IVPN

152 of 158 criteria sourced · 4 % unsourcedProvider websiteView in the matrixJSON export

vpn-matrix.com earns nothing from this entry. The link to the provider website is a source, not a recommendation.

Who owns this

Parent company

IVPN Limited

Brands in the same group

  • IVPN this entry

Further brands according to the source: none

This group also owns review and comparison sites

none

If the same group tests its own service, that review is not independent. That is noted here as ownership only.

Audits and incidents

Sourced facts with dates only, no judgements. Ongoing proceedings are marked as such.

Tested in court or by authorities

trust.court_tested

Transparency report shows legal requests; historically no user data disclosedprovider claim

Security incidents and data leaks

trust.breach_history

none disclosed on fetched transparency/privacy pagesprovider claim

No-logs audit details

trust.nolog_audit_details

Cure53, März 2019, drei Auditoren an sieben Tagen; Umfang waren die VPN-Gateways und Authentifizierungsserver. Ein Befund geringer Schwere (DNS-Caching) wurde nach Anbieterangabe behoben.confirmed

App and client audits

trust.app_audits

Cure53 prüft die Apps seit 2021; die Prüfung von Februar und März 2022 umfasste die Apps aller Plattformen an 13 Tagen und ergab acht Schwachstellen (1 hoch, 6 mittel, 1 Info) sowie zwölf weitere Hinweise.confirmed

Infrastructure and server audits

trust.infra_audit

Cure53 prüfte Ende 2019 mit sechs Personen an 21 Personentagen die öffentliche VPN-Infrastruktur, die internen Backend-Server und die Webserver (9 Befunde: 3 hoch, 2 mittel, 3 gering, 1 Info). Im März 2024 folgte eine achttägige Prüfung von Kunden-Website, API und Web-Infrastruktur mit zwei Befunden geringer Schwere.confirmed

Transparency report

trust.transparency_report

regularprovider claim

Warrant canary

trust.warrant_canary

present and currentprovider claim

Acquisition history / former name

company.acquisition_history

Früherer Firmenname Privatus Limited, am 10.08.2023 in IVPN Limited umbenannt.confirmed

Marketing claims contradicting the provider's own terms

site.claims_vs_reality

Explicitly rejects anonymity/military-grade marketing fluff; publishes what VPN can/cannot doprovider claim

All criteria

Empty cells mean we lack the source.

Company and ownership

18/21 sourced

Legal company name

company.legal_name

IVPN Limitedconfirmed

Trademark holder, if different

company.brand_owner

IVPNprovider claim

Year founded

company.founded

2009provider claim

Headquarters (country)

company.hq_country

GIprovider claim

Other relevant jurisdictions

company.jurisdictions

Schweiz: Die Google-Play-Fassung der Android-App wird von der Privatus GmbH veröffentlicht.provider claim

Intelligence alliance of the home country

company.eyes_alliance

Five Eyesconfirmed

Parent group / holding

company.parent

none (independent IVPN)provider claim

Beneficial owners publicly known

company.ubo_public

fully knownprovider claim

Ownership structure

company.ownership_type

founder ownedprovider claim

Leadership team publicly named

company.team_public

yesprovider claim

Verifiable postal address for legal service

company.address_verifiable

noprovider claim

Sister VPN brands in the group

company.sister_vpn_brands

noneprovider claim

Group owns VPN review and comparison sites

company.owns_review_sites

noneprovider claim

Runs an affiliate programme

company.affiliate_program

noprovider claim

Typical commission rate

company.affiliate_commission

none (affiliate program closed)confirmed

YouTube and influencer sponsoring

company.influencer_sponsoring

occasionalprovider claim

Documented misleading advertising claims

company.misleading_claims

We have no source for this criterion.

Acquisition history / former name

company.acquisition_history

Früherer Firmenname Privatus Limited, am 10.08.2023 in IVPN Limited umbenannt.confirmed

Operating status

company.status

activeconfirmed

Discontinuation date

company.discontinued_date

We have no source for this criterion.

