Swedish founder-owned VPN (Mullvad VPN AB / Amagicom AB, Gothenburg, 2009), anonymous numbered accounts, Cure53-audited, flat €5/month.
- FROM
- €5/mo
- CLOUD ACT
- NONE
Lithuanian-founded, Panama-incorporated (Nord Security Group). EU/Nordic operations but Panamanian legal seat.
DISCLOSURE Some links on this site are affiliate links. We may earn a commission at no extra cost to you. Editorial signals and rankings are never influenced by affiliate relationships.
Ordered by feature parity and migration friction, which is weighted higher than feature breadth.
Swedish founder-owned VPN (Mullvad VPN AB / Amagicom AB, Gothenburg, 2009), anonymous numbered accounts, Cure53-audited, flat €5/month.
Gibraltar-incorporated VPN (IVPN Limited / ex-Privatus, founded 2009), Cure53-audited no-logs, open-source apps, independent ownership.
CERN-founded Swiss VPN (Proton AG, Geneva), owned by non-profit Proton Foundation; 15,000+ servers, audited no-logs, open-source apps, free tier.
All 9 alternatives, benchmarked against NordVPN.
Swedish founder-owned VPN (Mullvad VPN AB / Amagicom AB, Gothenburg, 2009), anonymous numbered accounts, Cure53-audited, flat €5/month.
Gibraltar-incorporated VPN (IVPN Limited / ex-Privatus, founded 2009), Cure53-audited no-logs, open-source apps, independent ownership.
CERN-founded Swiss VPN (Proton AG, Geneva), owned by non-profit Proton Foundation; 15,000+ servers, audited no-logs, open-source apps, free tier.
Italian hacktivist-founded VPN (Perugia, 2010), no-logs, port forwarding, but no longer serves Italian residents (Piracy Shield).
NL-incorporated VPN (Surfshark B.V., Amsterdam, KvK 81967985): moved from BVI to NL Oct 2021, merged with Nord Security 2022, RAM-only, Deloitte-audited.
Swedish founder-owned VPN (OVPN Integrität AB, est. 2014), fully owns hardware, diskless RAM-only, court-proven no-logs, legal-fees insurance.
Swedish privacy VPN (Stockholm, est. 2012): Blind Operator, RAM-only, audited no-logs; acquired by Malwarebytes (US) 7 Nov 2024.
Romanian-operated VPN (CyberGhost S.R.L., 2011) under Kape Technologies (UK; ex-Crossrider) → Unikmind/Teddy Sagi (IM) since 2023; listed as a warning.
Oslo-heritage browser VPN (Opera Norway AS): Deloitte-audited free browser proxy + paid VPN Pro, but ultimately Chinese-controlled via Kunlun Tech (Opera Limited, Cayman/NASDAQ). Listed as a warning.
| Product | Hosting | Sovereignty | Cert. | Pricing | Signals | Open |
|---|---|---|---|---|---|---|
|
Panama-incorporated VPN (NordVPN S.A.) under NL holding Nord Security, LT operations; Deloitte + PwC no-logs audits, RAM-only diskless servers, ISO 27001.
|
—
Lithuania
|
SOVEREIGNTY
A single roll-up of ownership and CLOUD Act exposure.
|
ISO/IEC 27001
|
Paid
€4 /mo
|
Public DPA
Sub-processors
Open source
|
→ |
|
Swedish founder-owned VPN (Mullvad VPN AB / Amagicom AB, Gothenburg, 2009), anonymous numbered accounts, Cure53-audited, flat €5/month.
|
—
Sweden
|
SOVEREIGNTY
A single roll-up of ownership and CLOUD Act exposure.
|
— |
Paid
€5 /mo
|
Public DPA
Sub-processors
Open source
|
→ |
|
Gibraltar-incorporated VPN (IVPN Limited / ex-Privatus, founded 2009), Cure53-audited no-logs, open-source apps, independent ownership.
|
—
Gibraltar
|
SOVEREIGNTY
A single roll-up of ownership and CLOUD Act exposure.
|
— |
Paid
€6 /mo
|
Public DPA
Sub-processors
Open source
|
→ |
|
CERN-founded Swiss VPN (Proton AG, Geneva), owned by non-profit Proton Foundation; 15,000+ servers, audited no-logs, open-source apps, free tier.
|
GENEVA · CH
Switzerland
|
SOVEREIGNTY
A single roll-up of ownership and CLOUD Act exposure.
