Proton Drive
Proton Drive is an end-to-end encrypted cloud storage service from Swiss privacy company Proton AG. It uses zero-knowledge encryption so that even Proton cannot access stored files. The service offers desktop sync, mobile apps, document collaboration via Proton Docs, and photo backup with Albums. Available as a free tier with limited storage or through paid Proton plans.
Score generated by AI agents based on publicly cited evidence and reviewed by the project maintainer. Not independently validated.
Score History
Timeline events are AI-curated from public reporting. Score trajectory is derived from documented events.
Proton launched from CERN as a mission-driven encrypted email project funded entirely by community crowdfunding. The team of scientists built a donation-funded service with no advertising, open-source code, and Swiss jurisdiction as a privacy shield. With a tiny team, no business customers, no ecosystem, and no governance controversies, scores across all dimensions were near-zero. The only measurable friction was an early product that was invitation-only with limited features.
ProtonMail exited beta with a freemium model, launched Proton VPN, and open-sourced its web client, establishing the foundation for a multi-product privacy ecosystem. The DDoS attacks of 2015 exposed infrastructure vulnerability but no user data was compromised. Revenue shifted from donations to subscriptions while maintaining an ad-free model. Swiss jurisdiction and Tor support reinforced privacy positioning, though the product remained feature-limited compared to mainstream competitors.
Proton expanded from email-only to a multi-product suite with VPN, Calendar, and Drive beta, funded partly by a €2M EU Horizon 2020 grant. The GDPR.eu public resource demonstrated proactive regulatory engagement. User count grew from 2 million (2017) to tens of millions. The growing product suite introduced mild ecosystem bundling incentives, but no advertising, no dark patterns, and transparent pricing kept other dimensions low. Swiss legal compliance remained the primary regulatory nuance.
The 2022 rebrand to Proton unified Mail, VPN, Calendar, and Drive under one account with bundled Unlimited plans at €9.99/month. Proton Drive launched publicly and acquired SimpleLogin. However, the 2021 IP logging scandal exposed the limits of Proton's privacy guarantees under Swiss court orders, forcing removal of 'we don't log your IP' from marketing. The incident shifted D10 upward while ecosystem bundling mildly increased D4. Proton remained ad-free with no dark patterns and low governance concerns.
Proton's transition to non-profit Foundation ownership structurally insulated the company from acquisition and profit extraction, reducing D3. Product matured rapidly with Proton Docs, desktop apps, photo backup, Standard Notes acquisition, ISO 27001 certification, and 100 million accounts. However, the Spain data disclosure (Catalan activist recovery email) added another instance of legal compliance conflicting with privacy commitments. The growing ecosystem of Mail, VPN, Calendar, Drive, Pass, and Wallet deepened bundling incentives.
Proton's privacy mission faces its most complex challenges: the Swiss surveillance law revision threatens the company's jurisdictional advantage, prompting infrastructure relocation to Germany and Norway. CEO Yen's political neutrality controversy, the journalist account suspension, and the Lumo AI's misleading open-source claims and censorship issues have introduced governance and transparency concerns. The Lumo email opt-out dark pattern, while minor, was symbolic for a trust-based brand. Despite these pressures, Proton Drive continues active development with Albums, Sheets, and SOC 2 certification.
Alternatives
Proton Drive is one component of the broader Proton suite — if you're already using ProtonMail or Proton VPN, the full Proton Unlimited plan bundles Drive, Calendar, Pass, and VPN. If privacy-focused cloud storage is your primary need, evaluate whether the full Proton ecosystem is a better value before switching away.
Canadian zero-knowledge encrypted cloud storage with a 5GB free tier (vs. Proton Drive's 1GB), PIPEDA and GDPR compliance, and competitive paid plans. Easy switch — drag-and-drop desktop sync and mobile apps work similarly. More generous free storage than Proton Drive with no bundling required.
European zero-knowledge encrypted cloud storage with strong team collaboration features and higher storage allotments. Moderate switch — costs more than Proton Drive (starts at $10/month) but offers more polished file sharing with external collaborators. Good for users who need encrypted collaboration with colleagues.
Dimensional Breakdown
Summaries below were written by AI agents based on the cited evidence. They are editorial interpretations, not independent research findings.
