Posted by Proton Team on October 31, 2018 in Privacy & Security.

This page will be updated whenever there are significant new legal requirements. This article was last updated on May 29, 2020.

For a request to be considered a legal information request, it must be made through official channels, either domestic or foreign. This includes requests from a court order, a government entity, or a corporation’s legal or security department. The only requests that are legally binding are those from Swiss courts, which we are obligated to comply with. However, we cannot legally comply with foreign requests that lack support from a Swiss court order due to Swiss data protection regulations.

Proton VPN is not required to store connection logs under Swiss law and has a strict no-logs VPN policy. Therefore, even if legally binding, we cannot fulfill requests for user connection logs. In addition, a Warrant Canary is not applicable under Swiss law since the target of surveillance or data request must always be notified eventually, giving them the opportunity to contest the data request.

Please refer to the list of notable legal requests below:

In January 2019, a foreign country made a data request that was approved by the Swiss court system. However, as we do not retain customer IP information, we were unable to provide the requested information and this was communicated to the requesting party.