https://proton.me/blog/soc-2 Proton * Products Proton Mail ProtonMail Encrypted email that's private by default. Proton Calendar ProtonCalendar Your calendar is a record of your life. Keep it safe. Proton Drive ProtonDrive Secure cloud storage that gives you control of your data. Proton VPN ProtonVPN Your gateway to online freedom. (new window) Proton Pass ProtonPass An encrypted password manager that protects your online identity. Proton Wallet ProtonWallet Store and transact Bitcoin privately with an encrypted self-custody wallet. ----------------------------------------------------------------- Proton For Business Improve the security of your business and comply with data protection laws. * Proton for Business * Who we are About us Proton stands for privacy. Always has, always will. Team Meet the people building a better internet. Impact Defending freedom through tech is why we exist. CareersWe're hiring Seeking talented people to take Proton to the next level. ----------------------------------------------------------------- We've always been guided by the Proton community. Community Join the fight to make the internet a better place. Open source Everyone is welcome to inspect our code. We're open. Proton Foundation Our non-profit model puts people before profit. * Resources and support Help Switch to Proton Move to Proton in just a few clicks with Easy Switch. Help and support Guides and customer support for Proton products. Password generator Create strong, random passwords. Blog News Latest news on privacy and the Internet. Product updates Proton news Privacy guides Download the apps Proton Mail Proton Calendar Proton Drive Proton VPN (new window) Proton Pass Create a free account Sign in Open menu [] * Product updates * Proton news * Privacy news * Privacy guides * Opinion * For business Subscribe by RSS Search for blog posts Create account Proton completes SOC 2 Type II audit, reinforcing trust for business users * Proton news Proton completes SOC 2 Type II audit to support business security [] Patricia Egger Published on July 22, 2025 Share this page: * [](new window) * [](new window) * [](new window) * [](new window) * Copy link At Proton, we prioritize our community's privacy and data security in every aspect of how we operate -- from our open-source apps to our zero-access architecture. To further demonstrate our commitment, we recently completed an in-depth external audit and -- in July 2025 -- successfully achieved our first SOC 2 Type II attestation, one of the most widely recognized standards for operational security in business. It provides third-party validation that we not only have strong security controls in place, but that they're consistently followed in practice. Here's what this means, and what's next for Proton. How we did it At Proton, our philosophy is simple: Build strong security first, then let compliance follow. That approach paid off. To complete the SOC 2 Type II audit, we didn't have to overhaul how we work. We formalized and documented many of the controls already embedded in our day-to-day operations -- from access management and incident response to system monitoring and risk assessment. The audit examined the real-world implementation of our security controls across our infrastructure. This included interviews, technical reviews, and documentation checks -- all conducted by Schellman(new window), an independent, third-party auditing firm widely consulted in the tech sector. In other words, our internal security practices were put under the microscope -- and validated. Why we did it Proton was built on the idea that privacy is a human right -- and trust still has to be earned. As an organization founded by scientists, we believe that independent review and public accountability are the best ways to prove a system is working -- and to find and fix problems quickly when it's not. That's why we make our apps open source, run a public bug bounty program, and invite penetration testing of our services. We also underwent a rigorous external audit and -- on May 2, 2024 -- received our ISO 27001(new window) certification. Completing the SOC 2 Type II audit is a natural extension of this approach. This attestation is also increasingly important for businesses evaluating tools for secure communication and collaboration. For many of these organizations -- especially those in finance, healthcare, and other regulated industries -- SOC 2 is a baseline requirement before moving forward with a vendor. Proton's SOC 2 Type II attestation proves that our security isn't just technical -- it's operational. We meet strict, independently-audited standards for how we handle data, systems, and