A NordVPN representative tells me the company does
QRW³VWRUHFRQQHFWLRQWLPHVWDPSVXVHGEDQGZLGWK
WUḊFORJVRU,3DGGUHVVHV ́7KDW¶VH[FHOOHQW,QVWHDG
NordVPN retains the username and time of the last
VHVVLRQEXWIRURQO\PLQXWHVDIWHU\RXGLVFRQQHFW
from the VPN. All this information is available in the
company’s privacy policy.
A representative from NordVPN assured me that the
FRPSDQ\GRHVQRWSUR¿WIURPWKHVDOHRIXVHUGDWD7KH
company does not generate revenue from sources other
than customer subscriptions.
,Q1RYHPEHURI1RUG931DQQRXQFHGWKDWLWKDG
passed a third-party audit of its no-log policy by one of
WKH³ELJIRXUDXGLW¿UPV ́,WMRLQVVHYHUDO931
FRPSDQLHVLQFOXGLQJ7XQQHO%HDU931WKDWDUH
XQGHUWDNLQJVLPLODUDXGLWV(DFKRIWKHVHDXGLWVLV
GL̆HUHQWEXWWKHH̆RUWVKRZVWKDWWKHFRPSDQLHVDUH
serious about consumer privacy and security. Much of
WKHLQIRUPDWLRQLQWKLVDXGLWZDVLQLWLDOO\ZLWKKHOG
DORQJZLWKWKHQDPHRIWKHDXGLW¿UP1RUG931KDV
since made the full report available to all subscribers,
DQGLW¶VEHHQOHDNHGHOVHZKHUHUHYHDOLQJWKDW
3ULFHZDWHUKRXVH&RRSHUVZDVWKH¿UPWKDWFRQGXFWHG
WKHDXGLW,KRSHWKDW1RUG931ZLOOZRUNWRPDNH
future audits more transparent from the start.
NordVPN has not participated in the Center for
Democracy and Technology’s VPN questionnaire
project, but it has shared much of the same information
ZLWK3&0DJZKLFKDOVRVHQGVRXWH[WHQVLYH
questionnaires as part of our testing. NordVPN also
GRHVQRWPDNHLWHDV\WR¿QGWKHQDPHRILWVSDUHQW
company or information on corporate leadership on its
ZHEVLWH²DSRLQWWKH&'7ZRXOGOLNHO\FRQVLGHUD
QHJDWLYH$FRPSDQ\UHSUHVHQWDWLYHWROGPHKRZHYHU
WKDWLWLVRZQHGE\7H¿QFRP6$1RUG931GRHVQRW
NordVPN
retains the
username and
time of the last
session, but for
only 15 minutes
after you
disconnect
from the VPN.