IPVanish passes third independent no-logs audit

IPVanish says it has passed its third independent audit of its no-logs policy. The review was conducted by Schellman Compliance and completed on September 25, 2026. Earlier audits took place in 2022 and 2025.

According to results shared by IPVanish, the policy aligns with the company’s public privacy commitments. Schellman auditors had unrestricted access to IPVanish’s systems, configurations and teams. They interviewed engineering and operations staff, reviewed infrastructure and internal procedures, and ran test traffic exercises to look for signs of logging, including DNS queries, VPN metadata and server responses.

The auditors reported finding no records of browsing traffic, session history or connection metadata collected or stored on active servers. Systems used to detect network abuse operate in memory, the company said. The review also examined safeguards requiring approval from multiple people for changes to server operations.

IPVanish General Manager of Consumer Cybersecurity Subbu Sthanu said annual independent audits are intended to make transparency and accountability an ongoing practice. The company says customers can download the full report through the Security Reports page in the My IPVanish account portal.

IPVanish is also migrating its infrastructure to RAM-only servers and has pledged to complete the transition by 2027. The company says those servers wipe data on every reboot.