INDEX / DIRECTORY / PROTON / DIGITAL

Proton DIGITAL

DIGITAL INFRASTRUCTURE AUDIT UPDATED 2026-08-27
Digital Score 6.50 /10 C Proton - BDS-1000 579
Digital 6.50

Evidence-only forensic audit. Scoring happens downstream - see the main dossier for the composite assessment.

Forensic audits like this are reader-funded - no sponsors, no ads. Support OpenIntel →

Digital Audit: Proton

Enterprise Technology Stack & Vendor Relationships

Proton stated in 2015 that it partnered with Radware for cloud-based DDoS mitigation and described Radware as part of its first-line defense against attacks, while also stating that the setup did not require Proton to hand over SSL keys 1.
Proton stated again in 2016 that Proton Mail had been protected by Radware’s cloud DDoS services since November 2015, and Radware’s current company locations page identifies Tel Aviv as its international headquarters 23.
The reviewed current Proton materials did not confirm whether Radware remains an active vendor relationship at present 123.
Proton’s privacy policy, last modified 12 May 2026, publicly lists processors and processing locations connected to support, sales, and payments, including ProtonLabs DOOEL Skopje, ProtonLabs Taiwan Co., Ltd, Zendesk, Stripe, PayPal, Chargebee, and Atlassian, with processing locations in Macedonia, Taiwan, the United States, Singapore, the European Union, and the United Kingdom, and no Israeli-domiciled processor appears in that public list 4.
No public evidence identified of Proton licensing, subscribing to, or integrating Check Point, Wiz, SentinelOne, CyberArk, NICE, Verint, Claroty, or Palo Alto Networks in the reviewed Proton disclosures and public materials 4512.
No public evidence identified of named systems integrators, digital-transformation consultancies, or IT outsourcers deploying Israeli-origin technology for Proton in the reviewed official materials 674.

Surveillance, Biometrics & Retail Technology

No public evidence identified of Proton using Israeli-origin facial recognition, biometric identification, behavioural analytics, gait analysis, predictive policing, sentiment analysis, social-media monitoring, or workforce-surveillance tools in the reviewed public materials 68491011.
No public evidence identified that such tools reach Proton indirectly via named third-party platform providers or bundled suites in the reviewed public materials 491011.
The reviewed source base for this audit consists primarily of Proton’s own public disclosures together with UN and OHCHR materials rather than procurement records or internal technical documentation, which limits visibility into non-public tooling choices 68491011.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Proton’s privacy policy states that its services are operated by Proton AG in Geneva, Switzerland, under Swiss law, and that its EU representative is located in Luxembourg 4.
The same policy states that some support, sales, and payment-related data is processed through group entities or third-party processors in Macedonia, Taiwan, the United States, Singapore, the European Union, and the United Kingdom 4.
Proton states that its alternative routing system can send network traffic through third-party networks that Proton does not control, and Proton says those third parties could record a user’s IP address and the fact that the user is trying to reach Proton, but not the encrypted content itself 45.
Proton VPN announced in January 2019 that it had installed new servers in Israel, and Proton VPN’s current Israel location page states that it offers 14 servers in Tel Aviv and Petah Tikva with 10 Gbps connections 1213.
The reviewed current Israel location page is public confirmation that Proton continued advertising Israel-based VPN endpoints after 19 July 2024 and after November 2024 13.
A 2022 Proton VPN infrastructure disclosure states that Proton removed physical servers from India rather than comply with local logging rules and replaced them with Singapore-based Smart Routing servers, but no equivalent reviewed Proton source states that the current Israel location is Smart Routing rather than local server presence 14.
The reviewed public materials did not identify the specific Israeli colocation or datacenter counterparty, hosting arrangement, or contract structure behind Proton VPN’s Israel nodes 13.
Proton’s transparency report, updated 6 January 2026, states that only requests coming through official Swiss channels are legally binding for Proton VPN, lists 53 Proton VPN orders in 2024 and 59 in 2025 with all denied, and records a January 2019 foreign-country request approved by the Swiss court system that Proton said it could not satisfy because it had no customer IP information 15.
Proton’s law-enforcement page separately states that Proton AG does not provide data directly to foreign authorities and may redirect foreign requesters to competent Swiss authorities or MLAT channels 16.
No public evidence identified of Proton participating in Project Nimbus, Israeli government cloud initiatives, or sovereign-cloud and data-sovereignty offerings directed to Israeli state institutions or military bodies 6491710111516.

