🔍 Read the full analysis: Inside Proton’s AI Push: The Data Questions Users May Want To Ask on ThorstenMeyerAI.com
Prime made for students and young adults
- Fast, free delivery for dorm and study essentials
- Prime Video and Amazon Music included
- Member-only deals
TL;DR
Proton says it wants employees to use AI to deliver features faster, while CEO Andy Yen has cancelled planned staff re-interviews about AI use. Separate reporting by 404 Media describes pressure to accelerate AI-written code and employee concerns about security review; no breach or user-data exposure has been reported.
Proton is pushing employees to use AI more as it seeks to deliver features faster, while CEO Andy Yen has cancelled planned staff re-interviews about AI use. The development matters to users of Proton’s privacy-focused services because 404 Media has reported internal employee concerns about the speed and security review of AI-written code; no breach or exposure of user data has been reported.
Proton’s October 26 email to staff said the company would re-interview employees about their AI use from November 4 to 11. Proton published the email on Reddit and said it was not using AI as an excuse for layoffs, but wanted to “deliver features faster to users.” On October 30, Yen cancelled the planned interviews at an all-hands meeting, acknowledged “a communication failure on my part,” and said he would continue to push AI adoption, according to audio cited by 404 Media.
404 Media’s October 29 report, based on interviews with eight current and one former employee, as well as Slack messages, meeting audio and internal documents, describes Yen urging staff to speed up AI use. The outlet reported that he called a request for several days of penetration testing on newly written code “loser thinking,” and argued it was possible to be fast and secure. A Proton spokesperson did not dispute the reporting, 404 Media said. The outlet’s account of the internal messages has not been independently verified by another publication in the supplied material.
The report also attributes to Proton CTO Bart Butler an internal meeting statement that 90% of Proton’s code in October was written by AI. That figure has not been independently measured, and the report does not define what counted as “written by AI.” 404 Media also described software tracking AI-generated code on employees’ computers and a policy allowing AI for many tasks, with exceptions. These are reported internal practices, not a public audit of Proton’s code or security.
Infographic 01 · Proton, August to October 2026
Two voices, one autumn.
What Proton’s CEO said in public, and what 404 Media reports was said inside. Green tags: Proton’s own words. Amber tags: reported by 404 Media only.
- 23 Jul 2025Lumo launchesProtonProton’s chatbot; Proton says it keeps no logs and does not train on chats
- 30 Jun 2026Lumo 2.0Proton“Zero-access encryption, no logs, no data sharing, and no training on your conversations”
- 18 Aug 2026In public: “AI is surveillance”WIREDYen: Proton was “reluctantly pulled in”; with tens of millions on Lumo, “we cannot move fast and break things”
- Late AugInside: “loser thinking”404 MediaYen’s reply in the security Slack channel to a request to pentest new code before release
- SepCTO manifesto: “Your old job is gone”404 MediaGoal: most code reviewed by AI, not humans
- Oct“90% of code written by AI”404 MediaCTO Bart Butler in a meeting, per audio obtained by 404 Media
- 26 OctRe-interview emailEmail“These re-interviews are consequential.” Interviews planned for 4 to 11 November
- By 27 OctProton answers on RedditProtonPosts the email; “not doing layoffs and using AI as an excuse”
- 29 Oct404 Media investigation404 MediaProton’s spokesperson does not dispute it: “too blunt or too slow in explaining ourselves”
- 30 OctRe-interviews cancelled404 MediaYen at the all-hands: “a communication failure on my part”, “I’m still going to push”
Sources: WIRED, 18 Aug 2026; Proton, Lumo 2.0; 404 Media, 29 Oct 2026; 404 Media, 30 Oct 2026; Tom’s Guide, 27 Oct 2026 (Proton’s Reddit statement); TechRadar, 27 Oct 2026. Inside quotes as reported by 404 Media; Proton did not dispute the 29 Oct report.
Powered by Thorsten Meyer AI
AI Speed Meets Security Review
Proton’s business depends on users trusting its handling of sensitive information. A stronger use of AI in software development does not itself establish that products are less secure, and the reported internal debate is not evidence of a vulnerability. It does, however, make how code is reviewed and tested a relevant question for customers whose email, files and accounts rely on the company’s software.
