# Proton

[2 tracked vendors](https://thirdpartyindex.com/vendors/proton#used-by) name Proton as a subprocessor, including [Maileroo](https://thirdpartyindex.com/vendors/maileroo) and [ReadWorks](https://thirdpartyindex.com/vendors/readworks). We have not found a subprocessor list published by Proton. We monitor 7 of its documents, which we last checked on 2026-11-11.

Proton (proton.me): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/proton
- Documents last verified: 2026-11-11
- Transparency rating: 50/100 (how much it publishes, not how secure it is): Subprocessor list 0/30 (not found); Processing locations 0/8 (no list); Purposes 0/7 (no list); Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 0 tracked vendors directly, 0 within two hops, 0 within three; 2 tracked vendors rely on it directly, 3 within two hops, 3 within three
- Cite as: Proton, Third Party Index, https://thirdpartyindex.com/vendors/proton (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://proton.me/business/trust | 2026-11-11 | 2026-10-19 |
| Data processing addendum | https://proton.me/legal/dpa | 2026-11-11 | 2026-09-21 |
| Privacy policy | https://proton.me/legal/privacy | 2026-11-11 | 2026-09-21 |
| Terms | https://proton.me/legal/terms | 2026-11-11 | 2026-11-05 |
| Security page | https://proton.me/mail/security | 2026-11-11 | 2026-09-21 |
| security.txt | https://proton.me/.well-known/security.txt | 2026-11-11 | 2026-09-21 |
| Status page | https://status.proton.me/ | 2026-11-11 | 2026-11-11 |

## Subprocessors (0)

No subprocessor list has been found or read for this vendor.

## Web Technologies

Proton's homepage made 162 requests to 2 domains. Loaded on 2026-11-04 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

### First party (1)

- Proton: 162 requests to proton.me, protonweb.com; Astro, Floating UI, HSTS, Open Graph, PWA, Priority Hints

## Subprocessor of (2)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Maileroo](https://thirdpartyindex.com/vendors/maileroo.md): Email and collaboration services
- [ReadWorks](https://thirdpartyindex.com/vendors/readworks.md): Secure password management and two-factor authentication

## Service status

Incidents it reported on its own status page.

- Last 90 days: 4 reported incidents (3 major or critical, 0 minor, 1 with no impact stated)
- Typical time to resolve: 3 h 17 min
- Status page last read: 2026-11-12
- 2026-10-27: Partial outage on Proton VPN servers (no impact stated)
- 2026-10-02: MacOS Certification Errors on the Proton Meet & Proton Mail apps (critical)
- 2026-09-01: Service disruption (major)
- 2026-08-26: Global Outage (critical)
- 2026-07-15: Partial outage on Proton VPN servers in the Dominican Republic (no impact stated)
- 2026-07-10: Investigating Incident (minor)
- 2026-06-30: Proton Calendar Issue (no impact stated)
- 2026-06-29: Power outage on Proton VPN servers in North Macedonia (no impact stated)

## Security contact

From its security.txt (https://proton.me/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/1240)):

- Contact: mailto:security@proton.me
- Disclosure policy: https://proton.me/security/bug-bounty
- Encryption key: https://api.protonmail.ch/pks/lookup?op=get&search=security@proton.me
- Security jobs: https://proton.me/careers
- Languages: en
- Valid until 2026-12-31

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api