Transparency Report
Every Legal Request We Get,Reported Publicly
We publish how many legal requests we receive, what kind, and what we were able to hand over. Because activity logs are never generated, the honest answer to almost every request is: there's nothing to give.
Published every reporting period
Zero activity logs disclosed, ever
No warrant canary needed
Current reporting period
Zero User Activity Logs Disclosed
In every reporting period to date, requests asking for browsing history, connection logs or IP-to-activity records have been met with the same accurate answer: that data doesn't exist on our systems. Where we do hold minimal account information — like an email on file — we disclose only what a valid, reviewed legal request actually requires.
See request breakdown
By category
What Kinds of Requests We Receive
Not every request is the same — here's how the main categories are handled.
Government Requests
Formal requests from government bodies for user data. Reviewed by legal counsel; only complied with when valid and enforceable.
Court Orders
Legally binding orders from a court. Even when enforceable, limited to whatever minimal account data we actually hold.
DMCA / Copyright Notices
Notices alleging copyright infringement over the VPN's IP address. Since we don't log traffic, we can't identify which user was involved.
Law Enforcement Inquiries
Informal inquiries without legal force. These are not complied with unless backed by valid legal process.
Account & Billing Requests
Requests tied to a specific account's billing details, not activity — handled case by case with legal review.
Requests for Activity Logs
The most common ask, and the simplest to answer: this data is never generated, so there is nothing to disclose.
Process
How We Handle a Legal Request
Every request goes through the same review, regardless of who sends it.
Step 01
Legal review
Our legal counsel checks whether the request is valid, enforceable, and properly scoped before anything else happens.
Step 02
Check what data exists
Because activity logs aren't generated, most requests for browsing or connection data simply have nothing to fulfill.
Step 03
Logged & reported
Every request, regardless of outcome, is counted and included in the next published transparency report.
A common question
Why We Don't Need a Warrant Canary
A warrant canary is a workaround for services that can't legally confirm receiving a gag order — its disappearance is meant to be a silent signal. We publish this report on a regular schedule instead, and if it were ever to stop being updated, that itself would be the signal. The simpler reason it works for us: there's no bulk trove of user activity a gag order could even be used to compel.
For context
What Data We Actually Have to Give, If Compelled
Realistically: the email address on your account, and billing details held by our payment processor, not us directly. That's the full extent of what a valid, enforceable order could ever compel — because browsing activity, connection timestamps and IP-to-session records are never generated in the first place.
See the full no-logs policy →
Standing commitments
What We Commit to, Every Reporting Period
Published on Schedule
Every reporting period, without exception, whether the numbers are flattering or not.
Legal Review of Every Request
Nothing is disclosed without counsel confirming the request is valid and properly scoped.
No Activity Logs, Period
The underlying reason most requests can't be fulfilled — the data never exists to hand over.
Every Category Counted
Government requests, court orders, DMCA notices and informal inquiries are all reported separately.
Consistent Methodology
The same counting and review process every period, so numbers are actually comparable over time.
Plain-Language Reporting
No legal jargon standing between you and understanding what actually happened.
Questions about this report?
If anything here isn't clear, or you represent a legal body with a request, reach out directly.
Frequently Asked Questions About This Report
On a regular, published schedule — not only when it's convenient. Every reporting period is included, regardless of what it shows.
No — because that data is never generated, it has never existed to disclose, in any reporting period to date.
Any such request would still be reflected in the total counts for that category, within whatever limits the law allows us to disclose about its existence.
No. Every request goes through legal review first, and informal or improperly scoped requests are not complied with.
Theno-logs policyexplains what we do and don't collect. This report shows the real-world result of that policy: what gets requested, and what — if anything — we're actually able to hand over.
A Policy You Can Actually Verify
Read the numbers, not just the promise, and see why there's nothing to find in the first place.
Download ASTRO VPN