🔍 Read the full analysis: What We Can—and Can’t—Say About Proton’s AI Push on ThorstenMeyerAI.com
Get the latest gadgets delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
Proton has publicly confirmed that it wants staff to use AI to deliver features faster, but the company’s internal push has drawn scrutiny over software security. 404 Media reported CEO Andy Yen’s comments and a claim that AI wrote 90% of Proton’s code in October; the messages and figure have not been independently verified, and Proton has reported no breach. Yen cancelled planned employee re-interviews about AI use on October 30 but said he would continue pushing for AI adoption.
Proton is pressing employees to use AI more as it seeks to release features faster, a policy the company confirmed in a staff email published on Reddit. The push has prompted scrutiny of how the privacy-focused company tests software after 404 Media reported internal messages in which CEO Andy Yen urged faster AI adoption and an employee raised concerns about security review. No breach or user-data exposure has been reported, and some of the internal details remain based on 404 Media’s reporting.
Proton said in an October 26 email to employees that it would conduct re-interviews about how staff use AI from November 4 to 11. The company published the email on Reddit, saying it was not planning layoffs under the cover of AI and that it wanted to deliver features faster to users. On October 30, Yen cancelled the re-interviews at an all-hands meeting, according to audio reported by 404 Media. He called the episode a “communication failure on my part” and said he would continue to push for AI use.
In an October 29 investigation, 404 Media said it reviewed Slack messages, meeting audio and internal documents, and spoke with eight current and one former employee. The outlet reported that, in a security Slack channel in late August, Yen responded to an employee’s suggestion that new code receive several days of penetration testing by saying, “That’s [expletive] and loser thinking. Of course it’s possible to be fast and secure.” He also urged staff to “stop lovingly handcrafting all our code and use AI more.” 404 Media said a Proton spokesperson did not dispute its reporting; the outlet said Proton did not respond to its request for comment on the October 30 report.
The same investigation attributed to Proton CTO Bart Butler an internal-meeting statement that 90% of Proton’s code in October was written by AI. That percentage is not an independently measured figure, and the report did not define what counted as “written by AI.” 404 Media also described internal tools to track AI-generated code and a policy broadening permitted AI use. Those details have not been independently confirmed in the supplied material.
Infographic 01 · Proton, August to October 2026
Two voices, one autumn.
What Proton’s CEO said in public, and what 404 Media reports was said inside. Green tags: Proton’s own words. Amber tags: reported by 404 Media only.
- 23 Jul 2025Lumo launchesProtonProton’s chatbot; Proton says it keeps no logs and does not train on chats
- 30 Jun 2026Lumo 2.0Proton“Zero-access encryption, no logs, no data sharing, and no training on your conversations”
- 18 Aug 2026In public: “AI is surveillance”WIREDYen: Proton was “reluctantly pulled in”; with tens of millions on Lumo, “we cannot move fast and break things”
- Late AugInside: “loser thinking”404 MediaYen’s reply in the security Slack channel to a request to pentest new code before release
- SepCTO manifesto: “Your old job is gone”404 MediaGoal: most code reviewed by AI, not humans
- Oct“90% of code written by AI”404 MediaCTO Bart Butler in a meeting, per audio obtained by 404 Media
- 26 OctRe-interview emailEmail“These re-interviews are consequential.” Interviews planned for 4 to 11 November
- By 27 OctProton answers on RedditProtonPosts the email; “not doing layoffs and using AI as an excuse”
- 29 Oct404 Media investigation404 MediaProton’s spokesperson does not dispute it: “too blunt or too slow in explaining ourselves”
- 30 OctRe-interviews cancelled404 MediaYen at the all-hands: “a communication failure on my part”, “I’m still going to push”
Sources: WIRED, 18 Aug 2026; Proton, Lumo 2.0; 404 Media, 29 Oct 2026; 404 Media, 30 Oct 2026; Tom’s Guide, 27 Oct 2026 (Proton’s Reddit statement); TechRadar, 27 Oct 2026. Inside quotes as reported by 404 Media; Proton did not dispute the 29 Oct report.
Powered by Thorsten Meyer AI
AI Speed Meets Proton’s Security Promise
The dispute matters because Proton’s business depends on user trust in products that protect email, files and other personal information. Increasing AI use in software development does not by itself establish that code is unsafe. The relevant questions are whether AI-generated changes receive appropriate review and testing, how Proton manages security risks, and whether its release practices maintain the protections customers expect.
