Proton

Key Findings

• Digital: Proton VPN currently markets 14 VPN servers in Tel Aviv and Petah Tikva, with 10 Gbps connections, and has publicly advertised Israel-based VPN service since 2019.^{1, 2}
• Palestinian access: Proton VPN currently states that it offers physical servers near Ramallah in the West Bank; its documentation describes Palestine as having both Smart Routing and physical servers, without disclosing local counterparties, endpoint ownership, or revenue.^{3, 4}
• Economic: Proton disclosed a DDoS-mitigation relationship with Israeli-headquartered Radware from 2015 through at least 2018; the reviewed record does not establish whether it remains active.^{5, 6, 7}
• Not found: No public evidence identified of Israeli military, intelligence, police, settlement, Project Nimbus, or other Israeli state-security contracts involving Proton in the reviewed materials.^{8, 9, 10, 11}

Target Profile

Key Facts:

• Proton states that its services are operated by Proton AG under Swiss law and that the company was launched in Switzerland in 2014.^{8, 12}
• Proton states it has more than 600 employees and lists offices in Geneva, Zurich, Paris, London, Barcelona, Skopje, Vilnius, Prague, and Taipei; no Israel office appears on that list.¹⁵
• Proton Financial AG is a wholly owned Swiss subsidiary of Proton AG.¹⁶

Executive Summary

Proton is a Swiss privacy-technology company offering encrypted communications, VPN, cloud storage, password management, and related online services. The strongest documented Israel/Palestine nexus is commercial service infrastructure: Proton VPN currently advertises 14 servers in Tel Aviv and Petah Tikva, and it markets physical servers near Ramallah in the West Bank.^{8, 1, 3} The reviewed materials do not disclose the relevant Israeli or West Bank datacentre counterparties, the local contract structure, whether each endpoint is Proton-owned hardware or leased capacity, or location-specific revenues.^{12, 1, 3, 4, 17}

A second documented connection is Proton’s historical use of Radware for cloud-based DDoS mitigation. Proton described Radware as a protective vendor during attacks beginning in 2015 and again referenced the vendor in a 2018 incident-response post. Radware identifies Tel Aviv as its international headquarters. The reviewed record does not establish whether that relationship continued after 2018, ended, or was replaced.^{5, 6, 7, 18}

The evidence does not support characterising Proton as a defence contractor, military supplier, surveillance vendor, settlement operator, Project Nimbus participant, or Israeli state-security technology provider. No public evidence identified of contracts or agreements with the Israeli Ministry of Defense, IDF, Israeli intelligence agencies, Israel Police, or other Israeli security bodies in the reviewed materials. Proton was also not identified in the specific OHCHR and UN settlement-related materials reviewed, nor in the supplied BDS priority-target material.^{9, 10, 11, 19}

Proton’s physical-server representation near Ramallah is a documented service footprint in the West Bank, retained as geographic and service-access context rather than as an Israeli settlement or score-driving relationship. It does not, on the supplied evidence, establish a settlement operation, Israeli-state partnership, local office, local subsidiary, local tax presence, or quantified commercial benefit. Proton’s current public regional presentation is VPN service availability in Israel and the Palestinian Territories, not a disclosed Israel-centred corporate operating footprint.^{15, 1, 3, 4, 17}

On the fixed, human-vetted V6.5 assessment, Proton receives a BRS of 454, placing it in Tier C (Substantial Complicity). This reflects the rubric’s assessment of communications routing through Israeli VPN endpoints, direct Israel-market service availability, and sustained corporate market communications. The documented 14-endpoint footprint limits digital and economic magnitude. It does not establish interception, Israeli state access, a military customer, or recurring revenue from Israeli customers; the Palestinian Territories offering is not an aggravating score driver.^{1, 2}

Timeline of Relevant Events

Corporate Overview

Proton describes Proton AG as a Swiss corporation operating privacy-focused internet services. Its disclosed products include encrypted communications, VPN, cloud storage, password management, and related services.^{8, 12} Proton states that the Proton Foundation, a Swiss non-profit, is its primary shareholder and can block changes of control that would threaten its stated mission of advancing privacy, freedom, and democracy.^{13, 21}

The reviewed public materials identify Proton Financial AG as a wholly owned Swiss subsidiary of Proton AG. Proton has also announced transactions involving SimpleLogin in 2022 and Standard Notes in 2024; neither was presented by Proton as an Israeli company.^{16, 20, 23} Public materials do not provide a complete subsidiary map, audited geographic revenue segmentation, or a full cap table, limiting external visibility into non-public customer, supplier, and ownership relationships.^{12, 13, 21}

No public evidence identified of an Israeli-domiciled Proton operating entity, office, support centre, warehouse, retail site, R&D centre, accelerator, or innovation lab in the reviewed materials. Proton’s team page lists offices outside Israel, and its public corporate materials frame the company as global rather than Israel-centred.^{8, 12, 15}