User base migrated to

company.user_base_migrated_to

We have no source for this criterion.

Logging and data collection

16/16 sourced

Core statement of the logging policy

logging.policy_summary

Laut Datenschutzerklärung werden keine Daten zur VPN-Aktivität protokolliert: kein Traffic, keine Verbindungszeitstempel oder Verbindungsdauer, keine DNS-Anfragen, kein Datenvolumen und keine Kunden-IP-Adressen.provider claim

Activity and traffic logs

logging.activity_logs

noneconfirmed

Connection logs

logging.connection_logs

noneprovider claim

Storage of the real IP address

logging.source_ip_stored

not storedconfirmed

Storage of the assigned VPN IP

logging.assigned_ip_stored

not storedprovider claim

Precision of stored timestamps

logging.timestamps_stored

noneprovider claim

Recording of transferred data volume

logging.bandwidth_logged

not recordedprovider claim

Enforcement of the device limit

logging.concurrent_conn_enforcement

Der Authentifizierungsserver hält eine temporäre Tabelle mit einem 16-stelligen Token je angemeldetem Gerät und der zugehörigen Konto-ID; Einträge werden beim Abmelden oder bei Kontolöschung gelöscht. Zeitstempel oder Gerätemerkmale werden nach Anbieterangabe nicht gespeichert.provider claim

Minimum account data required

logging.account_data_minimum

Keine. Bei der Registrierung wird nach Anbieterangabe keine E-Mail-Adresse und kein Name verlangt; gespeichert werden Konto-ID, Erstellungszeitpunkt, Produkt und Gerätelimit.provider claim

Telemetry in the apps

logging.app_telemetry

on by defaultprovider claim

Trackers and SDKs in the Android app

logging.thirdparty_sdks_android

none claimed for analytics; crash logs self-hosted, mobile crash opt-outprovider claim

Trackers in the iOS app

logging.thirdparty_sdks_ios

none claimed for analytics; crash logs self-hosted with opt-outprovider claim

Trackers and cookies on the website

logging.website_trackers

Eigene Messung der Startseite am 03.08.2026: keine Drittanbieter-Skripte; einziger externer Host in Skript- und Link-Attributen ist die selbst betriebene Matomo-Instanz stats.ivpn.net.confirmed

Data shared with third parties

logging.data_shared_with

Zahlungsdienstleister Braintree (Kartenzahlung) und PayPal. Die Datenschutzerklärung gibt an, dass darüber hinaus keine Dritten Zugriff auf Kundendaten haben und kein Zahlungsdienstleister die IVPN-Konto-ID erhält.provider claim

Retention periods stated in the policy

logging.retention_period

Nach Kündigung oder Ablauf werden alle Kontodaten laut Policy nach 90 Tagen gelöscht, ausgenommen Buchhaltungsdaten (Datum, Betrag, Zahlungsart, Transaktions- und Abo-ID). Eingelöste Gutscheincodes werden 30 Tage nach Einlösung gelöscht.provider claim

EU representative named under GDPR

logging.gdpr_representative

yesprovider claim

Evidence, audits and track record

17/17 sourced

Independent no-logs audit

trust.nolog_audit

yesconfirmed

No-logs audit details

trust.nolog_audit_details

Cure53, März 2019, drei Auditoren an sieben Tagen; Umfang waren die VPN-Gateways und Authentifizierungsserver. Ein Befund geringer Schwere (DNS-Caching) wurde nach Anbieterangabe behoben.confirmed

Audit report published

trust.audit_report_public

full reportconfirmed

App and client audits

trust.app_audits

Cure53 prüft die Apps seit 2021; die Prüfung von Februar und März 2022 umfasste die Apps aller Plattformen an 13 Tagen und ergab acht Schwachstellen (1 hoch, 6 mittel, 1 Info) sowie zwölf weitere Hinweise.confirmed

