Proton is a privacy-focused provider of connected services: Proton Mail, Calendar, Drive, VPN, Pass, Docs, Sheets, Meet, Wallet and Authenticator, plus Proton for Business for organisations. The services are delivered as SaaS and through apps. According to Proton, end-to-end encryption is the foundation: message content in Mail, files in Drive, calendar events and credentials in Pass are encrypted, and Proton states it cannot access customer data. The company reports ISO 27001 certification and a SOC 2 Type II audit.
Proton AG is headquartered in Plan-les-Ouates near Geneva, Switzerland, and its primary shareholder is the non-profit Proton Foundation; the company says it has no venture capital investors. Swiss law applies to the company. Proton operates data centres in Switzerland, Germany and Norway (as of December 2024). According to Proton, its apps are open source and independently audited. Switzerland is not an EU member state but an EFTA country, so for a European organisation Swiss jurisdiction is a deliberate consideration alongside the GDPR.