🔍 Read the full analysis: The Questions Behind Proton’s AI Push And Your Data on ThorstenMeyerAI.com
Get the little things that make your day delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
Proton says it wants employees to use AI to deliver features faster, and CEO Andy Yen said he will continue that push after cancelling planned staff re-interviews about AI use. Separately, 404 Media reported internal messages expressing frustration with security review delays; Proton has not reported a user-data breach, and the reported code-generation figures have not been independently verified.
Proton is pressing employees to use AI more quickly, while the company’s CEO has also backed away from planned staff re-interviews about AI use after the initiative drew attention. The development raises questions about how the privacy-focused company will balance faster product work with the security review and testing that protect its users; no user-data breach has been reported in the material available.
Proton told employees by email on October 26 that it would re-interview them about how they use AI between November 4 and 11. The company published the email on Reddit, saying it was not planning layoffs under the cover of AI and that it wanted to “deliver features faster to users.” At an all-hands meeting on October 30, CEO Andy Yen cancelled the re-interviews, acknowledged “a communication failure on my part,” and said he would continue pushing for AI use, according to audio cited by 404 Media.
In a report published October 29, 404 Media said it reviewed internal Slack messages, meeting audio and documents, and spoke with eight current and one former Proton employee. It reported that Yen responded sharply in a security Slack channel to an employee’s request for several days of penetration testing on newly written code. The outlet quoted him as calling the request “loser thinking” and urging staff to “use AI more.” A Proton spokesperson did not dispute the reporting, 404 Media said; the outlet reported that Proton did not respond to a later request for comment.
The same report attributed to Proton CTO Bart Butler an internal-meeting statement that AI wrote 90% of Proton’s code in October. That figure has not been independently measured in the source material, and the meaning of “written by AI” was not defined. The reporting also describes software tracking employees’ AI-generated code and an internal policy allowing AI for various tasks, including coding and drafting customer-facing replies, with exceptions. These accounts concern development practices, not evidence that users’ information was exposed.
Infographic 01 · Proton, August to October 2026
Two voices, one autumn.
What Proton’s CEO said in public, and what 404 Media reports was said inside. Green tags: Proton’s own words. Amber tags: reported by 404 Media only.
- 23 Jul 2025Lumo launchesProtonProton’s chatbot; Proton says it keeps no logs and does not train on chats
- 30 Jun 2026Lumo 2.0Proton“Zero-access encryption, no logs, no data sharing, and no training on your conversations”
- 18 Aug 2026In public: “AI is surveillance”WIREDYen: Proton was “reluctantly pulled in”; with tens of millions on Lumo, “we cannot move fast and break things”
- Late AugInside: “loser thinking”404 MediaYen’s reply in the security Slack channel to a request to pentest new code before release
- SepCTO manifesto: “Your old job is gone”404 MediaGoal: most code reviewed by AI, not humans
- Oct“90% of code written by AI”404 MediaCTO Bart Butler in a meeting, per audio obtained by 404 Media
- 26 OctRe-interview emailEmail“These re-interviews are consequential.” Interviews planned for 4 to 11 November
- By 27 OctProton answers on RedditProtonPosts the email; “not doing layoffs and using AI as an excuse”
- 29 Oct404 Media investigation404 MediaProton’s spokesperson does not dispute it: “too blunt or too slow in explaining ourselves”
- 30 OctRe-interviews cancelled404 MediaYen at the all-hands: “a communication failure on my part”, “I’m still going to push”
Sources: WIRED, 18 Aug 2026; Proton, Lumo 2.0; 404 Media, 29 Oct 2026; 404 Media, 30 Oct 2026; Tom’s Guide, 27 Oct 2026 (Proton’s Reddit statement); TechRadar, 27 Oct 2026. Inside quotes as reported by 404 Media; Proton did not dispute the 29 Oct report.
Powered by Thorsten Meyer AI
Speed and Security at Proton
Proton’s products depend on customers believing that privacy and security are not secondary to rapid feature releases. If developers use AI to generate more code, the relevant question is not simply how much code was produced, but how it is reviewed, tested and approved before release. The reported disagreement over penetration testing makes that question especially pertinent, though the available reporting does not establish that Proton has weakened its safeguards or shipped vulnerable code.
