🔍 Read the full analysis: Proton’s AI Plans: How To Read The Claims About Your Data on ThorstenMeyerAI.com
Prime made for students and young adults
- Fast, free delivery for dorm and study essentials
- Prime Video and Amazon Music included
- Member-only deals
TL;DR
Proton has confirmed it wants employees to use AI to deliver features faster, while 404 Media has reported internal pressure to accelerate AI-written code and raised concerns about security review. CEO Andy Yen cancelled planned employee re-interviews on October 30 but said he would continue pushing AI adoption. No breach or exposure of user data has been reported.
Proton is pressing employees to use AI more to speed up product development, while reporting by 404 Media has raised questions about how the company reviews AI-generated code for security. CEO Andy Yen cancelled planned employee re-interviews about AI use on October 30, but said he would continue the push. No breach or exposure of customer data has been reported; the current concern is about development and testing practices at a company whose services rely on user trust.
Proton confirmed the internal push in an email to staff dated October 26 and later published on Reddit. The company said it would “re-interview” employees about how they use AI between November 4 and 11, and said it wanted to deliver features faster to users. Proton also said it was “not doing layoffs and using AI as an excuse.” At an all-hands meeting on October 30, Yen cancelled the re-interviews, acknowledged “a communication failure on my part,” and said he would still push for AI adoption, according to meeting audio obtained by 404 Media.
Other details about internal discussions come from 404 Media’s October 29 investigation, which said it reviewed Slack messages, meeting audio and internal documents and spoke with eight current and one former employee. The outlet reported that, in a security Slack channel in late August, Yen responded to an employee’s call for several days of penetration testing on new code by saying, “That’s [expletive] and loser thinking. Of course it’s possible to be fast and secure.” He also urged staff to “stop lovingly handcrafting all our code and use AI more.” A Proton spokesperson “did not dispute” the reporting, 404 Media said. The messages have not been independently obtained by other outlets in the supplied material.
404 Media also reported that CTO Bart Butler said in an internal meeting that AI wrote 90% of Proton’s code in October. That is an attributed internal figure, not an independently measured statistic: the outlet’s account does not define “written by AI” or describe an external audit. The reporting describes employee concerns about code review and testing, but does not report that customer data was exposed or that a security incident occurred.
Infographic 01 · Proton, August to October 2026
Two voices, one autumn.
What Proton’s CEO said in public, and what 404 Media reports was said inside. Green tags: Proton’s own words. Amber tags: reported by 404 Media only.
- 23 Jul 2025Lumo launchesProtonProton’s chatbot; Proton says it keeps no logs and does not train on chats
- 30 Jun 2026Lumo 2.0Proton“Zero-access encryption, no logs, no data sharing, and no training on your conversations”
- 18 Aug 2026In public: “AI is surveillance”WIREDYen: Proton was “reluctantly pulled in”; with tens of millions on Lumo, “we cannot move fast and break things”
- Late AugInside: “loser thinking”404 MediaYen’s reply in the security Slack channel to a request to pentest new code before release
- SepCTO manifesto: “Your old job is gone”404 MediaGoal: most code reviewed by AI, not humans
- Oct“90% of code written by AI”404 MediaCTO Bart Butler in a meeting, per audio obtained by 404 Media
- 26 OctRe-interview emailEmail“These re-interviews are consequential.” Interviews planned for 4 to 11 November
- By 27 OctProton answers on RedditProtonPosts the email; “not doing layoffs and using AI as an excuse”
- 29 Oct404 Media investigation404 MediaProton’s spokesperson does not dispute it: “too blunt or too slow in explaining ourselves”
- 30 OctRe-interviews cancelled404 MediaYen at the all-hands: “a communication failure on my part”, “I’m still going to push”
Sources: WIRED, 18 Aug 2026; Proton, Lumo 2.0; 404 Media, 29 Oct 2026; 404 Media, 30 Oct 2026; Tom’s Guide, 27 Oct 2026 (Proton’s Reddit statement); TechRadar, 27 Oct 2026. Inside quotes as reported by 404 Media; Proton did not dispute the 29 Oct report.
Powered by Thorsten Meyer AI
AI Speed Meets Security Review
The dispute matters because Proton’s products depend on users believing that privacy and security shape how the company builds and operates its services. Faster development could let Proton add features sooner, but the reported exchange raises a practical question: whether review and testing keep pace when more code is generated with AI. AI use alone does not establish that software is insecure; the relevant issue is how code is checked, tested and approved before release.
For customers, the reported internal push is not evidence that Proton’s encryption has failed or that private information has been accessed. It does, however, make the company’s engineering practices and transparency relevant to evaluating its assurances. The distinction matters: a product’s stated privacy protections and an internal claim about AI-generated code are different kinds of evidence, and neither should be treated as proof of the other.
