NordVPN key facts
Last updated- Legal entity
- nordvpn S.A. (Panama) / Nord Security (Netherlands)
- Headquarters
- Lithuania (LT)
- Ownership
- Part of Nord Security (Tesonet group)
- Founded
- 2012
- Data hosting
- Global / multi-region
- Infrastructure
- Self-managed and rented global data centers
- Deployment
- SaaS
- Open source
- No
- US Cloud Act exposure
- Low (no US parent)
- Certifications
- No-logs audit (5 times)
- Replaces
- ExpressVPN, Surfshark (subsidiary of same parent), Proton VPN
About NordVPN
NordVPN is a leading global virtual private network provider owned by Nord Security, a cybersecurity firm headquartered in the Netherlands. Although it operates under the legal jurisdiction of Panama to take advantage of favorable data retention laws, its corporate leadership and operational roots are firmly within the European Union. The service is designed to encrypt user traffic and mask IP addresses, protecting against ISP tracking, government surveillance, and cyber threats. The technical core of the service is NordLynx, a proprietary protocol built upon the open-source WireGuard framework, which aims to combine high-speed performance with modern cryptographic standards. NordVPN maintains one of the industry's largest infrastructures with over 8,400 servers worldwide. As a founding member of the VPN Trust Initiative, the company advocates for industry-wide security standards and transparency, primarily targeting the B2C market and individual privacy advocates.
Alternative to
Target Segments
Deployment Options
Hosting & Security
Self-managed and rented global data centers
Key Features
Related Articles
All articlesThe First AI Act Standard Is Here: What EN 18286 Means for European AI Providers
On 19 October 2026 the European Commission published the reference to EN 18286:2026 in the Official Journal. It is the first harmonised standard under the AI Act and gives providers of high-risk AI systems a presumption of conformity for quality management. Here is what it covers and what to do next.
20 Oct 2026RegulationThe EU Cloud and AI Development Act: What CADA Means for SaaS Buyers and Vendors
On 3 June 2026 the European Commission published the Cloud and AI Development Act, the centrepiece of its Tech Sovereignty Package. It introduces four cloud sovereignty tiers and restricts foreign processing of sensitive public data. Here is what it actually changes.
12 Jun 2026Digital SovereigntyAfter the US Election: Why 2026 Is the Year EU Companies Must Diversify Cloud Risk
Legal exposure, tariffs, and operational lock-in used to be separate concerns. In 2026 they stack together. Here is a sober playbook for European companies that want to reduce US cloud dependency without breaking what works.
7 May 2026