A leading cybersecurity firm independently verified our no-traffic log VPN service.
At IPVanish, your privacy and security are our utmost priority.
In order to keep our users truly safe while they use our service, we do not log or store any data about your connections or your activity. This means that we don’t know where or how you’re connecting to the internet or what you are doing online when using our VPN.
Because your trust is extremely important to us, we’re pleased to announce that we had our technology and no-log VPN privacy practices audited and certified by Leviathan, a highly respected cybersecurity consulting firm. Today, we are releasing the full report to our customers and also making it available to the media as well.
What was the auditing process?
We provided the independent third-party auditor with unprecedented access to our team, documentation, and technology. Leviathan Security Group conducted interviews with staff responsible for maintaining our VPN servers, inspected our system configurations and technical documentation, and assessed our server deployment procedures. Test traffic exercises were used to evaluate connection handling and generate potentially-logged data. This included forward and reverse DNS hostname lookups, traffic addressed to uncommon UDP and TCP ports, SMTP traffic, HTTP traffic, and TLS negotiations. A production endpoint server was also made available to the security research firm for exhaustive examination in which evidence of the test traffic exercises could not be found.
In the end, the independent auditor confirmed that our VPN service was in compliance with our publicly available Privacy Policy, which guarantees that we do not retain data about the content or destination of customer sessions. Customers can access the independent privacy audit report from the bottom of their Account Portal; members of the media can request the full report by emailing [email protected]
Why is a verified Privacy Policy important?
The third-party audit shows the hard evidence that the statements in our Privacy Policy as a no-log VPN are legitimate. It is a testament to our transparency as a service and continued dedication to consumer data protection.
What aren’t we logging, exactly?
As explained in our Privacy Policy, IPVanish doesn’t save or monitor your browsing activity, such as what websites you visit while connected to our VPN service. But more specifically,
IPVanish does not log:
- The content of your internet traffic or locations of your online destinations
- Your search histories and the websites you log into
- The apps you have running, actively or in the background
- Your content or destinations of your upload and download activity
- The content or source of the online streams you’re watching
IPVanish is among the few providers that have taken proactive measures to prove through independent auditing that your information is safe while tunneling through our infrastructure.
We don’t collect traffic data through our apps, but we do still use minimal diagnostic data in order to be a functional (and ever-improving) service for our customers.
To learn all about the information we maintain down to our internal data handling practices and third-party plugins, please take another look at our Privacy Policy, written to be as clear and understandable as possible.
A VPN provider’s Privacy Policy is indicative of its values. It represents the standard for what its customers can expect from service quality and support. To defend your data, it’s critical to understand the logs your VPN provider stores, if any, and to seek evidence of its claims. Audits by trusted third-party experts provide independent verification of the promises we make to customers.
At IPVanish, we’re dedicated to improving our business for our customers while advancing the VPN industry through technology, transparency, and trust initiatives. We look forward to sharing the results of future audits, along with more activities and research that allow you to further hold us to a higher standard.
