Proton · Product

Lumo 2.0

The confidential AI assistant.

Lumo 2.0 is Proton's private AI assistant. Every conversation is end-to-end encrypted, nothing is used for training, and Confidential Thinking keeps reasoning traces out of Proton's own logs. It's the first mainstream assistant that treats privacy as a product feature, not a policy footnote.

Disclosure: We may earn a commission if you purchase through links on this page. This never affects our reviews.

Features
🧠

Confidential Thinking

Reasoning happens inside a zero-knowledge boundary — Proton cannot read your prompts or answers.

🔒

No training on your data

Prompts, uploads and chats are never used to train models, ever.

🗝

Encrypted chat history

Conversations sync across devices end-to-end encrypted — like Proton Mail for AI.

📎

File uploads

Analyse PDFs, spreadsheets and images without them leaving the encrypted boundary.

🌐

Web search

Optional privacy-respecting web results — no personalised tracking profile.

🧩

Open-source models

Runs on transparent, auditable open-weight models rather than opaque proprietary APIs.

🏢

Lumo Business

Team accounts inside Proton Business, with the same zero-knowledge guarantees and central billing.

🇨🇭

Swiss jurisdiction

Operated by Proton AG in Geneva under Swiss privacy law — outside US and EU disclosure regimes.

Use cases
  • Draft sensitive client emails without exposing them to a US ad-tech provider
  • Summarise legal or medical PDFs while staying inside a zero-knowledge boundary
  • Replace ChatGPT for regulated industries that cannot ship prompts to OpenAI
  • Everyday research and writing for anyone who wants private AI by default
  • Give a whole team private AI via Lumo Business without per-seat data-sharing risk
  • Work on unreleased IP, financials or legal drafts inside an encrypted assistant
Tutorials

Switch from ChatGPT to Lumo 2.0 in an afternoon

The fastest path to a private AI assistant without losing your existing workflows.

  1. Create or sign in to a Proton Account (free tier includes Lumo access).
  2. Open Lumo, enable Confidential Thinking in Settings.
  3. Export your saved ChatGPT prompts and paste them into a Lumo project.
  4. Upload the reference docs you rely on daily — they stay encrypted at rest.
  5. Pin Lumo in your browser and set it as the default AI in your workflow.

What changed in Lumo 2.0

The officially documented upgrades over the original Lumo release, and what each one means in practice.

  1. Confidential Thinking — the reasoning trace itself stays inside the zero-knowledge boundary, not just the answer.
  2. Zero-knowledge encrypted chat history that syncs across devices instead of being device-local.
  3. A larger context window, so long PDFs and multi-document briefs fit in one conversation.
  4. Lumo Business for teams, managed alongside the rest of the Proton Business suite.
  5. Included in Proton Unlimited — existing subscribers get Lumo Plus without a second bill.
Comparisons
FAQs
How is Lumo different from ChatGPT?+

Lumo runs open-weight models inside Proton's zero-knowledge infrastructure. Nothing you type is used for training, and Confidential Thinking keeps even the reasoning trace private.

Is Lumo included in Proton Unlimited?+

Yes — Proton Unlimited bundles Mail, VPN, Pass, Drive, Calendar and Lumo 2.0 for one price.

Is there a free version of Lumo?+

Yes. A Proton Account includes free Lumo access with usage limits; Lumo Plus lifts those limits and is bundled inside Proton Unlimited.

Where does Lumo sit in the Proton ecosystem?+

Lumo is the 'think' layer. Mail and Calendar handle communication, VPN and Pass handle access and credentials, Drive handles files, and Lumo reasons over that work without breaking the encryption model.

Can I use Lumo for business or regulated work?+

Lumo Business is designed for teams and inherits Proton's Swiss jurisdiction and zero-knowledge architecture, which is why legal, finance and healthcare teams choose it over US-hosted assistants.

Related reading
Resources