The documented regional commercial footprint is Proton VPN’s service-location marketing. Proton advertises VPN servers in Tel Aviv and Petah Tikva and also markets physical servers near Ramallah in the West Bank. Its Smart Routing documentation states that locations marked with an asterisk, including Palestine, have both Smart Routing servers and physical servers inside the country; the reviewed record does not resolve the ownership or hosting arrangements of all endpoints.^{1, 3, 4, 17}

Domain Summaries

Military: Military

Mechanism of Involvement

No public evidence identified of verified Israeli Ministry of Defense, IDF, Israel Prison Service, Border Police, intelligence, or other state-security contracts, tender awards, framework agreements, MoUs, or export-licensed end-user sales involving Proton in the reviewed materials.^{8, 12, 9, 10, 11}

Proton’s reviewed products are presented as civilian privacy and software services. The reviewed record does not describe tactical, ruggedised, military-specified, targeting, weapons-integration, fire-control, autonomous targeting, or defence-grade Proton product variants.^{8, 12, 1, 16}

No public evidence identified of Proton supplying services, components, software modules, or manufacturing support to Elbit Systems, Israel Aerospace Industries, Rafael, or IMI/Elbit Land. No public evidence identified of services to Israeli bases, detention facilities, military installations, demolition-linked infrastructure, or settlement construction.^{8, 9, 10, 11}

Counter-Arguments and Evidence Limits

The strongest defence is that Proton is publicly documented as a civilian privacy-services company, not a defence manufacturer or security contractor. The Israel-specific infrastructure identified in the reviewed official materials is VPN service infrastructure in Tel Aviv and Petah Tikva, not a military deployment.^{8, 1}

The historical Radware relationship does not establish military integration. Although Radware is Israeli-incorporated and headquartered in Tel Aviv, the reviewed record does not connect Proton’s DDoS-mitigation relationship to defence primes, Israeli military procurement, or post-2018 continuity.^{5, 6, 7, 18}

Public-source review cannot fully exclude undisclosed private customers or non-public contracts. Proton’s private ownership and limited public customer disclosure constrain verification; this is an evidence limitation, not evidence of a military relationship.^{12, 13, 21}

Named Entities and Evidence Map

Digital: Digital

Mechanism of Involvement

Proton VPN currently advertises 14 servers in Tel Aviv and Petah Tikva with 10 Gbps connections. Proton first announced Israeli VPN servers in January 2019, and its current location page confirms continued Israel-based endpoint marketing.^{1, 2}

Proton also markets physical servers near Ramallah in the West Bank. Its current Smart Routing documentation describes Palestine as a location with both Smart Routing and physical servers, while Proton’s general server listing includes Palestinian Territories among its offerings.^{3, 4, 17}

Proton disclosed that Radware provided cloud DDoS mitigation from 2015 and was still referenced in a 2018 attack-response post. The reviewed current materials do not confirm whether Radware remains a current vendor.^{5, 6, 18}

No public evidence identified of Proton licensing or integrating named Israeli surveillance, biometric, behavioural-analytics, offensive-cyber, or digital-weapons products in the reviewed materials. No public evidence identified of Proton participation in Project Nimbus, Israeli sovereign-cloud initiatives, or Israeli state-security digital-service agreements.^{12, 9, 10, 11}

Counter-Arguments and Evidence Limits

Proton’s core products are civilian privacy, encrypted communications, and VPN services. The record does not publicly document their deployment by Israeli military, intelligence, police, or other security bodies, or their use for targeting, surveillance, or autonomous military decision-making.^{8, 9, 10, 11}

Proton states that foreign authorities do not receive data directly from Proton AG and may be referred to Swiss authorities or MLAT channels. Its transparency reporting states that only official Swiss-channel requests are legally binding for Proton VPN; the cited report records all listed 2024 and 2025 Proton VPN orders as denied.^{9, 10}

The public evidence does not reveal the precise Israeli or West Bank colocation providers, hosting contracts, hardware ownership, or customer identities. Consequently, the documented infrastructure supports a finding of marketed regional VPN availability, not an inference that it is a state, military, or settlement service.^{1, 3, 4, 17}

Named Entities and Evidence Map

Economic: Economic

Mechanism of Involvement

The principal documented economic nexus is the operation and marketing of VPN service locations in Israel and the Palestinian Territories. Proton advertises 14 Israel servers in Tel Aviv and Petah Tikva and physical servers near Ramallah in the West Bank, though the record does not quantify revenue, taxes, payroll, capital expenditure, or local assets attributable to those locations.^{1, 3, 4, 17}

The clearest disclosed Israel-linked vendor relationship is Radware. Proton reported using Radware for DDoS mitigation from 2015 through at least 2018, and Radware identifies Tel Aviv as its international headquarters. The reviewed sources do not establish current continuity.^{5, 6, 7, 18}