Dimension History
Timeline (46 events)
ProtonMail public beta launches from CERN scientists
A team of scientists who met at CERN launched ProtonMail as a public beta offering end-to-end encrypted email. Within two days, demand overwhelmed servers, forcing the team to implement a waiting list and seek external funding to continue operations.
Indiegogo crowdfunding raises $550,000 from 10,576 donors
ProtonMail launched a crowdfunding campaign on Indiegogo seeking $100,000 for operating expenses. The campaign raised over $550,000 from more than 10,576 backers, setting a new record for a software project in Indiegogo's technology category and demonstrating strong grassroots demand for privacy-focused email.
PayPal freezes ProtonMail crowdfunding funds over encryption legality
PayPal froze ProtonMail's account containing $251,721 in crowdfunding donations, with a representative questioning whether ProtonMail was legal and whether the company had government approval to encrypt emails. The freeze was lifted the next day after public outcry, with PayPal attributing it to a technical problem.
ProtonMail raises $2M led by Charles River Ventures and FONGIT
ProtonMail secured $2M in financing led by Charles River Ventures and the Fondation Genevoise pour l'Innovation Technologique (FONGIT), a Swiss non-profit. The funding was used to expand offices in Plan-les-Ouates, Geneva and increase datacenter capacity. Notably, CRV's shares were later transferred to FONGIT, maintaining non-profit alignment.
ProtonMail 2.0 open-sources web client code
ProtonMail released version 2.0 with a rewritten codebase and open-sourced the web client's front-end code, becoming one of the first major email providers to do so. This allowed independent security researchers to verify the encryption implementation and began Proton's long-term commitment to open-source transparency.
Massive DDoS attack takes ProtonMail offline for days
ProtonMail suffered a sustained DDoS attack exceeding 100Gbps that knocked the service offline for over 24 hours and affected the upstream ISP's entire network, including banks. The company initially paid a Bitcoin ransom of approximately $6,000 to the Armada Collective but the attacks continued from a more sophisticated second attacker. ProtonMail vowed never to pay ransom again.
ProtonMail exits beta with freemium subscription model
ProtonMail released version 3.0, officially launching out of beta with a freemium business model. Previously funded entirely by donations, the company introduced paid tiers to sustain growing infrastructure costs while maintaining a free tier. The launch removed the waiting list and released iOS and Android beta apps.
ProtonMail launches Tor onion site for censorship resistance
ProtonMail became the largest email provider to officially offer Tor support by launching a dedicated .onion address. The onion site anonymized user connections, preventing ProtonMail from seeing or being compelled to disclose users' true IP addresses. CEO Andy Yen stated the measure was proactive against inevitable state censorship.
Proton VPN launches as free and paid VPN service
After over a year of development and four months of beta testing by 10,000 ProtonMail community members, Proton VPN launched publicly with both free and paid tiers. The VPN featured a strict no-logging policy, DNS leak prevention, and Swiss jurisdiction. The launch expanded Proton from a single-product email company to a multi-product privacy ecosystem.
ProtonMail Bridge enables encrypted email in desktop clients
ProtonMail launched Bridge, a desktop application that enables end-to-end encrypted email in traditional desktop clients like Outlook, Thunderbird, and Apple Mail via local IMAP/SMTP servers. This reduced lock-in by allowing users to access ProtonMail from their preferred client rather than being restricted to the web interface.
EU Horizon 2020 awards Proton €2M grant for ecosystem development
The European Commission awarded Proton a €2 million grant through the Horizon 2020 framework to develop the ProtonSuite ecosystem, earmarked primarily for building Proton Drive. The grant was structured as a non-equity instrument, giving the EU no shares or voting control. The funding signaled EU support for European privacy alternatives to US Big Tech.
Proton launches GDPR.eu public compliance resource
Proton created and launched GDPR.eu, a free public resource website helping businesses understand and achieve GDPR compliance. The initiative, supported in part by the EU Horizon 2020 programme, distilled lessons from Proton's own compliance process into accessible guides, demonstrating proactive engagement with privacy regulation beyond mere compliance.
Proton Calendar enters encrypted beta
Proton launched an encrypted calendar product in beta for paid subscribers, continuing the expansion from email to a full productivity suite. Proton Calendar used end-to-end encryption for all event data including titles, descriptions, locations, and attendees, offering a privacy-first alternative to Google Calendar.
