Is Proton VPN safe? Logs, audits, Swiss jurisdiction and weak spots

Yes. On the published record, Proton VPN is a safe pick: it ranks 2nd in the VPNRadarLab ranking at 6.12 of 10, has no red flag attached, and scores far above the consumer-VPN median on privacy (6.0) and security (7.9). The weak spots are specific: sign-up requires an email, the policy is silent on some details, and the censorship-bypass toolkit is thin.

Who runs Proton VPN and which law applies

Proton AG, registered in Plan-les-Ouates near Geneva, operates the service. Jurisdiction matters more than any slogan: only a binding order from a Swiss authority can force the company to hand over data, and Proton says it challenges doubtful requests. Switzerland stays outside the 5, 9 and 14 Eyes alliances, so no automatic intelligence-sharing obligation applies. A published transparency report plus a warrant canary let you monitor government pressure yourself.

What the privacy policy says Proton VPN collects

No-logs never means zero data. The privacy policy states plainly what remains:

Nothing here links your browsing to you, yet the account is not anonymous. Support and payments run through named processors (Zendesk, Stripe, PayPal, Chargebee, Atlassian), so paying by card leaves traces outside Proton. Authentication logs exist only if you switch them on.

Audits, open source and the security toolkit

A published independent no-logs audit is what turns the promise into a checked claim. Security audits are public too, the apps are open-source on GitHub, and a bug bounty pays people who report vulnerabilities.

On a hotel Wi-Fi, the kill switch is what stops your traffic when the tunnel drops, so enable it. Secure Core routes traffic through a second server in Switzerland, Iceland or Sweden before the exit; servers run on own bare-metal hardware.

Where Proton VPN loses points

Published audits, open code, leak protection and the Swiss base account for most of the marks. The privacy dent (9 of 15) comes from identity: an email is required, there is no account-number login, connection addresses are kept briefly for abuse checks, and session times are not addressed in the policy. The records show no court case or incident proving the no-logs claim, which costs one more privacy point. On security (11 of 14), the missing points attach to what Proton does not publish: RAM-only servers, two-factor sign-in and post-quantum encryption.

Incidents and red flags on record

The records show no security incident for the service and no red flag. One caveat: no server seizure or court case confirming the no-logs policy is on record in the site data, so the independent audit is the strongest evidence available.

Is the free version of Proton VPN safe?

Yes. The free tier changes reach, not the no-logs policy or encryption: one device, unlimited data, medium speed, no ads, about 10 randomly assigned countries. Streaming, P2P, NetShield and Secure Core are paid-plan features.

Proton VPN safety FAQ

Can you be tracked using Proton VPN?

Websites see the exit server's address, not yours. Proton itself knows your email and, for a short time, the IP you connect from.

Can I pay for Proton VPN anonymously?

Bitcoin via Proton credits, cash or bank transfer keep your card out of it. Cash and bank transfer cannot be refunded; direct purchases carry a full refund within 30 days of the first purchase, one per user.

Does Proton VPN work against heavy censorship?

Partly. Stealth and alternative routing offer some help, yet VLESS Reality, Trojan, Shadowsocks, Hysteria2 and obfs4 are absent, which puts the bypass sub-score at 2.4. Proton is a privacy tool first.

Bottom line on Proton VPN safety

Swiss jurisdiction outside the Eyes alliances, a published independent no-logs audit, open-source apps, strong encryption and no recorded incidents make Proton VPN safe for privacy and security. Anyone resisting identity linkage should register with a separate email and settle the bill in cash or Bitcoin. Before committing, compare it with other audited no-logs VPNs.