80Trust
Likely Accurate
🔍 Web Verified
GinaonMastodon3d ago
Well, this is unfortunate.
"Proton built Proton Meet to escape the CLOUD Act. They built it on CLOUD Act infrastructure. Their website promises "not even government agencies" can access your calls. The company routing them hands your call records to the [US] government when asked. Proton hid them from their privacy policy."
#proton #protonmail #digitalsovereigty #opensource
https://www.sambent.com/proton-meet-isnt-what-they-told-you/
Trust Metrics
82
85
68
80
Claim Accuracy82%
Source Quality85%
Framing & Tone68%
Context80%
Analysis Summary
This is substantively accurate reporting with strong technical corroboration. Proton Meet does use US-based LiveKit Cloud infrastructure subject to the CLOUD Act, contradicting Proton's marketing positioning it as a CLOUD Act escape hatch. The privacy policy disclosure exists but is buried. The framing is adversarial — the post emphasizes contradiction/deception rather than acknowledging that Proton likely made architectural trade-offs (end-to-end encrypted key exchange on Swiss servers, but media routing through US providers for performance). The core finding holds: Proton marketed a CLOUD Act workaround built on CLOUD Act infrastructure.
Claims Analysis (6)
“Proton Meet is built on LiveKit Cloud, a US company subject to the CLOUD Act”
Proton's own privacy policy confirms LiveKit Cloud handles transmission/routing. LiveKit is California-incorporated, CLOUD Act-subject.
“Proton's website promises 'not even government agencies' can access calls”
Proton's marketing materials describe Meet as 'as private as meeting in person' and position it as CLOUD Act-free alternative.
“LiveKit Cloud's terms specify California law and FTC jurisdiction”
Article cites LiveKit's ToS and privacy policy. These are public documents confirming CLOUD Act compliance obligation.
“Proton hid LiveKit infrastructure from their privacy policy”
The disclosure exists in the privacy policy, but is terse and buried. Not technically hidden, but de-emphasized relative to marketing claims.
“Network traffic routes through US infrastructure (Oracle Phoenix, AWS Oregon)”
Article provides specific IP addresses, ARIN registry data, DNS records, and CSP headers confirming US routing.
“Proton's key exchange/MLS layer runs on Swiss infrastructure”
DNS resolution and AS62371 attribution confirm Swiss-based cryptographic layer separate from LiveKit Cloud.
Was this analysis helpful?
Try ClearFeed free →