Proton says it rejected all 47 data requests targeting VPN users in 2026

Proton has updated its Proton VPN transparency report, revealing that it received 47 legally binding requests for user information during the first half of 2026.

According to the company, all 47 requests were denied because Proton VPN's no-logs policy meant it had no data capable of identifying the users sought by authorities.

The updated transparency report, published on July 14, states that each request sought to identify who was connected to a specific Proton VPN server at a specific time. Proton says it was unable to provide the requested information because Proton VPN does not collect or retain connection logs, meaning it cannot determine which user was connected to a server at any given moment.

In a statement shared with CyberInsider, the company confirmed that all 47 requests originated from Swiss authorities and had been approved through the Swiss legal system.

“Since 2017, Proton has received 458 legally binding orders approved by the Swiss authorities. In every case, Proton VPN had no user data to hand over because our strict no-logs policy means we don't store the information in the first place,” a Proton spokesperson told CyberInsider.

The spokesperson added that Proton engages only with requests from Swiss authorities when legally obligated to do so. “Proton has a strict no logs policy so we have had nothing to give on these occasions as we cannot share what we do not have,” the company said, adding that it could not disclose the nature or specifics of the individual requests.

Proton is a Switzerland-based privacy company that operates encrypted services including Proton Mail, Proton VPN, Proton Drive, Proton Pass, and Proton Calendar. Because the company is headquartered in Switzerland, it says it only responds to requests approved by Swiss authorities. Proton also notes that it is legally prohibited from responding directly to foreign government requests that have not gone through the Swiss legal process.

Proton VPN has now received 458 legally binding orders since the service launched in 2017. The report states that every request sought to identify users connected to a specific VPN server at a specific time, but that none resulted in user information being disclosed because the service does not retain the logs necessary to make those identifications.

Proton VPN's no-logs policy has been validated through multiple independent audits. The most recent one comes from Securitum, which assessed Proton AG’s Switzerland-based infrastructure between May 20 and 27, 2026, and confirmed that the service operates in accordance with its publicly stated no-logs commitments.