Proton CTO says trust, not features, is the product

Proton sells email, cloud storage, a VPN, docs, calendars, a password manager, video calling, and now an AI assistant called Lumo. But on The Verge’s Decoder, CTO Bart Butler argued that the real product is trust.

According to Butler, that trust rests on two structural choices. First, Proton encrypts as much user data as it can, so the company says it cannot simply turn around and monetize information it cannot access. Second, its business model is based on users paying directly rather than advertising, which Butler said aligns the company’s incentives with privacy instead of data extraction.

×

That pitch is also reflected in Proton’s setup. The company and its servers are based in Switzerland, a choice tied partly to the country’s geopolitical neutrality. Two years ago, Proton shifted to a nonprofit structure governed by a foundation, a model meant to reinforce its public-interest claims.

But the interview focused just as much on the limits of those protections. Earlier this year, the Swiss government requested payment data that helped the FBI identify a protester linked to the Stop Cop City movement in Atlanta, Georgia, and Proton complied. Butler said the company faces constant pressure from governments, especially when cases are framed around issues such as terrorism, child safety, surveillance, and age verification.

Proton has already said it would leave Switzerland if local law no longer supported its privacy mission. Butler told Decoder the company would also consider pulling operations from EU countries like Germany and Norway if pending surveillance laws in European courts go too far. He said those are not idle threats, and that Proton is actively assessing what it would mean to leave Europe if things become, in his words, more “dystopian.”

Recommended reading

Meta adds parent alerts for teen self-harm chats

On the product side, Butler said Mail and VPN remain Proton’s two biggest businesses, though the company does not disclose direct financials. Newer products such as Calendar, Drive, and Pass are smaller, but he said they are growing quickly and increasingly work as part of a broader privacy-focused suite.

One of Butler’s sharper points was that privacy features should not require users to understand cryptography.

“If you’ve mentioned the word encryption to the user, you’ve already failed.”

His argument was straightforward: users are buying the promise that Proton is structurally constrained from betraying them. Whether regulators accept that premise, especially in Europe, may determine where Proton can keep operating next.