Proton’s AI products also involve different data questions. The company describes Lumo as a privacy-focused chatbot, while Proton Scribe, a writing assistant in Proton Mail, can run on Proton’s servers or locally on a user’s device. Users should check the specific product’s settings and documentation rather than assume that every AI feature handles information in the same way.
Popular right now
Ninja Flip Toaster Oven and Air Fryer, 8-in-1, Stainless Steel, SP151
De'Longhi 15-Bar Pump Espresso Machine with Milk Frother & Temperature Control
Roborock F25 Ultra Steam Wet Dry Vacuum Mop
As an affiliate, we earn on qualifying purchases.
Proton’s Public AI Position
Proton is a Swiss company known for encrypted services including Proton Mail, Proton Drive, VPN, a password manager and calendar. It launched Proton Mail in 2014, after the Snowden revelations. In an interview published by WIRED on August 18, Yen described AI as “surveillance” and said Proton had been “reluctantly pulled in.” He also said that, with tens of millions of people using its chatbot, the company could not “move fast and break things.” Those remarks are not necessarily incompatible with encouraging staff to use AI internally, but they sharpen the questions raised by the reported Slack messages.
Proton launched its Lumo chatbot on July 23, 2025. It released Lumo 2.0 on June 30, 2026, describing it as offering “zero-access encryption, no logs, no data sharing, and no training on your conversations.” On September 17, Proton added Apertus, an open model developed by Swiss universities, to Lumo with an opt-in feedback channel. On October 22, it added a canvas for documents, code and web pages. These are Proton’s descriptions of its products, not independent findings established by the internal-code reporting.
Yen told WIRED that privacy-focused companies should build AI rather than leave the field to technology companies he said did not have users’ best interests at heart. He also said, “I would probably prefer a world where AI didn’t exist, but it’s here.” The October staff email and the reported internal discussions show how that public argument is being translated into workplace expectations.
“It needs to “deliver features faster to users.””
— Proton, in an employee email published on Reddit
What the Reports Do Not Establish
The reported internal messages and discussions have not been independently verified by other outlets in the supplied material. 404 Media said it based its investigation on interviews and internal records; a Proton spokesperson “did not dispute” the reporting, according to the outlet. That is not the same as Proton publicly confirming every reported message or detail. Yen’s October 30 cancellation of the re-interviews was also reported from meeting audio, and Proton did not respond to 404 Media’s request for comment on that report.
The reported 90% AI-code figure has no stated independent measurement, and the available account does not define how AI-written code was counted. It is also unclear what testing standards apply to different types of code, how much review is conducted, and whether the company has changed those practices. The source material reports no breach, data exposure, or specific vulnerability tied to the AI push. It also does not establish that the company’s encryption or chatbot privacy claims have been invalidated.
AI Adoption Without Re-Interviews
The planned employee re-interviews for November 4–11 have been cancelled, according to 404 Media’s account of the October 30 meeting. Yen said the broader push for AI use would continue. Proton has not, in the supplied material, published a detailed replacement plan explaining how it will evaluate employee AI use or measure the security of AI-assisted code.
The next useful developments would be clearer public information from Proton about code review, testing requirements, and the meaning of the reported AI-code figure. Customers can also review settings for Lumo’s chat history, web search and feedback, and check how Proton Scribe is configured, including whether it runs locally or on Proton’s servers. Those steps can clarify product-level data handling, but they do not answer the separate question of how Proton tests its software. No security incident has been reported in the material available for this article.
Key Questions
Has Proton confirmed that AI wrote 90% of its code?
No. 404 Media reported that CTO Bart Butler gave that figure in an internal meeting. The figure has not been independently measured in the supplied material, and the method for defining AI-written code is unclear.
Did Proton report a data breach connected to AI?
No breach or exposure of customer data is reported in the source material. The concerns described relate to how code is written, reviewed and tested, not a confirmed compromise.
What happened to the planned employee re-interviews?
Proton’s October 26 staff email said employees would be re-interviewed about AI use from November 4 to 11. Yen cancelled the plan at an October 30 all-hands meeting, according to 404 Media, while saying he would continue to push AI adoption.
Does the reporting show that Proton’s encryption has failed?
No. The reporting does not establish an encryption failure or a product vulnerability. It raises questions about development practices and security review, which are distinct from evidence that a particular privacy protection has failed.
What can users check about Proton’s AI products?
Users can review Lumo’s chat history, web search and feedback settings, and check whether Proton Scribe is running locally or on Proton’s servers. These checks address product settings; they do not independently verify Proton’s internal code-review practices.
Source: ThorstenMeyerAI.com
