ESG Fact Sheet
2019–2020

Type chapter
Dropbox
ESG Fact
nameSheethere

123456Chapter
numberOur mission
at Dropbox is to design a more enlightened

Typeway ofyourworking.
subject
Inhereline with this, we’re dedicated todoing our part—both inside and outside the company—
Chapter number
to make the world a better place. We frmly believe thatType
yoursucceeds
subject here
Dropboxif all of our stakeholders succeed.
We’re driving toward creating an equitable world andChapter number
making work human, and we want to do this by achievType your subject here
ing our sustainability goals, investing in social-goodinitiatives,and being a force for positive change.
Chapternumber
Type your subject here
This inaugural fact sheet highlights our environmental,
Chapternumbersocial, andgovernance (ESG) commitments during
Type2019 yourand 2020.
subjectWe
hereplan to share updates on our ESG
progress and achievements in future years.
Chapter number

Type your subject here

01

Environmental

Dropbox is committed to fghting global warming
and reducing our carbon footprint. In 2020, we
set the following goals to be completed by 2030:
Achieve carbon neutrality for Scope 1, Scope 2,and Scope 3 business-travel emissions
Source 100% renewable energy for operations,
including data centers
Fund and support organizations working forclimate action
Mobilize employees to use volunteer time offor environmental causes

2020 Accomplishments
Between 2019 and 2020, our reported greenhousegas emissions decreased by 8%.
Approximately 68% of Dropbox’s ofice space
is LEED certifed

Type01
Environmental
chapter name here

GreenhouseGas(GHG) Emissions by Scope
Type subtitle
hereType body text here

2019

Scope 1
Scope 2
Scope 3*20200

10,00020,00030,00040,00050,00060,000Metric tons of carbon dioxide equivalent (MTCO2e)

Type subtitle here
Write content here

Scope 1—direct GHG emissions fromstationary and mobile fuel consumption.
Scope 2—indirect emissions
associated with purchased energy
at our ofices and data centers.
Scope 3—other indirect emissions.

*For 2019 and 2020, Dropbox is reporting
only Scope 3 emissions associated withbusiness travel.

Our 2020 GHG emissions inventory
was verifed by Apex. Our 2020
Scope 3 GHG emissions decreased
signifcantly compared with 2019because of a reduction in businesstravel due to the COVID-19 pandemic.

Type01
Environmental
chapter name here

200,000

Type subtitle here

176,177

182,486

Energy Use

150,000
Type body text here

Corporate Offices

megawatt hours(MWh)100,000

Data Centers

50,00002019

Type subtitle here

Average Data Center Power Usage
Efectiveness(PUE)
Write content here
2019

1.27

2020

1.32

Dropbox’s PUE is 17% below the industry average of
1.58. Read more about our data center sustainability.

2020

02

SocialWe believe that the world can work better andthat change starts with us. We’re building a teamthat emphasizes the kindness and collaborationneeded for growth as a company.[i][i] As of December 31, 2020, Dropbox had 2,760 full-time employees, including 2,346 based inthe US and 414 located outside of the US.

TypeSocial
02
chapter name here

Type content here

Diversity, Equity, and Inclusion
Our philosophy on diversity, equity, and inclusion (DEI) is to build anemployee base refecting the diverse customers we serve globally. In 2019,
we set out to increase the number of underrepresented minorities (URMs)[ii]and women in management. We also sought to boost their numbers amongindividual contributors at mid-level and higher. We reached our goals, and in2020 expanded our aspirations to include senior-level individual contributors.
Learn more in our annual Diversity Report.

[ii] Dropbox defnes “underrepresented minorities (URMs)” as Black/African American, Hispanic/Latinx,
Native American, or Pacifc Islander.

TypeSocial
02
chapter name here

Women in Management (Goals and Results)
Type subtitle here
Type body text here

2019 Year End

2020 Aspiration

2020 Year End

35%

35–36%

37%

10%

10–11%

11%

women at manager
level and higher
URMs at manager
level and higher

Global Representation of Women at Dropbox*

41%

40%

*As of 12/31/2020 (withpercentage changes
since 12/31/2019)

Type subtitle here
Write content here

All Employees

Leadership[iii][iii] Dropbox defnes“leadership” as director
level and higher. A
manager is anyone withat least one direct report.

27% ▲ 1

41%

Managers[iii]TechTypeSocial
02
chapter name here

Ethnicity at Dropbox (US)*Type subtitle here
Type body text here

47% ▼1White36% ▲ 2

Asian8% ▼1

HispanicBlack4%2+ Races

4%

Native American& Pacific Islander<1%61% ▼1

White2% ▼17% ▲2Black2+ Races
Native American& Pacific Islander

Leadership

26% ▲1

AsianHispanic

All Employees

3% ▼1
<1%

Type subtitle here
Write content here

54% ▼1White

31% ▲1

Asian7%

HispanicBlack

5%2+ Races

3%

Native American& Pacific Islander<1%*As of 12/31/2020 (with percentage changes since 12/31/2019)

Managers

TypeSocial
02
chapter name here

Workforce Development
Type subtitle here
Type body text here

In 2020 we began a partnership with Next Chapter, a program
started by Slack that provides opportunities in the tech sector
for formerly incarcerated individuals. Through this partnership,we facilitate engineering apprenticeships at Dropbox with thegoal of full-time employment.
In 2018, we launched the IGNITE Engineering Apprenticeship
Program, which provides mentorship and hands-on learning
opportunities to new software engineers who have nontraditional
computer science backgrounds.

