Dropbox rewrites its terms for 1 January 2027: what changes for a business account

Dropbox rewrites its terms for 1 January 2027: what changes for a business account

20 September 2026 — Announced on 1 September and effective on 1 January 2027, the rewrite touches three documents at once — the Terms of Service, the Privacy Policy and the Services Agreement that covers business customers. Most coverage has focused on the age limit. For a company, that is the least consequential change in it.

What changed

One email address, several workspaces. A person can join or access multiple team and non-team workspaces with the same email address, and the terms state that "each Dropbox Team or non-Dropbox Team workspace you join will be considered its own account." That is a definitional change, and definitions are what licence counts and access reviews are built on.

Thirty days' notice before a fee change. The terms commit to "no less than 30 days' advance notice" by email to the address on the account, with the chance to cancel before the new fee takes effect. Worth knowing which mailbox that is, and whether anybody reads it.

Six months of inactivity. Access may be suspended where an account is not paid and has not been used for six consecutive months. Paid accounts are not in scope, but dormant free accounts holding shared material are.

Disagreement means leaving. If a customer does not accept a future update, the remedy offered is to cancel and delete the account before the terms take effect, with a prorated refund where applicable rather than a right to stay on the old terms.

Eighteen and over. The Services Agreement now states the service may only be used by those over 18.

The Services Agreement changes that matter most to a business are the quietest ones: it clarifies disclosure rights during regulatory audits and modifies indemnification obligations. Those two lines decide what happens in the two situations where a contract is actually read.

What it means for a buyer

Put 1 January 2027 in the calendar with a task attached, not a reminder. Between now and then: confirm which mailbox receives fee-change notices and that it is monitored by somebody who can act; re-count licences under the new definition of an account, because a workspace-per-account rule can change what you are paying for without anybody buying anything; and have whoever owns the contract read the indemnification and audit-disclosure changes rather than the summary of them.

If your data-retention position depends on dormant accounts remaining reachable, the six-month rule is the clause to plan around now rather than in December.

Sources

• Dropbox blog, "Updates to our Terms of Service, Privacy Policy, and Dropbox Services Agreement" — 1 September 2026
• Dropbox Terms of Service, effective 1 January 2027 (read 20 September 2026) — 20 September 2026