The reporting describes an internal disagreement about pace and security safeguards, not evidence that those safeguards failed. No breach has been reported, and the available information does not establish that AI-written code caused a vulnerability or exposed user data. For customers, the distinction is important: concern about development practices is a reason to seek clearer answers, not proof that an account or encrypted message has been compromised.
There is also a difference between the privacy properties of Proton’s products. Proton describes some services as using encryption that limits access to user data. Its chatbot, Lumo, makes separate privacy commitments about how conversations are handled. Customers should review the settings and policies for the specific feature they use rather than assume that every AI function has the same protections as encrypted mail.
Products Worth Considering
Amazon Kindle Paperwhite (12th Generation, 2024), 16 GB, 7-inch Display, Jade
DJI Mic 3 Wireless Microphone System (2 Transmitters, 1 Receiver, Charging Case)
Amazon Kindle Scribe Colorsoft 64GB (1st Generation)
As an affiliate, we earn on qualifying purchases.
Proton’s Public AI Position
Proton is a Swiss company known for Proton Mail, launched in 2014, and later expanded into services including Drive, VPN, password management and calendar. In a WIRED interview published August 18, Yen said Proton had “over a hundred million” users. He also described AI as surveillance and said the company was “reluctantly pulled in,” while arguing that privacy-focused firms should build alternatives rather than leave the field to larger technology companies.
Proton has developed AI products alongside that public caution. Its chatbot, Lumo, launched in July 2025; Proton announced version 2.0 in June 2026 and described it as offering zero-access encryption, no logs, no data sharing and no training on users’ conversations. In September 2026, Proton added Apertus, an open model developed by Swiss universities, to Lumo, with an opt-in feedback channel. A Lumo canvas for documents, code and web pages followed on October 22.
Proton Mail also offers Scribe, a writing assistant that can run on Proton’s servers or locally on a user’s device. These public product details help explain the company’s interest in AI, but they do not verify the reported internal coding figures or settle how AI-generated software is reviewed.
“Proton needs to “deliver features faster to users.””
— Andy Yen, in Proton’s employee email published on Reddit
What the Reporting Cannot Establish
The reported Slack messages and meeting details are attributed to 404 Media’s review of internal material and interviews. They have not been independently verified in the source material provided. The reported 90% figure lacks a public measurement method, a definition of AI-written code and an independent audit, so it should be treated as an internal claim rather than a confirmed measure of Proton’s development process.
It is also unclear what security checks were applied to AI-assisted code, whether testing requirements changed, or how often AI-generated code reached production without substantial human edits. The reporting describes employee concerns and leadership pressure, but does not establish that Proton removed particular safeguards. No security incident or exposure of user data is reported in the material.
The cancellation of the November re-interviews is reported from meeting audio, while the company’s public email had announced them. The available material does not explain whether Proton will replace them with another process for measuring AI use, or publish more detail about software review and testing.
Watch for Security Process Details
The immediate development is that the planned November 4-11 re-interviews have been cancelled, while Yen says Proton’s push for AI adoption will continue. The next useful information would be a clear account from Proton of how AI-assisted code is reviewed, tested and approved, and whether employees can raise security concerns without pressure to prioritize speed.
Customers can also watch for updates to Proton’s public AI documentation and product settings. For Lumo, Proton identifies controls and commitments concerning chat history, web search, feedback and conversation data; users should check the current settings for the features they use. For Proton Mail, users can review how Scribe operates and whether it runs locally or on Proton’s servers.
Until the company provides more detail or independent evidence becomes available, the central issue remains a question of governance and transparency: how Proton balances faster AI-assisted development with security review. The reported pressure warrants scrutiny, but the available facts do not show that Proton’s protections have failed.
Key Questions
Did Proton confirm that AI wrote 90% of its code?
No public independent measurement is provided. 404 Media attributed the 90% figure to CTO Bart Butler speaking at an internal meeting. The definition and measurement method were not specified in the supplied material.
Did Proton cancel its employee AI interviews?
According to 404 Media, Yen cancelled the planned re-interviews at an October 30 all-hands meeting. Proton’s October 26 employee email, published on Reddit, had scheduled them for November 4-11.
Has Proton reported a security breach linked to AI?
No breach or user-data exposure is reported in the source material. The reporting concerns employees’ questions about development speed, code review and security testing, not a confirmed incident.
Does Proton’s AI use mean Lumo trains on conversations?
Proton described Lumo version 2.0 as providing no training on users’ conversations, alongside other privacy commitments. Users should check Proton’s current documentation and settings for the specific features they use; the internal coding report does not establish a change to Lumo’s data practices.
Source: ThorstenMeyerAI.com
