tenure of
director nominees

5

7
Independent< 5 Years

Non-independent

5-9 Years
9+ Years
25

Board diversity matrix (as of March 23, 2023)(15)8

Directors
FemaleMale

3

5

Non-binary

Did not disclose

genderGender identity
Directors

Number of Directors who identify in any of the categories below

1

African American or Black
Alaskan Native or Native American
Asian

1

1

2

3

Hispanic or Latinx
Native Hawaiian or Pacific IslanderWhite
Two or More Races or Ethnicities
LGBTQ+
Did not disclose demographic

background

15 The board diversity matrix above presents our board’s diversity statistics in the format prescribed by the Nasdaq rules.

26

Owning our impact
Energy28

Emissions30

Electronic waste30

27

Energy
Dropbox relies on data centers to run ourbusiness, and electricity use is one of thelargest causes of our GHG emissions. Proper
energy management is an importantcomponent of operating our business in asustainable and responsible manner. Moreinformation about our approach to managing
our energy use is available in theEnvironmental section of our 2021 ESG
Impact ReportElectricity Conservation
through our Deep Sleep
Technology
Our innovative and automated Deep Sleep
technology played a critical role in lowering
energy usage by an estimated 5.1 million
kilowatt hours in our data centers in 2022.

Deep Sleep technology optimizes server usage
by allowing idle servers to automatically entera low-power mode, reducing energy
consumption without affecting performance.
As a result, data centers using this automatedtechnology significantly decrease their energy
footprint and utility costs.
28

Electricity use(MWh)200,000
180,000
14,9078,520

160,000
140,000
120,000

7,906

4,347

100,000
80,000167,659

167,579

126,447

121,335

2019

2020

2021

2022

60,00040,00020,0000Corporate offices

Data centers

Data center power usage
effectiveness (PUE) benchmark
1.8
1.59

1.6

1.53

1.4
1.27
1.2

1.32
1.2

1.2

1.18
1.1

1.1

Google

Meta

1.0

0.8

0.6

0.4

0.2

0
Dropbox 2019 Dropbox 2020 Dropbox 2021

Dropbox 2022

Microsoft

IBM

Global Average

29

Emissions
Dropbox measures direct and indirect GHG emissions from energy consumption in our facilities and ourdata centers, and fugitive emissions from refrigerants—Scope 1 and Scope 2 GHG emissions. We alsomeasure Scope 3 GHG emissions from business travel and WFH emissions. More information about ourapproach to managing our GHG emissions is available in our 2021 ESG Impact Report.

GHG emissions
2019

mtCO2e2020

mtCO2e2021

mtCO2e2022

mtCO2eScope 1

773

1,623

1,053

768

Scope 2 (market-based)

54,72953,53300

Scope 3 business travel

5,113

41916

4117

1,687

Electronic waste
Maintaining resource efficiency and reliability
in our data centers requires periodic upgrades
to IT hardware. We take our responsibility
seriously to do our best to dispose of
decommissioned hardware responsibly. We
also do our best to resell IT hardware whenpossible because it extends the lifespan of theequipment, promotes resource conservation,
and allows for economic value recovery. Moreinformation about our approach to managing
e-waste is available in our 2021 ESG Impact
Report.

E-waste generated: resold vs. recycled servers(short tons)
1000
900
800
700
600
500
400
300
200
100
0

351 (37%)

116 (10%)596 (63%)371 (90%)2021
IT components resold2022
IT components recycled

16 Our Scope 3 business travel emissions decreased significantly between 2019 and 2021 due in large part to a reduction in businesstravel due to the COVID-19 Pandemic.

17 Our Scope 3 business travel emissions remained low in 2021 due in large part to a reduction in business travel due to the COVID-19
Pandemic.

30

Appendix
Appendix A

32

Appendix B

36

Appendix C

38

31

Appendix A

SASB index

SASB Software & IT Services Standard 2018

Code

Accounting metricResponse

Environmental footprint of hardware infrastructure

TC-SI-130a.1(1) Total energy

In 2022, our data centers consumed 436,806 gigajoules

consumed, (2)(GJ) of electricity. 100% was grid electricity, and 100%

percentage gridof co-located data-center direct IT load was renewableelectricity, (3)through purchase of RECs.

percentage renewable
See the Environmental section of our 2021 ESG Impact
Report or the Owning our Impact section of this Impact
Fact Sheet for more information.

TC-SI-130a.2(1) Total water

In 2022, our data centers withdrew 76,515 cubic meters

withdrawn, (2) totalof water. The water was used for cooling in a closed-water consumed,

loop process, so no water was consumed. 3.07% ofpercentage of each inthese withdrawals occurred in areas identified by theregions with High orWorld Resources Institute as having high or extremely

Extremely Highhigh baseline water stress.

