---
title: "Lumo by Proton | Ethical Stack"
url: https://ethicalstack.ai/products/proton-lumo/
catalog_version: f6baff2119d0e9158520da7fbe4232011dac79f25bd08757436d7a1dbd593db2
---

# Lumo by Proton

Hosted AI assistant using a changing selection of open-source models on Proton-controlled servers.

Canonical profile: https://ethicalstack.ai/products/proton-lumo/

Scope: Lumo consumer service; web search and explicit feedback use separate disclosed routes.

Published overall: 4.8; 5/6 dimensions rated.

Round the equal-weight mean of available numerical ratings to one decimal; require at least four of six for an overall score. BDS status stays outside the mean; for eligible profiles, a boycott target caps the final score at 2/10 and a pressure target subtracts one point (minimum 1). Not listed and not checked do not adjust the score.

## Energy practices

Finding: 2/10

Assessment: https://ethicalstack.ai/products/proton-lumo/#energy

For the Lumo consumer web and app service boundary, public documentation establishes the service or route but not its request-level physical footprint. The reviewed Lumo sources do not document a user-facing token/task budget, selectable compute tier or measured resource-saving control. Electricity sourcing is not mapped to this route.

Reason: 1 + 1 reporting + 0 electricity + 0 controls = 2/10. This grades documented practices and transparency.

Argument: This practices/transparency assessment covers the Lumo consumer web and app service boundary. The sources establish how the service or endpoint is exposed and do not establish a documented resource-saving control; they do not give a measured per-request energy, emissions or water value. The disclosure point reflects the stated operating boundary, not a product footprint, and company-wide electricity reporting is not attributed to this route.

Type: argument; confidence: medium

Scope (dimension): Lumo consumer service; web search and explicit feedback use separate disclosed routes.

Research reviewed: not recorded; evidence date: not recorded

Unknowns: The reviewed sources do not establish request-level electricity, emissions or water; the actual serving facility and its power mix are also not mapped to Lumo consumer web and app service.

```json
{
  "method": "practices-transparency-v1",
  "scope": "Lumo consumer service; web search and explicit feedback use separate disclosed routes.",
  "components": {
    "disclosure": {
      "score": 1,
      "reason": "The reviewed documentation defines the Lumo consumer web and app service boundary. It gives an operating-scope description, not a dated quantitative energy, carbon or water report for this route.",
      "sourceUrls": [
        "https://proton.me/lumo/privacy-policy",
        "https://proton.me/support/lumo-privacy"
      ]
    },
    "electricity": {
      "score": 0,
      "reason": "No reviewed source maps Lumo consumer web and app service to a disclosed electricity mix or time-and-location-matched clean-power supply. The route's actual electricity use and emissions therefore remain unestablished.",
      "sourceUrls": [
        "https://proton.me/lumo/privacy-policy",
        "https://proton.me/support/lumo-privacy"
      ]
    },
    "demand": {
      "score": 0,
      "reason": "The reviewed Lumo sources do not document a user-facing token/task budget, selectable compute tier or measured resource-saving control.",
      "sourceUrls": [
        "https://proton.me/lumo/privacy-policy",
        "https://proton.me/support/lumo-privacy"
      ]
    }
  },
  "actualImpactMeasured": false
}
```

- [Lumo Privacy Policy](https://proton.me/lumo/privacy-policy) (primary; checked not recorded)

- [Lumo privacy and model routing](https://proton.me/support/lumo-privacy) (primary; checked not recorded)

## Training data

Finding: Depends on the model

Assessment: https://ethicalstack.ai/products/proton-lumo/#training-rights

Lumo uses multiple model families and may change the model selected per task; rights must be checked for the actual model version. Prompt no-training is a separate policy.

Reason: Lumo uses multiple model families and may change the model selected per task; rights must be checked for the actual model version. Prompt no-training is a separate policy.

Argument: Proton’s no-training promise addresses Lumo conversation data, while the hosted models include multiple upstream families whose corpus provenance is not fully established by that service promise. Feedback on Apertus has a specific opt-in path.

Type: argument; confidence: medium

Scope (profile): Lumo consumer service; web search and explicit feedback use separate disclosed routes.

