Independent auditors at KPMG have confirmed that ExpressVPN never logs your identifiable information, as stated in the statement Privacy Policy.
This is the 18th time ExpressVPN has scrutinized its service with a third-party audit since 2018, re-establishing itself as one of the best VPN services on the market.
The audit takes a deep dive into the provider’s VPN server infrastructure and ensures that its privacy systems are working as promised from December 12, 2023.
ExpressVPN 2024 no-log audit
ExpressVPN TrustedServer, developed in 2019, is its proprietary technology that underpins its no-log claims.
For example, all servers run entirely on RAM, which requires power to store data. This means that nothing is saved to the server after a restart. ExpressVPN’s servers also come with an up-to-date code stack. So every time the server is restarted, the latest version of the stack (which contains the operating system (OS) and the VPN infrastructure above it) is loaded as a unique block to minimize the risks of bugs, other vulnerabilities and misconfigurations .
KPMG has thoroughly tested the description, design and implementation of controls over ExpressVPN’s TrustedServer services. As of December 12, 2023, auditors were able to confirm that ExpressVPN’s system successfully prevented the collection of user activity logs.
“We are pleased that KPMG is reviewing our systems and TrustedServer technology and validating our compliance with our no-logs policy,” said Aaron Engel, Chief Information Security Officer, ExpressVPN. “Regular reviews and audits by independent third parties help validate the strength of our security measures, strengthening our confidence in protecting our users.”
As mentioned, ExpressVPN is very active in the field of independent VPN audits. The provider has undergone eighteen third-party audits since 2018 in an effort to increase transparency and assurance about both its security and privacy systems.
You can view and read KPMG’s full audit report here.
The benefits of log-free VPNs
Now that ExpressVPN is cementing itself as a reliable no-logs VPN, you might be wondering: why should you care whether or not my VPN logs user data? Well, you should if you care about your privacy.
This is mainly because a no-log VPN is your guarantee that no personal data or usage information will ever be recorded. However, it is worth mentioning that some basic data logs are unavoidable. This includes, for example, the number of users connecting to the same server and the email address associated with a user’s account.
For example, if a malicious hacker or government manages to obtain this data, none of your sensitive information will be leaked because the details simply don’t exist.
The importance of this feature has already been proven in real life when Swedish authorities were left empty-handed last year after an unclear police raid on Mullvad’s servers. Another provider, Private Internet Access, does too proved his claims without logs in courtnot once but twice.
We at Ny Breaking believe that a strict no-logs policy should be among your top priorities when signing up for a new VPN service. Better yet, if this is regularly verified as correct by independent auditors, as in this case.
We test and assess VPN services in the context of legal recreational use. For example:
1. Accessing a service from another country (subject to the terms and conditions of that service).
2. Protect your online security and strengthen your online privacy abroad.
We do not support or tolerate the illegal or malicious use of VPN services. Consuming pirated, paid for content is not endorsed or condoned by Future Publishing.