Proton Mail is Swiss, not EU: what that means before you leave Gmail

Proton Mail’s pitch to a Gmail user is simple: encrypted by default, no ad-targeting, run by a company that isn’t Google. What the pitch tends to skip is where “not Google” actually sits. Proton AG is registered in Geneva, under Swiss law, and Switzerland is not in the European Union.

That distinction matters more than the marketing copy suggests. Someone weighing a move from Gmail or Google Workspace to Proton is usually asking two questions at once: does this get me out from under US law, and does it put me under EU law instead. Proton’s own public record answers the first plainly and complicates the second.

Start with what’s confirmed. Switzerland’s commercial register, Zefix, lists Proton AG at a Geneva address, and FindInEurope’s dossier marks that fact verified: a public register, not a marketing page, backs the company’s home jurisdiction. The same register-grade confidence covers Proton’s legal footing. The company operates under Swiss law, outside both EU and US jurisdiction, according to its own published transparency statement.

Ownership is a thinner claim. Proton describes itself as founder-led with no controlling non-EU parent, a line drawn from the company’s own “about” page rather than a filing that would confirm it independently. FindInEurope tags that claimed, not verified, the same rating given to the assertion that customer data physically stays inside Switzerland. Proton says so on its support pages. No external register confirms where the servers actually sit.

On the technical side the record strengthens again. Proton’s mail clients are open source, the service speaks standard IMAP and SMTP through a bridge, and account data can be exported, all backed by published security documentation and marked verified. Security practice holds up too: GDPR alignment and independent audits, both verified. One entry sits empty. Proton discloses nothing about the environmental footprint of its infrastructure, so that dimension is marked unknown rather than good or bad.

The Switzerland question resolves into a genuine trade-off. Swiss law keeps Proton outside the reach of the US CLOUD Act, the concern that sends a lot of people looking at Gmail alternatives in the first place. It also keeps Proton outside the EU’s own jurisdiction, which is why FindInEurope’s Jurisdiction axis, built on a strict EU/EEA lens, and its Independence axis, which counts Switzerland, the UK, and the rest of EFTA on equal footing, can score the same company differently depending on what a reader actually cares about. Someone focused on distance from Washington reads Proton’s record one way. Someone who wants EU courts and EU regulators reads it another.

Proton stays a defensible pick for someone leaving Gmail; the point is to choose on the specific facts: register-verified for the company’s existence and legal jurisdiction, self-declared for ownership and data location, silent on environmental impact. That is a different, more useful thing than the word “European” doing the whole job. The full dossier at /listings/proton-mail/ carries the current score and every source behind it.