Disclosure: VPNFin is reader-supported. If you buy a VPN through links on this page, we may earn a commission at no extra cost to you. This never affects our ratings — here’s our full disclosure.
IVPN pays nobody to recommend it. No affiliate programme, no commissions, no tracking pixels on its own website.
That decision explains a lot about where you have and have not seen it. Sites that fund themselves through affiliate links, this one included, have a structural reason to write about providers that pay.
Is IVPN Any Good?
On privacy engineering, it is close to the top of the category. Eight consecutive annual audits by Cure53, open-source apps, RAM-only servers, no email required at signup, a warrant canary and a published transparency report.
On everything a mainstream buyer measures, it is mid-table. Two devices on the entry plan, a small server network, and streaming that mostly does not work.
⚠️ We score it 3.4, which puts it level with Hotspot Shield. That comparison is uncomfortable and we address it at the end rather than hiding it.
The Affiliate Decision
Worth starting here, because it shapes everything downstream.
IVPN runs no affiliate programme. Reviewers earn nothing from recommending it, which removes the commercial reason to feature it and leaves only the editorial one.
Its website carries no tracking pixels either. That is consistent rather than decorative: a company arguing against data collection does not instrument its own storefront.
⚠️ We are not neutral about this and should say so. Four of the parent companies in this market also own review sites, and every site including ours is funded by the providers that pay. A provider opting out of that system is making a point about the system.
The practical cost falls on IVPN. Fewer listings, lower placement, less coverage — which is the mechanism working exactly as designed.
Eight Audits, Not One
The audit record here is different in kind from most of the category.
Cure53 has audited IVPN annually since the practice began, with the eighth consecutive review scheduled for 2026. The reports cover apps and infrastructure, and they are published rather than summarised.
The apps are open source on GitHub. Anyone can read what the client does instead of accepting a description of it.
⚠️ Repetition is the point. A single audit is a snapshot of a chosen window; a company that invites the same firm back every year is accepting the risk that something new is found. Only Mullvad has a comparable record among the providers we cover.
The commitment goes further than most policies. IVPN states that if it were ever legally required to keep persistent connection logs, it would notify customers and either move jurisdiction or close the service.
| Provider | No-logs audits | Auditor | Jurisdiction |
|---|---|---|---|
| NordVPN | 6 | PwC, Deloitte | Panama |
| Surfshark | 2 | Deloitte | Netherlands (9 Eyes) |
| ExpressVPN | 3 | KPMG | British Virgin Islands, Kape-owned |
| CyberGhost | 3 | Deloitte | Romania, Kape-owned |
| PureVPN | 4 | KPMG | BVI, operated from Pakistan |
| IPVanish | 2 | Leviathan, Schellman | United States (Five Eyes), Ziff Davis-owned |
| Windscribe | 1 | Packetlabs, production infrastructure | Canada (Five Eyes); Greek case dismissed, no data to give |
| Proton VPN | 5 | Securitum | Switzerland, moving infrastructure to EU |
| Private Internet Access | 3 | Deloitte | United States (Five Eyes), Kape-owned |
| Mullvad | 10+ | Cure53, Assured AB | Sweden (14 Eyes) |
| TunnelBear | Annual since 2017 | Cure53 | Canada (Five Eyes), US parent |
| Norton VPN | 2 | VerSprite | United States (Five Eyes) |
| Hotspot Shield | 0 | protocol audited, policy not | United States (Five Eyes) |
| AirVPN | 0 | none — the client is open source instead | Italy (14 Eyes) |
| IVPN | 8, annual since inception | Cure53 | Gibraltar (status disputed) |
| Hide.me | 1 modern, in 2024 | Securitum, though one source names Altius IT | Malaysia (outside the alliances) |
| PrivadoVPN | 0 | none in six years of operation | Iceland (moved from Switzerland, 2026) |
| TorGuard | 0 | none; settled a lawsuit without disclosing records | United States (Five Eyes) |
| FastestVPN | 1, in 2023 | Altius IT | Cayman Islands (outside the alliances) |
| StrongVPN | 0 | none in over two decades | United States (Five Eyes), Ziff Davis-owned |
| VyprVPN | 1, in 2018 | Leviathan Security, before the 2023 sale | United States (Five Eyes), Certida-owned since 2023 |
| PrivateVPN | 0 | none; support says there is nothing to audit | Sweden (14 Eyes), ownership disputed |
| ZoogVPN | 0 | none; support describes one as planned | Greece (outside the alliances), run from Ukraine |
Gibraltar, and What It Is Worth
Here our sources genuinely disagree, so we present both.