Baseline Water Stress

TC-SI-130a.3

Discussion of theenvironmental

Dropbox is focused on reducing energy consumption atits data centers by maintaining excellent PUE,
optimizing overall power consumption, and sourcing

considerations into

100% renewable electricity for its direct data-center IT

strategic planning forload. See the Environmental section of our 2021 ESG

data center needs

Impact Report or the Owning our Impact section of thisintegration of

Impact Fact Sheet for more information.

32

Data privacy and freedom of expression
TC-SI-220a.1

Description of policies
and practices relating tobehavioral advertisingand user privacy

See the Data Privacy, Security, and Reliability section of
our 2021 ESG Impact Report and the Privacy Policy.

TC-SI-220a.2

Number of users whose
information is used forsecondary purposes

Dropbox does not sell user data and does not makemoney from advertising. See the What & Why section of
our Privacy Policy for more information.

TC-SI-220a.3

Total amount ofmonetary losses as aresult of legal
proceedings associatedwith user privacy

In 2022, we did not have any material monetary losses
as a result of legal proceedings associated with user
privacy. When public disclosure criteria are met,monetary losses as a result of legal proceedings areincluded in our Form 10-K.

TC-SI-220a.4(1) Number of law
enforcement requests
for user information, (2)number of users whose
information was
requested, (3)percentage resulting in
disclosure

See our Transparency at Dropbox reports for information
about how we handle requests from law enforcement.

TC-SI-220a.5

List of countries where
core products or services
are subject togovernment required
monitoring, blocking,content filtering, or
censoring

Dropbox believes that government data requests should
be limited in the information they seek and narrowly
tailored to specific people and legitimate investigations.
In accordance with our Privacy Policy, Dropbox may
disclose user information to third parties only if wedetermine that such disclosure is reasonably necessary.
We abide by specific guiding principles when receiving,
scrutinizing, and responding to government (including
national security) requests for user data.

33

Data security
TC-SI-230a.1(1) Number of data

We did not experience any material data breaches inbreaches, (2) percentage

2022. When public disclosure criteria are met,

involving personallymaterial data breaches are included in our securities

identifiable information,filings.

(3) number of users
affected

TC-SI-230a.2

Description of approach

See the Data privacy, security, and reliability section of

to identifying andour 2021 ESG Impact Report and the Privacy Policy.

addressing data security
risks, including use ofthird-party cybersecurity
standards

Recruiting and managing a global, diverse, and skilled workforce
TC-SI-330a.1

Percentage of(1) Not reported (2) 14% of employees are locatedemployees that are (1)offshore.

foreign nationals and (2)located offshore

TC-SI-330a.2

Employee engagement

In 2022, 91% of Dropbox employees responded to ouras a percentage

engagement surveys. Known internally as “Soapbox,”
the exercise is designed to provide employees andcompany leaders with a formal channel for submitting
feedback on what’s going well and where we need to
improve.

TC-SI-330a.3

Percentage of gender

See the Putting People First section of this Impact

and racial/ethnic group

Fact Sheet and the Diversity, Equity, and Inclusion

representation for (1)section of our 2021 ESG Impact Report.

management, (2)technical staff, and (3) allother employees

34

Intellectual property protection and competitive behavior
TC-SI-520a.1

Total amount ofmonetary losses as aresult of legal
proceedings associatedwith anticompetitive
behavior regulations

In 2022, we did not have any material monetary losses
as a result of legal proceedings associated with
anticompetitive behavior regulations. When public
disclosure criteria are met, monetary losses as a resultof legal proceedings are included in our Form 10-K.

Managing systemic risks from technology disruptions
TC-SI-550a.1

Number of (1)performance issues and(2) service disruptions;(3) total customer
downtime

In 2022, Dropbox experienced three performance issues
and zero service disruptions, for a total of 64 minutes ofcustomer downtime.

TC-SI-550a.2

Description of business
continuity risks related
to disruptions ofoperations

See the Data Privacy, Security, and Reliability section of
our 2021 ESG Impact Report, page 19 of our 2022 Form
10-K, and our SOC 3 report.

35

Appendix B
Performance data tables
Due to rounding, numbers presented throughout the tables below may not add up precisely to the totals
provided, and percentages may not precisely reflect the absolute figures.

