Dropbox

Retention

The Advanced plan offers 1 year to restore deleted files; retention periods vary by plan (e.g., 180 days for Standard).

Breach notification

Dropbox will use commercially reasonable efforts to notify Customer within 72 hours of confirming the existence of a Security Incident.

DPA available

Yes

GDPR addressed

Yes

Tracked documents

Recent changes

Public summary; per-account review history visible to subscribers tracking this vendor.

Track Dropbox in your workspace.

Get notified when Dropbox adds a subprocessor, changes retention, updates their DPA, or quietly amends their privacy posture.