Skip to content
Independently verified · Quarterly re-audit
EU VETTED

OVPN

VERIFIED
VPN · Sweden
Founded 2014 · ovpn.com ↗

Swedish founder-owned VPN (OVPN Integrität AB, est. 2014), fully owns hardware, diskless RAM-only, court-proven no-logs, legal-fees insurance.

Why this score?

OVPN is operated by OVPN Integrität AB, a Swedish company publishing transparency reports continuously since 2014 — one of the cleanest sovereignty stories in the consumer-VPN category: fully owns its server hardware (no rented servers, no virtual machines), all VPN servers are diskless with the operating system in RAM, the no-logs policy is court-proven (an information-injunction case where OVPN simply had nothing to hand over, with legal-fees insurance to underwrite future cases), supports modern crypto (AES-256-GCM / Curve25519 / ChaCha20 / WireGuard), and runs 32 locations with IPv6. Rated 3/5: an otherwise exemplary sovereignty profile under Swedish EU jurisdiction, founder-owned, no PE / VC / parent on record — but OVPN does not publish a DPA on the site; only a privacy policy is available, with no processor agreement for EU buyers to self-serve; under EU Vetted''s rubric a DPA that small EU buyers cannot self-serve caps the score at 3/5.

SCORE
3.0/5
CLOUD ACT
OWNERSHIP
SUB-PROCS
not disclosed
JUMP TO
OVERVIEW

About OVPN

OVPN is operated by OVPN Integrität AB, a Swedish company that has been publishing transparency reports continuously since 2014. It is one of the cleanest small-vendor listings in the consumer-VPN category, and the structural details are what set it apart from larger competitors. **OVPN fully owns its server hardware** — there are no rented servers and no virtual machines anywhere in the fleet, which removes a class of supply-chain and shared-tenancy risk that almost every other VPN provider accepts. All VPN servers are **diskless and run their operating system from RAM**, so there is no persistent storage on the hardware that could be seized. The no-logs claim is unusually well-evidenced. Where most VPN providers point at an annual third-party audit, OVPN has the policy **legally tested**: in an information-injunction case the company was able to demonstrate it had no data to hand over, and OVPN now carries **insurance to cover legal fees** for future similar cases — a level of structural commitment to non-retention that mirrors Mullvad's culture in the same Swedish jurisdiction. Encryption is modern across the board: AES-256-GCM with OpenVPN, Curve25519 + ChaCha20 with WireGuard. The fleet covers 32 cities globally with full IPv6 support, multihop, port forwarding (up to 7 ports in the 49152-65535 range), and an optional public IPv4 add-on. For an EU-sovereignty audit OVPN is a top-tier pick alongside Mullvad in the same Swedish jurisdiction. It is founder-owned, EU-incorporated, has no US parent, no US VC, no PE — and the owned-hardware + diskless + court-proven posture is structurally as strong as anything in the category. It is genuinely under-known compared to NordVPN/Surfshark/CyberGhost, which is precisely the kind of listing this directory exists to surface. Pricing is paid-only with a 10-day money-back guarantee: 1-month €12, 1-year €4.99/month, 3-year €4.22/month (the long-commitment best-value tier). UI languages: English, Swedish, German, Norwegian. Best fit: privacy-maximalist EU buyers who want a small, owner-operated, structurally-sound Swedish provider with court-tested no-logs, and who prefer "we own everything and it's all in RAM" over a marketing-heavy mainstream brand.
SUB-PROCESSORS

Sub-processor map · not disclosed

Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
CERTIFICATIONS

Frameworks & certifications · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-05-15).
FEATURES

Capability matrix

INTEGRATION & ACCESS
REST API No
SSO (SAML / OIDC) No
COMPLIANCE & GOVERNANCE
Audit log No
Self-host / on-prem option No
PRICING

Pricing & tiers

PAID
from €4/mo
View pricing page ↗
PUBLIC DOCUMENTS

Public documents

Vendor does not publish a public DPA. Without a publicly accessible Data Processing Addendum, small EU customers cannot self-serve the processor agreement — this caps the compliance score (see How we score).
Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
  • Data Processing Addendum (DPA)
    — missing
    missing
  • Sub-processors list
    — missing
    missing
  • Terms of Service
    www.ovpn.com/en…
    Open ↗
ALTERNATIVES

Alternatives in this category