Proton Mail

What Proton Mail actually is

Proton Mail is end-to-end encrypted email built by a Geneva company called Proton AG, and it is the product most people mean when they ask “is there a European Gmail.” The core idea is simple: messages between Proton users are encrypted on the sender’s device and decrypted only on the recipient’s, so Proton itself cannot read them even under a legal order. The encryption model, Proton says, is “zero access,” meaning the company designed the system so it structurally cannot hand over plaintext, rather than merely promising not to look.

Mail is the anchor product in a wider bundle: calendar, cloud storage (Drive), a password manager (Pass), a VPN, a Bitcoin wallet, and, since 2025, an AI assistant called Lumo. Anyone comparing Proton Mail to Gmail is really comparing two different bundles, Google’s ad-funded productivity suite against Proton’s subscription-funded privacy suite, and that difference in business model explains most of what follows.

From a CERN cafeteria table to a Geneva HQ

The founding story checks out and it is genuinely unusual for an email provider: Proton Mail launched as a public beta in May 2014, built by Andy Yen, Jason Stockman and Wei Sun, three researchers who met while working at CERN, the particle physics lab outside Geneva. The trigger, by Yen’s own account, was the 2013 Snowden disclosures. Development was paid for by a public crowdfunding campaign that pulled in over $500,000 from roughly 10,000 backers, which is why Proton still sells a legacy “Visionary” plan named after those early supporters. The company is headquartered in Plan-les-Ouates, Geneva, and its Swiss registration is on file with the Zefix commercial register.

Who owns it now, and it is not quite what “founder-led” suggests

Ownership is where a quick glance undersells the real structure. In June 2024, Yen, Stockman and Proton’s first employee Dingchao Lu donated a controlling block of Proton AG shares to a newly created Swiss non-profit, the Proton Foundation, which is now the company’s primary shareholder. The foundation’s board includes web inventor Tim Berners-Lee and Oxford philosopher Carissa Véliz. Proton frames this as protection against a hostile takeover or a forced sale to a buyer who would not honor the privacy mission, and structurally that holds up: a Swiss foundation has no shareholders of its own to sell to, and by law its trustees must act toward the purpose it was set up for.

There is no disclosed controlling non-EU or non-European parent, which is the material fact. But “founder-led,” on its own, undersells a company that has been through a real governance change: it is now founder-endowed and foundation-governed, with outside voices on the board. Worth knowing too: Proton’s early venture investor, Charles River Ventures, had its shares transferred to the Swiss foundation FONGIT back in 2021, and the EU’s Horizon 2020 program handed the company a €2 million grant in 2019. Proton has taken outside money. None of it currently controls the company.

Proton has also spent the last few years positioning itself as a policy actor rather than just a vendor, which is worth knowing if independence from large US platforms is part of why you’re reading this. The company backed the EU’s Digital Markets Act and helped found the Coalition for App Fairness alongside Epic and Spotify, and in June 2025 it sued Apple in US federal court over App Store commissions. In March 2025 it wrote to the European Commission arguing for a “buy European” rule in public-sector procurement. None of that changes who owns Proton, but it’s a reasonable proxy for whether the company’s incentives point toward or away from the large non-European platforms it competes with.

The law it answers to, and what that protects you from

Proton operates under Swiss law, outside both EU and US jurisdiction, as the company documents. This is the part of the pitch that actually earns scrutiny, because “Swiss jurisdiction” gets sold as a blanket shield and it is not one.

Article 271 of the Swiss Criminal Code does bar Proton from handing data straight to a foreign authority. But Swiss courts can still assist foreign law enforcement through standard mutual legal assistance channels, and when they do, Proton complies. The clearest illustration: in 2021, French police obtained the IP address of a Proton Mail user, a climate activist facing a criminal case in France, by routing the request through Europol to Swiss authorities, who then issued a binding Swiss order. Proton logged the IP as instructed and said, correctly, that it had no legal way to refuse. The company’s own transparency report puts a number on how often this happens: in 2025, Proton Mail received 9,301 legal orders and complied with 8,313 of them. Swiss jurisdiction changes who can compel Proton and on what legal basis. It does not mean nobody can.

There is also a live political fight worth knowing about if this jurisdiction is the reason you’re considering Proton. Switzerland’s government has floated amending its surveillance law to widen data-collection powers over messaging and VPN services, and Yen has said publicly that Proton would leave Switzerland if the amendment passes, arguing the company would otherwise end up “less confidential than Google.” The dossier above tracks the Jurisdiction axis as it stands today, not as it might stand if that bill passes.

Where the data actually sits

Proton’s own account of its infrastructure is more sprawling than the tidy “it’s in Switzerland” answer. The two anchor data centers are in Lausanne and Attinghausen, the latter a former military bunker buried under roughly a thousand meters of granite. But by the company’s own service-level agreement, it has also been running data centers in Germany alongside those in Switzerland, and Proton’s Lumo AI assistant runs specifically out of German and Norwegian facilities. In mid-2025, Proton went further, committing roughly CHF 100 million to new infrastructure outside Switzerland, citing the same surveillance-law risk mentioned above. Proton still runs and owns its own hardware rather than leasing from a third-party cloud, which matters for auditability, but the country footprint has already outgrown “Switzerland” and appears to be widening further. Because none of this is independently registered anywhere, and because Proton’s own disclosures already contradict a single-country summary, treat any claim about where a specific mailbox’s data lives as the company’s word, not an audited fact.

