A list of questions that a trustworthy VPN service should be able to answer honestly, clearly, and thoroughly, signaling the provider’s commitment to earning user trust. The goal of these questions is to improve transparency among VPN services and to provide a way for users to easily compare privacy, security, and data use practices.
CDT has been working with a number of VPNs to promote better practices. Below is a list of questions that a number of VPN services have answered, and we are publishing unedited, in regards to their corporate accountability and business models, privacy practices, and security protocols and protections. The VPNs that have agreed to contribute to this project are: ExpressVPN, IVPN, Mullvad, TunnelBear, and VyprVPN.