Gibraltar is a British Overseas Territory with no mandatory data retention law. One reading is that its separate legal status keeps IVPN outside the intelligence-sharing arrangements entirely.
The other reading is that British legal influence remains real, if distant. The United Kingdom sits at the centre of those arrangements, and a territory is not a fully independent state.
⚠️ We could not resolve this, so we are not pretending to. Switzerland and Panama are cleaner answers to the same question, and what a VPN hides regardless of jurisdiction applies to all of them.
What It Costs, and What You Get
The pricing is unusual, and not in a generous direction.
Standard runs about $6 a month and covers two devices. Pro runs about $10, covers seven, and adds multi-hop routing and port forwarding.
Plans start at one week. There is no free tier and no trial, but a seven-day plan is a cheap way to test properly.
⚠️ Two devices is the number that will decide this for most people. Mullvad gives five for around €5, which makes the entry tier hard to justify unless multi-hop is what you came for.
What It Does Not Do
Short list, and predictable given the priorities.
Streaming barely works. The server network is small and the company does not chase unblocking — our streaming guide would not shortlist it.
Server count is low against providers spending on infrastructure marketing, which can mean crowding on popular locations.
No free tier, unlike Proton VPN, which offers one with no data cap.
Why Our Score Sits Where It Does
This section exists because the number needs defending.
IVPN scores 3.4 on our scale, level with Hotspot Shield. One has eight annual audits and no affiliate programme; the other has none of the first and a parent company that owns a review site.
Our tie-break rule resolves it correctly. Equal scores are separated by audit count, which puts IVPN comfortably ahead.
⚠️ But the underlying scale is straining. Streaming and ease of use are two of five criteria, weighted equally with security and privacy. A provider built for a threat model rather than a Netflix library will always lose points it was never trying to win.
AirVPN landed in the same place last week, and two in a row is a pattern rather than an accident. We are publishing the score as calculated and flagging the problem instead of quietly adjusting it.
How We Research
This review draws on TechNadu for the corporate history, the Gibraltar jurisdiction argument and the Cure53 relationship, on State of Surveillance for the annual audit sequence and the counter-argument about British legal influence, on European Purpose and VPN Scorecard for plan structure, device limits, multi-hop and the warrant canary, on AlwaysVPN for IVPN’s published statement about moving jurisdiction rather than logging, and on independent listings for the absence of an affiliate programme and website tracking. We hold no affiliate relationship with IVPN and could not have one, which we mention because it is unusual enough to matter. We do not run our own tests. Our full method lives on the About Us page.
IVPN FAQ
Partly because it runs no affiliate programme. Sites funded by commissions, including ours, have a commercial reason to cover providers that pay and none to cover one that does not. IVPN also carries no tracking pixels on its own website, which is consistent with its position and costly for its visibility.
Cure53 has audited its apps and infrastructure annually since the practice began, with an eighth consecutive audit scheduled for 2026. The reports are published rather than summarised, and the apps themselves are open source on GitHub for anyone to inspect.
Sources disagree. It has no mandatory data retention law and a legal status separate from the United Kingdom, which one reading treats as placing IVPN outside intelligence-sharing arrangements. Another reading notes that a British Overseas Territory is not a fully independent state.
Two on the Standard plan at around $6 a month, seven on Pro at around $10, which also adds multi-hop routing and port forwarding. Mullvad offers five connections for roughly €5, which makes IVPN’s entry tier hard to justify on devices alone.
Mostly not. The server network is small and the company does not pursue streaming access as a feature. If watching geo-restricted libraries is your reason for buying a VPN, this is the wrong service to start with.
IVPN
Summary
Eight consecutive Cure53 audits, open-source apps, RAM-only servers, a warrant canary and no email at signup. The costs are two devices on the entry plan, a small server network, streaming that does not work, and a jurisdiction our sources argue about.
Final Verdict
IVPN is the most consistently audited service we cover, and among the least visible. Those two facts are connected: it removed the commercial reason for anyone to write about it.
The product is narrow rather than weak. Two devices, a small network and no streaming, against eight annual Cure53 reports, open-source apps and a company that has said in public what it would do rather than log.
Buy it if your threat model is specific and you want the audit trail. Otherwise Mullvad does most of the same for less, and NordVPN does the mainstream things far better.