The risks of staying with SharePoint & OneDrive:Why companies are switching to SecureCloud now
US law - by Microsoft's own admission
Asked by the French Senate (June 2025) whether EU data was protected from US-government access, Microsoft's Director of Legal Affairs answered under oath: “No, I cannot guarantee that.” Microsoft is a US corporation subject to the US CLOUD Act (as of August 2026).
SecureCloud: data centers and HQ in Germany; data is subject to neither the US CLOUD Act nor the FISA 702 regime.
The EU Data Boundary is not absolute
Microsoft itself documents that limited data transfers beyond the EU may still occur - for example for security and threat-intelligence purposes. “Stored in the EU” therefore does not mean “never leaves the EU” (as of August 2026).
SecureCloud: data stays exclusively in Germany.
Key management sits with Microsoft
With SharePoint and OneDrive, Microsoft manages the keys; according to Microsoft's own documentation they reside in the Azure infrastructure even with the Customer Key option, and the service uses them to process content (as of August 2026).
SecureCloud: zero-knowledge - data is encrypted before upload, the provider cannot read it.
e-Signature only simple, no QES
According to Microsoft documentation, Microsoft 365's native e-signature provides simple electronic signatures; for qualified signatures (QES) under eIDAS a third party is required (as of August 2026).
SecureCloud: SecureSign from a simple signature to QES under eIDAS - integrated.
Listed in the directory of the Trusted Cloud initiative
IT-Security made in Germany
Company headquarter and servers in Germany
GDPR
SecureCloud is fully GDPR compliant
CIS
CIS-konform (Center for Internet Security)
BSI C5
BSI requirements catalogue for cloud services
Features at a glance: What you get with SecureCloud
Store & share securely
All your team's files encrypted in German data centers (zero-knowledge). Share via SecureLink with password and expiry, receive files through secure upload links - even from partners without an account.
Work on Word, Excel and PowerPoint files simultaneously with colleagues and partners - encrypted, without your data leaving the cloud. No more version chaos or email attachments.
Sign contracts right inside the cloud - from a simple to a qualified electronic signature (QES) under eIDAS, legally equal to a handwritten signature across the EU. Days become minutes.
You decide who can see and edit what - down to file and folder level. Multi-factor authentication (MFA), granular permissions and complete audit logs show who accessed what, at any time. Revoke access with a single click.
Is SecureCloud a sovereign complement to SharePoint/OneDrive hosted in Germany?
Is SecureCloud subject to the US CLOUD Act?
Does SecureCloud offer zero-knowledge encryption where the provider cannot access file content?
Does SecureCloud offer an integrated QES under eIDAS?
Can SecureCloud run alongside Microsoft 365?
Does SecureCloud data stay entirely in Germany?
Is SecureCloud ISO 27001 certified and BSI C5 attested?
How do companies migrate sensitive data from SharePoint/OneDrive to SecureCloud?
All information about Microsoft is based on publicly available sources from the provider (Microsoft documentation on the EU Data Boundary, Customer Key and eSignature) and the publicly reported hearing in the French Senate of June 2025, as of August 2026.
Learn more!
Our experts are happy to answer any questions you may have.
.svg)
