Proton CTO says trust and structure anchor its privacy pitch

Proton’s chief technology officer, Bart Butler, said the company’s core product is trust, backed by encryption, a paid business model and corporate controls meant to protect its privacy mission. His comments on The Verge’s Decoder podcast come as Proton faces pressure from governments seeking access to user-related information.

Butler described Proton as a suite of privacy-focused alternatives to common productivity tools. He said the company now offers Proton Mail, a VPN, Drive, Photos, collaborative documents, Calendar, the Proton Pass password manager, Meet video conferencing and an AI assistant called Lumo.

Proton is best known for Proton Mail, which The Verge described as encrypted by default. Butler said Proton encrypts as much user data as it can, limiting what the company can access, sell, lose in a breach or provide in response to legal demands.

Butler said Proton’s revenue model is another safeguard. Because Proton is paid by users rather than advertisers, he said, the company’s financial interests are tied to protecting those users rather than monetizing their data.

He said many customers do not need to understand encryption in detail for Proton’s model to work. In product discussions, Butler said he tells teams that if they have to explain encryption to users, the product has already missed the mark; the aim is to make familiar tools that are usable while preserving privacy.

Butler said end-to-end encryption remains Proton’s preferred standard, but he described privacy more broadly as user control. Some integrations may require data sharing, he said, and Proton’s goal is to make those choices clear to users rather than treat privacy as a blanket refusal to share anything.

Foundation control and growth pressure

Butler told The Verge that Proton has about 650 employees, including engineering, support, marketing and in-house customer support. He said the operating company is Proton AG, a Swiss corporation controlled by the Proton Foundation through a majority stake.

The foundation, Butler said, was seeded with shares from CEO Andy Yen and other early employees. He said its role is to guard Proton’s values and mission, and that the structure is designed to make it harder for a takeover or acquisition to redirect the company.

Butler said the foundation has not had to intervene. He said the structure is meant as protection if future management strays from Proton’s mission.

On growth, Butler said Mail and VPN remain Proton’s largest products, while newer offerings such as Calendar, Drive and Pass are smaller but expanding. He said Proton does not disclose detailed financials.

Butler also said Proton feels pressure to serve businesses because corporate customers have budgets for productivity and security tools. He said Proton remains primarily consumer-focused, though small businesses already use its products and business demand could shape its future.

Legal pressure and AI

The Verge said Proton’s Swiss base and servers reflect, in part, Switzerland’s geopolitical neutrality. The outlet also cited a case earlier this year in which the Swiss government requested payment data that helped the FBI identify a protester tied to the Stop Cop City movement in Atlanta, and said Proton complied with the request.

The Verge said Proton has stated it would leave Switzerland if a contested Swiss law passes. Butler told the outlet Proton would also consider leaving operations in European Union countries such as Germany and Norway if surveillance laws threaten the company’s privacy mission, and said Proton is examining what it would mean to leave Europe if conditions worsen.

Butler said Lumo, Proton’s AI assistant, is meant to offer a more protected way to use AI with sensitive data. He said Proton wants Lumo to work with its broader product suite while keeping data within Proton’s own guarantees.

This story draws on original reporting from The Verge.