How to verify VPN claims
Catalogue fields are starting points, not proof. Use this checklist to inspect a provider’s current policy, named report, contracting entity, checkout and product limits yourself.
A claim to reject
No "100% anonymous". No "untraceable".
A VPN does not make a person anonymous or untraceable. It can encrypt the connection to the VPN server and replace the IP address seen by destinations, but accounts, cookies, device identifiers, malware and activity outside the tunnel can still identify or expose a user.
Evidence, not adjectives
How to assess a no-logs claim
"No-logs" is the most-repeated and least-substantiated claim in this market. The key distinction is simple: a claim is not a verification — a published, independent report is evidence within its stated scope. Look for the full document, assessor, date, entities, systems and exclusions. Do not turn a bounded assurance engagement or security assessment into a permanent product-wide guarantee.
- Claim with cited evidence — the provider makes a defined claim and a named, dated report addresses a stated scope. Readers should inspect the report and exclusions.
- Claim without accessible evidence — the policy may make a claim, but we cannot present a relevant independent document. We do not describe that as independently checked.
- Different or narrower claim — the policy may retain connection or account data, or define “no logs” narrowly. We quote the categories rather than converting them into a binary label.
Where it operates matters
Honest jurisdiction
Jurisdiction affects legal context, but it is not a substitute for the policy or technical evidence. Record the applicable entity and avoid turning a country label into a universal verdict:
- Entity and governing law — taken from the live terms and privacy policy, with ownership listed separately.
- Five Eyes context — Australia, Canada, New Zealand, the UK and the US form the partnership. Membership alone does not establish a VPN's logging or safety.
Reader checklist
What to check before subscribing
- No-logs claim
- The exact activity, connection, account, diagnostic and payment data covered by the provider's current policy. The phrase has no single standard meaning.
- Independent evidence
- We record the assessor, date, report type, entities, systems, criteria and time boundary where the full document is available. A citation supports only its stated scope.
- Jurisdiction
- The contracting and data-controlling entities, governing law and ultimate owner. Five Eyes membership is relevant context, not a standalone provider score.
- Subscription terms
- The amount billed now, covered term, automatic-renewal rule and cancellation or refund conditions shown by the current checkout.
- What it actually protects
- A VPN encrypts your traffic and hides your IP from sites and your network — it does not make you anonymous, defeat account-level tracking, or replace antivirus or a password manager.
Editorial standards
Corrections
Found something we got wrong, or an audit we missed? Tell us at [email protected] and we'll check it and correct the record.