Encrypted cloud storage falls into two categories. Most services such as Google Drive, Dropbox, OneDrive, and Box, encrypt your files on their servers and hold the decryption keys, so the company can technically access what you store. A smaller group, including Internxt, Tresorit, and Sync.com, encrypts files on your device before upload, using keys only you control. The provider receives data it cannot read, and cannot hand anything over, even under a legal order.