Security / trust page — Proton Drive

Cited by

Facts read from this source

• E2e encryption Report an error

  “Thanks to our end-to-end and zero-access encryption, no one can access your files without your permission.”

• Encrypted file sharing Report an error

  “Proton Drive also supports end-to-end encrypted file sharing. Only the people you share the link or password with can access your files, keeping you in control.”

• No key management Report an error

  “You don’t need any technical knowledge to use Proton Drive, and you don’t need to manage, share, or distribute public and private encryption keys.”

• Elliptic curve cryptography Report an error

  “Proton Drive uses the latest, high-performance elliptic curve cryptography (ECC Curve25519) to secure your files.”

• Openpgp standard Report an error

  “Proton Drive relies on the open-source and battle-tested OpenPGP end-to-end encryption standard.”

• Open source Report an error

  “we’ve made all our apps and encryption libraries open source.”

• Bug bounty Report an error

  “we operate a bug bounty program to crowdsource security and encryption improvements.”

• Securitum audit Report an error

  “Proton Drive has been audited by Securitum, a leading European security auditor. We always publish these audit reports so you can see a professional third-party evaluation of our apps.”

• Swiss jurisdiction Report an error

  “Proton is based in Switzerland, which provides us with many legal privacy protections. Switzerland is politically neutral, outside US and EU jurisdiction, and isn’t a member of any Five Eyes or Fourteen Eyes intelligence-sharing agreements”

• Article 271 prohibition Report an error

  “under Article 271 of the Swiss Criminal Code, Proton is prohibited from sharing data with foreign authorities.”

• Data centers Report an error

  “We have invested heavily in owning and controlling our own server hardware and network in Switzerland and Germany - both countries with strong privacy laws. Our data centers are located at highly secure sites that require biometric access.”

• Encrypted disks Report an error

  “our servers utilize fully encrypted hard disks with multiple password layers, preserving data security even if our physical infrastructure is breached or stolen.”

• Dns caa Report an error

  “Proton uses DNS Certificate Authority Authorisation.”

• Monitoring 24 7 Report an error

  “Our security teams continuously monitor our infrastructure for security alerts and take proactive action when we detect attacks against specific user accounts.”

• Automatic account locking Report an error

  “automatically locking your account if we suspect somebody other than you has gained illicit access.”

• Company entity Report an error

  “Proton AG Route de la Galaise 32 1228 Plan-les-Ouates Geneva, Switzerland”

• User base Report an error

  “Over 100 million people and some of the world’s largest organizations have signed up with Proton.”

5 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Agency Producer Encryption, key custody & recovery
• The Agency Producer European sovereignty
• The Architecture Practice Partner Sharing & external collaboration
• The Architecture Practice Partner Encryption, key custody & recovery
• The Architecture Practice Partner European sovereignty
• The Data Protection Officer Encryption, key custody & recovery
• The Data Protection Officer European sovereignty
• The IT Lead Encryption, key custody & recovery
• The IT Lead European sovereignty
• The Skeptic Encryption, key custody & recovery
• The Skeptic European sovereignty
• The Tax Adviser Encryption, key custody & recovery
• The Tax Adviser European sovereignty