Resources
In-depth explanations of the key concepts behind Proton's privacy guarantees.
What is End-to-End Encryption (E2EE)?
End-to-end encryption is a method of secure communication...
In a non-E2EE system (like standard email or SMS)...
Proton uses E2EE across Mail, Drive, Calendar, and Pass...
💡 Key Takeaway: E2EE means only you and your intended recipient hold the decryption keys. Not Proton, not governments, not anyone else.
What is Zero-Access Encryption?
Zero-access encryption is a complementary technique to E2EE...
The key difference from E2EE...
Zero-access encryption is particularly important for government requests...
✓ Protection: Even if compelled by a court order, there is no plaintext data to hand over.
Swiss Jurisdiction & Privacy Law
Proton is headquartered in Geneva, Switzerland...
Key advantages of Swiss jurisdiction: • Not part of the 5 Eyes, 9 Eyes, or 14 Eyes intelligence-sharing alliances • Foreign government requests must go through Swiss courts via MLAT • Strong constitutional protections for privacy (Article 13) • Swiss courts apply proportionality and necessity tests • No blanket data retention mandates for email providers
However, it is important to note that Switzerland has proposed amendments...
⚠️ Important: Technical encryption guarantees remain unchanged regardless of legal changes — laws cannot unlock what is mathematically locked.
Open Source & Independent Audits
All Proton applications are open source, with code publicly available on GitHub. This means that any security researcher can inspect the code to verify that: • There are no backdoors • The encryption implementations are correct • The no-logs policy is actually implemented in the code • No hidden telemetry exists
Beyond community review, Proton commissions regular independent security audits...
✅ Verified: Proton VPN has passed 4 independent no-logs audits by Securitum (2022, 2023, 2024, August 2025).
Metadata: What It Is and What Proton Does
Metadata is data about data — not the content itself...
Under a valid Swiss court order, Proton may be compelled to provide metadata for a specific account. This is a legitimate limitation. However, Proton minimizes this exposure: • IP addresses are not logged by default • Users can disable IP logging entirely in settings • Proton does not collect or store browsing data • For maximum protection, combine Proton Mail with Proton VPN or Tor
⚠️ Limitation: Some metadata exposure is inherent to how email works. Proton minimizes this but cannot eliminate it entirely without breaking core functionality.
Transparency Reports
Proton publishes regular transparency reports detailing every government request for user data received, how it was handled, and what data (if any) was provided. These reports demonstrate: • Proton only complies with legally binding Swiss court orders • Data provided is always minimal metadata, never content • Proton actively fights overly broad or unjustified requests • Total volume of requests is small relative to user base
📊 Transparency: Visit proton.me/legal/transparency for the latest report.