Contact

Guide

Why a VPN's jurisdiction matters more than its marketing

·The Openscore VPN team

jurisdiction · privacy · five-eyes · ownership

A VPN’s jurisdiction is the legal system that can compel it. It sets who can serve it a demand, under what law, and whether it can be forced to log a user quietly. That is a real thing. It is also routinely oversold.

What jurisdiction actually decides

Where a provider is legally registered determines which government can lawfully order it to hand over data or start collecting it. Two features of a jurisdiction matter most:

  • Mandatory data-retention laws. Some countries require communications providers to retain certain records. A no-logs promise cannot survive a law that orders logging.
  • Intelligence-sharing alliances. The “Five / Nine / Fourteen Eyes” arrangements let member states share signals intelligence. Being outside them is genuinely preferable, but it is a weaker guarantee than the marketing implies.

The Five Eyes shorthand, and its limit

“Outside the Fourteen Eyes” has become a checkbox. It is worth having, but it does not mean untouchable. A provider outside those alliances can still sit in a country with its own retention rules, its own courts, and its own pressures. And an alliance is about intelligence sharing, not the only route by which data is obtained. Treat jurisdiction as one input, not a verdict.

A registered country tells you which law applies. It tells you nothing about whether the provider actually keeps the data that law could reach for. Jurisdiction and logging are two separate questions, and a provider needs a good answer to both.

The part the homepage skips: who owns it

A flag on a pricing page is cheap. The harder, more revealing questions are whether a real legal entity is named at all, whether the ultimate owner is disclosed, and whether the registered address matches the country in the tagline. We have reviewed services that claim a privacy-friendly jurisdiction while listing a registered address in a Five-Eyes country on the very same page. When the story does not line up, the tagline is the least reliable part of it.

How we score it

On this site, jurisdiction is recorded from the provider’s own documents and cited, with the country, any alliance membership, and any conflict between the claimed jurisdiction and the disclosed address noted in full. It is one dimension among eleven, weighted with the others, never a single badge that decides the score. A country is a fact you can act on; a marketing line about it is not.

Every claim in this note rests on the site's published method. Read it in full on the methodology page, or return to the notebook.