Ranked on documented facts, not sponsored placement - every provider page shows the evidence.
Short answer: Four published providers pass both tests - Mullvad, AirVPN, IVPN and RiseupVPN. No conglomerate on record and no identity anchor at signup means a subpoena finds no owner to lean on and no user to lean on them about.
providers on this page: 4 · independent audit on file: 50% · court-proven no-logs: 1 · open-source apps: 100%
quick picks
The most honest VPN on the internet, and in 2026 still the one this industry is measured against: numbered accounts, cash or Monero accepted, open-source client
The anti-affiliate champion candidate holds up: no affiliate program (stated out loud on the homepage), flat honest pricing, quarterly warrant canary, annual th
Community-run Italian operator with the best power-user transparency stack in the business: fully open-source Eddie client (GPL-3.0), 258 bare-metal entry IPs a
The most trustworthy free VPN on structural grounds: an anarchist Seattle collective that has run since 1999, funds itself by donations, asks no account registr
4 providers pass the combined filter. The independent hub explains the conglomerate map (Kape, Nord/Surfshark, Gen Digital) and why it matters[5]; the no-kyc hub maps the identity chain. This page is where both cuts intersect - and the result is four operators, which tells you something about the market.
Mullvad: independent, flat-priced, and the only operator whose architecture survived an actual raid with nothing to hand over[1][2]. IVPN: independent, Gibraltar-seated, annual audits, no email at signup. AirVPN: worker-run in spirit, deeply documented, crypto and vouchers, no personal data[6]. RiseupVPN: no accounts at all, donation-funded[3]. Different funding models, different tradeoffs, one common property: there is no holding company above them and no identity table below them[1][2][6]. The practical consequence: a legal demand has no corporate group to lean on and no user list to lean on them about - the raid record is what proved it rather than promised it[1].
The four pass the same two filters but arrive from different economies. Mullvad and IVPN live on flat subscriptions - their incentive is renewal without resentment, which is why the flat price and the audit cadence exist. AirVPN lives on a technically committed user base - the documentation depth and configurable clients are the product. Riseup lives on donations and political alignment[3] - capacity is best-effort by design. Three funding models, one shared property: no exit event, no growth target, nobody above to sell to. That is what "owned by nobody" buys - and what it cannot buy is infrastructure scale, which is why these operators win on trust and lose on server maps.
"Owned by nobody" is a corporate fact; it says nothing about logging behavior. The evidence ladder does - and this hub's four operators earn their places through it: Mullvad's court test, IVPN's audit cadence and canary, AirVPN's long technical record, Riseup's collective transparency. The intersection is necessary, not sufficient - the no-logs hub remains the verdict page. And ownership moves: re-check the ownership graph before any multi-year prepayment, because "nobody" is a current status, not a permanent one.
Two conditions at once - no conglomerate owner on record (the [independent hub](/best/independent/) filter) AND no identity anchor at signup (strong anonymous signup: no email, or the account-number model). The intersection is small on purpose: {{stat: n}} providers in our ranking pass both today.
Mullvad (raid-tested, account numbers, flat price), IVPN (Gibraltar, no email, audits), AirVPN (worker-run, Monero and vouchers, no personal data) and RiseupVPN (no accounts at all, donation-funded)[1][3]. Check the ownership graph before trusting any fourth party's claim about who owns them - including ours.
Independence removes the conflict of interest; anonymous signup removes the identity anchor. Together they mean a legal demand has no corporate group to pressure and no user list to pressure them about. Either condition alone still leaves a lever - an independent VPN with a users table can be leaned on user by user, and an accountless provider owned by a conglomerate inherits the group's incentives.
Everything. Subscription-funded independence (Mullvad, IVPN, AirVPN) aligns the operator with the subscriber; donation-funded collectivism (Riseup) aligns it with its mission[3]. Both are honest. The dishonest pattern is independence as a marketing story over hidden funding - which is why our scoring reads ownership and signup together with the evidence class, never alone.
It is the strongest ownership-and-identity posture a commercial product offers - and it still ends at the operator's own architecture. The raid record is what converts that posture into evidence[1]. For the strongest possible accountless model, the adjacent lane is the Tor network itself[6] - slower, but owned by nobody in the deepest sense.
Because independence alone was never the promise - it removes one conflict while the signup form still collects the anchor. This hub is the honest version of what "independent VPN" marketing implies. If you only need the ownership filter, use the [independent hub](/best/independent/); if you need the identity filter, use the [no-kyc hub](/best/no-kyc/).