Has X-VPN’s no-logs policy been audited?
Latest edited on 2026-06-01
Yes. X-VPN has completed an independent no-logs policy audit.
The audit was conducted by one of the Big Four accounting firms and completed on February 28, 2026 under the ISAE 3000 (Revised) standard. It reviewed X-VPN’s Privacy Policy statements related to user data handling and the corresponding practices behind those statements.
What X-VPN does not collect?
Based on the audit result, X-VPN does not store, collect, or track data that could identify users or link them to their VPN activity.
This includes:
- User IP addresses
- Destination IP addresses
- Websites visited
- Browsing history
- VPN servers used
- DNS queries
- Downloaded content
- VPN connection timestamps
- Sensitive payment details
In simple terms, X-VPN does not keep the kinds of activity-related records that could show where you connected from, what you accessed, which VPN server you used, or when your VPN connection happened.
What information does X-VPN process?
X-VPN only processes the minimum information needed to provide the service. This may include:
- An email address, which can be an alias or disposable email
- An encrypted password
- Order ID
- Order history
- Aggregated, non-identifiable performance data, such as CPU usage, memory usage, and service availability
X-VPN does not require extra personal information to create or use an account. X-VPN also supports cryptocurrency payments and does not store sensitive payment details such as payment card numbers, billing addresses, or names.
What did the audit cover?
The audit focused on X-VPN’s no-logs-related data handling practices and the controls that support them. It covered five main areas:
- X-VPN does not store or record sensitive user activity data.
- X-VPN only processes the minimum user information needed to provide the service.
- VPN servers, core databases, and code are managed under security and compliance controls.
- X-VPN’s Privacy Policy remains aligned with actual data-handling practices.
- X-VPN’s DPO-related oversight mechanisms support privacy governance and traceability.
This means the audit was not only about a sentence in the Privacy Policy. It also looked at whether the relevant practices and controls behind that policy support X-VPN’s no-logs commitments.
Why does this matter?
A no-logs policy is one of the most important privacy promises a VPN can make. But for users, that promise is stronger when it is supported by an independent audit.
This audit gives users a clearer way to understand what X-VPN does not collect, how its no-logs position is supported in practice, and how its privacy commitments are maintained beyond marketing language alone.
Where can I view the audit report?
Logged-in users can view the audit report in the X-VPN account center.
X-VPN also provides public-facing transparency resources through its official website, including its Audit Center and Transparency Report.
Was this article helpful?
Thanks for your feedback!
Why wasn't this article helpful?