Greenhouse gas (GHG) emissions1

Total GHG emissions (mtCO2 e)

2019

2020

2021

2022

Scope 1

773

1,623

1,053

768

Scope 2 (location-based)

54,60253,414

37,10636,948

Scope 2 (market-based)

54,72953,53300

Scope 3 (business travel)

5,113

419

41

1,687

Total reported emissions (location-based)

60,48955,45638,20039,403

Total reported emissions (market-based)

60,61655,575

1,094

2,455

0

0

1,094

2,456

2019

2020

2021

2022

United States (location-based)

54,72054,392

38,09437,676

United States (market-based)

54,72054,392

1,013

743

Australia (location-based)

108

112

NA

NA

Australia (market-based)

108

112

NA

NA

Ireland (location-based)

311

321

64

40

Ireland (market-based)

438

440

39

25

Israel (location-based)

236

212

NA

NA

Israel (market-based)

236

212

NA

NA

Scope 1 and 2 emissions by source (mtCO2e)

2019

2020

2021

2022

Studios/offices (location-based)

2,688

3,771

1,827

1,847

Studios/offices (market-based)

2,815

3,890

1,053

768

Data centers (location-based)

52,68751,26636,33235,870

Data centers (market-based)

52,68751,26600

GHG emissions intensity (mtCO2 e/employee)

2019

2020

2021

2022

GHG emissions intensity (market-based)

21.64

20.14

0.41

0.32

Carbon offsets/renewables

Scope 1 and 2 emissions by location (mtCO2e)(studios/office and data centers)

1 See Appendix C for GHG emissions calculation methodology.

36

Energy use
Energy use

2019

2020

2021

2022

Total energy use (MWh)176,177

182,486

134,354

129,062

173,848

175,308

129,645

129,062

Studios/offices

6,191

7,729

3,198

4,347

Data centers

167,657

167,579

126,447

121,335

Renewable electricity

00129,645

125,682

Renewable electricity (%)

0

0

100

100

2,328

7,178

4,708

3,380

1.27

1.32

1.20

1.24

Electricity

Other fuels
Data-center power usage effectiveness (PUE)

Waste generated
20192

20202

2021

2022

1,413

776

197

612

Recycled IT waste

351

116

Remarketed IT waste

592

371

38

164

Composted waste

697

Landfilled waste

193

65

Recycled waste

36

0.86

Total waste
Total waste (short tons)
Data center

Studios/offices

2 Waste data is unavailable.

37

Appendix C
Diversity terminology: Dropbox, Inc. categorizes its workforce into various categories, as defined below.
The Leadership category includes employees at a Director level or above; based on level
designations in Dropbox’s HR system
The Manager category includes individuals with people management responsibilities (including
those at the Director level and above); based on level designations in Dropbox’s HR system
The Tech Worker category includes full-time employees (including individuals within the Manager
category or above) working in Dropbox’s Engineering, Product and Design functions
The Non-Tech Worker category includes all other full-time employees (including individuals within
the Manager category or above) working in any function outside of Dropbox’s Engineering, Productand Design functions
Gender and race/ethnicity designation is self-reported by employees within the Dropbox HR
systemIndividuals that elect to not specify their gender or race/ethnicity within the Dropbox HR system are
represented in the “Not available” or “Not specified” categories.

Renewable energy goal: Our renewable energy goal reflects electricity use in corporate offices and data
center direct IT load, and excludes direct combustion fuels (e.g., natural gas, diesel) and data center heating
and cooling (outside of Dropbox control boundary). This includes the use of renewable energy credits (RECs)
to cover our energy consumption. We achieved our goal to source 100% renewable electricity in 2021 and2022 by reducing our energy needs as described in the 2021 ESG Impact Report and purchasing enoughRECs to cover our remaining corporate office and data center direct IT electricity consumption.  
Data center infrastructure: More than 90% of our users’ data is stored on our own infrastructure in our data
center co-location facilities. We utilize Amazon Web Services (AWS) for the remainder of our users’ storage
needs and purchase RECs to cover energy used by AWS on behalf of Dropbox.

WFH emissions: In accordance with the GHG Protocol, WFH emissions fall under Scope 3, Category 7:
employee commuting emissions. Our WFH calculation is based on employee full time equivalent (FTE) by
country and incorporates the average WFH energy usage estimates—including plug loads, based on anaverage usage of laptop, monitor, and lighting for each employee, fuel usage for office heating and cooling,
adjusted by climate region and reflective of the employee count by country. It was assumed that 10% of thehome was used for work attributed to office energy use rather than that of the employee’s entire residence.
Additionally, an adjustment was made for percentage of time an employee works (using OECD hours
worked/worker) and an additional adjustment was made for percentage of time working from home (90%).
38