Proton Drive beta launches for paid subscribers
Proton Drive entered beta as an end-to-end encrypted cloud storage service, initially available only to paid Proton subscribers. The beta offered basic file upload, download, and sharing with zero-knowledge encryption, marking Proton's entry into the cloud storage market against Google Drive, Dropbox, and iCloud.
ProtonMail v4 redesign modernizes the entire interface
ProtonMail released its biggest redesign in seven years, migrating from AngularJS to React with a modern interface, improved customization options, dark themes, and faster load times. The redesign was independently security audited by Securitum, who found no major vulnerabilities. It laid the technical foundation for future product integration across the Proton suite.
ProtonMail logs French climate activist's IP address under Swiss court order
ProtonMail disclosed that it had logged and provided a French climate activist's IP address to Swiss authorities acting on a Europol request from French police. The activist, part of a group fighting gentrification near Place Sainte Marthe in Paris, was subsequently arrested. ProtonMail removed the phrase 'we don't log your IP' from its website after the incident became public, and CEO Yen stated the company could be 'legally compelled' to log IPs under Swiss law.
Proton Drive web app passes independent Securitum security audit
The Proton Drive web application underwent an independent security audit by Securitum, a leading European security auditing firm. The audit found no major security vulnerabilities, providing third-party validation of the zero-knowledge encryption implementation before the service opened to the general public.
Proton acquires SimpleLogin email alias service
Proton acquired SimpleLogin, a Paris-based open-source email alias service with over 100,000 users and 2 million aliases created. It was Proton's first acquisition, expanding the privacy ecosystem with email masking capabilities. SimpleLogin remained open source, email-provider agnostic, and independently operated from its Paris headquarters.
ProtonMail rebrands to Proton with unified ecosystem
ProtonMail rebranded to 'Proton,' unifying Mail, VPN, Calendar, and Drive under one brand with a single account, new visual identity, and the @proton.me domain. Existing users received free storage boosts. The Proton Unlimited plan bundled all services at €9.99/month annually, creating a cohesive privacy ecosystem but also deepening cross-product bundling incentives.
Proton pledges non-compliance with US abortion data requests
Following the Supreme Court's Dobbs decision overturning Roe v. Wade, Proton published a statement declaring it would not comply with US requests for reproductive health data. CEO Yen emphasized Swiss jurisdiction as a shield, as Proton only responds to Swiss legal orders. Privacy advocates recommended ProtonMail as a secure communication tool for reproductive healthcare.
Proton Drive exits beta as generally available encrypted storage
Proton Drive launched publicly after two years in beta, offering end-to-end encrypted cloud storage to all users including the free tier. The web app supported file upload, download, sharing via secure links, and trash management. The launch positioned Proton Drive as a privacy-first alternative to Google Drive and Dropbox, though with significantly fewer features.
Proton Drive mobile apps launch on Android and iOS
Proton released native Proton Drive apps for Android and iOS, bringing end-to-end encrypted cloud storage to mobile devices. The apps supported file browsing, upload, download, and sharing, with all encryption performed client-side before files left the device. Source code was open-sourced in March 2023 alongside published Securitum audit results.
Proton Pass password manager launches globally
Proton launched Proton Pass, an end-to-end encrypted password manager built on SimpleLogin's acquisition, as browser extensions and mobile apps under a freemium model. Proton Pass encrypted not just passwords but also email addresses, URLs, and notes using 256-bit AES-GCM, adding another product to the unified Proton ecosystem.
Proton Drive Windows desktop sync app launches
After an extensive beta period, Proton Drive released a Windows desktop app for Windows 10 and 11, enabling automatic background file synchronization with end-to-end encryption. The client supported folder syncing, file versioning, and roll-back to previous versions, addressing a major gap in Proton Drive's cross-platform capability.
Proton Drive macOS desktop app arrives
Proton Drive launched a native macOS desktop application, completing the major desktop platform coverage (alongside Windows). The Mac app initially supported syncing files within the Proton Drive folder, with plans for broader folder synchronization. The release meant Proton Drive was now available on web, Android, iOS, Windows, and Mac.
