Proton
Verified“Swiss-sovereign by design, migrating into the EU.”
- Accounts
- 100M+
- Employees
- ~550
- Ownership
- Non-profit + staff
- Infrastructure
- Self-owned
63 = midpoint of Control 53 & Data 72
Sovereignty Quadrant
Control ↑ who owns & governs the company · Data → where your data lives. Every dot is a company — click to open it.
Every number below traces to 16 sourced facts across 10 independent sources, last verified 2026-06-12. 3 open questions hold confidence at 82% — they lower confidence, never the score.
Control ↑
Who legally and economically controls the company
Legal & Jurisdiction
50
Incorporated and operated entirely in Switzerland, which is outside the EU/EEA, so GDPR does not directly reach Proton; Swiss FADP governs it, backstopped by an EU adequacy decision, and it is actively moving infra into the EU.
Why 50? 4 sourced facts · click to expand
Proton AG is a Swiss corporation incorporated and headquartered in Plan-les-Ouates, Geneva, founded 16 May 2014.
Wikipedia (Proton AG) · as of 2026
Switzerland is not a member of the EU or EEA, placing Proton outside direct EU (GDPR) jurisdiction; it is governed by the Swiss FADP.
Proton VPN (Swiss-based) · as of 2025
The EU confirmed Switzerland's data-protection adequacy (report of 15 January 2024), so personal data flows EU-to-Switzerland without SCCs.
PwC Switzerland · as of 2024-01-15
Article 271 of the Swiss Criminal Code forbids Swiss companies from assisting foreign law enforcement, and a 2021 Swiss court ruling exempts email providers from telecom data-retention duties.
Proton blog (Switzerland) · as of 2024
Control & Ownership
55
Voting control sits with a Swiss non-profit foundation plus employee ownership, with no VC or foreign owners — genuinely independent, but the controlling entity and economic majority are Swiss, not EU.
Why 55? 4 sourced facts · click to expand
Since June 2024 the non-profit Proton Foundation is the primary and largest voting shareholder of Proton AG, able to block any change of control or hostile takeover.
Proton blog (non-profit foundation) · as of 2024-06-17
Proton employees own the vast majority of shares not held by the foundation; FONGIT and some users hold the rest.
Proton support (who owns Proton Mail) · as of 2025
Proton has scaled without any venture capital investors; Innosuisse and the European Commission provide support but hold no shares and no control.
Proton support (who owns Proton Mail) · as of 2025
The Foundation board of trustees includes Andy Yen, Tim Berners-Lee, Carissa Veliz, Antonio Gambardella and Dingchao Lu.
Wikipedia (Proton AG) · as of 2024
Data →
Where your data lives and who can reach it
Data & Infrastructure
70
Proton owns all its server hardware and acts as its own provider — no AWS/Google/Azure, so hyperscaler and CLOUD Act exposure is near zero; data sits across Switzerland, Germany and Norway with a large migration into the EU underway.
Why 70? 4 sourced facts · click to expand
Proton owns and operates all its own servers, networks and hardware and does not rely on any third-party cloud provider (no Google, AWS or Azure).
Proton Drive (launch) · as of 2025
As of December 2024 Proton operates data centers in Switzerland (incl. Lausanne and an Attinghausen bunker), Germany and Norway.
Wikipedia (Proton AG) · as of 2024-12
Proton is relocating the majority of its physical infrastructure out of Switzerland into Germany and Norway, starting with its Lumo AI on German servers (2025).
heise online · as of 2025-08
Proton's no-logs infrastructure has been independently audited by Securitum for four consecutive years (2022-2025).
Proton Drive · as of 2025
Operations & People
75
Roughly 550 employees with all core teams based in Europe and offices across the EU, though the HQ and the largest single concentration of staff and leadership are in non-EU Switzerland.
Why 75? 4 sourced facts · click to expand
Proton states it has over 550 employees with all core teams based in Europe.
Proton blog (EuroStack offer) · as of 2025-07
Proton is headquartered in Geneva, with offices in Zurich, Paris, London, Barcelona, Skopje, Vilnius, Prague and Taipei.
Wikipedia (Proton AG) · as of 2025
Switzerland is where Proton's headquarters, the majority of leadership and board, its main datacenter and the greatest number of employees are located.
Proton blog (Switzerland) · as of 2024
Proton positions itself as a privacy-first European alternative to US Big Tech, pledging 100M-plus euros into the EU and offering free plans to French SMEs.
Proton blog (EuroStack offer) · as of 2025-07-10
Aligned to the EU Commission’s official Cloud Sovereignty Framework (SEAL, Jun 2026) →
What we don’t know
3 open questions — they lower confidence, never the score
- ?
What exact percentage of voting shares does the Proton Foundation hold?
Proton confirms the Foundation is the largest voting shareholder and can block change of control, but no precise voting percentage is publicly disclosed, leaving the strength of its control slightly imprecise.
- ?
How much of user data already sits in Germany/Norway versus Switzerland today?
The migration into the EU is announced and underway, but the current split of live user data between Swiss and EU data centers is not publicly quantified, affecting the infra score's EU-vs-Swiss balance.
- ?
What is Proton's current revenue and reporting currency?
Third-party trackers report figures in USD (e.g. ~$97.5M ARR for 2024), but Proton does not publish audited financials, so revenue scale and reporting currency are uncertain.
EU Cloud Sovereignty Framework lens
The EU Cloud Sovereignty Framework (SEAL) targets cloud service providers; this is an analogous mapping for assessment purposes, not a certification, and is complicated by Proton being Swiss (non-EU) rather than EU-based.
Strategic
Mission-locked under a Swiss non-profit foundation, no VC or foreign owners, explicitly positioned as a sovereign alternative to US Big Tech.
Legal & jurisdictional
Strong Swiss privacy law and Art. 271 shielding, but Switzerland is outside the EU/EEA so GDPR does not directly govern it; relies on EU adequacy.
Data & AI
End-to-end encryption by default with client-side key custody; Lumo AI now runs on Proton-owned German servers.
Operational
All core teams in Europe, offices across the EU; main operations and leadership are in non-EU Switzerland.
Supply chain
Owns its own hardware and acts as its own provider, avoiding US hyperscaler supply-chain and CLOUD Act dependency.
Technological
Self-hosted, open-source clients, independently audited; near-zero reliance on foreign-controlled cloud platforms.
Security & compliance
Repeated independent audits (Securitum no-logs 2022-2025) and published security practices, though no public ISO/SOC certification set was confirmed here.
Environmental sustainability
No verified data on energy sourcing or carbon disclosure for Proton's data centers was found.
EU alternatives
Already a leading privacy option and migrating infra into the EU, but Swiss (non-EU) jurisdiction means it is not an EU-domiciled choice.
German-incorporated, EU-jurisdiction encrypted email and calendar with servers in Germany — fully under GDPR and EU law.
Berlin-based encrypted email and office suite hosted in Germany, squarely within EU jurisdiction.
How the method works
Methodology v2 (provisional): the score is the midpoint of two axes — Control (who owns and governs the company) and Data (where your data lives and who can reach it). Each axis is scored only on verified evidence; unknowns reduce confidence, never the score. Every input below is sourced; the weights and judgments are open to challenge.
Spotted an error? Every claim is sourced — challenge it and we correct the record.
- 2026-06-12 — Initial golden profile, authored from primary sources (human + AI review).
Report Incorrect Data
Found an error in this company's profile? Help us improve our data by submitting a correction.
Verified 2026-06-12 · Human + AI joint review (sources independently checked) · Methodology