Dropbox for Good
Dropbox for Good is an employee-led group that encourages
Dropboxers to use their skills and time to serve their communities.
Type subtitle here
We provide 32 hours of volunteer time of per year and donation

Write content here

matching up to $2,000 per year per full-time employee. Total
employee donations and corporate gift matching:
2019

2020

$1.5M

$3M

TypeSocial
02
chapter name here

Type subtitle here

Dropbox Foundation

Type body text here

We partner with the Dropbox Foundation, which supports humanrights organizations that provide vulnerable populations with accessto equal opportunities, basic freedoms, and fundamental necessities.
The foundation provides unrestricted grants and empowers Dropbox
employees to give back through skills-based volunteering.

Type subtitle here
Write content here

03

GovernanceBeing Worthy of Trust is one of our guidingvalues. We are relentlessly dedicated toprotecting our users’ content and maintaining
transparent privacy policies and practices.
We have a cross-functional leadership teamthat oversees information security andprivacy practices and proactively addresses
the risks. This team reports regularly to ourboard of directors and audit committee.

03 Governance

Security
At Dropbox, the security of users’ data is one of our highest priorities. Here’s what thatlooks like:•Dropbox fles at rest are encrypted using 256-bit Advanced Encryption Standard (AES).

•Dropbox uses Secure Sockets Layer (SSL)/Transport Layer Security (TLS) to protect
data in transit between Dropbox apps and servers.

•SSL/TLS creates a secure tunnel protected by 128-bit or higher AES encryption.

•

Dropbox applications and infrastructure are regularly tested for security vulnerabilities,
and hardened to enhance security and protect against attacks.

•Two-step verifcation is available for an extra layer of security at sign-in.

•Public fles are viewable only by people who have a link to the fle(s).

Dropbox Business has certifed its data centers, systems, applications, people, andprocesses through a series of audits by Netherlands-based EY CertifyPoint, anindependent third party:•

Our information security management system is ISO 27001 certifed.

•

Our privacy information management system is ISO 27701 certifed.

•

Our cloud security controls are ISO 27017 certifed.

•

Our cloud privacy and data protection controls are ISO 27018 certifed.

•

The Service Organization Controls (SOC) 1 and 2 reports are available to existing
Dropbox Business and Education customers by request, and anyone with interest
can view the SOC 3 examination.

03 Governance

Privacy and Data Protection•Our Privacy Policy outlines privacy commitments and explains how we collect, use,safeguard, and handle users’ personal data.

•Our biannual Transparency Report provides information on the number of government
requests received and how Dropbox responded.

•Dropbox operates a privacy and trust program to meet its obligations under regulations
such as the EU General Data Protection Regulation (GDPR) and the California
Consumer Privacy Act (CCPA).

•Dropbox has appointed a data protection oficer (DPO) in accordance with Article 38of the GDPR.

•See our white paper on Privacy and Data Protection.

Ethical Business Practicesand Compliance
All employees are required to takean annual Code of Business Conductand Ethics training, as well as annual
Security and Privacy trainings.
Dropbox maintains a third-party
Ethics and Compliance hotline
through Convercent. Reports canbe submitted anonymously.
Compliance, security, privacy, and data protection areconstantly evolving. Stay up to date on our policies andpractices here.

Type
03 Governancechapter name here

Board of Directors
Type subtitle here
Type body text here

We’re committed to maintaining an independent and diverse boardof directors. Since 2019, we’ve added four directors to our board
who are women or members of underrepresented communities.[iv]Note: While Dropbox uses the term “underrepresented minorities(URMs)” in the context of DEI, we use the term “underrepresentedcommunities (URCs)” in the context of board diversity because italigns with terminology that’s used in related legislation from theCalifornia State Assembly.

[iv] In alignment with California Assembly Bill 979, Dropbox defnes “underrepresentedcommunities (URCs)” as individuals who self-identify as Black, African American, Hispanic,Latinx, Asian, Pacifc Islander, Native American, Native Hawaiian, or Alaska Native, or as gay,lesbian, bisexual, or transgender.

03
Type
Governancechapter
Typechapter namename herehere

2019 directors (10 total)*Type subtitle here
Type bodytext here
TenureAge

3–8 years

9+ years

43

3

<40

40–49

50–59

60+

22

3

3Gender

URC<3 years

womenmen

4

6

URC

non-URC

28

Independence

independentemployee

82

2020 directors (8 total)**<3 years

3–8 years

9+ years

341

Tenure

Age

<40

40–49

50–5960+2132GenderURC

Independence

womenmen35

URC

non-URC

26independentemployee

71*As of 12/31/19**As of 12/31/20. Sara Mathew was subsequently added to our board of directors in August 2021.

ESG Fact sheet

Fin

Acknowledgments
Outside contributors—WSP Global Inc.