Deep sleep technology: The Dropbox Data Infrastructure team created this to optimize server usage byallowing idle servers to automatically enter a low-power mode, reducing energy consumption without
affecting performance. As a result, data centers using this automated technology significantly decrease theirenergy footprint and utility costs.
GHG protocol definitions: GHG Protocol provides the following definitions for Scope 1, 2, and 3 emissions
Scope 1 emissions: Direct greenhouse gas emissions that occur from sources that are controlled or owned
by an organization
Scope 2 emissions: Indirect emissions associated with the purchase of electricity, steam, heat, or cooling
Scope 3 emissions: Emissions resulting from activities from assets not owned or controlled by thereporting organization, but that the organization indirectly impacts its value chain. Scope 3 emissions
include all sources not within an organization's scope 1 and 2 boundaryBusiness travel emissions: This category includes emissions from the transportation of employees forbusiness related activities in vehicles owned or operated by third parties, such as aircraft, trains, buses,and passenger cars
Market-based emissions: A market-based method calculates emissions based on the electricity thatorganizations have chosen to purchase, often spelled out in contracts or instruments like RECs
Location-based emissions: A location-based method reflects the average emissions intensity of grids onwhich energy consumption occurs (using mostly grid-average emission factor data).
GHG emissions calculation methodology: Calculations are consistent with the GHG Protocol Corporate
Accounting and Reporting Standard, made available by the World Business Council for Sustainable
Development and the World Resources Institute, and The Climate Registry’s General Reporting Protocol. All
facilities over which Dropbox has operational control are included in the Scope 1 and Scope 2 GHG inventory,
including all leased facilities. Where actual energy bills were not available, emissions were estimated using theCommercial Buildings Energy Consumption Survey database. Reported GHG emissions include CO2, CH4,
and N2O emissions from electricity, natural gas, and fuel consumption, and HFC emissions from refrigerant
use in buildings and data centers. Dropbox has no emissions resulting from use of PFCs, SF6, or NF3. To
convert energy consumption, fuel combustion, and business travel data into GHG emissions, we used factors
from the US Environmental Protection Agency (EPA) Emissions & Generation Resource Integrated Database,
International Energy Agency, Environment Canada National Inventory Report, US EPA Emission Factors Hub,
US EPA Office of Research and Development Supply Chain Greenhouse Gas Emission Factors for US
Industries and Commodities, and the UK Department for Environment, Food and Rural Affairs. Global warming
potentials used for converting emissions into CO2e are sourced from the Intergovernmental Panel on Climate
Change Fourth Assessment Report.

39

Scope 1 direct emissions include stationary combustion and refrigerant leakage. Direct sources ofemissions for Dropbox include natural gas for building heat, stationary diesel use for emergency
generators, and refrigerant leakages in owned and operated facilities
Scope 2 indirect emissions include emissions from purchased electricity. For leased co-location data
centers, we’ve taken an operational-control consolidation approach and are accounting for upstream
emissions of leased co-location data centers in the Scope 2 reporting
Location-based emissions are calculated using a location-based electricity grid emissions intensity factor,
which defines the amount of GHG emissions generated per unit of electricity consumed in a certain
geography
Market-based emissions are calculated using a residual factor for grid emissions intensity, after
accounting for the use of renewable energy in a certain geography
For 2019, 2020, 2021, and 2022, Dropbox is reporting only Scope 3 emissions associated with businesstravel, which includes emissions generated from flights, hotel rooms, rental cars, and rail transportation
In accordance with the GHG Protocol, WFH emissions fall under Scope 3 Category 7: employee
commuting emissions. Our WFH calculation is based on employee FTE by country and incorporates theaverage WFH energy usage estimates—including plug loads, based on an average usage of laptop,
monitor, and lighting for each employee, fuel usage for office heating and cooling, adjusted by climate
region and reflective of the employee count by country. It was assumed that 10% of the home was used
for work attributed to office energy use rather than that of the employee’s entire residence. Additionally,an adjustment was made for percentage of time an employee works (using OECD hours worked/worker)
and an additional adjustment was made for percentage of time working from home (90%).

40

Performance data tables, Scope 3 (business travel): Our Scope 3 emissions decreased significantly between
2019 and 2020 due in large part to a reduction in business travel due to the COVID-19 pandemic.

Performance data tables, Australia and Israel: In April 2021, we transitioned to a Virtual First working modelin which remote work is the primary mode of working for employees. Dropbox leases all our studio space andshifting from full-time office space to studios has decreased the amount of physical space needed for ouroperations. Additionally, the move to Virtual First means that emissions associated with our studios andoffices in certain locations that are owned and managed by third parties fall under Scope 3 of the GHG
Protocol Corporate Accounting and Reporting Standard. We currently only report emissions from our studios,
offices, and data center locations that fall under Scope 1 and Scope 2. We do not currently report emissions
from studios, offices, and data center locations that are owned and managed by third parties, as these fallunder Scope 3.

41

42

42

42

42

42

Dropbox, Inc. 

1800 Owens Street Suite 200

San Francisco, CA 94158

For questions about this report, please contact esgreport@dropbox.com