
In late 2022, Surfshark lastly did what we’ve been ready years for: it invited in auditors to evaluate its no-logs coverage.
Though it has commissioned audits earlier than, these have coated different features of its service, akin to whether or not its apps contained any malware, or its normal infrastructure.
Nonetheless, this time, it’s the huge one so far as its customers are involved. It’s all very nicely for any VPN service to say it doesn’t log any knowledge: that’s simple. It’s fairly one other to show it and, till now, it was one of many huge bins that Surfshark couldn’t tick.
However in December 2022, the corporate gave Deloitte entry to every part crucial to substantiate that it does every part it states in its no-logs coverage.
And ensure it did, concluding “Primarily based on the procedures carried out and the proof obtained, in our opinion, the configuration of IT programs and administration of the supporting IT operations is correctly ready, in all materials respects, in accordance with Surfshark’s description of its no-logs coverage.”
The transfer comes only a fortnight after sister firm NordVPN introduced the outcomes of its third no-logs audit, which was additionally carried out by Deloitte.
This is good news for all of Surfshark’s present customers, but in addition for anybody contemplating signing as much as Surfshark however was beforehand unwilling to commit with out this form of assurance that it actually doesn’t preserve any knowledge about how you employ its service.
It’s essential to know that there are various kinds of logs and VPNs don’t actually assist themselves by not making it completely clear what ‘no logs’ actually means.
Surfshark is doing a great job on this respect, outlining three fundamental kinds of logs – technical ones about your connection, personality-related ones about you and your account and, most significantly – exercise logs about how you employ the companies.
Surfshark’s web site states “Briefly, Surfshark VPN doesn’t preserve observe of your on-line whereabouts or actions in any manner. The VPN server solely retains sufficient knowledge to keep up your VPN connection, and nothing is stored after you’re completed.”
One of many methods it ensures nothing may very well be recorded is that its servers all run in RAM and, if they’ve them, any laborious drives are read-only so any exercise knowledge can’t exist as soon as that server is powered off. And this doesn’t apply to only a few of its servers, however all of them.
Surfshark has mentioned it would make a abstract of Deloitte’s report accessible to the general public in order that anybody who desires to can see proof that it sticks to its no-logs coverage.