Computed from the register, checked 29 Sept 2026

VPN ownership and audit statistics 2026

Of 22 VPN providers in our register, 15 (68%) have at least one independent audit recorded, 7 have none, and 9 have an audit dated 2025 or 2026. 6 claim all-RAM servers. Renewal prices reach 3.5 times the advertised first-term price (IPVanish, 24-month). Computed from the register as checked 29 Sept 2026.

n = 22 providersPublished by VPNInfobase editorialFull register

Download the dataset on GitHub

Audits

The register records 95 independent audits across 15 providers. 7 providers have none recorded: AirVPN, Astrill VPN, Atlas VPN, PrivateVPN, StrongVPN, Trust.Zone, ZenMate. An empty entry means none was found in vendor or auditor publications we could read, not proof that none exists. Audits are counted as the vendor lists them, so a provider that publishes one report per product or per year scores higher than one that publishes a single combined report. Read the count as publication volume, not as a quality rank.

Independent audits recorded per VPNIndependent audits recorded per VPN. ExpressVPN: 28; Mullvad VPN: 16; TunnelBear: 8; Proton VPN: 7; Surfshark: 7; NordVPN: 6; IVPN: 5; Windscribe: 4; CyberGhost: 3; Private Internet Access: 3 (Audits in the register (vendor-published; scope varies)).Independent audits recorded per VPNTop 10 of 22 providers in the register, checked 2026-09-29ExpressVPN28Mullvad VPN16TunnelBear8Proton VPN7Surfshark7NordVPN6IVPN5Windscribe4CyberGhost3Private Internet Access3Audits in the register (vendor-published; scope varies)vpninfobase.com
Independent audits recorded per provider, top 10 of 22. 15 providers have at least one; 7 have none in the register.
Use this chart

Free to reuse under CC BY 4.0 with a visible link to VPNInfobase. Paste this where you want the chart.

Renewal prices

Where a vendor's pricing page publishes an annual renewal price, the register keeps it in the plan note. For the 6 USD plans with a stated renewal, we divide the annual renewal by 12 and compare it with the advertised first-term monthly price. 4 further plan records state that the renewal is the same as the first term or that no promotional gap exists. Other vendors publish no renewal price at all, and those plans are left out rather than guessed. Currencies are never converted.

Renewal price against first-term priceRenewal price against first-term price. IPVanish 24-month: 3.5x; NordVPN 2-year: 3.3x; ExpressVPN 28-month: 2.8x; CyberGhost 26-month: 2.2x; IPVanish 12-month: 2.1x; NordVPN 1-year: 2.1x (Multiple of the advertised first-term monthly price; only plans with a published renewal).Renewal price against first-term pricePublished annual renewal per month divided by advertised first-term monthly price (USD), checked 2026-09-29IPVanish 24-month3.5xNordVPN 2-year3.3xExpressVPN 28-month2.8xCyberGhost 26-month2.2xIPVanish 12-month2.1xNordVPN 1-year2.1xMultiple of the advertised first-term monthly price; only plans with a published renewalvpninfobase.com
How much higher the published renewal is per month than the advertised first-term price, for the 6 USD plans where the vendor states an annual renewal price.
Use this chart

Free to reuse under CC BY 4.0 with a visible link to VPNInfobase. Paste this where you want the chart.

Published renewal against first-term price, USD per month
PlanFirst termRenewalMultiple
IPVanish, 24-month$2.39$8.333.5x
NordVPN, 2-year$3.49$11.593.3x
ExpressVPN, 28-month$2.99$8.332.8x
CyberGhost, 26-month$2.19$4.752.2x
IPVanish, 12-month$3.89$8.332.1x
NordVPN, 1-year$5.49$11.592.1x

Where providers are based

19 of 22 providers have a verified headquarters jurisdiction in the register; the rest are marked not verified. The register records the jurisdiction the provider states or files under, which can differ from where its parent group sits.

Providers by headquarters jurisdiction (n = 22)
JurisdictionProviders
Not verified3
United States3
British Virgin Islands2
Canada2
Sweden2
Germany1
Gibraltar1
Italy1
Liechtenstein1
Malaysia1
Netherlands1
Panama1
Romania1
Seychelles1
Switzerland1

Method

Source: the VPN Ownership and Audit Register, 22 providers, every field linked to its primary source, last checked 29 Sept 2026. All figures on this page are computed from that file when the site is built, so they change when the register changes. "All-RAM" counts entries that begin with "all" in the RAM-only field, which are vendor claims. Open-source and transparency-report counts use only providers where the register has a yes or no. Audit counts include audits of products other than the VPN client where the vendor lists them. The raw file is vpn-audit-register.json (CC BY 4.0, link back). Related reading: who owns your VPN, the audit tracker and renewal prices in full.

Cite this

Data version 2026-09-29. Stable address: https://vpninfobase.com/vpn-audit-register/statistics/. Free to reuse under CC BY 4.0 with a link back.