# Lumo ## Kurzbeschreibung **“Ask me anything. It’s confidential.” - “The AI that respects your privacy”** **Lumo** is an AI assistant from Proton with a focus on confidentiality, no-logs, and zero-access encryption. The tool supports, among other things, research, writing, translations, file analysis, coding assistance, and optional web search; in addition, there are Projects as well as integration with Proton Drive. Proton positions Lumo as a European, privacy-focused alternative to common AI chats. ## Claim Ask me anything. It’s confidential ## Geeignet für - Data Analysis - Data Extraction / Document Analysis - Email / Communication - Productivity & Planning - Programming / Software Development - Project Management - Research - Writing & Editing - Texts / Content - Translations - Knowledge Management / Internal Search ## Kernfunktionen - Chatbot - Programming - Research - Text generation - Summary ## Preismodell - **free:** Free use with limited access; even without an account, a chat can be started with restricted access. - **subscription:** **Lumo Plus** Unlimited chats, extended chat history, unlimited encrypted chat history, search and favorites for previous chats, Ghost Mode, and uploading multiple or large files. ## DSGVO und Datenschutz **Gesamteinschätzung:** Conditional **On-prem / local hosting: indirect / not available** The website does not mention an on-premises, local, or self-hosted deployment option for Lumo. Only the SaaS/Proton-powered version was found. **Private Cloud / Data Center: Unclear** The website states that the models run on “servers Proton controls.” However, there is no mention of a dedicated or isolated private cloud environment for customers or a specific EU/EEA data center for Lumo. **EU SaaS / Managed: Partially** Lumo is described as a European service, and Proton refers to Lumo as “built and based in Europe” and “subject to GDPR.” However, the website does not specify a specific EU/EEA data center location or explicitly state that Lumo’s data is resident in the EU. **Hybrid: partially** There is an indirect hybrid aspect: according to the website, stored chats are kept on the device and are synchronized with Proton only in encrypted form; additionally, web search is optional and can send a simplified request to partner APIs. However, a formal hybrid architecture for enterprise customers is not specified. **DPA: Covered** A general Proton DPA/AVV is published on the website. It describes Proton AG as a data processor, explicitly refers to the GDPR, and addresses subprocessors, audits, deletion/return, and international transfers. **No training: covered** The website clearly states for Lumo that chats are not used to train AI models, data is not shared with third parties, and the models run on servers controlled by Proton. An opt-out is therefore effectively unnecessary because, according to the website, training using chats does not occur by default. **Open Source / Transparency: Partially** The website states that Lumo’s code is open source and that Lumo is based on open-source LLMs. This provides transparency. However, the website does not specify a fully self-hostable open-source path or an on-premises option for Lumo. **Data Processing** According to the information found on the website, Lumo processes inputs to generate responses; when chat histories are stored, both inputs and outputs are encrypted using zero-knowledge encryption. Proton describes Lumo’s architecture as “no logs,” meaning that data is deleted after processing and no chat metadata—such as timestamps, IP addresses, or chat context—is stored. According to support, saved chats are available on the device and are synchronized with Proton using zero-access encryption. When web search is enabled, a simplified version of the query can be sent to selected partner APIs. Specific Lumo subprocessors, specific data center locations, and an explicit EU data residency are not specified on the Lumo/Proton pages found. **Conclusion** From a website perspective, Lumo appears to be strongly privacy-oriented and comparatively well-documented for an EU/EEA tool directory: European classification, GDPR compliance, DPA/AVV, open source, no training using chats, no logs, and Proton-controlled servers. However, to give a clear “yes,” the website lacks reliable evidence of a specific EU/EEA data residency or a specific EU/EEA data center for Lumo, as well as a clearly documented hosting option outside of standard SaaS. Therefore, the overall rating is “conditional.” **Sources** - [https://proton.me/lumo](https://proton.me/lumo) - [https://proton.me/support/lumo-privacy](https://proton.me/support/lumo-privacy) - [https://proton.me/de/lumo/privacy-policy](https://proton.me/de/lumo/privacy-policy) - [https://proton.me/legal/privacy](https://proton.me/legal/privacy) - [https://proton.me/legal/dpa](https://proton.me/legal/dpa) - [https://proton.me/business](https://proton.me/business) - [https://proton.me/blog/iso-27001-certification](https://proton.me/blog/iso-27001-certification) - [https://proton.me/blog/soc-2](https://proton.me/blog/soc-2) The website highlights several strong data protection and compliance measures for Lumo in the EU/EEA context: Proton explicitly states that it is “GDPR compliant,” designates an EU representative in Luxembourg, provides a privacy policy for Lumo, offers a general DPA/T&C for Proton services, and outlines a clear “no logs,” “no sharing,” and “no training” approach for Lumo. At the same time, a significant gap remains for a comprehensive assessment of the best possible EU/EEA setup: The website does not specify a concrete location of servers or data centers for Lumo within the EU/EEA or an explicit EU data residency for Lumo. An on-premises or self-hosting option is also not mentioned on the website. Therefore, while GDPR-compliant use from an EU/EEA perspective is plausible, it is not fully substantiated and is only reliable under certain conditions. **Positive** Positive aspects include Lumo’s product-specific privacy policy, the general Proton DPA/AVV, the explicit statement regarding GDPR compliance, the EU representative in Luxembourg, the statements “no logs,” “no training,” “never send your data to any third parties,” Proton’s control over the servers, and the open-source note regarding the code and models used. **Negative** On the negative side, or rather as a limitation, the Lumo website does not specify a concrete EU/EEA server location, does not explicitly state EU data residency, does not offer a dedicated private cloud option, and does not provide an on-premises or self-hosting option. Furthermore, Lumo’s privacy policy mentions only “selected partner APIs” for enabled web search, without naming them on the resulting Lumo page. **Server Location** The website states that Lumo’s models run “exclusively on servers Proton controls” and that Lumo is “built and based in Europe.” The website does not specify a specific location for the servers or data centers, nor does it name a particular EU or EEA country. Proton AG is based in Geneva, Switzerland; in addition, an EU representative in Luxembourg is listed. ## Hosting und Daten - **On-Prem / lokales Hosting:** unknown - **Private Cloud / Rechenzentrum:** unknown - **EU SaaS / Managed:** teilweise / indirekt - **Hybrid:** teilweise / indirekt - **AVV / DPA:** abgedeckt - **Kein Training auf Kundendaten:** abgedeckt - **Open-Source / Transparenz-Pfad:** teilweise / indirekt ## Standort **Land:** Switzerland **Taxonomie:** Switzerland Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Geneva, Switzerland ## Vorteile - Very strong privacy positioning: no logs, no use for training, no data sharing, zero-access encryption. - Guest use possible without an account; with an account, encrypted chat history. - Open-source app and, according to Proton, open models. - Useful productivity features such as web search, file analysis, Projects, and Proton Drive integration. - Business version for teams with admin functions. ## Nachteile - The free version is functionally limited; Plus is significantly more sensible for more intensive use. - A publicly verified on-prem/self-hosting option is not available; what is publicly documented is primarily managed SaaS. - Currently verified file types are limited to documents, spreadsheets, code, and PDFs; images/Proton Docs were most recently only announced as “coming soon.” - Proton itself points out that answers may be inaccurate for current or very specific topics. ## Quellen - Offizielle Website: https://proton.me/lumo ## Letzter Datenstand 2026-04-30 ## Originalseite https://kifox.ai/en/ki-tools/lumo-en/