Zum Inhalt springen
Unabhängig verifiziert · Quartalsweises Re-Audit
EU VETTED

AzireVPN

VERIFIZIERT
VPN · Sweden
Founded 2012 · azirevpn.com ↗

Swedish privacy VPN (Stockholm, est. 2012) — Blind Operator, RAM-only, audited no-logs — acquired by Malwarebytes (US) 7 Nov 2024.

Warum diese Bewertung?

AzireVPN was a top-tier privacy-pick Swedish VPN — founded Stockholm 2012, fully-owned diskless RAM-only servers, 'Blind Operator' security model that disables both remote and local access, monthly warrant canary, third-party-audited no-logs, regular transparency reports — but on 7 November 2024 it was acquired by Malwarebytes (Santa Clara, California, USA) and is now operated as part of a US-incorporated cybersecurity vendor; the Swedish operating entity and engineering team continue but the ultimate parent is now US, which puts CLOUD Act exposure at material and downgrades what would have been a 5/5 sovereignty pick to 2/5 — listed as a privacy-conscious option with a clear ownership-watch note rather than a sovereignty pick.

SCORE
2.0/5
CLOUD ACT
OWNERSHIP
SUB-PROCS
not disclosed
JUMP TO
OVERVIEW

About AzireVPN

AzireVPN was founded in Stockholm, Sweden in 2012 and built a strong reputation in the privacy-VPN niche on three structural choices: it owned 100% of its server hardware, ran a diskless infrastructure with the OS in RAM, and developed the **"Blind Operator" security model** — a tool that disables both remote and local access to its servers, preventing any operator (including AzireVPN's own staff) from observing customer traffic. The no-logs policy was independently third-party-audited in 2026, the company published a monthly **warrant canary** (api.azirevpn.com/v3/warrantcanary), and maintained regular public transparency reports. By every structural measure that matters in the privacy-VPN category, AzireVPN was a 5/5 sovereignty pick. **The ownership story changed on 7 November 2024**, when Malwarebytes — a Santa Clara, California cybersecurity company — announced that it had acquired AzireVPN. Financial terms were not disclosed. Malwarebytes' stated plan is to integrate AzireVPN's VPN technologies and the Blind Operator IP into its own product lines, and the AzireVPN brand continues to operate. But the corporate facts have shifted: the **ultimate parent is now a US-incorporated company**, which under this directory's rubric puts CLOUD Act exposure at `material` regardless of where the Swedish operating entity sits or where the servers physically live. AzireVPN's homepage now describes itself as "part of Malwarebytes, a global leader in real-time cyber protection." AzireVPN remains in this directory because the underlying privacy engineering is genuinely strong and the user community values it — but it is listed as a **privacy-conscious option with an ownership-watch flag**, not as an EU-sovereignty pick. Buyers who specifically need a clean EU-or-Swiss ownership chain should now prefer Mullvad (founder-owned Swedish AB), OVPN (Swedish AB, owned hardware, court-proven no-logs), ProtonVPN (Swiss Foundation) or IVPN — all elsewhere in this directory. Pricing was not directly captured at audit; the AzireVPN /pricing page is the canonical source. UI is English-first.
SUB-PROCESSORS

Unterauftragsverarbeiter-Karte · not disclosed

Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
CERTIFICATIONS

Rahmenwerke & Zertifizierungen · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-05-15).
FEATURES

Funktionsmatrix

INTEGRATION & ACCESS
REST API No
SSO (SAML / OIDC) No
COMPLIANCE & GOVERNANCE
Audit log No
Self-host / on-prem option No
PRICING

Preise & Tarife

KOSTENPFLICHTIG
Individuelle Preise

Kontaktieren Sie den Anbieter für Staffel- oder Mengenpreise.

Preisseite ansehen ↗
PUBLIC DOCUMENTS

Öffentliche Dokumente

Vendor does not publish a public DPA. Without a publicly accessible Data Processing Addendum, small EU customers cannot self-serve the processor agreement — this caps the compliance score (see How we score).
Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
  • Data Processing Addendum (DPA)
    — missing
    missing
  • Sub-processors list
    — missing
    missing
  • Terms of Service
    www.azirevpn.com/legal…
    Open ↗
ALTERNATIVES

Alternativen in dieser Kategorie