Zero access encryption, open clients, no lock-in

Technically, the encryption claims stand up better than most vendors’ do because Proton publishes the client source rather than asking users to take its word for it. The mail, calendar, drive, and password manager clients are open source, so outside researchers can and do check the cryptography. Proton also supports standard IMAP and SMTP through a locally run bridge app, so a Thunderbird or Outlook user is not stuck inside a proprietary web client, and full data export is available if you want to leave. That combination, open clients plus a standard export path, is the strongest evidence for the “TECH” side of Proton’s pitch, and it is independently checkable in a way the data-center footprint is not.

The security posture is checkable, too. Proton has published third-party audits of its apps, and it disclosed early on, in a public account of a large DDoS attack that hit its infrastructure in 2015, the kind of operational detail vendors usually keep quiet. Paid accounts also get Proton Sentinel, an opt-in program that adds anomaly detection and manual review for suspicious login attempts. None of this is unique to Proton among privacy-focused vendors, but it’s independently checkable rather than a bare assertion, which is more than most competitors in this category offer.

The price shape

Proton Mail runs a free tier (1 GB, one address, a daily send cap) up through a paid ladder: a Mail Plus plan for a single inbox with custom domain support, an Unlimited bundle that adds VPN, Drive, Pass and Wallet at Plus-tier limits, and family plans (Duo, Family) that split a shared storage pool across several people. Current pricing sits in the single-digit euros a month for the basic paid mail tier and low double digits for the full bundle, cheaper on an annual commitment than month to month, in line with what most consumer subscription software charges. The historical “Visionary” plan, sold only to 2014 crowdfunding backers, is the priciest tier and mostly a legacy artifact rather than something new customers can buy into.

Proton Mail vs Gmail: the actual difference

The comparison that matters is what each company is built to do with your data; both handle labels, filters, and search fine. Gmail’s parent, Google, is built on an advertising business, and Gmail plugs into Google Workspace’s broader productivity and identity stack, which is precisely why it’s hard to leave once a team has adopted Docs, Meet, and Google’s admin console around it. Proton Mail is built on subscription revenue with no ad targeting on message content, and, unlike Gmail’s server-side storage, encrypts mail at rest by default rather than as an add-on.

The tradeoff runs the other way on maturity and integration depth. Google Workspace has a decade-plus head start on enterprise admin tooling, third-party integrations, and IT department familiarity, things Proton for Business is still building out. Switching from Gmail to Proton Mail buys you a different trust model and a different business model behind it; it does not yet buy you the same breadth of enterprise plumbing.

Storage is one place the two products diverge in practice. Google sells storage per Workspace account, largely separate across Gmail, Drive, and Photos depending on the tier. Proton pools mail and Drive storage into one shared allowance per plan, which is simpler to reason about but means a mailbox full of large attachments eats into the same quota as your synced files. Custom domains, catch-all addresses, and short @pm.me aliases all come standard on Proton’s paid mail tiers rather than being gated behind a separate enterprise SKU, which is a real difference for a small business or a sole trader deciding between the two.

Who it fits, and who it doesn’t

Proton Mail fits people who have a specific reason to want a provider whose business model isn’t ad-funded, and who value being outside EU and US jurisdiction as a matter of legal exposure, journalists, researchers, activists, or anyone handling correspondence they’d rather a US subpoena or an EU data request couldn’t reach directly. It also fits privacy-conscious individuals and small teams who want workable IMAP support and don’t need deep enterprise tooling.

It fits less well for organizations that need the kind of admin console, compliance certifications, and third-party integrations that large enterprises expect from Workspace, and for anyone who has read “Swiss jurisdiction” as a guarantee that no authority anywhere can ever compel disclosure. The 2021 IP-logging case and the annual compliance numbers in Proton’s own transparency report say otherwise. The dossier above lays out exactly what’s verified on the Jurisdiction and Independence axes and what remains the company’s own account, so you can weigh the tradeoff against your own risk model rather than against the marketing copy.

Sources

• Wikipedia: Proton AG
• Wikipedia: Proton Mail
• CERN: CERN inspires entrepreneurs for email encryption
• Proton: About Proton
• Proton: Proton is transitioning towards a non-profit structure
• Proton: Proton Mail security
• Proton: Proton Mail’s reliability SLA
• Proton: Transparency report
• Proton: Proton plans explained
• Zefix (Swiss commercial register): Proton AG entity search
• WeLiveSecurity (ESET): ProtonMail forced to log user’s IP address after order from Swiss authorities
• TechRadar: “We would be less confidential than Google,” Proton threatens to quit Switzerland over new surveillance law
• Le News: Proton freezes Swiss investment over surveillance fears