Five Eyes Free

What the alliances actually change for a VPN user

The Eyes alliances are intelligence-sharing treaties, not VPN regulations[1]. Their practical relevance to a VPN subscription: a provider seated inside an alliance country receives legal process under that country's courts, and material gathered there can flow to partners without a second proceeding. 100% of the 13 providers in our ranking sit outside all three circles - the filter is about reducing the number of governments with a direct, treaty-based path to the operator.

The company seat versus the server map

Marketing pages show server maps; courts read corporate registries. The seats that matter on this page: Switzerland (Proton VPN - GDPR-adjacent, constitutional privacy protections, and a constitutional referendum requirement for handovers), the British Virgin Islands (ExpressVPN - no data-retention statute, but also thin oversight), Gibraltar (IVPN - EU-GDPR framework with a local regulator that publishes)[5], Romania (CyberGhost - no mandatory retention post-2016 court rulings), Panama (NordVPN). Each carries a different flavor of "outside the alliances" - and each provider page records the exact seat.

Where the honest limits are

Three. First, jurisdiction is not evidence: a Panama letterhead does not answer the logging question - the evidence ladder does. Second, treaty alliances are not the only route: law-enforcement cooperation (MLATs, Europol channels) works across all borders, as the takedowns of criminal-use VPNs documented on our incident timeline show. Third, the provider can move: incorporations change hands, and a seat that was outside the alliances last year can be inside a merger next year - the ownership map is the page to re-check before a long subscription.

How we would use this page

Start here only if jurisdiction is a hard requirement for your threat model. Then: Proton VPN is the strongest combination of seat, audit and price transparency; IVPN pairs Gibraltar with the industry's best verification hygiene; ExpressVPN has the biggest network outside the treaties with the Kape ownership question attached[6]. And remember the counter-example we refuse to hide: the most court-proven operator in our ranking sits in a 14-Eyes country, because behavior under pressure beat geography[4].