Andy Greenberg Privacy Aug 18, 2026 6:30 AM Can AI Coexist With Privacy? Proton’s Andy Yen Says It Will Have To Proton’s CEO is a champion of encryption for everyone. So why is he going all in on un-encryptable AI? Photo-Illustration: WIRED Staff; Alex Wong/Getty Images Save this story Save this story In the eyes of many privacy advocates, AI is just another surveillance technology . It supercharges online tracking and real-world spying tools, sifts through vast troves of everyone’s data to spit out its results, and then encourages users to share their deepest secrets and desires with a cloud-hosted large-language model. Surveillance capitalism made AI possible, and AI returns the favor by making surveillance more powerful and the businesses that run on it more data-rich and profitable than ever. Andy Yen is among the most influential voices in the tech industry who equates AI with privacy invasion. He’s the founder and CEO of Proton, one of the world’s most popular encryption-focused tech companies. He says the push to integrate AI into every consumer tech product—whether people want it or not—is driving new users in droves to Proton’s products, which are, put simply, the end-to-end encrypted versions of every Google service from Gmail to Google Docs, Sheets, Calendar, and Meet. Yet Yen is not anti-AI, he says, any more than he is anti-internet. In late June, Proton released the latest version of its very own AI chatbot, Lumo—just one way that Proton is integrating AI ever more deeply into its suite of tools, but seeking to do so in a way that’s more voluntary and preserves users’ privacy far more than the typical tech giant. That willingness to embrace the apparent contradiction between AI and privacy is just one way in which Yen’s views don’t cut cleanly across party lines—from current US politics to the lessons of Edward Snowden’s leaks to the question of the best corporate structure for a tech company that’s not solely designed to maximize profit. You can read our conversation about all of it here or listen wherever you get your podcasts. This interview has been edited for length and clarity. ANDY GREENBERG: I want to start by asking about your background and the origin story of Proton. You’re a trained particle physicist. You worked at CERN, the nuclear research facility, but you were inspired by the leaks of Edward Snowden back in 2013 to create Proton, right? ANDY YEN: I’m not actually a tech person or even an entrepreneur by training, so I really happened into this field a little bit by accident. I used to work at the Large Hadron Collider, which is a particle accelerator. It’s the largest in the world. I’ve heard of it ... Yes. And what you may not know is that every once in a while, the accelerator gets turned off for upgrades, and these upgrades can take quite a bit of time. So Proton was created in one of those upgrade cycles, where the physicists had a little bit more free time because the experiment wasn’t running, and they were upgrading it. So this is just, like, a period when Swiss physicists get to sit around over beers and think about privacy technologies? Yeah, yeah. This was the summer after Snowden had come out about government surveillance. So Snowden really informed the world about mass surveillance at the government scale. But if you imagine what the NSA knows about you and then compare that to, say, what Meta or Google might know, it’s really quite tiny. So the realization we had sitting in that cafeteria was, yeah, government surveillance is a problem, but the much bigger problem is corporate surveillance. I would argue today that if you look at the US government, they don’t even need the NSA. They can just directly subpoena Google, Facebook, and these giant companies, which they do on a very routine basis. So inadvertently, the business model of the internet had brought us into an age where we had the highest amount of surveillance at any time in human history, and that seemed [like it was] really not the way the internet should have gone. And that’s what really motivated us to think, what are ways we can address this problem? Proton is really a response to that. Today, the default business model of the internet is that everything you do is recorded, shared, monetized, and abused for purposes that are beyond your control. And we should really build an internet where privacy isn’t an add-on that you can maybe get if you go through five menus and click ten different buttons; it should be the default. And that was what led to the creation of Proton Mail back in 2014. And if you can bring us up to the present, where is Proton today, for people who may not be familiar with it? In 2014, if I went out on the street and I asked somebody, “How does Google or Facebook make money?”