The issue also touches a distinction in Proton’s own product claims. Encryption in services such as Proton Mail is based on cryptographic design; privacy in an AI conversation also depends on how a service handles prompts, history, feedback and other data. Users may want to examine those controls separately rather than treating a company-wide privacy reputation as a guarantee that every AI feature works the same way.
Popular right now
Roborock F25 GT Set Cordless Wet Dry Vacuum Cleaner and Mop with 2 Brushes
Samsung 85-Inch QN70H Neo QLED 4K Smart TV (2026)
Apple AirPods Pro 3 Wireless Earbuds with Active Noise Cancellation
As an affiliate, we earn on qualifying purchases.
Proton’s AI Products and Pledges
Proton, a Swiss company, launched Proton Mail in 2014 and has since built a suite that includes Drive, VPN, a password manager and Calendar. Yen told WIRED in an interview published August 18 that Proton had more than 100 million users. In that interview, he described AI as surveillance and said Proton had been “reluctantly pulled in,” while also arguing privacy-focused companies should build alternatives.
Proton launched its Lumo chatbot in July 2025. It says Lumo 2.0, released in June 2026, offers “zero-access encryption, no logs, no data sharing, and no training on your conversations.” Proton added the open Apertus model to Lumo in September 2026, with an opt-in feedback channel, and added a canvas for documents, code and web pages in October. Proton Scribe, its email-writing assistant, can run on Proton’s servers or on a user’s device. These are company descriptions of product features, not independent findings included in the source material.
The reported internal push sits alongside Yen’s public case for building privacy-oriented AI. He told WIRED that if privacy companies did not develop such products, they would leave the future to technology firms that may not share users’ interests. The contrast is not necessarily a contradiction: Proton can oppose some forms of AI surveillance while encouraging its own staff to use AI tools. The unresolved question is how that acceleration is balanced with engineering safeguards.
““Going forward, I’m still going to push””
— Andy Yen, in the October 30 meeting, according to 404 Media
What the Reporting Cannot Establish
The available material does not establish whether AI-generated code has caused a security flaw, whether Proton’s testing practices changed, or whether any user information was exposed. No breach is reported. The concerns described by 404 Media relate to how code is written, reviewed and tested, not to a confirmed incident affecting customers.
The reported 90% figure remains unverified, with no published measurement method or definition of AI-written code. The internal messages and meeting audio cited by 404 Media have not been independently confirmed by another outlet in the supplied material. Proton did not respond to 404 Media’s request for comment about its October 30 report, according to the outlet. The source material also does not provide a full account of the exceptions in Proton’s internal AI policy or independent technical assessments of Lumo’s privacy claims.
Watch for Policy and Product Detail
Proton has cancelled the staff re-interviews that had been scheduled for November 4–11, but Yen’s reported remarks indicate that the broader AI push will continue. The company may clarify how it measures AI use, what review and testing requirements apply to AI-assisted code, and how employees can raise security concerns. No public audit or revised testing standard is identified in the supplied material.
For users, the practical next step is to review the settings and documentation for the specific service they use. Proton’s guidance on Lumo describes its chat-history, web-search and feedback options; Proton Scribe users can check whether processing is local or server-based for their chosen setup. Further reporting or a direct statement from Proton could clarify the internal practices, but until then, claims about the scale of AI-written code and the effect on security remain unverified.
Key Questions
Has Proton reported a data breach linked to AI-written code?
No breach or user-data exposure is reported in the material. The reported concerns are about code development, review and testing.
What did Proton say about its AI push?
In an October 26 email published on Reddit, Proton said it wanted to deliver features faster and planned to re-interview employees about AI use. Yen cancelled those interviews on October 30 but said he would continue to push AI adoption, according to 404 Media.
Is it confirmed that AI wrote 90% of Proton’s code?
No. The figure was attributed by 404 Media to CTO Bart Butler speaking in an internal meeting. It has not been independently measured, and the meaning of “written by AI” was not defined in the supplied reporting.
What should Proton users check in its AI services?
Users can review Proton’s current documentation and settings for Lumo chat history, web search and feedback, and check whether Proton Scribe runs locally or on Proton’s servers in their chosen configuration.
Source: ThorstenMeyerAI.com