Research reviewed: not recorded; evidence date: not recorded

Unknowns: Exact model selection, release version, source inventory, permissions, post-training data, and creator-remedy scope remain unresolved.

```json
{
  "method": "training-rights-evidence-v1",
  "scope": "The stated training release or selected model",
  "components": null,
  "routeDependency": "Lumo uses multiple model families and may change the model selected per task; rights must be checked for the actual model version. Prompt no-training is a separate policy.",
  "modelReference": null
}
```

- [Lumo Privacy Policy](https://proton.me/lumo/privacy-policy) (primary; checked not recorded)

- [Lumo privacy and model routing](https://proton.me/support/lumo-privacy) (primary; checked not recorded)

## Your data & privacy

Finding: 9/10

Assessment: https://ethicalstack.ai/products/proton-lumo/#privacy

Proton says Lumo does not retain plaintext chat logs after inference, does not use chats to train models, and encrypts saved history with zero-access encryption; explicit feedback may be shared for Apertus evaluation/training.

Reason: No numerical score assigned because the reviewed evidence does not establish the route-specific controls needed for one.

Argument: The Lumo-specific privacy policy describes processing, saved-chat encryption, and a narrow feedback exception for the Apertus model. These are concrete product controls, but chats still reach Proton-controlled servers for inference and optional web search sends a simplified query to selected search APIs.

Type: argument; confidence: medium

Scope (profile): Lumo consumer service; web search and explicit feedback use separate disclosed routes.

Research reviewed: not recorded; evidence date: not recorded

Unknowns: The selected model, account plan, web-search behavior, and future model changes should be checked; the privacy policy can change.

- [Lumo Privacy Policy](https://proton.me/lumo/privacy-policy) (primary; checked not recorded)

- [Lumo privacy and model routing](https://proton.me/support/lumo-privacy) (primary; checked not recorded)

## Openness

Finding: 5/10

Assessment: https://ethicalstack.ai/products/proton-lumo/#openness

Proton says Lumo’s code is open source and names open-source model families, but the hosted product is not a user-operated local runtime.

Reason: The score reflects service-level inspectability and control, not usefulness or model quality.

Argument: Lumo discloses source access to its app and a set of open-source models that it hosts. The user still relies on Proton’s servers and cannot infer that the inference environment or all model data are locally reproducible.

Type: argument; confidence: medium

Scope (profile): Lumo consumer service; web search and explicit feedback use separate disclosed routes.

Research reviewed: not recorded; evidence date: not recorded

Unknowns: Verify current source repositories, model releases, and applicable licenses separately.

- [Lumo Privacy Policy](https://proton.me/lumo/privacy-policy) (primary; checked not recorded)

- [Lumo privacy and model routing](https://proton.me/support/lumo-privacy) (primary; checked not recorded)

## Worker protections

Finding: 1/10

Assessment: https://ethicalstack.ai/products/proton-lumo/#labour

Company-level worker conditions and supply-chain safeguards are not assessed from product terms alone.

Reason: 1 + 0 + 0 + 0 = 1/10. Documented worker protections; missing disclosure is an evidence gap.

Argument: The reviewed product material describes access and features but does not establish labor conditions for the company’s model-development, data-labeling, moderation, or infrastructure workforce. This is an evidence boundary, not a claim about worker treatment.

Type: argument; confidence: low

Scope (profile): Lumo consumer service; web search and explicit feedback use separate disclosed routes.

Research reviewed: not recorded; evidence date: not recorded

Unknowns: Current worker conditions, voice, grievance outcomes, contractor scope, and independent assurance were not established in these product sources.

```json
{
  "method": "worker-safeguards-evidence-v1",
  "entity": "products/proton-lumo",
  "company": "",
  "scope": "The named developer or operator",
  "components": {
    "conditions": {
      "score": 0,
      "reason": "No qualifying worker-conditions disclosure was found in the reviewed product sources; this is a limited evidence gap.",
      "sourceUrls": [
        "https://proton.me/lumo/privacy-policy",
        "https://proton.me/support/lumo-privacy"
      ]
    },
    "voice": {
      "score": 0,
      "reason": "No worker-voice or grievance outcome evidence was found in the reviewed product sources.",
      "sourceUrls": [
        "https://proton.me/lumo/privacy-policy",
        "https://proton.me/support/lumo-privacy"
      ]
    },
    "assurance": {
      "score": 0,
      "reason": "No independent worker-safeguard audit was found in the reviewed product sources.",
      "sourceUrls": [
        "https://proton.me/lumo/privacy-policy",
        "https://proton.me/support/lumo-privacy"
      ]
    }
  },
  "disclosureLimited": true
}
```

- [Lumo Privacy Policy](https://proton.me/lumo/privacy-policy) (primary; checked not recorded)

- [Lumo privacy and model routing](https://proton.me/support/lumo-privacy) (primary; checked not recorded)

## Military ties

Finding: 7/10

Assessment: https://ethicalstack.ai/products/proton-lumo/#military-contracts

No military or intelligence relationship is established by the reviewed product sources.

