Kaspersky took the US allegations very seriously, and moved all of their data collection and processing for the US (and quite a few other nations) to Switzerland. [1] They then made the facilities accessible to US and other "partners" to inspect the code at said facilities, compile it from source (to compare distributed binaries), audit their data handling/processing procedures, and so on.

It'd be pretty easy to see if the software was missing Russian state malware both by inspecting the code, or simply installing it on a test machine and then running the scan. If this were the case, it's highly likely the news would be repeating it 24/7. So it seems safe to assume it's doing its job well.

[1] - https://www.kaspersky.com/about/press-releases/2020_kaspersk...

The audits are a joke (iso 27001 means nothing in practice, as anyone working in a 27001 certified company can tell you), and what has been in the news is that the only foreign partner who signed up to this clown show promptly went bankrupt in 2022: https://www.cbc.ca/news/canada/new-brunswick/cyber-nb-shutti...

So what, exactly, is this press release supposed to prove?

That Kaspersky gave the US every imaginable means of ensuring everything was on the up and up, and that the allegations were unjustified. Yet the US seemingly had no interest whatsoever in investigating their own claims.

The US correctly assessed that this was empty PR theatre and not worth enabling.

> The US correctly assessed that this was empty PR theatre and not worth enabling.

And they asked for it just to be sure. /s

that's something you still have to prove.

also, it's not like the american-based companies will not do that with european data to america. :D

On the flipside, Microsoft will upload your confidential files to accidentally NSA-controlled servers and accidentally miss US state malware.