|
— |
Freemium
€5 /mo
|
Public DPA
Sub-processors
Open source
|
→ |
|
Italian hacktivist-founded VPN (Perugia, 2010), no-logs, port forwarding, but no longer serves Italian residents (Piracy Shield).
|
—
Italy
|
SOVEREIGNTY
A single roll-up of ownership and CLOUD Act exposure.
|
— |
Paid
€7 /mo
|
Public DPA
Sub-processors
Open source
|
→ |
|
NL-incorporated VPN (Surfshark B.V., Amsterdam, KvK 81967985): moved from BVI to NL Oct 2021, merged with Nord Security 2022, RAM-only, Deloitte-audited.
|
—
Netherlands
|
SOVEREIGNTY
A single roll-up of ownership and CLOUD Act exposure.
|
— |
Paid
€3 /mo
|
Public DPA
Sub-processors
Open source
|
→ |
|
Swedish founder-owned VPN (OVPN Integrität AB, est. 2014), fully owns hardware, diskless RAM-only, court-proven no-logs, legal-fees insurance.
|
—
Sweden
|
SOVEREIGNTY
A single roll-up of ownership and CLOUD Act exposure.
|
— |
Paid
€4 /mo
|
Public DPA
Sub-processors
Open source
|
→ |
|
Swedish privacy VPN (Stockholm, est. 2012): Blind Operator, RAM-only, audited no-logs; acquired by Malwarebytes (US) 7 Nov 2024.
|
—
Sweden
|
SOVEREIGNTY
A single roll-up of ownership and CLOUD Act exposure.
|
— | Paid |
Public DPA
Sub-processors
Open source
|
→ |
|
Romanian-operated VPN (CyberGhost S.R.L., 2011) under Kape Technologies (UK; ex-Crossrider) → Unikmind/Teddy Sagi (IM) since 2023; listed as a warning.
|
BUCHAREST
Romania
|
SOVEREIGNTY
A single roll-up of ownership and CLOUD Act exposure.
|
— |
Paid
€2 /mo
|
Public DPA
Sub-processors
Open source
|
→ |
|
Oslo-heritage browser VPN (Opera Norway AS): Deloitte-audited free browser proxy + paid VPN Pro, but ultimately Chinese-controlled via Kunlun Tech (Opera Limited, Cayman/NASDAQ). Listed as a warning.
|
—
Norway
|
SOVEREIGNTY
A single roll-up of ownership and CLOUD Act exposure.
|
— |
Freemium
€4 /mo
|
Public DPA
Sub-processors
Open source
|
→ |
Beyond compliance: how these alternatives compare on the capabilities you actually use day to day.
| Feature | Mullvad VPN | IVPN | Proton VPN | AirVPN | Surfshark | OVPN | AzireVPN | CyberGhost | Opera VPN |
|---|---|---|---|---|---|---|---|---|---|
| Servers | 548 servers | 20000 servers | 514 servers | 4500 servers | 153 servers | ||||
| Countries | 50 countries | 140 countries | 23 countries | 100 countries | 62 countries | 100 countries | |||
| Simultaneous devices | 5 devices | 2 devices | 10 devices | 5 devices | Unlimited | 4 devices | 5 devices | 7 devices | 6 devices |
| Protocols | WireGuard | WireGuard OpenVPN IKEv2 | WireGuard OpenVPN IKEv2 | WireGuard OpenVPN | WireGuard OpenVPN IKEv2 | WireGuard OpenVPN | WireGuard | WireGuard OpenVPN IKEv2 | |
| Kill switch | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| Audited no-logs | Yes | Yes | Yes | No | Yes | No | Yes | Yes | Yes |
| Port forwarding | No | No | Yes | Yes | No | Yes | Yes | No | No |
| Platforms | iOS macOS Windows Android Linux | iOS macOS Windows Android Linux | iOS macOS Windows Android Linux | iOS macOS Windows Android Linux | iOS macOS Windows Android Linux | iOS macOS Windows Android Linux | iOS macOS Windows Android Linux | iOS macOS Windows Android Linux | Windows macOS Android |
For every product we read the public DPA, sub-processors document, hosting region declaration, and corporate ownership records. Each is timestamped. Signals are editorial, re-verified quarterly. We never accept self-attestation.
Reviewed by the EU Vetted editorial team · Editorial guidelines