Economic Audit: Proton
Supply Chain & Sourcing Relationships
Proton stated on 15 December 2015 that it partnered with Radware for DDoS mitigation during sustained attacks on Proton Mail.1 A subsequent Proton update said Proton Mail had been protected by Radware’s Cloud DDoS Protection Services since November 2015.2 Radware’s corporate locations page identifies its international headquarters in Tel Aviv, making this the clearest disclosed Israel-linked vendor relationship in the reviewed record.3
Proton said again in a 2018 attack-response post that Radware was among the vendors helping mitigate attacks, which shows the relationship extended at least into 2018.4 The reviewed memo sources do not establish whether that Radware relationship remained active after 2018, ended, or was replaced.1234
Proton’s reviewed public materials continue to describe a software, privacy, and online-services business rather than a physical-goods retailer or manufacturer, which limits the visible record for physical sourcing relationships.56 no public evidence identified of direct supplier relationships with Israeli agricultural exporters, importer-of-record entities, seasonal produce sourcing, or other physical-goods procurement.5678 no public evidence identified of Israeli-origin physical goods reaching Proton through third-party distributors, resellers, or white-label consumer-product arrangements.5678
Product Origin, Labeling & Regulatory Compliance
Proton’s reviewed public materials describe a privacy-technology and software-services business rather than a seller of consumer physical goods, which narrows the visible risk surface for origin-labeling or goods-import compliance issues in this memo set.56
No public evidence identified of settlement-origin goods, origin-labeling disputes, customs findings, DEFRA findings, or country-of-origin compliance actions involving Proton in the reviewed sources.5678 no public evidence identified of a Proton corporate policy specifically addressing sourcing or labeling goods from occupied or contested territories.569
The OHCHR settlement-database update, the UN Human Rights Council report, and the DBIO report supplied in the memo do not identify Proton as a company implicated through goods-origin or settlement-linked trade findings in the reviewed material.710811
Investment, Capital & Financial Exposure
Proton’s public legal and governance materials identify Proton AG as a Swiss operating company supervised by the Swiss non-profit Proton Foundation.6129 Proton Wallet materials identify Proton Financial AG as a wholly owned subsidiary of Proton AG domiciled in Baar, Switzerland, and Proton Wallet’s terms list company number CHE-279.911.859.1314 Proton VPN’s privacy policy also states that Proton Wallet is operated by Proton Financial AG, which it describes as a wholly owned subsidiary of Proton AG domiciled in Switzerland.15
The reviewed materials do not identify direct capital investment by Proton inside Israel or the Occupied Palestinian Territory, Israeli sovereign-bond holdings, Israel-focused funds, underwriting of Israeli sovereign debt, Israel Bonds distribution, or insurance or lending activity of the kind described in the memo’s finance rubric.51291314 That negative finding is qualified by the memo’s evidence gap that Proton is privately held and the reviewed public materials did not include audited consolidated financial statements, a full shareholder registry, or geographic revenue segmentation.5129
The acquisitions identified in Proton’s own reviewed materials are SimpleLogin in 2022 and Standard Notes in 2024.1617 Proton’s SimpleLogin announcement describes SimpleLogin as located in France.16 No Israeli operating-company acquisition was identified in the reviewed sources.1617
No public evidence identified of Israeli R&D centres, accelerators, or technology-partnership programs operated by Proton.5189 no public evidence identified in the reviewed sources of material Israel-specific investments by Proton’s named controlling principals or board members.12189 Proton’s June 2024 governance post states that Andy Yen, Jason Stockman, and Dingchao Lu endowed the Proton Foundation through a donation of Proton shares, but it does not identify Israel-linked personal investment vehicles or Israeli portfolio companies.12189
Operational Presence & Market Activity
Proton VPN currently markets “14 VPN servers in Tel Aviv and Petah Tikva,” which is the strongest reviewed evidence of current Israel-linked service infrastructure endpoints.19 The same page presents those servers as part of Proton VPN’s network offering for users seeking local Israeli connectivity.19
