IPVanish Passes Third Independent No-Logs Audit
Schellman Compliance found no traffic, metadata, or session logging in its September 2026 review of the VPN provider.
Updated on Nov. 6, 2026 in Cybersecurity
Live Poll
Do you trust VPN companies' claims that they don't log your online activity?
Schellman Compliance completed the third independent no-logs audit of IPVanish on September 25, 2026, finding no traffic, metadata, or session logging. The audit follows reviews in 2022 and 2025 and is part of a commitment to annual independent audits of the company's no-logs policy.
Why it matters
Independent audits offer users a way to verify a VPN provider's privacy claims rather than relying solely on the company's own statements. Repeated audits over several years also show whether a provider's policies hold up over time.
The audit covered IPVanish's systems, configurations, and staff, with auditors running test traffic to check for DNS queries, VPN metadata, and server responses. The company's server network spans more than 150 locations, and real-time abuse-detection systems operate purely in memory.
The players
IPVanish
IPVanish is a commercial virtual private network provider that markets its service on privacy and no-logs commitments.
Schellman Compliance
Schellman Compliance is a security and compliance assessment firm that conducts independent audits for technology companies.
The details
Schellman auditors had unrestricted access to IPVanish's systems, configurations, and teams, and interviewed engineering and operations staff. Auditors also reviewed internal documentation and simulated real-world traffic to monitor servers for evidence of logging.
Timeline
2022: First third-party no-logs audit of IPVanish completed.
2025: Second third-party no-logs audit completed.
September 25, 2026: Schellman completed the third no-logs audit.
2027: IPVanish plans to complete its transition to RAM-only servers.
Roadmap
Third-party no-logs audits have become a recurring verification practice in the VPN industry, where providers have had to demonstrate privacy claims through outside review. IPVanish's 2022, 2025, and 2026 audits place it within that ongoing effort, alongside its plan to move infrastructure to RAM-only servers by 2027.
Users choosing a VPN can weigh whether a provider's no-logs claims have been checked by an outside auditor rather than taken on faith. The RAM-only server migration, if completed by 2027, would mean user data is held in volatile memory rather than on disk.
The takeaway
Independent audits are one of the few ways for VPN users to check a provider's privacy claims. Repeated reviews over several years add weight to those claims, though users should still read each audit's scope carefully.
Further reading
Explore more Cybersecurity coverage on how VPN providers protect user privacy.
Source note: This article includes information reported by TechRadar.
Live Poll
Do you trust VPN companies' claims that they don't log your online activity?
