Proton's AI controversy, explained: re-interviews, leaked Slack messages, and a CEO under pressure

If you use Proton Mail, Proton VPN or Proton Pass, your feeds have probably been full of angry posts about the company this past week. Some longtime subscribers say they’re canceling, some are defending Proton, and a petition asking CEO Andy Yen to step down keeps climbing on Proton’s own feedback site.

It started with an internal email about AI and became a fight over how Proton treats staff and whether a privacy company can move fast without cutting corners. Here’s what each side says.

How did this start?

On October 26, 404 Media reported that Proton planned to “re-interview” employees about how they use AI. A leaked email suggested the interviews could affect “continued employment” and warned that “these re-interviews are consequential.”

Yen hit back on X the next day, saying AI is part of performance reviews “at most places” and that his views were “more nuanced than this clickbait hit piece suggests.”

On October 29, 404 Media published a longer investigation based on nine current and former employees, Slack chats, and meeting recordings. It reported that:

• When an employee asked for time to security-test new code, Yen allegedly called it “bullshit and loser thinking.”
• He told staff to “stop lovingly handcrafting all our code and use AI more.”
• Software on work computers allegedly tracked how much AI code the company produces.
• Yen allegedly said this would be the last year Proton hires engineers.

The leaked message above also includes the line “The baseline is, we must do this plus be faster at the same time.” 404 Media reported the “handcrafting” quote separately, so both sides agree Yen said it. They disagree on what he meant.

Proton’s response to the report

On October 30, Yen canceled the re-interviews at an all-hands meeting. In audio quoted by 404 Media, he said “there will be no loss of jobs from AI,” though a reorganization is still going ahead.

Late on October 30, Proton responded in a single post on X from @ProtonPrivacy, now at about 591,000 views. It denied the tracking claim outright:

Proton does not install tracking software on employees’ laptops to measure how much AI-generated code they produce. This rumor stemmed from a misunderstanding about how MDM software works, and it’s not true.

The post also said AI “will never be at the expense of security,” promised to publish Proton’s code-review and AI policies, and ended with an apology:

We’re aware that we haven’t lived up to the high standard you ought to hold us to, and for that we can only apologize, we are sorry.

Yen also posted “A message to the community” on r/ProtonMail from his account. 

He confirmed the “re-interviews” “will not take place” and closed with a line aimed at the AI-first talk: Proton “will not go the distance with an army of agents, but with an army of smart, thoughtful people.” The top comments weren’t convinced. They called it “damage control” and a “non-apology,” saying the problem is Yen, not AI. On X, Yen is still pushing back. He says “no pentests were skipped” and that his comments were “taken out of context.”

The job promises don’t align either. The meeting audio says, “there will be no loss of jobs from AI.” The X post says, “there are no job losses due to AI re-interviews,” and Yen’s Reddit post says, “no one will lose their jobs because of them.” Those statements cover only the re-interviews, which may matter with a reorganization underway.

What’s in the AI manifesto?

On November 1, Proton published CTO Bart Butler’s internal memo as a blog post. The original two-page PDF was also linked to in the same blog post. It’s quite blunt:

Programming’ is dead. Engineering is not, nor is expertise. Your old job is gone.

The memo also predicts that “most human code review will end,” while insisting “this is not the death of expertise” and that “tests remain crucial.” Supporters see it as a realistic approach, while critics worry it could put pressure on people to drop human checks.

What are Proton employees saying?

On October 31, a staff engineer who goes by u/EpokK1 posted “I’m a Proton employee and I’m breaking my silence” on r/ProtonMail. The post has about 6,400 upvotes. He shared screenshots, which he says he had permission to post, and offered helpful context about the leaks. In his telling:

• Yen never said to skip pentesting, agreed to extra testing, and apologized to the company for his language.
• The hiring line refers to merging engineering and product teams, with Proton hiring “product engineers” instead of pure coders.

On tracking, he says the tool only labels code as AI-written or human-written. The internal design doc above says the data is “good for trends and insight, not for judging individuals.” That said, some people in the thread pointed out that a design doc’s “non-goal” is an intention, not a technical limit.

He also addressed a May Slack exchange about Tuta, a rival encrypted email service.

After an employee says Tuta’s encryption rollout isn’t really ahead of Proton’s, Yen replies: “then go on reddit and point it out to users.” The engineer says the exchange was about a badly worded announcement, not code security. But again, some say the bigger concern is a CEO asking staff to post from personal accounts. Proton hasn’t addressed this exchange directly.

Not everyone on the inside agreed with him. Proton’s docs lead replied that a “culture of fear” had built up, “a culture of his making,” though he said he now sees Yen “making an effort.”

On r/ProtonPublic, an anonymous former employee, u/chess_on_rails, called 404’s coverage “a bit too sensationalist” but said it “fully confirms” a culture of fear that, in their view, began long before AI.

How many users want Yen out?

A post on Proton’s UserVoice board titled “Andy Yen, CEO, should step down completely” had 2,272 votes as of November 3. It was posted on October 30, and its comments are overwhelmingly critical. Proton hasn’t replied there.

What’s still unverified?

Proton hasn’t called any screenshots fake. But nobody has published the “loser thinking” messages, and Yen disputes that pentests were skipped, as we pointed out above. No one has independently checked what the tracking tool can do.

So what does this mean for Proton users?

Your account hasn’t changed. Proton says AI use “will never be at the expense of security” and that it has added more security review. The real test is the AI and code-review policies Proton has promised. If you’re deciding whether to stay, you might want to wait a little longer to read them when they’re published.