TechRadar
Cover art for Surfshark passes KPMG privacy audit

Surfshark passes KPMG privacy audit

Independent Big Four accounting firm KPMG confirms Surfshark does not log browsing traffic or IP addresses.

Nov 12, 2026

7 cards · 1m 50s · tap to begin

From · · 1m 50s

Surfshark passes KPMG privacy audit

Independent Big Four accounting firm KPMG confirms Surfshark does not log browsing traffic or IP addresses.

In brief

Independent Big Four accounting firm KPMG confirms Surfshark does not log browsing traffic or IP addresses. KPMG audited Surfshark's servers and confirmed the VPN provider does not store browsing histories, IP addresses, connection timestamps or outgoing traffic. Originally reported by TechRadar.

KPMG confirms Surfshark's no-logs claim

surfshark vpn

Independent Big Four accounting firm KPMG examined Surfshark's server setup and confirmed the provider does not store browsing histories, IP addresses, connection timestamps or outgoing traffic.

What KPMG actually tested

Auditors reviewed the technical configuration of Surfshark's production servers, covering standard nodes, static IP locations and multi-port routing setups. They assessed whether operational practices matched the no-logs policy guarantees.

RAM-only servers wipe data on reboot

Surfshark's infrastructure runs entirely on RAM-only servers. Because these machines lack traditional hard drives, all temporary operational data is wiped clean the moment a server reboots or powers down.

Part of a pattern of audits

Part of a pattern of audits

This is not Surfshark's first independent review. Last year the provider cleared an independent audit with Deloitte, following an earlier review that verified its first no-logs audit years ago.

Audits show a point in time only

An audit provides a point-in-time assessment. It proves that on the days KPMG tested the network, configurations complied with stated policies. It cannot monitor changes an engineering team might make months later.

Audits are not a complete privacy shield

An audit does not guarantee absolute anonymity or turn a VPN into a magic shield against online fingerprinting, account tracking or malware. But routine testing remains the gold standard for consumer privacy.

Public findings let users verify claims

When providers make full audit findings public, users can verify that their personal internet traffic is not quietly sitting in a log file. The full KPMG audit report is available for review.

The takeaway

KPMG audited Surfshark's servers and confirmed the VPN provider does not store browsing histories, IP addresses, connection timestamps or outgoing traffic.

Read the original on TechRadar

How we make summaries

React

Sign in to react and comment.

Comments (0)

Life is short. Keep it sweet. Respect others' opinions and be kind!

    Recommended next

    More decks on surfshark and related topics.