
In late 2022, Surfshark lastly did what we’ve been ready years for: it invited in auditors to evaluate its no-logs coverage.
Though it has commissioned audits earlier than, these have lined different facets of its service, similar to whether or not its apps contained any malware, or its normal infrastructure.
Nevertheless, this time, it’s the huge one so far as its customers are involved. It’s all very nicely for any VPN service to say it doesn’t log any knowledge: that’s simple. It’s fairly one other to show it and, till now, it was one of many huge packing containers that Surfshark couldn’t tick.
However in December 2022, the corporate gave Deloitte entry to every little thing crucial to substantiate that it does every little thing it states in its no-logs coverage.
And ensure it did, concluding “Based mostly on the procedures carried out and the proof obtained, in our opinion, the configuration of IT programs and administration of the supporting IT operations is correctly ready, in all materials respects, in accordance with Surfshark’s description of its no-logs coverage.”
The transfer comes only a fortnight after sister firm NordVPN introduced the outcomes of its third no-logs audit, which was additionally carried out by Deloitte.
This is good news for all of Surfshark’s current customers, but in addition for anybody contemplating signing as much as Surfshark however was beforehand unwilling to commit with out this type of assurance that it actually doesn’t hold any knowledge about how you employ its service.
It’s necessary to grasp that there are various kinds of logs and VPNs don’t actually assist themselves by not making it completely clear what ‘no logs’ actually means.
Surfshark is doing an excellent job on this respect, outlining three predominant sorts of logs – technical ones about your connection, personality-related ones about you and your account and, most significantly – exercise logs about how you employ the providers.
Surfshark’s web site states “Briefly, Surfshark VPN doesn’t hold observe of your on-line whereabouts or actions in any approach. The VPN server solely retains sufficient knowledge to take care of your VPN connection, and nothing is saved after you’re accomplished.”
One of many methods it ensures nothing may very well be recorded is that its servers all run in RAM and, if they’ve them, any laborious drives are read-only so any exercise knowledge can’t exist as soon as that server is powered off. And this doesn’t apply to simply a few of its servers, however all of them.
Surfshark has stated it would make a abstract of Deloitte’s report out there to the general public in order that anybody who desires to can see proof that it sticks to its no-logs coverage.