No public evidence identified of direct investment by Proton in Israel or the Occupied Palestinian Territory, Israeli sovereign-bond holdings, Israel-focused funds, Israel Bonds distribution, Israeli R&D programmes, or Israeli-company acquisitions. The transactions identified in the reviewed materials concerned SimpleLogin and Standard Notes, neither presented as Israeli.^{20, 23}

Counter-Arguments and Evidence Limits

No public evidence identified of Proton offices, support centres, warehouses, retail outlets, or Israeli-domiciled operating entities. Proton’s disclosed domicile and headquarters are in Geneva, and no Israel office appears on the reviewed team page.^{12, 15}

Proton’s public materials do not identify Israel-specific revenues, taxes, payroll, profits remitted through an Israeli subsidiary, or Israeli capital investment. Proton is privately held and does not provide audited geographic revenue reports, a complete subsidiary map, or a full shareholder registry in the reviewed materials; this limits both adverse and exculpatory conclusions about non-public economic exposure.^{12, 13, 21}

The West Bank service footprint is not evidence of a settlement operation. No public evidence identified of operations, service contracts, subsidiaries, or infrastructure in Israeli settlements, East Jerusalem settlements, or the Golan Heights.^{3, 9, 10, 11}

Named Entities and Evidence Map

Political: Political

Mechanism of Involvement

Proton publicly frames its mission around privacy, freedom, democracy, anti-censorship, and digital rights. Its public advocacy record includes positions on free speech, protest rights, internet governance, and competition or privacy policy, rather than a documented sustained Israel-Palestine political programme.^{8, 22, 24, 25, 21}

Proton markets both Israel and the Palestinian Territories as VPN service locations. The reviewed materials present these as product-access and connectivity offerings, not as declarations of diplomatic recognition, state alignment, or political endorsement.^{1, 3, 17, 2}

No public evidence identified of a Proton-controlled statement specifically addressing Israel-Palestine in the supplied record. Unverified donation leads are not relied on as findings or score offsets.

No public evidence identified of Israel-Palestine-related corporate PAC activity, political donations, lobbying filings, crisis logistics for Israeli state or military entities, Israeli state honours, formal Israeli state partnerships, or “Brand Israel”-type campaigns in the reviewed materials.^{22, 24, 25}

Counter-Arguments and Evidence Limits

The strongest defence is that Proton’s publicly documented political and institutional activity is general digital-rights, privacy, competition, and democracy advocacy. Its verified U.S. filings concerned surveillance advertising, privacy, and mobile-app ecosystem competition, not Israel-Palestine, BDS, or Middle East policy.^{24, 25}

Proton’s Foundation materials describe a Swiss non-profit governance structure directed to privacy, freedom, democracy, and the public good. The reviewed material identifies no foundational mandate tied to an Israeli state project or other national geopolitical programme.^{13, 21}

Absence findings are document-scoped. Proton was not identified in the particular OHCHR, UN, advocacy, and BDS materials reviewed, but this does not prove the absence of every possible statement, donation, or relationship beyond the supplied source set.^{9, 10, 11, 19}

Named Entities and Evidence Map

BDS-1000 Score

Method: V6.5

• V_MAX: 5.11 Avg_OTHERS: 1.70
• BRS Score: 454 Tier: C (Substantial Complicity)

Digital is the maximum domain score because Proton’s core communications-routing service uses Israeli endpoints, engaging the rubric’s Data-Exposure / Sovereignty Principle. This is a structural exposure assessment under that rubric, not a finding of actual interception or Israeli state access. The regular but limited 14-endpoint deployment supports M=5.5; local hosting ownership, counterparties and end users remain partly unresolved. The Ramallah offering does not raise this score.^{1, 4, 2, 9, 10} The Tier reflects the fixed human-vetted V6.5 assessment across domains; it does not convert unverified allegations, historical vendor use, or document-scoped absence findings into stronger claims.

The V6.5 method separates activity type, magnitude and proximity and applies a deterministic formula. Scores reflect the vetted character, scale, and directness of documented activity, not advocacy claims or assumptions about undisclosed relationships.

Methodology Note

• This dossier relies only on the four supplied domain audits and their cited source record.
• The assessment is evidence-only: documented facts are included; claims not established by the audits are excluded or identified as unresolved.
• Impact is assessed by activity type; M reflects scale and P reflects directness. Scores are not a statement of criminal or legal liability.
• Divested, exited, discontinued, or historically documented operations are mitigated where the reviewed record does not establish continuity; Proton’s Radware relationship is therefore described as historical and unresolved after 2018.^{5, 6, 18}
• Entity attribution is limited to documented relationships. A vendor’s Israeli domicile does not by itself establish military, state, settlement, or political integration by Proton.
• Settlement-related operations may bear both Economic and Political relevance where documented, but the record here does not establish Proton infrastructure in Israeli settlements; it documents a West Bank VPN offering near Ramallah.^{3, 9, 10, 11}
• “No public evidence identified” is used where the audits’ reviewed checks found no supporting public record; it is not a claim that undisclosed activity is impossible.