Decoder with Nilay Patel

Proton’s CTO: No company is going to jail for you

Jul 16, 2026
Open in new tab →

Summary

This episode centers on how Proton builds privacy-first productivity software and how its business model, ownership structure, and product architecture are designed to keep user incentives aligned with company incentives. Bart Butler explains Proton’s suite of tools—Mail, VPN, Drive, Photos, Calendar, Pass, Meet, and its AI assistant Luma—as alternatives to mainstream cloud services that minimize data exposure through encryption. The conversation also explores how Proton tries to grow beyond consumers without becoming a conventional enterprise vendor that compromises confidentiality for scale. A major theme is the pressure Proton faces from governments and regulators in Switzerland, the EU, and the US over issues like age verification, chat scanning, and encryption backdoors. The episode ultimately argues that privacy is inseparable from freedom, and that technical, legal, and corporate structures all matter in defending it.

Key Takeaways

  • 1Proton is building a full privacy-preserving ecosystem rather than a single product.
  • 2Its business model is intentionally designed so that user privacy and company success are aligned.
  • 3Proton uses governance, not just cryptography, to protect its mission over time.
  • 4Proton sees backdoors, client-side scanning, and broad age-verification mandates as threats to the entire internet.
  • 5Privacy-preserving identity verification is possible, and Proton points to zero-knowledge proofs as a better path.
  • 6The episode frames privacy as a prerequisite for freedom, not a luxury feature.

Notable Quotes

""The first is that we encrypt all the data we can. Right, so if we wanted to turn around and sell that data to somebody, we can't. It's mathematically not possible for us to do it.""

""So we've tied the value of the business and the growth of the business to protecting our users, so that our interests are aligned.""

""No company is going to go to jail for you right.""

""It's impossible to create a back door that can only be used by the good guys.""

""I am American, I live in Europe now, but I am American originally, but there are a lot of people who really beat the drum, freedom in the US, but are willing to essentially give away all privacy.""

""You know, there’s such a thing as zero knowledge proofs, right? Which basically involve the ability to prove that I am over 18 without actually giving you any other information about it.""

""We put nearly 10% of total company resources to fight abuse.""

""Software is probably the most, the most affected industry and the most tractable industry for LLAMs that I've seen at least so far.""

Episode questions

How does Proton try to align its business incentives with user privacy?

Proton says it encrypts as much data as possible and makes users the paying customers instead of selling ads. That means it cannot easily monetize user data, and betraying users would damage the business itself.

Why is Proton organized as a foundation-controlled company?

The foundation owns a controlling stake to protect the mission from drift, takeover pressure, or future leadership changes. Butler describes this as a guardian layer that helps preserve the company’s privacy commitments over time.

Why does Proton view age verification and chat scanning as risky?

Butler argues these systems can easily become universal surveillance infrastructure and be used for purposes far beyond their original intent. He says the internet should not be built in a way that abolishes anonymity for everyone.

What is Proton’s response to legal demands from governments?

Proton says it follows Swiss legal process, minimizing the data it can hand over and complying only through defined jurisdictional procedures. It argues that the best protection is to engineer products so less data is available in the first place.