What Proton being a Swiss non-profit foundation actually means

I often see people say something like "Proton can just undo its structure later anyway"or “nothing stops Proton from becoming bad like any other company”.

I don’t think that is really true. I’m also not sure if it’s just a hate train or if people really don’t understand and because I’m too afraid to ask I’m writing this.

To be clear, I’m not saying Proton can never make bad decisions or that people should stop being annoyed when they do them. They obviously can. Proton AG is still the company that runs Proton Mail, VPN, Drive, Pass, Calendar, etc. It sells subscriptions, hires people, builds products, and has to make money.

So the Foundation does not mean “every Proton decision is automatically good”.

But I think people often miss what being owned by a (Swiss) Foundation actually changes. It is not just a nice marketing label. It changes who controls Proton and what that control is legally supposed to be used for.

Proton states the Foundation’s mission like this:

“Our legally binding purpose is to further the advancement of privacy, freedom, and democracy around the world.”

That is the key part imo. The point is not “trust Andy forever” or “trust Proton forever”. The point is that control of Proton is put into a Swiss foundation that has no normal owners and has to follow a defined purpose.

So the structure is roughly this:

Proton AG

This is the actual company most users interact with. It runs the services, employs people, makes products, charges users, and pays the bills.

This part is still a business. It can still make business decisions. Some of them might be good and some of them might be bad.

Proton Foundation

This is the Swiss non-profit foundation that controls Proton through its voting position.

Proton says the Foundation is its primary shareholder and that:

“No change of control of Proton can occur without the consent of the Foundation”

So if someone wanted to buy Proton or take control of it, the Foundation is the layer that can block that.

That matters because the Foundation is not just another investor looking for the best exit. A Swiss foundation has no shareholders in the normal sense. There is nobody who owns the Foundation and can just decide to cash out.

Foundation board

The board controls the Foundation, but it does not own the Foundation.

The current board listed by Proton is:

• Dr. Andy Yen
• Antonio Gambardella
• Prof. Carissa Veliz
• Sir Tim Berners Lee
• Dingchao Lu

That is not a random board. Andy Yen is Proton’s founder and CEO. Dingchao Lu is a long-time Proton engineer. Carissa Veliz is an Oxford philosopher who works on privacy and AI ethics. Tim Berners Lee is the inventor of the World Wide Web. Antonio Gambardella is linked to FONGIT and Geneva’s tech ecosystem, and public register mirrors list him as president of the Proton Foundation board.

So the board has both Proton insiders and outside people whose public work is pretty clearly connected to the open web, privacy, ethics, and technology.

Also, public register mirrors list Antonio Gambardella as having individual signing authority. That usually means he can represent the Foundation externally. It does not automatically mean he can personally decide every important board matter by himself. Signing power and board voting power are not always the same thing.

Swiss public supervision

This is a key part I think many people miss.

Swiss foundations are supervised by public authorities. Since the Proton Foundation is in Geneva, the relevant authority is ASFIP Geneva.

Swiss foundation law says the supervisory authority has to make sure foundation assets are used for their declared purpose. ASFIP also says it checks the organisation, the use of assets according to the purpose, compliance with statutes and law, annual accounts, audit reports, activity reports, and that it can take measures to fix problems.

So if a foundation starts acting against its purpose, this is not only an internal drama. There is a public authority that can get involved.

That does not mean Geneva can just replace the board because users are angry about a product decision. That is not how this works.

But ASFIP is not powerless either.

In a serious case, the authority can require corrections, review or approve statute changes, deal with complaints from people, and take measures to fix problems. If the Foundation had a real organisation problem, Swiss law allows the authority to set a deadline to restore the legal situation or appoint a missing body or an administrator. Legal commentary also describes stronger measures like warnings, cancelling decisions, substitute measures, appointing a trustee, and in the most extreme case removing a board member or even the whole governing body.

So yes, in theory Geneva could intervene very strongly. But I would not phrase it as “Geneva can replace the board whenever it wants”. It is more like “Geneva can step in if the Foundation is not functioning legally or is seriously acting against its purpose”.

This is why I think comparing this to a normal company changing its “core values” page is a bit misleading.

A normal company can often change its values because the owners or board decide that the new direction makes more money. That does not mean there are zero rules, but the company purpose is usually broad enough that a lot of things are possible.

A Swiss foundation is very different imo. The purpose is much more central. The foundation exists for that purpose, and the assets are tied to it.

That does not make Proton perfect. It also does not make Proton community-owned. Users do not get to vote on the roadmap. It does not mean every feature will be privacy-maximal. It does not mean prices can never go up.

But it does make a real mission flip waaayy harder.

---

For example, let’s say Proton wanted to fully enshittify in the worst sense.

Imagine Proton AG decided that privacy was no longer the business model. Proton Mail starts scanning user data for targeted ads. Proton VPN starts selling browsing data. Or Proton gets sold to an ad-tech company because that would make a lot of money.

That could not just happen because a new CEO felt like it.

First, Proton AG would need to push that change. Then the Foundation would need to allow it, especially if it involved selling control of Proton. Then the Foundation board would need to somehow claim that this still fits a legal purpose about advancing privacy, freedom, and democracy.

At that point, several checks could matter.

The Foundation board could block the plan.

The Foundation could block a takeover.

The auditor and yearly reporting process could expose problems.

People with legal standing could complain to the supervisory authority.

ASFIP Geneva could look at whether the Foundation is still using its control and assets for the Foundation’s purpose.

And if the Foundation tried to change its purpose, that is not the same as editing a website. Under Swiss foundation law, changing a foundation’s purpose is subject to legal limits and authority involvement.

So for Proton to really go against its core values in a deep way, a lot would need to go wrong at once.

Proton AG would need to push the bad change. The Foundation would need to allow it. The Foundation board would need to ignore or twist the mission. The normal audit and reporting checks would need not to stop it. And the Swiss supervisory authority would need either not to act, or accept the argument that the change still fits the Foundation’s purpose.

That is possible in theory. No legal structure is magic.

But imo it is still very different from “they can just undo it whenever they want”.

The better way to look at it is probably this:

The Proton Foundation does not protect users from every annoying or bad Proton decision. It does not stop price increases. It does not stop bad PR. It does not stop Proton from launching products some users do not care about. It does not mean every business decision will be the one privacy nerds want. It doesn’t mean Proton is perfect.

But it does protect against the biggest failure mode. A full change of mission, a hostile takeover, or Proton turning into the kind of company it was created to avoid.

So I would not call it a perfect guarantee. I would call it a very serious guardrail. It’s not “trust us bro”, but also not “nothing changed”.

However if you’re in a fucked up country like the US and you’re not trusting the state because the state is run by a senile orange man then it’s a bit different but please don’t assume the whole world is as broken.

Some of the sources:

Proton Foundation page: The Proton Foundation | Proton

Proton team page: Meet the team behind Proton | Proton

Proton’s announcement: Proton is transitioning towards a non-profit structure | Proton

Geneva foundation framework:

ge.ch

Key summary of the Swiss and Geneva legal framework | ge.ch

Statutes, supervision, public-benefit status, accounting obligations: access the essentials to understand the legal framework governing foundations in Geneva.

ASFIP Geneva (in french but you can translate): https://www.asfip-ge.ch/qui-sommes-nous/missions-de-lasfip/