CIOPages

AI Footnotes

Dropbox AI Footnotes

What Dropbox's AI features do with your data, as Dropbox publishes it. Checked October 31, 2026. Dropbox in the Directory.

Agent access

Two official remote MCP servers: the Dropbox MCP server at https://mcp.dropbox.com/mcp (files, folders, Paper docs and Dropbox Sign tools) and the Dropbox Dash MCP server at https://mcp.dropbox.com/dash (search and read across Dash-connected sources). source, source 2, source 3, source 4 · checked October 31, 2026

Dropbox Dash (universal search, Chat, summaries, Stacks)

Dropbox Dash (Dash for Teams, Dash for Business) and Dash in Dropbox

On by default?Not published as of October 31, 2026
How an admin turns it offAccess follows Dash licenses: Admin console > Members, then Assign or Remove next to the product under Products. Team members without a Dash license lose access to Dash. source, source 2 · checked October 31, 2026
Trains on customer data?No. Dropbox lists no third-party model training on customer data as a control for all models behind its AI features, its contracts bar providers from training on customer data, and its AI Principles say it will not build generative AI models using customer content without consent. source, source 2, source 3 · checked October 31, 2026
RetentionA 90-day data retention period applies to all models used to power Dropbox AI features. source, source 2 · checked October 31, 2026
Where data is processedNot published as of October 31, 2026
Model providersOpenAI and Anthropic models. OpenAI models run in a Dropbox-managed environment on Microsoft Azure, through OpenAI, or on Groq infrastructure (GPT OSS 20B); Anthropic Claude models run on AWS Bedrock. source, source 2, source 3 · checked October 31, 2026
PriceDash comes to Dropbox through the Dash for Teams and Dash for Business plans. Dash for Teams has a free 30-day trial; after a trial, admins choose which team members get a paid Dash license, billed monthly or annually. source, source 2, source 3, source 4 · checked October 31, 2026

AI in Dropbox (organize and rename files, AI actions, image search)

Dropbox Standard and Advanced, for select teams

On by default?Not published as of October 31, 2026
How an admin turns it offNot published as of October 31, 2026
Trains on customer data?No. Dropbox lists no third-party model training on customer data as a control for all models behind its AI features, its contracts bar providers from training on customer data, and its AI Principles say it will not build generative AI models using customer content without consent. source, source 2, source 3 · checked October 31, 2026
RetentionA 90-day data retention period applies to all models used to power Dropbox AI features. source, source 2 · checked October 31, 2026
Where data is processedNot published as of October 31, 2026
Model providersNot published as of October 31, 2026
PriceIncluded for select teams on Standard and Advanced, with AI credits: Standard starts at 250 AI credits per month and Advanced at 750. source, source 2 · checked October 31, 2026

Compliance

  • HIPAA: Dash, including Dash in Dropbox, does not support HIPAA compliance. Dropbox team admins can sign a BAA for Dropbox itself from the admin console. source, source 2, source 3 · checked October 31, 2026

Not published by Dropbox as of October 31, 2026

  • Whether Dash and AI in Dropbox features are on or off when a team plan starts, and an admin setting to turn them off other than Dash license assignment
  • Regions where Dash and Dropbox AI processing runs
  • List prices for Dash for Teams and Dash for Business
  • Whether Dash features embedded in Dropbox cost extra: an undated Dash page says no added cost during the preview rollout, while help articles describe paid Dash licenses after a free trial
  • A single release stage for the Dropbox MCP server (its help page says both open beta and generally available) and any stage for the Dash MCP server
  • Whether Dash connects to outside MCP servers
  • FedRAMP status for Dropbox, Dash or Dropbox AI
  • An EU AI Act statement (Dropbox is not on the European Commission's GPAI Code of Practice or AI Pact signatory lists on 2026-10-31)

Changes

No changes recorded since the first check on October 31, 2026.

How this page is made, and how to send a correction: method.

Keep reading

State of Play
Governance, risk and compliance

The annual review of this market: what changed, with answers from the vendors in it.

Checklist
API Strategy & Governance Checklist

Assess API program maturity across design, security, documentation, and lifecycle.

Adobe