Is AirVPN safe? No-logs promises, Italian law and the missing audit
Privacy and jurisdiction 4.5/10 and security 5.0/10 (segment medians 2.7 and 2.1). No red flag in our data. Independent no-logs audit: ✕ No.
In 10 seconds
- Open-source apps
- Kill switch
- Jurisdiction in 14 Eyes
Privacy
- Jurisdiction
- Italy, 14 Eyes
- Legal entity
- AirVPN di Paolo Brini (Air di Paolo Brini), VAT IT03297800546, REA PG-279011
- No-logs policy
- Yes traffic/IPs not inspected, logged or stored on mass storage
- Data retention
- connection data in RAM only for duration of service
- Shared with third parties
- No email never transmitted to third parties; payment processors hold own data
- Trackers on the website
- No technical cookies only, no third-party add-ons
What the privacy policy says is collected
Red ✕: collected. Green ✓: not collected. Grey: the policy does not say.
- Email✕ Yes
- IP at sign-up✓ No
- Connection IP✓ No
- Session times✓ No
- BandwidthNot stated
- Device info✓ No
- App analytics✓ No
- Crash reportsNot stated
Security
- Kill switch
- Yes (yes (Eddie network lock))
- DNS leak protection
- Yes (yes (internal VPN DNS))
- Encryption
- AES-256-GCM / CHACHA20-POLY1305; 4096-bit DH and RSA
- Open-source apps
- Yes Eddie, GPLv3, GitHub/GitLab
- Two-factor sign-in
- Not stated
AirVPN protects better than most consumer VPNs, but its promises rest on its own word. VPNRadarLab gives it 4.37 out of 10 (19th place out of 377), with privacy at 4.5 and security at 5.0 against segment medians of 2.7 and 2.1. Our data shows no red flags and no public incidents.
What the policy promises and who has verified it
According to the privacy policy, traffic and IP addresses are not inspected, logged or written to disks, and connection data stays in RAM only for the duration of the session. An email address is optional, and you can pay directly with Monero or other cryptocurrencies.
The weak spot: none of this has been verified from the outside. There is no independent no-logs or security audit, no transparency report and no warrant canary. The service is run by an Italian sole proprietor (who owns it), and Italy is part of the 14 Eyes. AirVPN says it responds to requests only under EU law and does not recognise jurisdictions outside it. The policy has not been updated since December 2020. AirVPN does not claim RAM-only servers.
How the connection is protected
The open-source Eddie app (GPLv3) includes a kill switch (network lock) and routes DNS through its own servers. It runs WireGuard and OpenVPN with AES-256-GCM or ChaCha20-Poly1305 encryption, and keys rotate every 60 minutes. When OpenVPN is blocked, it can be tunnelled over SSH, SSL or Tor. There is no native iOS app; WireGuard or OpenVPN must be configured manually. There is no multi-hop, and the service says nothing about two-factor login.
Who it suits
AirVPN is a good fit for everyday privacy and torrenting. If you want a no-logs policy verified by an audit, check the VPNs with independent audits. Its terms bar residents of Italy from using the service.