NordVPN – European VPN
VPN from Nord Security, a Lithuanian-founded cybersecurity company. Runs its own RAM-only (diskless) server fleet and markets a no-logs policy that has been repeatedly audited by PwC and Deloitte. Caveat: the no-logs claim is framed around Panama's jurisdiction as a legal/marketing choice – the company itself is Lithuanian and EU-based.
Quick facts
The no-logs claim isn't just marketing – it's been independently audited by PwC and Deloitte multiple times, and the RAM-only server fleet means nothing persists after a reboot.
The apps push upsells for the bundled password manager and other add-ons fairly often, and the Panama-based marketing framing can obscure that it's really a Lithuanian company.
Why does it score 91?
Incorporated in Vilnius, Lithuania – a full EU member state.
Venture-backed with a Lithuanian parent company, Nord Security, keeping control inside the EU rather than with a non-EU investor.
NordVPN runs its own RAM-only server fleet across multiple countries rather than renting capacity from third parties.
Partially open source, GDPR-compliant, and its no-logs policy has been independently audited by both PwC and Deloitte multiple times.
See how they compare
NordVPNWhat does it replace?
Expressvpn More European VPN & privacy tools alternatives
No-logs VPN with anonymous accounts. No email needed to sign up, just a number.
Privacy-focused VPN registered in Malta. No logs, fully open-source apps, no email required to sign up.
Swedish VPN with strict no-logs policy and in-house owned servers. WireGuard-first with fully transparent operations.
Swiss VPN by Proton AG with a strict no-logs policy independently audited annually. 11,496 servers across 117 countries, all owned and operated by Proton. Open-source apps on all platforms. Unique Secure Core architecture routes traffic through privacy-friendly countries first.
VPN founded in 2018 and headquartered in the Netherlands, which merged into Lithuania's Nord Security in 2022 (the two brands still operate separately). Runs its own RAM-only servers, has passed Deloitte no-logs audits, and operates under Dutch/EU jurisdiction.