Proton VPN also currently markets Palestinian Territories servers.20 Proton states that it offers “physical servers in the Palestinian Territories (near Ramallah, in the West Bank),” which is current self-disclosed evidence of service infrastructure in the West Bank.20 Proton’s Smart Routing documentation says some country offerings are Smart Routing rather than in-country hardware and lists “Palestine*” with France (Marseille), while explaining that locations marked with an asterisk have both Smart Routing servers and physical servers inside the country.21 Proton’s current VPN server-list page describes a network spanning 148 countries, 20,688 servers, and 195 locations, and the page snippet returned in the reviewed research lists Palestinian Territories with 2 cities and 34 servers.22
Registry-derived network data on Proton AG’s ASN AS208172 currently lists prefixes labeled PV-SL-HOSTED-Tel-Aviv and PV-SL-HOSTED-Nablus.23 This is third-party infrastructure evidence tied to Proton AG’s ASN rather than a Proton-authored explanation of those specific prefixes.23
Proton VPN’s privacy policy says account-maintenance data are managed on servers exclusively located in Switzerland, Germany, or Norway.15 That policy also states that Proton or its subsidiaries wholly own and operate the servers that maintain account information.15 The policy further says Proton physically owns and operates all Secure Core servers and a majority of its VPN servers in Switzerland and Germany, but it does not state that the Israel or West Bank endpoints are Proton-owned hardware rather than leased or third-party hosted capacity.15 The reviewed materials therefore do not fully resolve ownership structure for the Israel or West Bank endpoints, exact local counterparties, or whether every listed endpoint is Proton-owned hardware versus leased or hosted capacity.151920212223
No public evidence identified of Proton offices, support centres, warehouses, retail locations, or Israel-domiciled operating entities in the reviewed corporate pages and filings.56189 Proton’s public contact and legal materials identify Geneva / Plan-les-Ouates, Switzerland as Proton AG’s domicile and headquarters.569 Proton’s team page currently lists offices in Geneva, Zurich, Paris, London, Barcelona, Skopje, Vilnius, Prague, and Taipei, and Israel is not among the listed offices.18
Proton’s team page says Proton has more than 600 employees and over 100 million user accounts.18 Proton’s 30 June 2025 complaint against Apple states that Proton had more than 100 million user accounts across more than 180 countries and a workforce exceeding 500 employees.24 Proton’s 30 June 2025 blog post about joining the Apple suit and the related Justia docket likewise present Proton as a global business, but none of those reviewed sources disclose Israel-specific headcount, assets, or revenue.2526
The reviewed sources support a conclusion that Proton treats Israel and the Palestinian Territories as reachable service markets for VPN connectivity, but they do not show either geography being described as a strategic growth market in Proton’s broader corporate disclosures.51924202122 Proton’s corporate pages characterize the company in global terms rather than around an Israel-centred or West Bank-centred operating footprint.51825
Corporate Structure & Foundational Ties
Proton states that it was launched in Switzerland in 2014.5 Proton’s legal materials identify Proton AG as Swiss-domiciled at Route de la Galaise 32, Plan-les-Ouates, Geneva.69
Proton’s June 2024 governance change transferred founder-held shares to the Proton Foundation, making the Foundation the primary shareholder of Proton.129 Proton’s June 2024 post states that Andy Yen, Jason Stockman, and Dingchao Lu donated Proton shares to endow the Proton Foundation.9 The Proton Foundation states that no change of control of Proton can occur without the Foundation’s consent and that the Foundation is a Swiss non-profit registered in Geneva.12
Current Proton materials continue to say Proton has no venture capital investors.5189
The reviewed authoritative source set does not identify Proton in the OHCHR 2023 settlement-database update, the UN Human Rights Council report A/HRC/59/23, the DBIO IV report, or the OHCHR 2025 press update supplied in the memo.710811 That absence weighs against any documented corporate-structure tie between Proton and businesses listed in those settlement-related materials.710811
