Evidence and risk■Verified evidence/△CautionMaterial claims checked against current sources.; those sources show trade-offs worth reading.
Last reviewedReviewed 22 Jun 2026KYC checked 22 Jun 2026 · verified jurisdiction · Source → official siteHow to cite this pageEvidence confidence94/100
Evidence and facts
Evidence and facts
JURISDICTIONCH
CAUTIONProton AG complied with a 2021 Swiss court order and logged a French climate activist's IP. Has since added a VPN no-log mode with an audited no-log policy. Swiss GDPR compliance. Safer than Five Eyes VPNs but not zero-risk.
AUDITED BYSecuritum, SEC Consult
OPERATOR DATAHosted operator recorded
EVIDENCE CONFIDENCE
░░░░░░░░░░█████████▍94/100DIRECTLY TESTED2/14Why evidence is 94/100Formula 3.1
Source coverageMaterial claims checked against current sources
KYC TRIGGERSNo identity KYC for VPN account, but account/payment metadata can exist. Official no-logs page states Proton VPN does not log browsing, IP, session length, or location.
FEEFree tier available
CATEGORIESVPN
FEATURESFree tier, XMR accepted, BTC accepted, No logs, Audited, Open source, Tor servers, Secure Core
TORYes
REGIONSGlobal availability
Review analysis, source material, related services, and history
Measured evidence
Open network measurements
These are existing public OONI and RIPE Atlas measurements, not probes run by Cunicula. Country summaries combine different networks and do not guarantee the same result on every connection.
OONI verified a DNS-blocking fingerprint in the linked representative measurement. The field tests the provider website, not every Proton VPN protocol endpoint.
Proton VPN pairs a free tier with an audited no-logs policy from Securitum and SEC Consult, Tor-routed servers, Secure Core multi-hop, and Bitcoin or Monero accepted as payment.
LIMITS
Proton AG complied with a 2021 Swiss court order that logged a French climate activist's IP address; the record calls the current setup safer than Five Eyes VPNs but explicitly not zero-risk, and account or payment metadata can still exist.
USEFUL FOR
Free or paid VPN access under Swiss jurisdiction and an audited no-log policy, for users already aware of the 2021 court-ordered IP disclosure.
Who owns the operator, read from the public register. Each step says what kind of evidence it rests on: a registry record can be checked, a company statement cannot.
OPERATORProton AGCHE-354.686.492 · Switzerland
PRINCIPAL SHAREHOLDERFondation ProtonCHE-418.863.304 · SwitzerlandCOMPANY STATEMENT
As Proton's primary shareholder, the foundation exercises its control to ensure that Proton does not deviate from our mission. No change of control of Proton can occur without the consent of the Foundation.
Both entities are registry-confirmed, but the shareholding between them is not. Swiss law does not require a company to publish its shareholders, so this edge rests on Proton's own account of its governance and cannot be checked against Zefix.
The chain stops here because the register stops, not because the top was reached. Swiss and Swedish companies do not publish their shareholders, and a Czech joint-stock company does not list its own. Nothing above the last step should be assumed either way.
SAME OPERATOR
Proton AG also runs 3 other services shown here. Comparing them compares products, not independent companies.
Proton Technologies AGrenamed 2021-09-30REGISTRY RECORD
Renamed by the same legal person, not a new company. The Swiss Official Gazette entry of 18.10.2021 reads 'Nouvelle raison sociale: Proton AG', with the statutes modified on 30.09.2021. The UID is unchanged either side of the rename, which is what proves it is one entity.
ProtonVPN AGabsorbed 2020-06-30REGISTRY RECORD
Recorded on both sides of the register: Proton AG lists ProtonVPN AG under companies taken over, and the ProtonVPN AG record names Proton AG as the entity that took it over. The VPN product has had no separate company since.
Frequently Asked Questions
Is identity verification required?
No identity verification is recorded for typical use. No identity KYC for VPN account, but account/payment metadata can exist. Official no-logs page states Proton VPN does not log browsing, IP, session length, or location.
Which payment methods are accepted?
Please check the provider site for accepted payment methods.
Where is it available?
Recorded availability: GLOBAL.
Is the operator based in a Five Eyes country?
No. The recorded jurisdiction is CH, which is not a Five Eyes country. This is jurisdiction context and does not by itself establish that a service is safer or less safe.
How are identity, operator, and evidence fields reported?
Identity exposure is level 1 of 4. A hosted operator is recorded. Jurisdiction is shown as context, not a safety verdict. Evidence confidence is 94/100 and recorded risk is caution.
No changes to the documents we watch since we started checking on 9 Aug 2026. Last checked 9 Aug 2026.
Evidence basis: Claims on this page are linked to published sources for comparison, not certification, audit, endorsement, or recommendation; read the methodology and coverage map before relying on an entry.
Service history
Latest meaningful changes to the facts shown on this provider page.
Corporate registry information updated
Corporate / Entity type
Corporate registry information updated
Corporate
Provider presentation updated
Best for, Evidence status, Recorded risk, Tagline, and 1 more
Open-source VPN with audited no-logs policy and Swiss jurisdiction. Account/payment metadata risk remains; not a fully anonymous cash-style VPN unless paid/operated carefully. → Open-source Swiss VPN with an audited no-logs policy, though account and payment metadata risk remains.
Open-source VPN with a free tier. Accepts XMR and BTC for paid plans. No logs, audited, Tor servers. Email required for account. (Light KYC) → Open-source VPN with audited no-logs policy and Swiss jurisdiction. Account/payment metadata risk remains; not a fully anonymous cash-style VPN unless paid/operated carefully.
Jurisdiction confidence
inferred → verified
KYC last checked
2026-03-01 → 2026-06-22
Kyc note
Advertises No-KYC, but strictly adhere to OPSEC rules. Access via Tor, pay with XMR. → No identity KYC for VPN account, but account/payment metadata can exist. Official no-logs page states Proton VPN does not log browsing, IP, session length, or location.
Last reviewed
2026-03-01 → 2026-06-22
Source reviewed
older source, not independently verified → official site
not set → Proton AG complied with a 2021 Swiss court order and logged a French climate activist's IP. Has since added a VPN no-log mode with an audited no-log policy. Swiss GDPR compliance. Safer than Five Eyes VPNs but not zero-risk.