Skip to content
VP VPN Atlas

NordVPN Review

Since 2012 · NordVPN Affiliate Program

Independent no-logs audit (Deloitte, 2025)

By Editorial Team

NordVPN is a VPN service founded in 2012 and based in Panama, part of the Nord Security group. Its no-logs policy has been verified by repeated independent assurance engagements — most recently a sixth Deloitte engagement, reported December 2025. We have run no hands-on tests, so we publish no speeds, prices or star rating here: only facts you can check against primary sources, as of 23 June 2026.

Privacy posture & audits

The most verifiable thing about a VPN is its no-logs posture, and NordVPN's is among the most-audited in the category. Independent firms have repeatedly assessed its no-logs claim; the sixth such assurance engagement, by Deloitte, was reported in December 2025. Panama, where NordVPN is based, has no mandatory data-retention law and sits outside the 5/9/14 Eyes intelligence-sharing alliances.

An audit is a point-in-time assurance, not a permanent guarantee — read the scope of the actual report rather than the headline. A no-logs assurance engagement tests whether the configuration matches the policy on the day it is examined; it cannot promise future behaviour. Treat the repeated, named-firm audits as a strong signal, and confirm the latest report on NordVPN's own site before relying on it.

Jurisdiction & ownership

NordVPN's operating company is in Panama, while the wider Nord Security group is incorporated in the Netherlands. This split matters for privacy: Panama has no data-retention mandate, but the corporate group sits in an EU member state, so weigh both when you assess legal exposure.

NordVPN and Surfshark share the Nord Security group, which merged with Surfshark in February 2022. The two brands are operated independently, but if avoiding common ownership is part of your threat model, that relationship is relevant. We disclose it because an honest comparison should — group ties are a fact about the service, not a marketing point.

What we have not tested

We have not run hands-on speed, streaming or gaming-latency tests, so we publish none of those figures. Speeds depend on your location, server choice and the time of day; streaming access depends on the platform's own terms and changes often. No VPN can guarantee access to any given streaming service.

Prices and money-back windows change frequently and are best read off NordVPN's own pricing page at the moment you subscribe. We deliberately leave those fields blank here rather than risk publishing a stale figure. Use the money-back window to trial NordVPN on the task you actually care about before committing to a long plan.

Pros & cons

Pros

  • No-logs policy verified by six independent assurance engagements (most recently Deloitte, reported December 2025).
  • Based in Panama — no mandatory data retention, outside 5/9/14 Eyes.
  • Among the most-audited no-logs records in the category.

Cons

  • We have not run our own speed or streaming tests, so we publish no performance figures or rating.
  • Part of the Nord Security group (shared parent with Surfshark) — disclosed for transparency.
  • List prices and money-back terms change often — confirm them on NordVPN's own site before subscribing.

Frequently asked questions

Is NordVPN's no-logs claim independently verified?

Yes. NordVPN's no-logs policy has been the subject of repeated independent assurance engagements — six in total, the most recent by Deloitte in a report dated December 2025. Each engagement is a point-in-time assurance, so read the report's scope on NordVPN's own site rather than relying on the headline.

Where is NordVPN based?

NordVPN is based in Panama, which has no mandatory data-retention law and sits outside the 5/9/14 Eyes alliances. The wider Nord Security group is incorporated in the Netherlands, so the operating jurisdiction and the corporate jurisdiction differ.

Who owns NordVPN?

NordVPN is part of the Nord Security group, which merged with Surfshark in February 2022. The two VPN brands are operated independently but share a parent group. We disclose this because common ownership is a relevant fact for some privacy threat models.