Proton AG Due Diligence

Run due diligence on Proton AG: check compliance and get alerts when suppliers or ownership change.

Switzerland · owned by Proton Foundation (Switzerland) · proton.me · 43 vendors

Proton is a Swiss privacy technology company that provides end-to-end encrypted email, VPN, cloud storage, password management, and other privacy-focused digital services. Founded by scientists who met at CERN, the company operates under Swiss privacy laws and is committed to putting people before profits.

Resilience scores

Technology vendors

Services catalogue

10 services in catalogue across 5 categories; runs on 43 sub-vendors.

Insights

Last updated 2026-10-20 · revision 35

43 direct vendors, 292 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

10 in-scope frameworks identified; showing 3.

SOC 2 (source) — Evidence found

Evidence: https://proton.me/business/trust, https://proton.me/blog/soc-2

CPRA — Evidence found

Evidence: https://proton.me/business/trust, https://proton.me/legal/privacy

GDPR (source) — Evidence found

Evidence: https://proton.me/business/gdpr, https://proton.me/legal/dpa, https://proton.me/business/trust, https://proton.me/legal/privacy, https://proton.me/legal/transparency

Financials

Three-year financials

Financial Resilience Score: 7/10

Proton AG demonstrates solid financial resilience despite limited public disclosure. The company operates a subscription-based SaaS model with over 100 million users and more than 100,000 business customers, providing highly visible and recurring revenue. Founder Andy Yen has publicly stated the company is profitable or roughly break-even and generates over CHF 100 million in annual revenue as of 2023, with strong double-digit YoY growth. The company is largely bootstrapped, having taken minimal outside venture capital since inception (only a 2014 crowdfunding raise of >USD 550k and a small 2021 raise of USD 2M). This reduces dilution and runway pressure. The 2024 transfer of majority ownership to the nonprofit Proton Foundation reinforces mission continuity and removes short-term shareholder exit pressure, though it may also limit future growth financing options. Key risks include limited financial transparency for external stakeholders, consumer subscription concentration exposing revenue to churn and competitive pressure from Google/Apple/Microsoft privacy bundling, heavy R&D burden across 10+ product lines, regulatory risk in jurisdictions that block VPN services, and material AI capex requirements for Lumo AI competing against hyperscalers. Overall, the diversified product portfolio, Swiss jurisdictional advantage, and strong brand moat in privacy support a resilient outlook.

Key strengths: Subscription-based recurring SaaS revenue with 100M+ user base, Bootstrapped with minimal external debt or VC dependency, Diversified product portfolio (Mail, VPN, Drive, Pass, Calendar, Meet, Wallet, Lumo AI, SimpleLogin, Standard Notes), Strong brand and trust moat in privacy niche, Swiss jurisdiction with strong privacy laws as marketing asset, Nonprofit Proton Foundation majority ownership ensures mission continuity, Reported profitability or break-even for several years, Revenue exceeding CHF 100M as of 2023 with strong double-digit growth

Risk factors: Limited financial transparency as private foundation-controlled company, Consumer subscription concentration sensitive to churn and FX, Competitive pressure from Google/Apple/Microsoft bundling privacy features, Heavy R&D burden competing across 10+ product lines, Regulatory risk including VPN bans in Russia, Iran, China, EU Chat Control and similar proposals could affect encrypted messaging, Foundation governance may prioritize mission over profit maximization, Material AI capex required for Lumo AI vs. hyperscaler competition

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report