No public evidence identified of Proton being founded in Israel, headquartered in Israel, or principally managed from Israel in the reviewed sources.5618 no public evidence identified of Israeli tax residency or beneficial ownership or control by Israeli capital in the reviewed materials, which instead identify the Swiss Proton Foundation as Proton’s disclosed primary shareholder.129 no public evidence identified of Israeli state ownership, Israeli government board appointees, Israeli government contracts, critical-national-infrastructure designation in Israel, or governance mechanisms structurally tying Proton to the Israeli state or its policy objectives.12189 Proton’s reviewed team and foundation materials instead frame governance around Proton’s founders, management, and Swiss foundation oversight.12189
Profit Repatriation & Economic Contribution
The Proton Foundation states that 1% of Proton’s revenues are allocated to the Foundation’s charitable activities whenever financial conditions allow.129 This is a disclosed Swiss-directed flow from Proton AG to a Swiss non-profit rather than an Israel-directed profit-repatriation mechanism.129 Proton’s June 2024 post also says the Proton Foundation will be an investor supporting companies and technologies aligned with its mission, but no Israel-specific investees were identified in the reviewed sources.9
No public evidence identified of Israel-specific revenue attribution, profits remitted from Israeli subsidiaries, or public designation of Proton as a key employer or sector anchor in the Israeli economy.56181524 The reviewed sources likewise do not disclose tax contributions, payroll scale, or capital expenditure specific to Israel.15242526 no public evidence identified of profits generated in Israel flowing to a distinct Israeli-domiciled Proton subsidiary.1314 The only specifically identified subsidiary in reviewed current materials is Swiss-domiciled Proton Financial AG.1314
Proton VPN’s Israel server page and Palestinian Territories server page show commercial service availability in Israel and the West Bank, but the reviewed sources stop short of quantifying the economic significance of that activity to either market.19202122 The prior audit’s negative finding on occupied-territory operations is superseded by current Proton disclosures describing physical servers near Ramallah in the West Bank and mixed Smart Routing plus physical-server treatment for Palestine.2021 Current evidence therefore supports service availability in internationally recognized occupied Palestinian territory through Proton VPN location offerings, while still not disclosing revenue, tax contribution, payroll, or capex attributable to those locations.202122
The memo’s evidence gaps are material to this section because Proton is privately held and the reviewed public materials do not provide audited geographic revenue breakdowns or a full subsidiary map.5129 Within those limits, the strongest documented economic ties in the reviewed record are Israel-facing and West Bank-facing VPN infrastructure offerings and the historical Radware vendor relationship, not disclosed local ownership, profit remittance, or physical office presence.12193420212223
Footnotes
-
https://proton.me/blog/a-brief-update-regarding-ongoing-ddos-incidents ↩ ↩2 ↩3
-
https://proton.me/about ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8 ↩9 ↩10 ↩11 ↩12 ↩13 ↩14 ↩15 ↩16 ↩17 ↩18
-
https://proton.me/legal/privacy ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8 ↩9 ↩10 ↩11 ↩12
-
https://www.ohchr.org/sites/default/files/documents/hrbodies/hrcouncil/sessions-regular/session31/database-hrc3136/23-06-30-Update-israeli-settlement-opt-database-hrc3136.pdf ↩ ↩2 ↩3 ↩4 ↩5 ↩6
-
https://dontbuyintooccupation.org/wp-content/uploads/2024/11/2024_DBIO-IV-report.pdf ↩ ↩2 ↩3 ↩4 ↩5 ↩6
-
https://proton.me/blog/proton-non-profit-foundation ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8 ↩9 ↩10 ↩11 ↩12 ↩13 ↩14 ↩15 ↩16 ↩17 ↩18 ↩19 ↩20
-
https://digitallibrary.un.org/record/4088356/files/A_HRC_59_23-EN.pdf ↩ ↩2 ↩3
-
https://www.ohchr.org/en/press-releases/2025/09/un-human-rights-office-updates-database-businesses-involved-israeli ↩ ↩2 ↩3
-
https://proton.me/foundation ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8 ↩9 ↩10 ↩11 ↩12 ↩13
-
https://proton.me/blog/proton-and-simplelogin-join-forces ↩ ↩2 ↩3
-
https://proton.me/blog/proton-standard-notes-join-forces ↩ ↩2
-
https://proton.me/about/team ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8 ↩9 ↩10 ↩11 ↩12
-
https://protonvpn.com/vpn-servers/palestinian-territories ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8
-
https://protonvpn.com/support/how-smart-routing-works ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7
-
https://www.cohenmilstein.com/wp-content/uploads/2025/06/2025.06.30-Proton-v.-Apple-Class-Action-Complaint.pdf ↩ ↩2 ↩3 ↩4
-
https://dockets.justia.com/docket/california/candce/4:2025cv05450/452040 ↩ ↩2