Dropbox has launched Dropbox Protect in Singapore, making the city-state the second market worldwide to receive its cross-cloud content governance product after Japan.
The web-based application gives information technology and security teams a centralized view of file access across Dropbox, Google Drive and Microsoft 365. Dropbox said the product is available in English and does not require local software installation. The company did not disclose pricing or name Singapore customers using the service.
Centralized controls across cloud platforms
Dropbox Protect is designed to help administrators find and remediate access risks that accumulate as organizations share files with employees, contractors, customers, and other external parties. Its dashboard can surface public links, external collaborators, inherited permissions and stale content across connected cloud services.
The product groups its workflow into three broad functions: visibility into who can access content, remediation of risky permissions and continuing enforcement of access policies. Dropbox says administrators can create rules that detect sharing conditions, send alerts, or automatically apply a predefined fix. The company’s policy enforcement guide says policies can be configured to identify exposure such as public links or personal accounts, log changes for audits, and apply consistent sharing rules across connected applications.
For example, an organization could first review files shared through public links, then test an alert before enabling an automated action that removes those links. Dropbox recommends that administrators validate filters and results before switching from manual review to automatic remediation.
The platform also offers reports and CSV exports intended to support internal audits. According to the launch release, feedback from a design partner program led Dropbox to improve folder-path visibility, inherited-permission identification, and CSV reporting before expanding the product beyond Japan.
Connections require broad administrative permissions
Cross-cloud monitoring depends on administrators authorizing Dropbox Protect to connect with their other content systems. Dropbox’s Google Drive documentation says the integration can request access to discover and index files and folders, view file activity, and read directory, group, and audit information. The company says Protect refreshes Google Drive content and permission data every 60 minutes.
For Microsoft environments, Dropbox provides Azure application registration and service-account connection options. Its OneDrive documentation says the integration uses file read and write permissions to inspect content and change access settings, alongside audit-log permissions. Organizations evaluating the product will therefore need to review the requested privileges, exclusions, and approval process against their own security policies.
The administrative scope is central to the product’s value proposition: Protect needs enough visibility to identify exposure across services and enough authority to correct it. It also creates an implementation decision for security teams, which must balance centralized remediation with least-privilege controls around the governance tool itself.
Singapore follows the Japan debut
Dropbox said Protect debuted in Japan in September after more than a year of customer collaboration through its design partner program. Singapore is the next market in an Asia-Pacific rollout, with additional markets expected to follow, although the company did not provide a schedule.
The launch comes as Singapore businesses increase their use of artificial intelligence and cloud services. The Infocomm Media Development Authority said in May that its Singapore Digital Economy Report 2025 found AI adoption among non-small and medium enterprises rose from 44 percent to 62.5 percent in 2024. More automated workflows can expand the number of applications and identities that interact with business data, increasing the importance of clear access records and enforceable policies.
18% of Singapore firms have AI security policies, but no tools to enforce