Infrastructure and server audits

trust.infra_audit

Cure53 prüfte Ende 2019 mit sechs Personen an 21 Personentagen die öffentliche VPN-Infrastruktur, die internen Backend-Server und die Webserver (9 Befunde: 3 hoch, 2 mittel, 3 gering, 1 Info). Im März 2024 folgte eine achttägige Prüfung von Kunden-Website, API und Web-Infrastruktur mit zwei Befunden geringer Schwere.confirmed

Audit frequency

trust.audit_cadence

annualprovider claim

Tested in court or by authorities

trust.court_tested

Transparency report shows legal requests; historically no user data disclosedprovider claim

Transparency report

trust.transparency_report

regularprovider claim

Warrant canary

trust.warrant_canary

present and currentprovider claim

Security incidents and data leaks

trust.breach_history

none disclosed on fetched transparency/privacy pagesprovider claim

Bug bounty programme

trust.bug_bounty

Vulnerability reporting program (vulnerability-reporting page linked from site)provider claim

Handling of reported vulnerabilities

trust.cve_handling

Meldungen an security@ivpn.net, PGP-Schlüssel auf der Meldeseite veröffentlicht. Reaktionsfristen oder eine Offenlegungspraxis nennt die Seite nicht.provider claim

Open source clients

trust.opensource_clients

allconfirmed

Open source server side

trust.opensource_server

noprovider claim

Reproducible builds

trust.reproducible_builds

noprovider claim

Available on F-Droid

trust.fdroid_available

yesconfirmed

Listings by independent bodies

trust.independent_recommendations

Privacy Guides führt IVPN in seiner VPN-Übersicht und verweist auf Sitz in Gibraltar, mehrere unabhängige Audits seit 2019 und quelloffene Apps seit Februar 2020.confirmed

Protocols and cryptography

17/17 sourced

WireGuard

crypto.wireguard

yesprovider claim

OpenVPN over UDP

crypto.openvpn_udp

yesprovider claim

OpenVPN over TCP

crypto.openvpn_tcp

yesprovider claim

IKEv2/IPsec

crypto.ikev2

yesprovider claim

Proprietary protocol

crypto.proprietary_protocol

none (WireGuard, OpenVPN, IPSec/IKEv2; V2Ray/obfs4 for obfuscation)provider claim

Legacy protocols still offered

crypto.legacy_protocols

Keine. PPTP und L2TP/IPSec werden nach Anbieterangabe nicht unterstützt.provider claim

Default data cipher

crypto.data_cipher_default

OpenVPN ab Version 2.4: AES-256-GCM. WireGuard: ChaCha20.provider claim

Weakest accepted cipher

crypto.data_cipher_weakest

AES-256-CBC bei OpenVPN-Clients älter als Version 2.4.provider claim

Key exchange and authentication

crypto.handshake

OpenVPN: RSA-4096 mit HMAC-basierter TLS-Authentifizierung. WireGuard: Schlüsselpaar aus öffentlichem und privatem Schlüssel. Die Anmeldung erfolgt über eine zufällig erzeugte Konto-ID.provider claim

Perfect forward secrecy

crypto.pfs

yesprovider claim

Post-quantum key exchange

crypto.post_quantum

on by defaultprovider claim

Own DNS resolvers

crypto.own_dns

yesprovider claim

DNS leak protection

crypto.dns_leak_protection

yesprovider claim

IPv6 handling

crypto.ipv6_handling

routed through tunnelprovider claim

WebRTC protection or guidance

crypto.webrtc_guidance

yesprovider claim

Obfuscation methods

crypto.obfuscation

V2Ray (VMess über QUIC oder TCP) auf Windows, macOS, Linux, iOS und Android; zusätzlich obfs3 und obfs4 über Obfsproxy für OpenVPN auf dem Desktop.provider claim