—probably one in 10 people would give me the correct answer. Today, if I go out into the world, it’s not 10 out of 10, but probably six or seven would actually know the answer. What that really means is the concern that people have for their data online has massively increased in the past decade. So Proton went from having a couple hundred thousand users to now over a hundred million. And email is the core of Google’s business model. You know, the reason Google can track you is that you’re logged in, and the reason you’re logged in is that you have a Gmail. And so if you are able to attack that piece, that’s actually the most effective piece to first dislodge somebody out of the Google ecosystem. So we started with email, did a calendar, file storage, documents, essentially recreating the entire Google Workspace, but in a more privacy-first way, and I would say without the creepy business model that Google employs. So how many people have you actually dislodged from Google? How many minds have you freed? We’ve dislodged a hundred million people so far, and we hope to dislodge a lot more in the decades to come. That’s an impressive number. How many of them are paying customers? Well, it’s a freemium business model, so most of them use it for free, but the typical conversion rates that you see for freemium business models are usually between 1 and 3 percent, and Proton sits in that bucket as well. You mentioned a couple of these landmarks in the history of surveillance capitalism, starting with Snowden. Today, anecdotally, the reason that more people are asking me about Proton than any other is AI. People keep asking me—my own family, my friends—if they should switch to Proton, and they’re asking because they’re sick of having AI pushed on them in Gmail in particular. Are you capitalizing on this AI backlash, this resistance to AI that is making people think about their privacy? We are capitalizing on it, and we’re making it easier than ever now to switch. So for example, now there’s an easy switch tool on Proton where you can basically bring all your emails from Google automatically and get everything put into Proton in just a couple clicks. But my take on this trend is actually a little bit more nuanced. AI is surveillance. The internet is surveillance. And that’s something that we have to come to terms with. The genie’s out of the bottle; we’re not gonna put it back in, and we are not gonna be returning to a pre-AI world. If we accept that as a fact, the key question becomes: Who do we want to have as the future stewards and controllers of this new future that we’re all stepping into today? And the options are: Number one, it can be the gigantic tech companies of the world who have done everything possible in the last two decades to prove that they cannot be trusted with your data; or maybe it can be some other independent tech companies with different business models. So Proton is also building AI features and AI tools, because I think if the privacy companies do not find a way to step in to build privacy-first AI, we are essentially ceding the future to tech companies that don’t have the best interests of users at heart. This is what happened in the late ’90s, early 2000s when we let Google, Meta, Yahoo, and these other companies take over the entire [digital economy]. So our push into AI is really to try to avoid a repeat of that mistake that was made several decades back. We think it’s important to actually be present there. Are you in fact excited about AI? Yeah. If I were to describe Proton’s stance, I would say we were reluctantly pulled in, but we saw the writing on the wall. Once we came to the conclusion that AI was here to stay, it was unavoidable—if we were to fulfill our mission—that we also [had to] enter the space to provide an alternative. I would probably prefer a world where AI didn’t exist, but it’s here. Interesting. Do your users agree? This has shifted quite a bit in just the last two to three years. When we first came out with the AI features in Proton, there was quite a bit of backlash. People were sort of like, “Why are you doing this? It’s a waste of resources. It’s not what Proton stands for. You’re just becoming like another tech company,” you know. But then, after we put out Lumo last year, what we really saw in the weeks and months after was: The exact same person who was flaming us for putting out this feature in July was now flaming us for not making Lumo better. They’re like, “Oh, this is not good enough. You gotta make this a better product.” So I don’t think they’re allergic to AI as a concept. I think they’re allergic to what AI represents in the Big Tech definition of AI. But when Proton does it in a way that actually ensures privacy, security, and ownership of their data and their conversations, then actually they’re OK with it. Well, it’s an interesting framing: Would you rather that Google have access to your chats with an AI, or would you rather trust Proton? But I was kind of surprised, when I dug into how Lumo works, that it is not end-to-end encrypted chatting with an AI. The privacy promise of Lumo is exactly that—a promise from Proton that “we’re not gonna look at thes