Surfshark is a VPN provider whose no-logs policy has been independently verified by Deloitte. Its infrastructure uses RAM-only servers and supports 10 Gbps ports, with recently announced deployment of 100 Gbps servers in Amsterdam. The company is part of the Nord Security group, valued at US $3 billion as of September 2023. For users seeking an audited no-logs VPN with modern architecture, Surfshark merits serious consideration.

Surfshark: accessible VPN protection without compromise

TLDR

Surfshark’s no-logs policy has been audited by Deloitte. Its RAM-only server fleet and 10 Gbps ports support strong global performance, with 100 Gbps servers recently announced for Amsterdam. The business is part of the Nord Security group, valued at US $3 billion in 2023. For users seeking validated privacy and modern infrastructure, Surfshark is a credible option.

What it is

Surfshark is a VPN service delivered by Surfshark B.V., a cybersecurity company headquartered in Amsterdam with additional offices in Lithuania, Poland and Germany. The service operates across Windows, macOS, Linux, iOS, Android and various smart-platforms, and provides browser extensions for Chrome, Firefox and Edge.

Surfshark supports WireGuard, OpenVPN (TCP/UDP) and IKEv2/IPSec. It uses AES-256-GCM encryption for OpenVPN and IKEv2, and ChaCha20 for WireGuard. The company reports that its entire network has run on RAM-only servers since July 2020, eliminating persistent storage and improving data protection, as servers automatically wipe on loss of power or reboot.

Servers across the fleet use 10 Gbps ports to support high-capacity throughput; Surfshark has also announced the introduction of 100 Gbps servers in Amsterdam. A single subscription permits unlimited device connections, making Surfshark suitable for households and users with many endpoints. Surfshark reports more than 3,200 servers in 100 countries, with more recent disclosures citing more than 4,500 servers.

Surfshark states that P2P traffic is supported across its global infrastructure, allowing users to leverage the full network rather than relying on specialised torrenting nodes. Streaming access is supported, although availability may vary by platform and region.

Additional capabilities described by Surfshark include Dynamic MultiHop routing, Bypasser split tunnelling, Camouflage Mode, Alternative ID identity protection, GPS spoofing, Everlink self-healing connections and FastTrack routing optimisation. Independent verification of deployment timelines for these advanced features remains limited.

Who runs it

Surfshark was founded in 2018 by Vytautas Kaziukonis and registered as Surfshark B.V. in the Netherlands. It moved its headquarters to Amsterdam on Oct. 1, 2021. The company operates under Nord Security’s corporate group. In September 2023, Nord Security announced a US $100-million financing round valuing the combined entity, including Surfshark, at US $3 billion. Both Nord Security and Surfshark continue to operate as distinct brands.

Operating model

Surfshark offers tiered subscription packages covering its VPN and related digital-privacy tools. Payment methods include credit and debit cards, PayPal, Google Pay, Apple Pay and cryptocurrency. A 30-day money-back guarantee applies to all plans. A seven-day free trial is available through mobile platforms. Plan names, regional availability and add-on options vary over time.

Platforms and updates

Surfshark provides applications for Windows, macOS, Linux, iOS and Android. The service also supports installation on routers, gaming consoles, Apple TV, Android TV and Fire TV.

Updates are distributed through official app stores for mobile devices and via direct downloads for desktop systems. Surfshark states that both client applications and server infrastructure receive automated updates.

Security architecture

Surfshark’s security framework incorporates AES-256-GCM and ChaCha20 encryption, depending on protocol. All servers operate without persistent storage (RAM-only), reducing the risk of data exposure should infrastructure be physically seized. Servers are equipped with 10 Gbps ports, while 100 Gbps capacity has been announced for Amsterdam.

The service includes a kill switch that prevents data exposure by disconnecting the internet if the secure VPN tunnel fails.

Surfshark describes additional network-design features under its Nexus platform, including IP rotation and routing enhancements intended to support privacy and connection stability. Independent assurance of these architectural details is currently limited. The company has stated that it is implementing post-quantum encryption, although full deployment has not been claimed.

Privacy posture

Surfshark maintains a strict no-logs policy. Deloitte conducted two independent assurance reviews under ISAE 3000 standards — in January 2023 and June 2025 — confirming that Surfshark’s operational design and controls conformed to its stated no-logs policy.

The Netherlands does not impose mandatory VPN data-retention requirements, supporting Surfshark’s privacy posture. However, the country is a member of the Nine Eyes intelligence-sharing alliance. Users should assess jurisdiction risks individually and consider whether this aligns with their threat model.

In June 2022, Surfshark withdrew its physical servers from India after the country introduced regulations requiring VPN providers to store customer data. The company continued offering virtual India IP locations hosted outside the country to maintain access without compromising its no-logs policy.

Bottom line

Surfshark delivers a credible VPN service grounded in verifiable controls: Deloitte-audited no-logs operation, an all-RAM server fleet, high-capacity connectivity and broad platform support. Support for P2P access across its full network and the availability of a kill switch strengthen its privacy and resilience posture. The company’s valuation within the Nord Security group and announced deployment of 100 Gbps servers indicate ongoing scale and investment.

While some advanced capabilities such as Dynamic MultiHop and routing optimisation are described primarily by the company, its foundational security, privacy and operational claims are substantiated. For users prioritising validated privacy practices and modern architecture, Surfshark represents a compelling choice. As always, prospective users should confirm any features or pricing at time of purchase.

Disclosure

This article reflects personal analysis. It does not represent the views or policies of any employer or other organisation. All information was derived from publicly available sources and verified audit reports as of the publication date. No compensation was received from Surfshark or any affiliate. Features, pricing and technical specifications may change without notice; readers should confirm details directly with the company.

#VPN #Surfshark #CyberSecurity #InfoSec #Privacy #DataProtection #Encryption #NoLogs #CyberDefense #OnlineSecurity #NetworkSecurity #DigitalSafety #SecureBrowsing #ZeroTrust #ThreatProtection #SecurityArchitecture #CyberHygiene #SecureConnectivity #NetherlandsTech #ConsumerSecurity #RAMOnly #WireGuard #OpenVPN #KillSwitch #P2P #GlobalServers #NordSecurity #QuantumSafe #ISAE3000 #DeloitteAudit #CyberAwareness #SecurityTools #DigitalPrivacy #CISO