Proton Drive adds encrypted photo backup on Android
Proton Drive launched automatic photo backup for Android devices, encrypting and uploading photos to the cloud with end-to-end encryption. The feature included a dedicated gallery view within the app, positioning Proton Drive as a privacy-first alternative to Google Photos for automatic mobile photo backup.
Proton Drive free tier storage expanded from 1GB to 5GB
Proton increased the free-tier Proton Drive storage from 1GB to up to 5GB (with a base of 2GB expandable through onboarding tasks), making the free plan more competitive with rivals offering larger free tiers. The total free Proton storage became 6GB (1GB Mail + 5GB Drive).
Proton acquires encrypted note-taking app Standard Notes
Proton acquired Standard Notes, a seven-year-old end-to-end encrypted note-taking application with over 300,000 users. It was Proton's second acquisition after SimpleLogin. Standard Notes remained open source, independently operated, with existing pricing honored. The acquisition deepened Proton's encrypted productivity suite but further increased ecosystem bundling.
Proton achieves ISO 27001 certification across all products
Proton received ISO 27001:2022 certification after a comprehensive 14-day audit involving over 15 teams. The certification validated Proton's information security management systems across all products including Drive, Mail, VPN, Calendar, and Pass, providing enterprise customers with independently verified security compliance.
Proton Mail recovery email used to identify Catalan activist in Spain
Spanish police Guardia Civil used a chain of legal requests through Swiss authorities to obtain a Proton Mail account's recovery email address, which led to identification of a Catalan pro-independence activist associated with Democratic Tsunami. The user had voluntarily added an iCloud recovery email, which Proton disclosed under legal order. Proton stated it provides 'privacy by default, not anonymity by default.'
Proton transitions to non-profit foundation ownership structure
Proton AG founders Andy Yen, Jason Stockman, and Dingchao Lu donated shares to the newly established Proton Foundation, making it the primary shareholder. The Foundation's board included Tim Berners-Lee, inventor of the World Wide Web. The structure insulated Proton from hostile acquisitions and aligned the company permanently with its privacy mission, as the Foundation has no shareholders and must act in the community's best interest.
Proton Docs launches encrypted collaborative document editor
Proton launched Docs in Proton Drive, the first end-to-end encrypted real-time collaborative document editor integrated with an encrypted cloud storage service. Even keystrokes and cursor movements were encrypted. The feature was available free to all Proton Drive users and positioned as a privacy-first alternative to Google Docs.
Proton Wallet launches self-custody Bitcoin wallet
Proton released Proton Wallet, a self-custody Bitcoin wallet integrated with the Proton ecosystem, enabling users to send Bitcoin via email addresses. Over 100,000 users joined early access. The move into cryptocurrency expanded Proton well beyond its original email and productivity focus, drawing mixed reactions from the privacy community about mission scope.
Proton reaches 100 million accounts milestone
Proton announced surpassing 100 million total accounts, up from 70 million in 2022 and 2 million in 2017. Over 50,000 organizations including Fortune 500 companies now used Proton for Business. The growth reflected increasing demand for privacy alternatives, though the vast majority of accounts were likely free-tier email users rather than active Drive subscribers.
CEO Andy Yen praises Republican Party on social media
Proton CEO Andy Yen posted on X praising Trump's appointment of Gail Slater as antitrust chief, declaring 'the tables have completely turned' between Republicans and Democrats. Proton's official Reddit account amplified the sentiment before deleting the post hours later, claiming it was not an official statement. The company then claimed political neutrality while reiterating support for the specific appointment. The incident alarmed Proton's user base of journalists, activists, and privacy advocates.
Proton Drive launches Albums for encrypted photo sharing
Proton Drive released Albums, a highly requested feature allowing users to group photos and videos into private, shareable collections with end-to-end encryption. Users could invite friends and family to view or contribute photos, with fine-grained access controls. Albums was available to all users including the free tier.
Swiss VÜPF surveillance law consultation deadline passes
The public consultation period for Switzerland's proposed VÜPF surveillance ordinance update expired. The most controversial clause, Article 50a, would require providers to decrypt any data they have encrypted, effectively mandating backdoors. The law would also require VPN and email providers with 5,000+ users to log IP addresses and retain data for six months. Proton described the proposals as 'catastrophic' for privacy-focused operations.
