Proton VPN’s no-logs policy holds up under scrutiny of fourth independent audit

• Proton VPN has had its no-logs policy audited for a fourth time
• Results confirm that the Switzerland-based provider doesn’t keep logs
• Still considered one of the most privacy-respecting VPNs available

Proton VPN has released the results of its latest independent audit, which confirms the provider continues to maintain a strict no-logs policy.

Conducted by Securitum, an independent European security-auditing firm, the August 2025 audit marks the fourth consecutive third-party review of Proton VPN’s no-logs policy. The announcement follows a July 2025 SOC2 Type II audit, which verified Proton’s proper implementation of security controls.

The audit’s results substantiate Proton VPN’s no-logs claims, underscoring its ongoing commitment to transparency and privacy. This further cements Proton VPN’s place among the best VPN services available today.

Key takeaways from Proton VPN’s no-logs audit

Securitum, whose clients include DuckDuckGo VPN and Hide.me VPN, spent August 18-20 on-site at Proton AG’s Zurich headquarters, examining the VPN’s infrastructure and server-side operations.

Although Proton VPN operates out of Switzerland, where it isn’t subject to mandatory data retention laws at the time of writing, Proton acknowledges that improper server configuration or other architectural flaws could result in accidental logging.

This is exactly why Proton has taken the step to have its no-logs policy independently audited on a regular basis. As part of this process, Securitum reviewed Proton VPN configuration files, server configurations, and operating procedures.

The detailed annual audit aimed to answer questions, including whether user activity or connection metadata is logged on Proton VPN servers, as well as whether the no-logs policy applies to all users, regardless of subscription level.

Across all areas inspected, auditors were able to confirm that Proton VPN doesn’t log user activity or keep any metadata logs, nor does it engage in practices that may compromise the privacy of its users. Likewise, all users benefit from the same privacy protection regardless of whether they’re paid subscribers or Proton VPN Free users.

For more information, here's the full August 2025 audit report.

What this audit means for Proton VPN users

Securitum’s audit of Proton VPN’s no-logs policy confirms that Proton VPN delivers on its privacy promises with no user activity, metadata, or traffic logged, and with safeguards in place to keep this guarantee intact.

That's a guarantee that, even if a malicious hacker or government manages to acquire this data, none of your sensitive information will ever be leaked because these details simply won't exist.

While this latest audit validates Proton VPN’s no-logs claim, the service’s privacy commitment extends far further.

For starters, its apps are open source, meaning that anyone can examine their code. The provider even runs a bug bounty program, which rewards researchers who uncover flaws.

The same can not be said for all VPNs, particularly free VPNs, which may keep logs that potentially identify you as a user. This data could be sold to or shared with third parties, or otherwise stolen in a data breach, putting your privacy at risk in the process.

You can access the full results of all of Proton VPN’s external audits regardless of whether you’re an existing subscriber or simply evaluating the service.

You might also like

• Proton VPN expands Linux capabilities with new split tunneling feature
• EventVPN: Can a privacy-first ad model be the antidote to low-quality free VPNs?
• Forget no-log claims – this new VPN promises its tech can never reveal your identity, even if it wanted to