Confidencial vs Cryptomator
Confidencial
confidencial.ioCryptomator
cryptomator.orgSide by side
| Figure | Confidencial | Cryptomator |
|---|---|---|
| Price from | — | €833.33/mo |
| Free plan | — | Yes |
| Free trial | — | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | — | Yes |
| macOS | — | Yes |
| Linux | — | Yes |
| iOS | — | Yes |
| Android | — | Yes |
| API | Yes | — |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 5 |
| Spec score · Cloud Encryption Software | 7.6 (#11) | 8.6 (#4) |
| Headquarters | Menlo Park, California, United States | Bonn, Germany |
| What it does | Confidencial protects sensitive data at the field, paragraph, or cell level, with controls that travel with the data. | Cryptomator encrypts files on the user's device before they are uploaded to cloud storage. |
Plans
Cryptomator
- CryptomatorFree
- Cryptomator Hub CommunityFree
- Cryptomator optional upgrades€29.99, paid once
- Cryptomator Hub Enterprise€10,000 a year
- Cryptomator Hub StandardPrice not published
In their own words
Confidencial
Confidencial protects sensitive information at field, paragraph, or cell level while keeping controls attached to the data. Selective encryption can leave ordinary document content readable while protecting designated fields. Discover scans environments and classifies sensitive fields across more than 40 file types. Shield applies policy-based encryption, tokenization, redaction, deletion, or archiving. AI Guard protects retrieval-augmented generation, fine-tuning, and long-context workflows through sensitive-field tokenization and output filtering. Exchange handles sending, requesting, and signing protected files with access policies, activity tracking, and revocation. Transfers support up to 1 TB per send and more than 40 file types; external recipients can use a limited portal without accounts or installation at no cost. Deployment may be hosted, hybrid, or self-hosted, including cloud, on-premises, and air-gapped environments. Keys remain in the customer’s key-management service, including AWS KMS and Azure Key Vault.
Cryptomator
Cryptomator encrypts files on the user's device before they go to a cloud storage service. Its AES encryption uses a 256-bit key and covers both file contents and filenames. The software is open source, with source code available for community security audits. It works with a cloud service of the user's choice; on desktop, access to vaults requires that service's sync software on the computer. Mobile apps natively support services such as Dropbox, Google Drive, OneDrive, pCloud, S3, and WebDAV, with availability varying by platform. The Android and iOS apps are currently incompatible with Mega, including through WebDAV. Free mobile versions are read-only; full access requires a separate one-time purchase for each platform. Cryptomator Hub adds user and group administration and zero-knowledge key management for teams, with OpenID Connect, SAML, and LDAP integrations. Cryptomator lists Android, iOS, Linux, macOS, web, Windows, and self-hosted platforms. The individual plan is free; optional upgrades are €29.99, paid once.