Italian hacktivist-founded VPN (Perugia, 2010), no-logs, port forwarding, but no longer serves Italian residents (Piracy Shield).
- FROM
- €7/Mt.
- CLOUD ACT
- NONE
Zusammenfassung aus Eigentümerschaft und CLOUD-Act-Risiko.
CERN-founded Swiss VPN (Proton AG, Geneva), owned by non-profit Proton Foundation; 15,000+ servers, audited no-logs, open-source apps, free tier.
Proton VPN aus der Kategorie VPN ist ein EU-eigener Dienst mit Switzerland als Hosting-Standort und ohne erkennbares CLOUD-Act-Risiko.
Proton VPN, operated by Proton AG in Plan-les-Ouates, Geneva, is owned primarily by the non-profit Proton Foundation (Swiss-registered, CHE-418.863.304). Founders Andy Yen, Jason Stockman, and Dingchao Lu (CERN alumni) donated their shares in 2024, structurally protecting Proton from US-PE acquisition; account data is encrypted and stored exclusively in Switzerland, Germany, or Norway, Proton owns and operates its Secure Core servers and most Swiss/German nodes, the no-logs policy has been independently audited and published, transparency reports and warrant canary are public, all apps are open-source. Swiss-jurisdiction, non-profit-owned, with a public DPA (proton.me/legal/dpa), no CLOUD Act exposure: the US support/payment sub-processors (Zendesk, Stripe, PayPal, Chargebee) are ancillary and off the service-data path, never touching user traffic or encrypted data (Proton runs its own infrastructure), so under a data-at-rest definition CLOUD Act exposure is none, and the strongest ownership and transparency signal set in this category.
Wie stark Kundendaten US-Behörden nach dem CLOUD Act (Clarifying Lawful Overseas Use of Data Act) ausgesetzt sind.
Wo die letztliche Kontrolle über das Betreiberunternehmen liegt.
Proton VPN is part of the Proton privacy-tech group operated by Proton AG (Plan-les-Ouates, Geneva, Switzerland) and is the structurally strongest VPN listing in this directory by procurement-grade criteria. Founded in 2014 by Andy Yen, Jason Stockman, and Dingchao Lu (scientists who met at CERN), Proton has run a privacy-by-default product portfolio (Mail, VPN, Drive, Calendar, Pass) for over a decade. In 2024, the founders and first employee donated their controlling shares to the newly-established Proton Foundation, a non-profit registered in Geneva (CHE-418.863.304) which now serves as the primary shareholder of Proton AG. The foundation structure permanently protects Proton from venture-capital acquisition or US private-equity takeover, a unique ownership architecture in the EU/CH privacy-tech landscape.
Compliance posture is gold-standard. Switzerland holds an EU adequacy decision under Art. 45 GDPR, so transfers between EU and CH require no SCCs. The privacy policy (last updated 30 July 2025) commits that account data is encrypted and stored exclusively in Switzerland, Germany, or Norway; Proton owns and operates its Secure Core servers and most Swiss/German VPN nodes; all servers feature full-disk encryption with no stored logs or user data. The no-logs policy has been independently audited and published (a differentiator vs nearly every other VPN brand that claims no-logs without an audit), and Proton publishes a public transparency report plus a warrant canary documenting law-enforcement requests. All consumer apps are 100% open-source.
The product covers 15,000+ servers across 140+ countries, supports up to 10 simultaneous device connections on paid plans, and offers Secure Core (multi-hop through Swiss / Icelandic / Swedish fortified servers), NetShield ad/tracker/malware blocking, port forwarding, P2P/BitTorrent-friendly servers, streaming-unblock servers, and Tor-over-VPN. The free tier is uncommonly generous: one device, medium speed, servers in 10 randomly-selected countries, no data limits, no artificial speed throttling, no ads, and full privacy guarantees. VPN Plus is the paid entry tier with multi-currency (CHF / EUR / USD); spring-sale 1-year discounts up to 65% have been advertised. Best fit: privacy-maximalist consumers, journalists, activists, EU SMBs, and any organisation needing the strongest possible ownership-and-jurisdiction guarantees in a VPN provider.
Payment data processing; ancillary
Payment data processing; ancillary
Payment data processing; ancillary
Customer support data processing; ancillary
Customer support data storage
Customer support / direct communications (Proton group entity)
Customer support / direct communications (Proton group entity)
| Vendor | Country | Purpose | Owner |
|---|---|---|---|
| Chargebee, Inc. | United States | Payment data processing; ancillary | US |
| PayPal group | United States | Payment data processing; ancillary | US |
| Stripe, Inc. | United States | Payment data processing; ancillary | US |
| Zendesk, Inc. | United States | Customer support data processing; ancillary | US |
| Atlassian Pty Ltd | Australia | Customer support data storage | non-US |
| ProtonLabs DOOEL Skopje | North Macedonia | Customer support / direct communications (Proton group entity) | non-US |
| ProtonLabs Taiwan Co., Ltd | Taiwan | Customer support / direct communications (Proton group entity) | non-US |
Italian hacktivist-founded VPN (Perugia, 2010), no-logs, port forwarding, but no longer serves Italian residents (Piracy Shield).
Swedish privacy VPN (Stockholm, est. 2012): Blind Operator, RAM-only, audited no-logs; acquired by Malwarebytes (US) 7 Nov 2024.
Romanian-operated VPN (CyberGhost S.R.L., 2011) under Kape Technologies (UK; ex-Crossrider) → Unikmind/Teddy Sagi (IM) since 2023; listed as a warning.