Usability behind the Great Firewall

crypto.works_in_china

unclearprovider claim

Features

19/20 sourced

Kill switch

features.killswitch

system-wideprovider claim

Permanent lockdown

features.killswitch_permanent

yesprovider claim

Split tunneling

features.split_tunneling

Anwendungsbasiert unter Windows, Linux und Android; invers (nur ausgewählte Anwendungen im Tunnel) unter Windows und Linux. Keine Auswahl nach Domain oder URL, unter macOS und iOS nicht vorhanden.provider claim

Multihop

features.multihop

freely combinableprovider claim

Tor integration (Onion over VPN)

features.tor_integration

noprovider claim

Port forwarding

features.port_forwarding

not availableprovider claim

Surcharge for a dedicated IP

features.dedicated_ip

We have no source for this criterion.

SOCKS5 proxy

features.socks5

yesprovider claim

HTTP proxy

features.http_proxy

noprovider claim

Smart DNS

features.smart_dns

noprovider claim

Ad and tracker filtering in DNS

features.adblock_dns

configurableprovider claim

Malware and phishing filter

features.malware_filter

yesprovider claim

Custom DNS servers allowed

features.custom_dns_allowed

yesprovider claim

Local network access toggle

features.lan_access_toggle

yesprovider claim

Auto connect rules

features.autoconnect_rules

yesprovider claim

Private device network (mesh)

features.mesh_private_net

noprovider claim

GPS location override (Android)

features.gps_spoofing

yesprovider claim

Traffic analysis defence

features.traffic_analysis_defense

V2Ray obfuscation + multihop; not a DAITA-like cover-traffic featureprovider claim

IPv6 inside the tunnel

features.ipv6_tunnel

yesprovider claim

Obfuscation without configuration

features.stealth_default

noprovider claim

Servers and network

12/12 sourced

Number of servers

network.server_count

88 Serverconfirmed

Number of countries

network.country_count

41 Laenderconfirmed

Number of cities

network.city_count

58 Staedteconfirmed

Virtual locations

network.virtual_locations

no virtual locationsprovider claim

RAM-only servers (diskless)

network.ram_only

noprovider claim

Hardware ownership

network.ownership

mixedprovider claim

Own AS (autonomous system)

network.own_asn

noprovider claim

10 Gbps ports

network.10g_servers

noprovider claim

P2P and file sharing

network.p2p_servers

entire networkprovider claim

Public server list

network.server_list_public

yesconfirmed

Public status page

network.status_page

yesconfirmed

Known upstream hosting providers

network.hosting_providers

Laut Server-API am 03.08.2026 unter anderem Datapacket (29 Hosts), M247 (22), Tzulo (10), Leaseweb (7), TheGigabit (4), EstNOC (3), Amanah (2) und Privatelayer (2).confirmed

Apps and platforms

16/16 sourced

Windows app

apps.windows

native appprovider claim

macOS app

apps.macos

native appprovider claim

Linux app with GUI

apps.linux_gui

native appprovider claim

Linux command line

apps.linux_cli

native appprovider claim

Android app

apps.android

native appprovider claim

iOS app

apps.ios

native appprovider claim

Android TV app

apps.androidtv

manual config onlyprovider claim

Apple TV app

apps.appletv

not availableprovider claim

Fire TV app

apps.firetv

manual config onlyprovider claim

Browser extension

apps.browser_ext

proxy details onlyprovider claim

Type of browser extension

apps.browser_ext_type

no extensionprovider claim

Router support

apps.router_support

Offiziell dokumentiert sind pfSense, OPNsense, Asus-wrt, OpenWrt, DD-WRT und Tomato; für OpenVPN und WireGuard stehen Konfigurationsgeneratoren bereit.provider claim

