CDT has been working with a number of VPNs to promote better practices. You can learn more by visiting CDT’s Signals of Trustworthy VPNs resource page.
Below is a list of questions that a trustworthy VPN service should be able to answer honestly, clearly, and thoroughly, signaling the provider’s commitment to earning user trust. The goal of these questions is to improve transparency among VPN services and to provide a way for users to easily compare privacy, security, and data use practices, encouraging VPNs to deploy measures that meaningfully improve the privacy and security of individuals using their services.
Specific technical features and security choices are outside of the scope of this document. While we believe a baseline security standard and clearer privacy commitments are warranted for VPN services, these requirements require further independent auditing infrastructure and technical consensus.