Proton joins antitrust class action against Apple's App Store
Proton AG filed its own complaint in an existing class action against Apple in the Northern District of California, alleging the App Store's mandatory 30% commission, censorship of privacy apps, and technical restrictions on competitors constituted monopolistic behavior. Proton argued Apple's fees encouraged surveillance capitalism business models. Proton pledged to donate any monetary recovery to democracy and human rights organizations.
Proton Drive SDK preview released for open-source developers
Proton published an early preview of the Proton Drive SDK in C# and JavaScript, already used internally for the new macOS app. The SDK supported file upload, download, and basic operations with end-to-end encryption. While not yet production-ready, the release signaled intent to enable third-party integration and was tied to the upcoming Linux Drive app development.
Proton launches Lumo AI assistant with privacy focus
Proton launched Lumo, a privacy-first AI chatbot running open-source language models including Qwen2.5, Mistral Small 3, and OLMO 2 on Proton's own infrastructure. However, the launch drew criticism: Proton initially marketed Lumo as having 'open source code' when no source repository existed, and community testing revealed concerning content censorship patterns, including refusal to discuss the 1989 Tiananmen Square incident.
Proton freezes Swiss investment over surveillance law concerns
Proton announced it was freezing new investment in Switzerland and relocating most physical infrastructure to Germany and Norway due to the proposed VÜPF surveillance ordinance. CEO Yen stated the Swiss proposals would make Proton 'less confidential than Google.' Proton's Lumo AI was the first product hosted on German servers. The relocation was estimated at CHF 100 million, though headquarters and policy teams remained in Geneva.
Proton completes SOC 2 Type II audit across all services
Proton achieved its first SOC 2 Type II attestation, audited by independent firm Schellman. The audit verified that Proton's security controls were consistently implemented across all services including Drive, Mail, VPN, Calendar, Pass, and Wallet. Combined with the May 2024 ISO 27001 certification, this gave Proton two major internationally recognized security compliance frameworks.
Proton suspends journalist accounts at cybersecurity agency's request
Proton disabled email accounts belonging to two journalists who had used Proton Mail to coordinate responsible disclosure of North Korean hacking operations against South Korean government systems. Proton acted on a report from an unspecified cybersecurity CERT claiming the accounts were 'being misused by hackers.' A personal Proton Mail account was also suspended. Proton reinstated the accounts only after public outcry, raising questions about its commitment to press freedom.
Proton Sheets launches encrypted spreadsheet editor
Proton released Proton Sheets, an end-to-end encrypted spreadsheet editor within Proton Drive supporting formulas, charts, graphs, and real-time collaboration. All data including filenames and metadata was encrypted by default. Users could import CSV and XLS files. Sheets was available free to all Proton Drive users, continuing the build-out of an encrypted Google Workspace alternative.
Proton sends Lumo promotional email bypassing user opt-outs
Proton sent promotional emails for its Lumo AI product to users who had explicitly opted out of product update communications. When challenged, Proton Support reclassified the email as a 'Proton for Business newsletter' rather than a product update, despite the subject, sender (@lumo.proton.me), and content clearly referencing Lumo. The mechanism — creating new email categories defaulted to enabled to circumvent existing opt-outs — was identified as a textbook dark pattern of category splitting.
Proton Mail payment data helps FBI identify Stop Cop City protester
404 Media reported that Proton Mail disclosed payment data (a credit card identifier) for the defendtheatlantaforest@protonmail.com account to Swiss authorities, who shared it with the FBI through a Mutual Legal Assistance Treaty request. The data helped identify the person behind the anonymous Stop Cop City protest account. A Georgia judge had thrown out all RICO charges against 61 defendants in December 2025, and no charges were filed against the identified account holder.
Evidence (46 citations)
D1: User Value Erosion
D2: Business Customer Exploitation
D3: Shareholder Extraction
D4: Lock-in & Switching Costs
D5: Twiddling & Algorithmic Opacity
D6: Dark Patterns
D7: Advertising & Monetization Pressure
D8: Competitive Conduct
D9: Labor & Governance
D10: Regulatory & Legal Posture
Scoring Log (4 entries)
Stripped for Phase 2 re-enrichment