Security andcontrol with
Dropbox Education
We built Dropbox with an emphasis on security,compliance, and privacy, and work behind thescenes to protect your data with a secure,distributed infrastructure with multiple layers ofprotection. Administrators are empowered with
control and visibility features to help effectively
manage the security of your information.

Security•

Distributed and decentralized infrastructure forsecurity, performance and reliability•

Regular application, network, and other security
vulnerability testing (internal and 3rd party)•Data at rest: Files are stored as 4MB blocks, and eachblock is hashed and encrypted (AES256-bit)•Data in transit: SSL/TLS (AES 128-bit or higher),certificate pinning, perfect forward secrecy•

Information security management system (ISMS)
which includes policies, procedures, technicalcontrols, training, audits and risk assessments•

Based on a recent study by IDC*, for every 100
Dropbox Business users, organizations achieve
average benefits of $1.09M over 5 years

Control andvisibility features
Identity and access management•••

Active Directory integration
Single-sign on (SSO)
Two-step verification

Sharing and file controls•••Global sharing permissions
View-only permissions
Link passwords and expirations

Administrative actions•••

Unlinking devices and remote wipe
Tiered admin roles
Account transfer

Comprehensive audit logs•••

Account activity–logins, authentication, and changes
Sharing–folders, files, and events
Linking–devices and apps

For more information on Dropbox Education, contact education@dropbox.com or visit dropbox.com/education
For more information on Dropbox security, compliance, and privacy, please visit dropbox.com/trust

Dropbox platform
The Dropbox platform lets you integrate educational
tools that students and faculty love, while also
harnessing the power of Dropbox Business. Use theDropbox Business API to support your core IT processes
and build custom workflows. Through Dropbox Business
API partners, you can also enable SIEM, DLP, DRM, SSO,
e-Discovery, and more.

Students and Children(FERPA and COPPA)
Customers can use Dropbox Education in compliancewith vendor obligations imposed by FERPA. Educational
institutions may only use Dropbox Education consistent
with COPPA and other children’s privacy laws.

CompliancePrivacy

We use independent third-party auditors to test oursystems and controls against some of the most widelyaccepted security standards and regulations in the world,including ISO 27001, ISO 27018, and SOC 1, 2, and 3.
Dropbox may also sign Business Associate Agreements(BAAs) with customers who require them in order tocomply with HIPAA and HITECH.

Dropbox is one of the first major cloud service
providers to achieve certification with ISO 27018–an
emerging international standard for privacy and dataprotection that applies to cloud service providers, like
Dropbox, that process personal information on behalfof their customers. This certification demonstratesour commitment to privacy and data protection
practices, and provides a basis for which our customers
can address common regulatory and contractualrequirements or questions.

For more on how we verify our security practices
and comply with standards and regulations, see thecompliance section of our Trust Guide at dropbox.com/
business/trust/compliance.

For more on our commitment to privacy, see the privacy
section of our Trust Guide at dropbox.com/business/trust/privacy.

For more information on Dropbox Education, contact education@dropbox.com or visit dropbox.com/education
For more information on Dropbox security, compliance, and privacy, please visit dropbox.com/trust