Proton VPN
Proton VPN is a no-logs VPN service based in Switzerland. Launched in 2017...
Why It Doesn't Collaborate
Proton VPN cannot collaborate with governments...
Detailed Analysis
No-logs policy — verified four times
Proton VPN operates a strict no-logs policy...
✅ Audited: Securitum verified no logs in 2022, 2023, 2024, and August 2025. Conclusion: "no instances of user activity logging, connection metadata storage, or network traffic inspection."
Swiss jurisdiction — no data retention mandate
Under Swiss law, VPN services are not classified as telecommunication providers...
Technical architecture — Secure Core
Proton VPN's Secure Core architecture routes traffic through hardened servers...
What Proton CAN provide to authorities:
- Nothing. No browsing history
- Nothing. No connection timestamps
- Nothing. No original IP address
- Nothing. No session duration
- Nothing. No traffic logs
What Proton CANNOT provide:
There is literally nothing to hand over. The no-logs policy means all these data points simply do not exist on Proton's infrastructure:
- Websites you visited
- Data you downloaded/uploaded
- Your connection timestamps
- Session duration
- Your originating IP address
- Network traffic inspection
Open source and community-verified
All Proton VPN applications are open source...
⚠️ Important Note: In 2025, Switzerland proposed amendments to surveillance law that could affect VPN providers. Proton has publicly opposed these changes and begun moving some infrastructure outside Switzerland. However, the technical no-logs architecture remains unchanged — even with legal pressure, there is simply nothing to hand over because no logs are stored.
📋 Audit Timeline
| Year | Auditor | Result | Status |
|---|---|---|---|
| 2022 | Securitum | No logs found | Passed ✓ |
| 2023 | Securitum | No logs found | Passed ✓ |
| 2024 | Securitum | No logs found | Passed ✓ |
| Aug 2025 | Securitum | No logs found | Passed ✓ |
Frequently Asked Questions
No. Four independent audits by Securitum have confirmed that no user activity, metadata, or traffic logs are stored on Proton VPN's infrastructure.
Proton can only comply with legally binding Swiss court orders, and even then there is nothing to provide. The no-logs policy means no data exists to hand over.
Switzerland has one of the strongest data protection laws in the world (FADP). It is not part of the 5/9/14 Eyes alliances.
All Proton apps are open source. You can inspect the code on GitHub, read the published audit reports from Securitum, or commission your own audit.
Secure Core routes your traffic through multiple hardened servers in privacy-friendly countries (Switzerland, Iceland, Sweden) before exiting to the internet. This makes it impossible to trace the connection back to your original IP.
NordVPN had a data breach in 2018 where a server was compromised. ExpressVPN is based in BVI but has faced criticism. Proton VPN has passed 4 independent no-logs audits and is fully open source.