At Dropbox, trust is the foundation of our relationship with millions of people and businesses around the world. We value the confidence you’ve put in us and take the responsibility of protecting your information seriously. Respect for privacy and security was built into our business from the beginning, and as we’ve grown, our focus on handling and protecting the data our customers entrust to us has remained a top priority. For example, we were one of the first cloud service providers to achieve ISO 27018 – the internationally recognised standard for leading practices in cloud privacy and data protection. To supplement our GDPR compliance efforts, Dropbox has chosen to adhere to the Cloud Security Alliance (CSA) Code of Conduct for GDPR Compliance. Dropbox describes its data protection practices and compliance with the Code of Conduct in a Privacy Level Agreement that is publicly available on the CSA website. Dropbox takes GDPR very seriously, and we are committed to ensuring our compliance with both the GDPR and the Code of Conduct. In the event there is a material change in the GDPR that conflicts with the Code of Conduct, Dropbox shall comply with the terms of the GDPR. Read more about ‘Dropbox’s GDPR Compliance Journey’ here.