🔍 Read the full analysis: Proton’s AI Push: How Much Is Known About Your Data? on ThorstenMeyerAI.com
Get the latest gadgets delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
Proton is pushing employees to use AI more in software development, a direction the company confirmed in an October 26 email and CEO Andy Yen reaffirmed after canceling planned staff re-interviews. Separate reporting by 404 Media describes internal pressure to accelerate AI use and concerns about security review; Proton has not reported a user-data breach, and the reported code-generation figures have not been independently measured.
Proton is pressing employees to use AI more as it tries to deliver features faster, while reporting about internal discussions has raised questions about security review at a company whose services are marketed around privacy. The company confirmed an October 26 email about AI use and CEO Andy Yen later canceled planned staff re-interviews, but no user-data breach has been reported.
Proton’s October 26 email, which the company published on Reddit, said employees would be re-interviewed about how they use AI between November 4 and 11. Proton said it was not using AI as an excuse for layoffs and that it wanted to “deliver features faster to users.” At an all-hands meeting on October 30, Yen canceled the re-interviews and acknowledged “a communication failure on my part,” according to meeting audio reported by 404 Media. He also said, “Going forward, I’m still going to push.”
In a report published October 29, 404 Media described internal pressure to speed AI adoption, citing interviews with eight current and one former employee, Slack messages, meeting audio and internal documents. It reported that Yen criticized a request for several days of security testing on new code, saying, “That’s [expletive] and loser thinking. Of course it’s possible to be fast and secure,” and urging staff to “use AI more.” A Proton spokesperson “did not dispute” the reporting, 404 Media said. The outlet’s account of the internal messages has not been independently confirmed by another outlet in the supplied reporting.
404 Media also reported that Proton CTO Bart Butler said in an internal meeting that AI wrote 90% of Proton’s code in October. That number is an internal figure as reported by the outlet, not an independently measured statistic; the report does not define what counted as “written by AI.” The outlet described other measures, including software tracking AI-generated code and a policy allowing AI for many tasks, with exceptions. It also reported that Yen canceled the re-interviews on October 30. Proton did not respond to 404 Media’s request for comment on that later report, according to the outlet.
Infographic 01 · Proton, August to October 2026
Two voices, one autumn.
What Proton’s CEO said in public, and what 404 Media reports was said inside. Green tags: Proton’s own words. Amber tags: reported by 404 Media only.
- 23 Jul 2025Lumo launchesProtonProton’s chatbot; Proton says it keeps no logs and does not train on chats
- 30 Jun 2026Lumo 2.0Proton“Zero-access encryption, no logs, no data sharing, and no training on your conversations”
- 18 Aug 2026In public: “AI is surveillance”WIREDYen: Proton was “reluctantly pulled in”; with tens of millions on Lumo, “we cannot move fast and break things”
- Late AugInside: “loser thinking”404 MediaYen’s reply in the security Slack channel to a request to pentest new code before release
- SepCTO manifesto: “Your old job is gone”404 MediaGoal: most code reviewed by AI, not humans
- Oct“90% of code written by AI”404 MediaCTO Bart Butler in a meeting, per audio obtained by 404 Media
- 26 OctRe-interview emailEmail“These re-interviews are consequential.” Interviews planned for 4 to 11 November
- By 27 OctProton answers on RedditProtonPosts the email; “not doing layoffs and using AI as an excuse”
- 29 Oct404 Media investigation404 MediaProton’s spokesperson does not dispute it: “too blunt or too slow in explaining ourselves”
- 30 OctRe-interviews cancelled404 MediaYen at the all-hands: “a communication failure on my part”, “I’m still going to push”
Sources: WIRED, 18 Aug 2026; Proton, Lumo 2.0; 404 Media, 29 Oct 2026; 404 Media, 30 Oct 2026; Tom’s Guide, 27 Oct 2026 (Proton’s Reddit statement); TechRadar, 27 Oct 2026. Inside quotes as reported by 404 Media; Proton did not dispute the 29 Oct report.
Powered by Thorsten Meyer AI
AI Speed Meets Security Review
The dispute matters because privacy services depend on users trusting both the product and the company’s engineering practices. AI tools may help developers work faster, but code that handles encryption, accounts or stored files still needs appropriate review and testing. Employees’ reported questions concern those processes—not evidence that users’ information was exposed.
Proton’s public position is that privacy-focused companies should build AI products rather than leave the field to larger technology firms. That argument does not, by itself, answer how the company checks AI-assisted code or measures the risks. For customers, the relevant distinction is between the safeguards promised by a service and the evidence available about how software changes are reviewed before release.
