Aller au contenu
EU VETTED

Proton VPN

VPN · Suisse
Fondé en 2014 · protonvpn.com

CERN-founded Swiss VPN (Proton AG, Geneva), owned by non-profit Proton Foundation; 15,000+ servers, audited no-logs, open-source apps, free tier.

Proton VPN est un service européen hébergé en Suisse, avec tout au plus une exposition américaine mineure et transitoire au titre du CLOUD Act. Référencé dans la catégorie VPN.

Notes d’évaluation

Proton VPN, operated by Proton AG in Plan-les-Ouates, Geneva, is owned primarily by the non-profit Proton Foundation (Swiss-registered, CHE-418.863.304). Founders Andy Yen, Jason Stockman, and Dingchao Lu (CERN alumni) donated their shares in 2024, structurally protecting Proton from US-PE acquisition; account data is encrypted and stored exclusively in Switzerland, Germany, or Norway, Proton owns and operates its Secure Core servers and most Swiss/German nodes, the no-logs policy has been independently audited and published every year since 2022 by Securitum (five consecutive annual audits, most recent 2026), the transparency report is public and current through June 2026, all apps are open-source. Proton deliberately does not run a warrant canary and says so: it states a canary is not meaningful under Swiss law, because Swiss law requires the target of a surveillance or data request to be notified eventually. Swiss-jurisdiction, non-profit-owned, with a public DPA (proton.me/legal/dpa): the US support/payment sub-processors (Zendesk, Stripe, PayPal, Chargebee) are ancillary and off the service-data path, never touching user traffic or encrypted data (Proton runs its own infrastructure); however, Proton's account and API endpoints sit on Proton IP ranges for which the only upstream is Cloudflare's network (AS13335, the pattern of Magic Transit DDoS scrubbing, verified via RIPEstat on 2026-10-03), which carries TLS-encrypted traffic and connection metadata but does not terminate TLS and is not named in Proton's processor lists, so CLOUD Act exposure is recorded as minor (a transient US network layer with no plaintext access and no data at rest); VPN tunnel traffic itself runs on the VPN server network, not through these ranges. It remains the strongest ownership and transparency signal set in this category.

Constats

CLOUD Act
Actionnariat
Sous-traitants
7 · 4 US

Signaux vérifiés

Juridiction
  • Hébergement UE / adéquation: Oui
  • Opérateur UE / adéquation: Oui
  • Aucune exposition au CLOUD Act: Non évalué
  • Paiement sans carte possible: Oui
    Accepte le Bitcoin et les espèces par courrier en plus des cartes.
Transparence
  • DPA public: Oui
  • Sous-traitants divulgués: Oui
  • Clients open source: Oui
  • Certification tierce: Non
Aller à

À propos de Proton VPN

Proton VPN is part of the Proton privacy-tech group operated by Proton AG (Plan-les-Ouates, Geneva, Switzerland) and is the structurally strongest VPN listing in this directory by procurement-grade criteria. Founded in 2014 by Andy Yen, Jason Stockman, and Dingchao Lu (scientists who met at CERN), Proton has run a privacy-by-default product portfolio (Mail, VPN, Drive, Calendar, Pass) for over a decade. In 2024, the founders and first employee donated their controlling shares to the newly-established Proton Foundation, a non-profit registered in Geneva (CHE-418.863.304) which now serves as the primary shareholder of Proton AG. The foundation structure permanently protects Proton from venture-capital acquisition or US private-equity takeover, a unique ownership architecture in the EU/CH privacy-tech landscape.

Compliance posture is gold-standard. Switzerland holds an EU adequacy decision under Art. 45 GDPR, so transfers between EU and CH require no SCCs. The privacy policy (last updated 30 July 2025) commits that account data is encrypted and stored exclusively in Switzerland, Germany, or Norway; Proton owns and operates its Secure Core servers and most Swiss/German VPN nodes; all servers feature full-disk encryption with no stored logs or user data. The no-logs policy has been independently audited and published (a differentiator vs nearly every other VPN brand that claims no-logs without an audit), and Proton publishes a public transparency report plus a warrant canary documenting law-enforcement requests. All consumer apps are 100% open-source.

The product covers 15,000+ servers across 140+ countries, supports up to 10 simultaneous device connections on paid plans, and offers Secure Core (multi-hop through Swiss / Icelandic / Swedish fortified servers), NetShield ad/tracker/malware blocking, port forwarding, P2P/BitTorrent-friendly servers, streaming-unblock servers, and Tor-over-VPN. The free tier is uncommonly generous: one device, medium speed, servers in 10 randomly-selected countries, no data limits, no artificial speed throttling, no ads, and full privacy guarantees. VPN Plus is the paid entry tier with multi-currency (CHF / EUR / USD); spring-sale 1-year discounts up to 65% have been advertised. Best fit: privacy-maximalist consumers, journalists, activists, EU SMBs, and any organisation needing the strongest possible ownership-and-jurisdiction guarantees in a VPN provider.

Carte des sous-traitants · 7

Source
  • Chargebee, Inc. US
    États-Unis

    Payment data processing; ancillary

  • PayPal group US
    États-Unis

    Payment data processing; ancillary (policy now lists US + Singapore)

  • Stripe, Inc. US
    États-Unis

    Payment data processing; ancillary

  • Zendesk, Inc. US
    États-Unis

    Customer support data processing; ancillary

  • Atlassian Pty Ltd non-US
    Australie

    Customer support data storage (policy now lists EU + US + UK as processing locations)

  • ProtonLabs DOOEL Skopje non-US
    Macédoine du Nord

    Customer support / direct communications (Proton group entity)

  • ProtonLabs Taiwan Co., Ltd non-US
    Taïwan

    Customer support / direct communications (Proton group entity)

Source : liste publiée des sous-traitants de l’éditeur, lue le 26 août 2026.

4 sous-traitants sur 7 sont détenus par des capitaux américains ou établis aux États-Unis. Exposition limitée au CLOUD Act via ces sous-traitants accessoires.

Référentiels & certifications · aucune répertoriée

Nous avons vérifié le site de l'éditeur et les registres des organismes de certification. Aucune certification active trouvée à la date du dernier audit (2026-08-26).

Matrice de fonctionnalités

Tableau 2Fonctionnalités de Proton VPN

Serveurs 20688 serveurs
Pays 148 pays
Appareils simultanés 10 appareils
Protocoles WireGuard OpenVPN IKEv2
Kill switch Oui
No-logs audité Oui
Port forwarding Oui
Plateformes iOS macOS Windows Android Linux

Intégration & accès

REST API Oui
SSO (SAML / OIDC) Oui

Conformité & gouvernance

Audit log Non
Self-host / on-prem option Non

Tarifs & paliers

à partir de 5 €/mois
Freemium
Voir la page tarifs

Documents publics

  • Contrat de sous-traitance (DPA)
    proton.me/legal…
    Ouvrir
  • Liste des sous-traitants
    protonvpn.com/privacy-policy…
    Ouvrir
  • Conditions d'utilisation
    protonvpn.com/terms-and-conditions…
    Ouvrir

Alternatives dans cette catégorie

  • AirVPN
    Italie · 7 €/mois
    Souverain UE
    DPA public: Non Sous-traitants: Non Open source: Non
  • AzireVPN
    Suède · 3.75 €/mois
    Hébergé UE
    DPA public: Non Sous-traitants: Non Open source: Non
  • CyberGhost
    Roumanie · 2.19 €/mois
    Basé UE
    DPA public: Non Sous-traitants: Oui Open source: Non
Voir toutes les alternatives vpn

Présent dans ces guides