Defence, Intelligence & Security Sector Technology Relationships

No public evidence identified of contracts, partnerships, or service agreements between Proton and the Israeli Ministry of Defence, Israel Defense Forces, Israeli intelligence agencies, Israel Police, or other Israeli security bodies in the reviewed public materials 64917101116.
No public evidence identified that Proton’s commercially available technology has been publicly documented in the reviewed materials as deployed by Israeli military, intelligence, or law-enforcement bodies in Israel or the occupied territories 9171011.
No public evidence identified of Proton developing, selling, licensing, or maintaining offensive cyber capabilities, zero-day exploit tools, or digital weapons systems for Israeli state actors 641011.
The reviewed source base is composed of public corporate disclosures and UN-linked materials rather than government procurement databases or customer contract disclosures, which constrains visibility into non-public customer relationships 6749171011.

AI, Algorithmic & Autonomous Systems

Proton’s team page publicly lists an internal role titled Engineering Director, Machine Learning & AI 8.
Proton’s privacy policy also lists product-specific privacy policies for products including Lumo and Proton Meet 4.
No public evidence identified in the reviewed materials of Proton providing AI or machine-learning systems, computer vision systems, or autonomous decision-support systems to Israeli state, military, or security bodies 81011.
No public evidence identified that Proton AI systems were trained on, or given access to, civilian population data, intercepted communications, or surveillance-derived datasets originating from Israel or the occupied territories 641011.
No public evidence identified of Proton providing autonomous target generation, automated threat detection for military use, or autonomous tracking systems to Israeli forces 1011.

Technology Ecosystem & R&D Footprint

Proton states that it has more than 600 employees and lists offices in Geneva, Zurich, Paris, London, Barcelona, Skopje, Vilnius, Prague, and Taipei, and no Israel office appears on the reviewed official team page 8.
Proton states that its primary shareholder is the Proton Foundation 6718.
Proton further states that the foundation was endowed through a donation of Proton shares by founder Andy Yen, co-founder Jason Stockman, and first employee Dingchao Lu, making the foundation the primary shareholder 18.
Proton VPN’s current ownership page states that Proton employees hold the vast majority of shares not held by the foundation, while the remaining shares are held by FONGIT and Proton users, and Proton says Innosuisse and the European Commission do not hold shares or exercise control 19.
A 2025 International Bar Association conference speaker page identifies Antonio Gambardella as Chairman of the Board for Proton AG and the Proton Foundation 20.
Current public governance pages also list Rosemary Leith, Alisee de Tonnac, and Antonio Gambardella as Proton AG board members, and list Andy Yen, Antonio Gambardella, Carissa Veliz, Tim Berners-Lee, and Dingchao Lu on the Proton Foundation side 78.
Proton’s reviewed official transaction announcements in this memo are its 2022 joining-forces announcement for SimpleLogin and its 2024 joining-forces announcement for Standard Notes, and neither was presented by Proton as an Israeli company 2122.
No public evidence identified of Proton acquiring an Israeli-origin technology company in the reviewed materials 2122.
Proton Foundation states that it makes investments to support technologies aligned with its mission and works frequently with open-source companies, but no reviewed official Proton disclosure identified an Israeli investee, Israeli venture fund, or Israeli R&D facility 718.
No public evidence identified of Proton operating Israeli R&D centres, accelerators, or innovation labs, or of co-development or patent arrangements with Israeli universities or Israeli-domiciled entities in the reviewed public materials 6782122.
Public ownership and governance pages identify the foundation, the founders’ share donation, and broad residual ownership categories, but they do not disclose a full cap table or enough detail to independently test whether any individual other than the foundation crosses a 10% threshold 671819.

