Proton CTO: No Company Is Going to Jail for You

Proton CTO Bart Butler sat down with Nilay Patel on The Verge's Decoder podcast in July 2026 and delivered a blunt warning: if proposed surveillance laws in Switzerland and the European Union make encrypted services impossible to operate, Proton will leave Europe . The conversation, framed around the maxim "No company is going to go to jail for you," covered the technical impossibility of secure backdoors, a concrete relocation strategy, and the launch of Lumo 2.0 — a privacy-first AI assistant built on zero-access encryption .

The Threat to Leave Europe

Butler stated that Proton would consider relocating its legal and technical operations out of Europe if proposed surveillance laws in Switzerland and the EU make its privacy products impossible to operate as promised . He described the threat as "serious" and not a bluff . The central tension of the episode was clear: no amount of corporate resistance can protect users if a company is legally compelled to break encryption where it is physically based .

Why Chat Control Is the Breaking Point

The primary EU threat Butler cited is the "Chat Control" regulation, which would require encrypted messaging platforms to scan private messages for illegal material . Butler argued that secure backdoors are technically impossible — requiring client-side scanning would fundamentally break end-to-end encryption for all users . Proton has publicly stated that it would rather leave than comply with such mandates . The EU has been attempting to pass this legislation since 2022, with the European Parliament adopting a favorable position in November 2023, but EU governments have so far failed to reach agreement .

Proton's Server Relocation Strategy

Proton is already moving physical infrastructure out of Switzerland due to "legal uncertainty" over the Swiss government's own proposed mass surveillance laws . Butler confirmed the company has prepared backup infrastructure in Germany and Norway, and would relocate further if EU regulations tighten . The company's non-profit foundation ownership structure, based in Geneva, is designed to align incentives with user privacy, but Butler acknowledged that legal jurisdiction still ultimately determines what a company can be forced to do .

Lumo 2.0: Privacy-First AI Assistant

Proton launched Lumo 2.0 on June 30, 2026, described by the company as "the most powerful private AI" and "the most significant change since launch" . Lumo 2.0 uses zero-access encryption — Proton's staff cannot read user conversations, and the system never logs chats or trains on user data . It runs on Proton's fully European infrastructure under Swiss privacy law, positioning it as a privacy-preserving alternative to ChatGPT, Gemini, and Claude . Butler framed Lumo as proof that "users no longer need to choose between powerful AI capabilities and meaningful privacy protections" .

Broader Regulatory Tensions

Butler described a two-front pressure on Proton: from the Swiss government pushing its own surveillance law, and from the EU's Chat Control proposals . He noted that some of the EU's proposed surveillance measures have already been ruled illegal by European courts, adding to the "legal uncertainty" . The interview was the first of a two-part series on Decoder examining the systems that run the world, with deep focus on how Proton's architecture, ownership, and jurisdiction choices affect user privacy .