Native build for Apple Silicon

apps.macos_arm_native

yesprovider claim

Command line documented

apps.cli_documented

yesprovider claim

Simultaneous devices

apps.simultaneous_devices

5 (Standard und Plus), 10 (Pro Suite)provider claim

Usable without an account

apps.no_account_needed

yesprovider claim

Account, pricing and payment

17/17 sourced

Data required at signup

pricing.signup_email_required

nothing requiredprovider claim

Account model

pricing.account_model

account number onlyprovider claim

Cash by mail

pricing.cash_by_mail

yesprovider claim

Monero

pricing.monero

yesprovider claim

Bitcoin

pricing.bitcoin

yesprovider claim

Lightning

pricing.lightning

noprovider claim

Retail gift cards

pricing.retail_giftcards

noprovider claim

PayPal

pricing.paypal

yesprovider claim

Credit and debit card

pricing.credit_card

yesprovider claim

SEPA payment

pricing.sepa

noprovider claim

Monthly price

pricing.monthly_price

€6.00confirmed

Effective price on the longest term

pricing.effective_price_longest

€5.00confirmed

Price change at renewal

pricing.renewal_price_hike

same priceprovider claim

Flat pricing without permanent discounts

pricing.flat_pricing

noprovider claim

Free tier and its limits

pricing.free_tier

noneprovider claim

Money-back window

pricing.moneyback_days

30 Tageprovider claim

Cancellation path

pricing.cancellation_ease

cancel in accountprovider claim

Usage and performance

8/10 sourced

P2P policy in the terms of service

usage.p2p_policy

entire networkprovider claim

Streaming unblocking officially advertised

usage.streaming_officially

noprovider claim

Netflix regions reported

usage.netflix_regions_reported

No guarantee; many customers use for Netflix/Hulu/BBC/Disney+ but streaming actively blocks VPNsprovider claim

Other streaming services

usage.other_streaming_services

Hulu, Netflix, Amazon, BBC, Disney+ mentioned without guaranteeprovider claim

Bandwidth cap

usage.bandwidth_cap

no limitprovider claim

Data cap

usage.data_cap

noneprovider claim

Speed measurement references

usage.speed_references

We have no source for this criterion.

Latency and gaming suitability

usage.latency_gaming

We have no source for this criterion.

SMTP and port 25 handling

usage.smtp_policy

Ausgehender Verkehr auf SMTP-Port 25 wird blockiert; die Einlieferungsports 465 und 587 bleiben nach Anbieterangabe nutzbar.provider claim

Official support in restrictive countries

usage.restrictive_countries_support

V2Ray-Verschleierung (VMess über QUIC oder TCP) ist seit 28.11.2025 auf allen Plattformen verfügbar und richtet sich laut Anbieter an Nutzer in Ländern mit Netzsperren. Die Website weist zugleich darauf hin, dass eine stabile Nutzung in Russland nicht garantiert wird.provider claim

Support and documentation

7/7 sourced

24/7 live chat

support.livechat_247

noprovider claim

Email or ticket support

support.email

yesprovider claim

Telephone support

support.phone

noprovider claim

German-language support

support.german_language

noprovider claim

Documentation assessment

support.docs_quality

thorough and currentprovider claim

Self-hosted chat widget

support.selfhosted_chat

noprovider claim

Self-service account deletion

support.account_deletion_easy

yesprovider claim

Provider website hygiene

5/5 sourced

SSL Labs grade of the website

site.ssl_grade

A-confirmed

Tracker load of the website

site.cookie_privacy_impact

Eigene Messung der Startseite am 03.08.2026 ohne Zustimmung im Banner: keine Drittanbieter-Tracker; einziger externer Skript-Host ist die selbst betriebene Matomo-Instanz stats.ivpn.net.confirmed

URL of the warrant canary

site.canary_page

https://www.ivpn.net/resources/canary.txtprovider claim

Length and readability of the legal documents

site.tos_readability

Human-readable privacy policy emphasizedprovider claim

Marketing claims contradicting the provider's own terms

site.claims_vs_reality

Explicitly rejects anonymity/military-grade marketing fluff; publishes what VPN can/cannot doprovider claim

Something wrong here?

If a value is wrong or outdated, report it with evidence. Every change is reviewed and then appears publicly in the changelog.