Civil Society Scrutiny & Regulatory History

The reviewed 2023 OHCHR settlement-database update, 2024 OHCHR progress report, 2025 Special Rapporteur report A/HRC/59/23, and 2025 database update did not identify Proton as the subject of a documented finding or discussion regarding settlement-related business activity 9171011.
No public evidence identified of an organized boycott or divestment campaign against Proton with a source chain grounded in primary evidence beyond informal web discussion around Proton VPN’s Israel server availability, and no documented company response to such a campaign was located in the reviewed public materials 121391011.
No public evidence identified of regulatory inquiries, export-control actions, sanctions-related investigations, or legal challenges involving Proton’s technology sales or services to Israeli state entities in the reviewed public materials 649101116.
The reviewed materials indicate that Proton is a private Swiss company and that the source base available for this audit is weighted toward company web disclosures, legal pages, support pages, and UN/OHCHR materials rather than securities filings, which limits public visibility into shareholdings, vendor contract values, customer identities, and non-public infrastructure suppliers 6741516.
No Proton-specific primary record surfaced in the reviewed materials tying Proton to Israeli state procurement, Project Nimbus, settlement service delivery, or Israeli security-sector customers 91710111516.

Footnotes

  1. https://proton.me/blog/ddos-protection-guide ↩ ↩2 ↩3

  2. https://proton.me/blog/a-brief-update-regarding-ongoing-ddos-incidents ↩ ↩2 ↩3

  3. https://www.radware.com/locations/ ↩ ↩2

  4. https://proton.me/legal/privacy ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8 ↩9 ↩10 ↩11 ↩12 ↩13 ↩14 ↩15 ↩16 ↩17

  5. https://proton.me/blog/anti-censorship-alternative-routing ↩ ↩2

  6. https://proton.me/about ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8 ↩9 ↩10 ↩11 ↩12 ↩13

  7. https://proton.me/foundation ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8

  8. https://proton.me/about/team ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7

  9. https://www.un.org/unispal/document/ohchr-update-of-database_opt_june2023/ ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8 ↩9 ↩10 ↩11

  10. https://www.un.org/sexualviolenceinconflict/wp-content/uploads/2025/07/HRC-59-23.pdf ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8 ↩9 ↩10 ↩11 ↩12 ↩13 ↩14 ↩15

  11. https://www.un.org/unispal/document/business-database-26sep25/ ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8 ↩9 ↩10 ↩11 ↩12 ↩13 ↩14 ↩15

  12. https://protonvpn.com/blog/israel-vpn-servers ↩ ↩2

  13. https://protonvpn.com/vpn-servers/israel ↩ ↩2 ↩3 ↩4

  14. https://protonvpn.com/blog/servers-india ↩

  15. https://proton.me/legal/transparency ↩ ↩2 ↩3 ↩4

  16. https://proton.me/legal/law-enforcement ↩ ↩2 ↩3 ↩4 ↩5 ↩6

  17. https://www.un.org/unispal/document/ohchr-report-02aug24/ ↩ ↩2 ↩3 ↩4 ↩5 ↩6

  18. https://proton.me/fr/blog/proton-non-profit-foundation ↩ ↩2 ↩3 ↩4

  19. https://protonvpn.com/support/who-owns-protonvpn ↩ ↩2

  20. https://www.ibanet.org/conference/CONF2551/speaker-details/CONF2551_333014 ↩

  21. https://proton.me/blog/proton-and-simplelogin-join-forces ↩ ↩2 ↩3

  22. https://proton.me/blog/proton-standard-notes-join-forces ↩ ↩2 ↩3