Is AzireVPN safe? Logging policy, audits and jurisdiction
Privacy and jurisdiction 7.5/10 and security 4.6/10 (segment medians 2.7 and 2.1). No red flag in our data. Independent no-logs audit: ✓ Yes.
In 10 seconds
- Independent no-logs audit: ✓ Yes
- RAM-only servers
- Warrant canary
- Kill switch
- Jurisdiction in 14 Eyes
Privacy
- Jurisdiction
- Sweden, 14 Eyes
- Legal entity
- Malwarebytes Inc.
- No-logs policy
- Yes
- Data retention
- purpose-based; free bandwidth data 30 days
- Shared with third parties
- service providers; no sale for money; cookies may count as sharing
- Trackers on the website
- Yes targeting cookies from ad partners on Malwarebytes site
What the privacy policy says is collected
Red ✕: collected. Green ✓: not collected. Grey: the policy does not say.
- Email✓ No
- IP at sign-upNot stated
- Connection IP✓ No
- Session timesNot stated
- Bandwidth✕ Yes
- Device info✕ Yes
- App analytics✓ No
- Crash reportsNot stated
Security
- Kill switch
- Yes (yes (always-on))
- DNS leak protection
- Not stated
- Encryption
- WireGuard (ChaCha20)
- Security audits
- Yes
- Open-source apps
- GitHub linked (repo not checked)
- Two-factor sign-in
- Not stated
On privacy, AzireVPN scores 7.5 out of 10, with a segment median of 2.7, and our data shows no red flags for it. An account is created using an account number, with no email, phone number or card required. The servers run without disks, the warrant canary is updated monthly, and there is a transparency report. We found no public incidents involving leaks.
What is known about the logs
An independent no-logs audit took place in 2026, but the service does not name the auditor, so the scope and methodology of the audit cannot be verified from the outside. You can compare it with other audited services in the ranking of VPNs with a no-logs audit. According to the policy, the connection IP is not collected, and there is no VPN telemetry. The app version, license ID and WireGuard public key are retained. The policy does not say whether session times and the IP at registration are stored.
Whose policy is this
Here is the main caveat. The legal pages of AzireVPN redirect to the Malwarebytes website, and the policy is written for Malwarebytes Privacy VPN, with AzireVPN not mentioned in it. The jurisdiction is formally Sweden, which is in the 14 Eyes alliance, while the policy of the American company Malwarebytes Inc. allows disclosure of data upon a lawful request from authorities. The Malwarebytes website uses partner advertising cookies. You can read more about the company structure on the page who owns AzireVPN.
Connection security
The kill switch is always on, and WireGuard encryption uses ChaCha20. Security scores 4.6 out of 10: the service does not say whether it protects against DNS leaks, whether there is two-factor login, or whether there is a bug bounty program. The website has a link to GitHub, but we did not check whether the app code is open.