Product settings also matter. Proton describes Lumo as offering privacy protections including no logs and no training on conversations, and says its Lumo 2.0 uses zero-access encryption. Those are Proton’s descriptions of its own service; the internal coding controversy does not establish that those protections have failed. Users can review Lumo’s chat-history, web-search and feedback settings, and check how Proton Mail’s Scribe writing assistant is configured.
Products Worth Considering
Logitech MX Brio Ultra HD 4K Webcam, Graphite
Amazon Kindle Scribe Colorsoft 64GB (1st Generation)
LG 34GX90SA-W 34-inch Ultragear WQHD OLED Curved Gaming Monitor
As an affiliate, we earn on qualifying purchases.
Proton’s AI Products and Promises
Proton, a Swiss company, launched Proton Mail in 2014 and has since added services including Drive, VPN, a password manager and Calendar. In an interview published by WIRED on August 18, Yen said the company had more than 100 million users. He described AI as a technology Proton was “reluctantly pulled in” to develop, while arguing that privacy-oriented providers should offer alternatives.
Proton launched its Lumo chatbot on July 23, 2025, and announced Lumo 2.0 on June 30, 2026. The company says the newer version has zero-access encryption, no logs, no data sharing and no training on conversations. Proton added the open model Apertus to Lumo on September 17, 2026, with an opt-in feedback channel, and added a canvas for documents, code and web pages on October 22. Its Proton Scribe writing assistant can run on Proton’s servers or locally on a user’s device.
Yen’s public comments and the reported internal push address different questions. In the WIRED interview, he said, “AI is surveillance,” and that Proton “cannot move fast and break things” given the number of people using its chatbot. The internal comments reported by 404 Media, if accurately represented, show him urging faster AI adoption by employees. Neither position alone establishes how securely a particular product is built or operated.
“We need to deliver features faster to users.”
— Proton, in an October 26 email to staff published on Reddit
What the Reporting Cannot Establish
No breach or exposure of user data is reported in the supplied material. The reported employee concerns focus on the development process: how AI-assisted code is reviewed and tested. The available information does not establish whether security testing was reduced across Proton’s products, what review requirements apply to AI-generated code, or whether any released code caused a vulnerability.
The internal Slack exchanges and the 90% code figure come from 404 Media’s reporting. The source material says the figure was not independently measured and does not define “written by AI.” The reported account of the Slack messages has not been independently obtained by another outlet, and some of the investigation was available only to paying subscribers. Proton’s spokesperson did not dispute the messages, according to 404 Media, but that is not the same as independently verifying every detail.
It also remains unclear how Proton evaluates the privacy and security effects of AI use across specific products, or how much code is generated, suggested or revised with AI. The published information does not supply audit results, testing data or a detailed breakdown that would let customers assess those questions.
The Company’s Next AI Steps
The immediate staff re-interviews scheduled for November 4-11 were canceled on October 30, according to 404 Media’s account of the all-hands meeting. Yen said he would continue to push for AI use, so the broader adoption effort remains active. The company has not, in the supplied material, announced a replacement process or published a detailed account of how it will measure AI use and code security.
Readers can watch for Proton to clarify its software review policies, explain what its AI-generated-code metrics mean, and provide more detail on testing practices. Customers can also review the privacy controls for Lumo and the available options for Proton Scribe. Until further information is published, the reported internal pressure is not proof of a breach, and the company’s product privacy statements do not resolve questions about its development workflow.
Key Questions
Has Proton reported a user-data breach?
No breach is reported in the supplied source material. The concerns described by 404 Media relate to code development, security review and testing, not a confirmed exposure of user data.
Did Proton cancel its staff AI re-interviews?
Yes. Proton’s October 26 email set out re-interviews for November 4-11, but 404 Media reported that Yen canceled them at an all-hands meeting on October 30. He said he would continue to push for AI adoption.
Is it confirmed that AI wrote 90% of Proton’s code?
It is an internal figure reported by 404 Media, attributed to CTO Bart Butler. It has not been independently measured in the supplied material, and the report does not define what “written by AI” means.
What should Proton users check in the meantime?
Users can review Lumo’s chat-history, web-search and feedback settings, and check whether Proton Mail’s Scribe assistant runs locally or on Proton’s servers. These steps help users understand product options but do not settle questions about internal code review.
Source: ThorstenMeyerAI.com