The issue also touches a distinction between Proton’s services. Proton describes some Mail protections as based on encryption, while the privacy of an AI chatbot involves the handling of prompts and conversation data under the service’s design and settings. Customers may want to understand both the protections built into a product and the company’s process for changing the software that implements them. AI adoption itself does not prove a privacy failure; transparent controls and verifiable security practices matter more than a code-generation percentage on its own.
Products Worth Considering
Therabody JetBoots Prime Wireless Compression Boots – Short (under 29 inseam)
Blueair Blue Pure 211i Max Smart Air Purifier
Withings BPM Vision Blood Pressure Monitor with Wi-Fi and Bluetooth
As an affiliate, we earn on qualifying purchases.
Proton’s Products and AI Plans
Proton is a Swiss company whose services include Proton Mail, Drive, VPN, Pass and Calendar. It launched Proton Mail in 2014, after the Snowden disclosures, and CEO Andy Yen told WIRED in an interview published August 18 that the company had more than 100 million users. In that interview, Yen described AI as a surveillance risk while also arguing that privacy-focused companies should build alternatives.
Proton launched its chatbot, Lumo, in July 2025. The company says Lumo 2.0, released in June 2026, offers zero-access encryption, no logs, no data sharing and no training on conversations. Proton later added the open Apertus model to Lumo, with an opt-in feedback channel, and introduced a canvas for documents, code and web pages. Proton Scribe, its email writing assistant, can run on company servers or locally on a user’s device, according to Proton. These are company descriptions of its products, separate from the questions raised by the internal-workplace report.
“The company said it wanted to “deliver features faster to users” and was “not doing layoffs and using AI as an excuse.””
— Proton, in its October 26 staff email published on Reddit
What the Reporting Does Not Establish
The internal Slack messages and meeting accounts are reported by 404 Media; the material provided does not include independent confirmation of those messages by another outlet. The reported 90% AI-code figure is an internal claim, not an externally audited measure, and the source does not define whether it counts code drafted, edited or accepted with AI assistance.
It also remains unclear what testing and review procedures Proton currently requires for AI-assisted code, whether any procedures have changed, or how the company measures security outcomes as AI use grows. The source material reports no breach or exposure of user data and does not establish that AI-written code caused a security defect. Proton’s October 30 cancellation of the re-interviews changed that specific plan; it did not, according to Yen’s reported remarks, end the broader push for AI adoption.
Proton’s AI Policy and Review
The next useful evidence will be Proton’s explanation of how AI-assisted code is checked before release, including whether penetration testing and other security reviews remain in place and how exceptions are handled. The company could also clarify what its reported AI-use tracking measures and how staff can raise concerns about security or reliability. No further milestone or public policy update is specified in the source material.
For customers, Proton’s published product settings and privacy documentation remain the immediate reference points. Users of Lumo can review chat-history, web-search and feedback settings; Mail users can check how they use Proton Scribe, including whether it runs locally or on Proton’s servers. Those steps do not resolve questions about internal software development, but they help users understand how particular AI features handle their information while Proton’s broader approach develops.
Key Questions
What has Proton confirmed about its AI push?
Proton published an October 26 staff email saying it wanted to use AI to deliver features faster. CEO Andy Yen later cancelled planned employee re-interviews about AI use, while saying he would continue to push for adoption, according to 404 Media’s account of the October 30 all-hands meeting.
Did Proton report a data breach?
No. The source material reports no user-data breach or exposure. The reporting concerns employee AI use and questions about code review and testing, not a confirmed incident affecting customer information.
Is it verified that AI wrote 90% of Proton’s code?
No independent measurement is provided. 404 Media attributed the 90% figure to CTO Bart Butler at an internal meeting. The source does not define “written by AI,” so the number should be treated as a reported internal claim, not an audited result.
What did 404 Media report about security testing?
404 Media said an employee in a security Slack channel asked for several days of penetration testing on newly written code and quoted Yen replying that the request reflected “loser thinking.” The source material does not establish whether Proton’s formal testing requirements changed or whether any insecure code reached users.
What can Proton users check now?
Lumo users can review the service’s chat history, web-search and feedback settings. Proton Mail users can check how Proton Scribe is configured, including whether it runs locally or on Proton’s servers. Proton’s product documentation describes the company’s stated privacy protections.
Source: ThorstenMeyerAI.com
