Zum Inhalt springen
EU VETTED

Surfshark

Gegründet 2018 · surfshark.com

NL-incorporated VPN (Surfshark B.V., Amsterdam, KvK 81967985): moved from BVI to NL Oct 2021, merged with Nord Security 2022, RAM-only, Deloitte-audited.

Surfshark ist ein europäischer Dienst mit Hosting in den Niederlanden und höchstens geringfügigem, vorübergehendem US-Bezug nach dem CLOUD Act. Gelistet unter VPN.

Bewertungsnotizen

Surfshark is operated by Surfshark B.V. (Kabelweg 57, 1014BA Amsterdam, the Netherlands; KvK 81967985, VAT NL862287339B01). It moved its registration from the British Virgin Islands to the Netherlands on 1 October 2021, which is the structural reason it qualifies as an EU listing. Founded 2018 with operations still in Vilnius, Lithuania; in early 2022 it merged with Nord Security under one holding company while keeping independent brands and infrastructure, runs 4500+ RAM-only diskless servers across 100+ countries, and has a Deloitte no-logs audit on record. Ownership signals: Dutch B.V. operating entity (EU-incorporated), Nord Security holding-level US minority stakes (General Catalyst in the 2022 round, Warburg Pincus leading a second $100M round on 28 September 2023 at a $3B valuation), necessarily global VPN fleet including US locations (CLOUD Act exposure rated minor, mitigated by RAM-only architecture). No public DPA surfaced at audit. A stronger EU-incorporation story than a Panama-registered entity, but ownership complexity means it falls short of pure-EU founder-owned picks like Mullvad or the Swiss non-profit structure of ProtonVPN.

Befund

CLOUD Act
Eigentümer
Unterauftragsverarbeiter
0 keine offengelegt

Geprüfte Signale

Jurisdiktion
  • EU-/Angemessenheits-Hosting: Ja
  • EU-/Angemessenheits-Betreiber: Ja
  • Keine US-CLOUD-Act-Exposition: Nicht bewertet
Transparenz
  • Öffentlicher AVV: Nein
  • Unterauftragsverarbeiter offengelegt: Ja
  • Open-Source-Clients: Nein
  • Zertifizierung durch Dritte: Nein
Springen zu

Über Surfshark

Surfshark is operated by Surfshark B.V., a Dutch company at Kabelweg 57, 1014BA Amsterdam (Netherlands chamber of commerce KvK 81967985, VAT NL862287339B01). It was founded in 2018, originally registered in the British Virgin Islands, and moved its corporate registration to the Netherlands on 1 October 2021. That move is the structural reason Surfshark qualifies as an EU listing in this directory at all. Day-to-day operations are still in Vilnius, Lithuania. In early 2022 Surfshark and Nord Security announced a merger under a single holding company, but both brands continue to operate independently with separate infrastructure and product roadmaps: Surfshark is a Nord Security sister-brand, not a sub-product.

As a product, Surfshark is one of the better-audited consumer VPNs. The server fleet is 4500+ RAM-only diskless servers across 100+ countries, so configuration is loaded fresh on every boot and nothing persists. Deloitte performed an independent no-logs audit confirming the policy. The product offers WireGuard, Nexus mesh routing, Dynamic MultiHop, and an IP Rotator that changes the user's IP every 10 minutes. The marketing site supports 17 languages including all major EU locales.

For an EU-sovereignty audit Surfshark is a mid-tier pick. It has a stronger EU-incorporation story than a Panama-registered operating entity, and a cleaner ownership trail than CyberGhost (no Kape/Crossrider/Sagi history). Three signal gaps remain. First, the Nord Security holding carries US minority stakes across two rounds: General Catalyst co-led the 2022 $100M round, and Warburg Pincus led a second $100M round on 28 September 2023 at a $3B valuation, with the founders still reported as the largest holders. Second, the company's pre-2021 BVI history. Third, the US processor chain: beyond the structural reality that any global VPN service operates servers in the United States, the privacy policy names Cloudflare, Google BigQuery, Firebase, Zendesk, Stripe, Iterable, AppsFlyer, Purchasely, Tune and Telnyx on the marketing, support and payment paths, which is the widest US chain of any EU-owned listing in this category. The RAM-only architecture genuinely mitigates the data-at-rest exposure the US server locations would otherwise create, but it does not reach that processor chain. For buyers who prioritise a simple, founder-controlled EU ownership chain, Mullvad (Swedish AB, 100% founder-owned) and ProtonVPN (Swiss non-profit Foundation) are stronger picks.

Pricing is paid-only (no free tier; 30-day money-back): Surfshark Starter from 2.49 € per month on the 24-month plan (€67.23 billed for 27 months, three of them free); One and One+ tiers add encrypted email/storage/data-removal extras above. Best fit: mainstream privacy-conscious EU buyers who want a multi-device VPN with audited no-logs and a Dutch corporate entity, at the lower end of the price range. Buyers who prioritise sovereignty over price and feature breadth should prefer Mullvad or ProtonVPN.

Unterauftragsverarbeiter-Karte · keine offengelegt

Quelle
Anbieter gibt null Unterauftragsverarbeiter an. Die gesamte Datenverarbeitung erfolgt im eigenen Haus.

Rahmenwerke & Zertifizierungen · keine gelistet

Wir haben die Website des Anbieters und die Register der Zertifizierungsstellen geprüft. Keine aktiven Zertifizierungen gefunden zum Zeitpunkt der letzten Prüfung (2026-08-26).

Funktionsmatrix

Tabelle 1Funktionen von Surfshark

Server 4500 Server
Länder 100 Länder
Gleichzeitige Geräte Unbegrenzt
Protokolle WireGuard OpenVPN IKEv2
Kill-Switch Ja
Geprüfte No-Logs-Politik Ja
Port-Forwarding Nein
Plattformen iOS macOS Windows Android Linux

Integration & Zugriff

REST API Nein
SSO (SAML / OIDC) Nein

Compliance & Governance

Audit log Nein
Self-host / on-prem option Nein

Preise & Tarife

ab 2.49 €/Monat
Kostenpflichtig · jährliche Abrechnung
Preisseite ansehen

Öffentliche Dokumente

Anbieter veröffentlicht keinen öffentlichen AVV. Ohne öffentlich zugänglichen Auftragsverarbeitungsvertrag können kleine EU-Kunden den Verarbeitervertrag nicht selbst abschließen. Dies wird als fehlender öffentlicher AVV vermerkt (siehe So prüfen wir).
  • Auftragsverarbeitungsvertrag (AVV)
    — fehlt
    fehlt
  • Liste der Unterauftragsverarbeiter
    surfshark.com/privacy…
    Öffnen
  • Nutzungsbedingungen
    surfshark.com/terms-of-service…
    Öffnen

Alternativen in dieser Kategorie

  • AirVPN
    Italien · 7 €/Mt.
    EU-souverän
    Öffentl. AVV: Nein Subprozessoren: Nein Open Source: Nein
  • AzireVPN
    Schweden · 3.75 €/Mt.
    EU-gehostet
    Öffentl. AVV: Nein Subprozessoren: Nein Open Source: Nein
  • CyberGhost
    Rumänien · 2.19 €/Mt.
    EU-ansässig
    Öffentl. AVV: Nein Subprozessoren: Ja Open Source: Nein
Alle vpn-Alternativen ansehen

In diesen Übersichten gelistet