Ranked on documented facts, not sponsored placement - every provider page shows the evidence.
Short answer: Three providers in our ranking survived a real evidence demand with nothing to hand over - Mullvad (2023 raid), Private Internet Access (2016 and 2018 cases) and OVPN (Swedish court 2020). Court proof is the strongest evidence class that exists, but it is per-operator and per-incident: it proves yesterday, not tomorrow.
providers on this page: 3 · independent audit on file: 67% · court-proven no-logs: 3 · open-source apps: 67%
quick picks
The most honest VPN on the internet, and in 2026 still the one this industry is measured against: numbered accounts, cash or Monero accepted, open-source…
The engineer's VPN: every server diskless (RAM-only, iPXE-signed boot images), WireGuard peers wiped from memory after 3 minutes, and a 2020 Swedish court win…
The best-evidenced no-logs claim in the business - twice tested in US courts (2016, 2018) and twice found to have nothing - plus the cheapest long-term renewal…
Every VPN claims no logs. The claim is free, the check is not. The cheapest way to "prove" it is a policy page; the expensive way is an independent audit of the specific claim; the way that cannot be negotiated is an authority demanding data and the provider having nothing to hand over. Three operators in our ranking have been through the last one[1].
Swedish police arrived at Mullvad's offices with a search warrant. The company's account model - a random account number, no email, no name - meant there was no customer data to hand over, and the machines themselves retained nothing about usage. The whole exchange is documented on Mullvad's own blog[2], including the unusual detail that Mullvad publishes its own protocol with the authorities. What makes this the strongest single data point in the industry is the combination: the raid was real, the operator cooperated to the extent the law required, and the outcome was nothing.
Private Internet Access received court orders in the United States twice - a 2016 case tied to bomb threats and a June 2018 case - and could not produce usage or connection logs in either. The company's transparency reports continue quarterly[3], and its warrant canary page is still signed. PIA is also the instructive ownership case: a Kape subsidiary, Kape having been built on the Crossrider adware platform, yet the logging architecture predates the acquisition and survived two change-of-parent events. Evidence class and org chart are different axes.
A Swedish rights-holder demanded that OVPN hand over customer data tied to alleged piracy. OVPN fought the order in court and won - the Swedish court found the data the plaintiff wanted did not exist. It is the only European VPN whose logging claim was tested to a full judgment[4], and the reason a Swedish-GDPR jurisdiction with a proven outcome outranks flashier marketing in our scoring.
The same year OVPN won, TorrentFreak documented that PureVPN - a "zero-log" provider - had produced connection records for an FBI cyberstalking case[5]. A year earlier, the IPVanish story broke: DHS had obtained a user's real IP and timestamps from a service advertising a strict no-log policy[6]. And the founding case remains HideMyAss 2011, where the operator itself wrote the blog post explaining the handover[7]. Three operators, three "no-logs" marketing claims, three documented productions. This is why our engine gives zero credit to policy-only claims - check the methodology for the full evidence hierarchy, the incident timeline for the dated originals, and the audit tier for what a paid review does and does not cover.
A specific, documented event where an authority demanded logs and the provider demonstrably had none - a server raid, a subpoena, or a court case with a published outcome. It is the strongest evidence class that exists for a no-logs claim, because the alternative (lying in court) carries legal consequences.
Mullvad (April 2023 police raid - the seizure order is public and no data was taken), Private Internet Access (could not produce logs in a 2016 bomb-threat case or a June 2018 case) and OVPN (Swedish court, 2020, after a rights-holder demanded user data). PIA's Russia exit in 2016 - pulling its servers rather than running them under seizure law - is part of the same story.
No. It proves that on that infrastructure, at that time, for that case, there was nothing to find. It is per-incident evidence. A provider with consistent court exposure and no contradictions earns more confidence than a single lucky outcome, which is why we track the full incident history per operator.
HideMyAss (2011, handed FBI the connection logs that convicted a LulzSec member), IPVanish (produced DHS logs in 2014, exposed in 2018 court filings) and PureVPN (produced connection logs for the FBI in a 2017 cyberstalking case). All three marketed themselves as zero-log at the time.
Because its case is instructive - a Greek criminal investigation into an abused exit IP (2023-2025) collapsed in part because Windscribe provably could not produce matching logs. The filter on this page requires the strict class (seizure or subpoena with nothing to hand over); Windscribe's evidence sits one rung below.
Not quite. An audit checks the design and implementation at a point in time, against a scope the provider negotiates. A court test is adversarial and unannounced. Both are evidence; only one of them was paid for by the provider being tested. Our no-logs hub ranks the audited tier in detail.