Reason: 7 base + 0 safeguard adjustment = 7/10 (0 of 9 safeguard points; every 3 adds 1). No military relationship was established in the cited sources. This ranks above known defense ties without claiming a verified clean record.

Argument: The official sources reviewed define product behavior and service terms but do not identify a military contract, deployment, or military-specific restriction for Proton AG. This is “not established” within this source set, not evidence that no relationship exists.

Type: argument; confidence: low

Scope (profile): Lumo consumer service; web search and explicit feedback use separate disclosed routes.

Research reviewed: not recorded; evidence date: not recorded

Unknowns: Undisclosed contracts, downstream hosting, customer deployment, end-use, and enforcement are outside the reviewed product sources.

```json
{
  "method": "military-ties-priority-v2",
  "entity": "products/proton-lumo",
  "company": "",
  "scope": "The named developer or operator",
  "components": {
    "restrictions": {
      "score": 0,
      "reason": "No product-specific military-use restriction was identified in the reviewed materials.",
      "sourceUrls": [
        "https://proton.me/lumo/privacy-policy",
        "https://proton.me/support/lumo-privacy"
      ]
    },
    "oversight": {
      "score": 0,
      "reason": "No military-specific enforcement or oversight mechanism was identified in the reviewed materials.",
      "sourceUrls": [
        "https://proton.me/lumo/privacy-policy",
        "https://proton.me/support/lumo-privacy"
      ]
    },
    "transparency": {
      "score": 0,
      "reason": "The product sources provide no military customer or deployment disclosure.",
      "sourceUrls": [
        "https://proton.me/lumo/privacy-policy",
        "https://proton.me/support/lumo-privacy"
      ]
    }
  },
  "disclosureLimited": true,
  "relationship": "not-established",
  "relationshipReason": "No company military relationship was established in the reviewed product sources; the source set is not a customer-complete investigation.",
  "score": 7,
  "baseScore": 7,
  "safeguardPoints": 0,
  "safeguardAdjustment": 0,
  "rawScore": 7,
  "cap": null
}
```

- [Lumo Privacy Policy](https://proton.me/lumo/privacy-policy) (primary; checked not recorded)

- [Lumo privacy and model routing](https://proton.me/support/lumo-privacy) (primary; checked not recorded)

## BDS targets

Finding: Not listed

Assessment: https://ethicalstack.ai/products/proton-lumo/#israel-palestine

Proton AG (Lumo) was not named in the BNC consumer-target guide or its No Tech target list when checked on 2026-10-24. This status covers those named lists only.

Reason: Campaign category, excluded from numerical scoring.

Argument: I checked the BNC consumer-boycott and pressure guide and the No Tech target list for Proton AG (Lumo). The company was not named in either list on 2026-10-24; this does not assess unrelated suppliers, customers, investors, or every BNC publication.

Type: argument; confidence: medium

Scope (profile): Lumo consumer service; web search and explicit feedback use separate disclosed routes.

Research reviewed: not recorded; evidence date: not recorded

Unknowns: The result is limited to the two linked BNC target lists as checked on 2026-10-24; additions or other BNC publications may change the assessment.

- [BNC consumer boycott and pressure guide](https://bdsmovement.net/Guide-to-BDS-Boycott) (primary; checked 2026-10-24)

- [BNC No Tech campaign](https://bdsmovement.net/no-tech-oppression-apartheid-or-genocide) (primary; checked 2026-10-24)

## Reading the evidence

- Assessments are provisional editorial judgments. Cite the profile and the underlying sources, and retain confidence, scope and unknowns.

- Unknown, not-applicable and model-dependent are different states. Missing evidence does not establish good or bad conduct.

- Company-level evidence does not establish use of a particular product or model. Account plan, model, host and route can change an assessment.

- Energy scores describe documented practices and transparency, not measured request emissions. Zero component points can mean an evidence gap.

- Published overall scores require at least four of six numerical dimensions. Preserve coverage and BDS adjustments; BDS itself is categorical.

- No named BDS target found is limited to the reviewed campaign sources and is not approval. Personalized priorities do not change the published overall score.

- Review and source-check dates describe the research, not this deployment. Fetch current primary sources when the decision requires current verification.

Methodology: https://ethicalstack.ai/methodology/