The VPN provider claims on his website that “Express VPN never has data that can connect you with any online activity.” From the end of February, an independent audit supports these claims. Accounting firm’s PMG received “reasonable assurance” that the VPN provider system prevents the user’s activity from logging in. Product is one of the top VPN CHANNES.
VPN Servers based on RAM
The firm’s audit has placed the Express VPN’s Trusteer System under a microscope. This is the company’s RAM -based system. In theory, this approach means that the user’s data is erased from each server reboot. (Doing so will also prevent the possibility of long -term storage.) Some rivals, including Nord VPN, use RAM -based servers. Meanwhile, proton VPN counters that properly encrypted hard drives are safe.
Another response to RAM -based servers is that they are effective only when they resume. The theory, a company can run a Ram server for marketing purposes, but can never restart them again. Audit can help.
KPMG results
KPMG has a high level confidence that the new logging system was worked at the end of February. The KPMG dissertation states that “the controls are reasonably assured that the Express VPN does not submit a trusted consumer activity log.” It had no log in browsing history, traffic destination, data content, DNS questions or specific connection logs. “
The diagnosis of KPMG was an ISAE 3000 type iD. This means that it focused on the design and implementation of the Express VPN at a certain location of the time. (Meanwhile, a type II audit proceeds to examine the effects of these controls during an extension period.) If you are not familiar, KPMG is one of the major four accounting firms. It is a reliable name that corporations made big money from such audits.
The diagnosis considered several factors. These included document reviews, observing the system at work and interviewing express VPN personnel. The audit results “by February 28, 2025”. Therefore, it represents KPMG results for a particular point of time rather than a blanket of permanent confidence. The diagnosis did not include the entire system to test tension or a complete security analysis of the company.
You can read the entire KPMG paper for a more detailed error.
