ProtonMail is headquartered in Switzerland, a country with some of the world's strictest data protection laws. This location gives users an added layer of security.
The company's commitment to user privacy is reflected in its decision to store all emails in encrypted form. This means that even ProtonMail employees cannot access users' encrypted emails.
ProtonMail's zero-access policy ensures that users retain control over their data. This is a key aspect of the company's balance between security and regulation.
Suggestion: How to Open Encrypted Email Gmail
ProtonMail's Compliance with Authorities
ProtonMail shared the IP address and device details of a customer with Swiss and French authorities, which led to an arrest.
The request was triggered by a legal order from Europol through the Swiss authorities, targeting a climate activist from Youth for climate action in Paris.
The service claims to prioritize user privacy, stating that no personal information is required to create an account and that IP logs are not kept.
However, ProtonMail's actions have raised questions about the true level of security and anonymity offered.
The company will update its website to make its obligations clearer when it comes to criminal prosecution, and users who want anonymity are urged to use Tor to access ProtonMail.
ProtonMail has fought over 700 cases in 2020 alone, but didn't specify how many were won.
The company claims it was unaware the targeted user was a climate activist, and only knew the order came through channels typically reserved for serious crime.
ProtonMail's actions have sparked concerns about the balance between user privacy and compliance with authorities.
The service has stated that it does not know the identity of its users, which may raise further questions about its ability to protect user anonymity.
Encryption and Security
ProtonMail's encryption is a key feature, allowing encrypted emails to be sent that "cannot be shared with third parties". This is a significant aspect of their commitment to user privacy.
Sir Tim Berners-Lee, a firm supporter of privacy, praised ProtonMail's values and vision for the web. He noted their alignment with his own vision for a web where people have control over their data.
ProtonMail's website originally stated that it didn't keep any IP logs, which can be linked to anonymous email accounts. However, some users felt the company failed to live up to this commitment.
The company has since removed this statement from its front page and updated its privacy policy. It now clarifies that in cases of criminal prosecution, ProtonMail can be legally compelled to log IP addresses.
ProtonMail's chief executive, Andy Yen, criticized the data request on Twitter.
Related reading: Email Privacy
Content and Regulation
ProtonMail is transparent about its logging practices, stating that it doesn't usually keep logs, but can be required to record IP data linked to an account.
The company acknowledges that the internet is not entirely anonymous, and if you're breaking Swiss law, ProtonMail can be legally compelled to log your IP address.
ProtonMail publishes reports on the requests for information it receives, showing a significant increase in requests from Swiss authorities.
In 2017, ProtonMail received just 13 requests for assistance from Swiss authorities, whereas last year it received more than 3,500 requests.
Statement and Policy
ProtonMail has issued a statement on Twitter, explaining that it complies with Swiss laws and cannot be used for activities that are illegal in Switzerland.
The company's founder, Andy Yen, emphasizes that ProtonMail cannot be used by people engaged in activities that are illegal in Switzerland.
ProtonMail has published an extensive statement on its website, addressing the concerns raised by the recent data release.
The statement clarifies that the data released does not contain any information that can be used to identify individuals.
ProtonMail has a history of pushing back against government requests for user data, having done so in over 700 cases in 2020.
However, in this instance, the company chose not to resist the government's request.
ProtonMail emphasizes that user data is secure, but notes that using the Tor Browser is necessary for complete anonymity.
The company also aims to be more transparent about its legal obligations.
ProtonMail has revised its privacy policy to explicitly state that it may store IP addresses temporarily to prevent abuse.
Intriguing read: Apple Hide My Email Not Forwarding
IP addresses can be stored permanently if users engage in activities that breach the company's terms of service.
ProtonMail is legally required to store IP addresses in certain circumstances, such as when it is compelled by Swiss authorities to do so.
This requirement does not apply to ProtonVPN, the company's VPN service.
Featured Images: pexels.com