processes. What's next This SOC 2 Type II audit is just one piece of the bigger picture. It joins our ISO 27001 certification, GDPR and Swiss DPA compliance, and HIPAA support (when needed) -- all part of building tools you can actually trust. We're going to keep pushing: improving our security infrastructure, making it easier for businesses to assess Proton, and sharing more about how we do our work. Need the SOC 2 report for a vendor review or just want to take a closer look? Reach out to our team. We're happy to walk you through it. Thanks for being with us. We've got more updates coming soon to help you -- and your team -- stay secure. Share this page: * [](new window) * [](new window) * [](new window) * [](new window) * Copy link [] Patricia Egger Patricia Egger joined Proton in 2021 and is our Head of Security. She received a Master's degree in Applied Mathematics at the Ecole polytechnique federale de Lausanne. Before joining Proton, Patricia worked as a security consultant and the security officer for Kudelski Security. She is also the co-founder and current President of Women in Cyber Switzerland. Related articles Most 'one time email' services aren't secure, but this alternative is Jul 22, 2025 Most 'one time email' services aren't secure, but this alternative is One time email services aren't as safe as you think -- but there's a better way. Learn more about simple, secure alternatives to disposable email addresses. A computer, a smartphone, and a progress bar labeled "Storage", representing how to get more storage on any device Jul 16, 2025 * Privacy guides How to get more storage space on any device See how to get more storage on PC, Mac, iPhone, iPad, Android in this step-by-step guide with tips to clean files, upload to cloud, and more. Email archiving is a quick way to stay secure and compliant Jul 11, 2025 * For business What is email archiving and how does it relate to security and compliance? Archiving email with Proton can boost security, make employees more efficient, ensure your business is legally compliant, and prevent data breaches. An open letter and a torn document, representing a termination letter template Jul 11, 2025 * For business 8 termination letter templates and a guide to writing them right Learn how to write a termination letter with our step-by-step guide and use our 8 free, ready-to-edit termination letter templates. A smartphone, the Android logo, Gemini AI, and an off toggle, representing how to turn off Gemini on Android Jul 11, 2025 * Privacy guides How to turn off Gemini on Android -- and why you should Learn how to turn off Gemini on Android, what the Google AI can see, its privacy risks, and how to limit its reach across your device. A folder, a user icon, and a shield, representing secure data handling during offboarding Jul 10, 2025 * For business Offboarding: How to offboard employees and contractors securely (+ a checklist) Learn how to offboard employees and contractors securely -- with free ready-to-use offboarding templates you can edit in Proton Docs. Proton Privacy by default * X(new window) * Reddit(new window) * Instagram(new window) * Facebook(new window) * LinkedIn(new window) * RSS * Threads(new window) * WhatsApp(new window) * Telegram(new window) * UserVoice(new window) * YouTube(new window) * TikTok(new window) * Bluesky(new window) Proton AG Route de la Galaise 32 1228 Plan-les-Ouates Geneva, Switzerland * Products + Proton Mail + Proton Calendar + Proton Drive + Proton VPN (new window) + Proton Pass + Proton Wallet + Proton for Business + Switch to Proton * Products + Proton Mail + Proton Calendar + Proton Drive + Proton VPN (new window) + Proton Pass + Proton Wallet + Proton for Business + Switch to Proton * Privacy and community + Password generator + Tor + Community + Open source + Pricing + Student discount + Big Tech fines tracker * Privacy and community + Password generator + Tor + Community + Open source + Pricing + Student discount + Big Tech fines tracker * Company + About us + Team + Impact + Proton Foundation + Careers We're hiring + Shop (new window) * Company + About us + Team + Impact + Proton Foundation + Careers We're hiring + Shop (new window) * Connect + Blog + Help and support + Partners and affiliates + Press and media + Contact us + Donate * Connect + Blog + Help and support + Partners and affiliates + Press and media + Contact us + Donate --------------------------------------------------------------------- * System status(new window) * Report abuse * Report a problem * Report a security issue * Request a feature(new window) * Privacy Policy * Terms & conditions * Transparency report * (c) 2025 Proton AG. All rights reserved.