INDEX / DIRECTORY / NORDVPN / DIGITAL

NordVPN DIGITAL

DIGITAL INFRASTRUCTURE AUDIT UPDATED 2026-06-17
Digital Score 0.00 /10 E NordVPN - BDS-1000 130
Digital 0.00

Evidence-only forensic audit. Scoring happens downstream - see the main dossier for the composite assessment.

NordVPN - Digital Audit

Enterprise Technology Stack & Vendor Relationships

NordVPN uses DataPacket Ltd. (UK-incorporated, founded 2014) as its dedicated server provider across all global locations, with DataPacket providing over 2,000 servers to NordVPN across 67 data center locations and initial orders beginning in 2018 1. NordVPN migrated to 10GE uplinks exclusively in 2020 1. NordVPN’s Israeli servers - approximately 20 RAM-only servers in Tel Aviv - are physically housed at the Bareket Data Center, 12 Bareket St / Ha Shacham 40, Petah Tiqva, Israel, operated by Bezeq International Ltd. 234. DataPacket’s Tel Aviv page explicitly states that its dedicated servers are located in the Bareket data center at Ha Shacham 40, Petah Tiqva 2. DataPacket’s Tel Aviv point-of-presence (IP 169.150.202.193) lists Interhost Networks Ltd. (AS61102 / AS213391, Israeli-domiciled, founded 2005, HQ Yaldei Teheran 10, Rishon Leziyon, Israel) as its sole upstream provider 256. Interhost Networks describes itself as the only multihomed hosting provider in Israel connected to every ISP and holds an ISP license from the Israeli Ministry of Communications 256. Searches for NordVPN combined with Palantir, Check Point (as vendor), Wiz, SentinelOne, CyberArk, NSO, Nice, Verint, or comparable named Israeli-origin vendors returned no confirmed vendor relationships 7. The NordLayer + Check Point documentation describes NordLayer being configured as an IPsec peer into a Check Point customer’s environment - NordLayer is the service being integrated; Check Point is the customer, not a vendor 7. No Nord Security Impact Reports (2023, 2024, 2025) vendor or supplier annexes were accessible for text extraction 89. Nord Security announced a strategic B2B cybersecurity partnership with CrowdStrike (US-headquartered) in 2025 to integrate the Falcon platform with NordLayer 10. DataPacket Ltd. is confirmed as UK-incorporated (9 Coldbath Square, London EC1R 5HL, founded 2014) with approximately $6.7M revenue and 51–200 employees per public profiles, with no Israeli beneficial ownership or investors identified 1112.

Surveillance, Biometrics & Retail Technology

No evidence was identified of NordVPN or Nord Security using facial recognition, biometric identification, behavioural analytics, gait analysis, or retail surveillance technologies of Israeli origin 131412151617181920212223242526272829303189323334353637111210738345639404142434445464748495051[^52][^53]. No evidence identified of Israeli-origin surveillance or biometrics technology reaching NordVPN indirectly via third-party platform providers, managed security services, or bundled enterprise suites 17. NordVPN is a consumer VPN service providing encrypted tunnel routing, threat protection (malware blocking), and dark web monitoring; no disclosed function involves collection or processing of user biometric or behavioural data beyond standard VPN connection metadata 48[^53].

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

NordVPN maintains approximately 20 RAM-only servers in Tel Aviv, Israel, confirmed via official server list and the NordVPN server selection page 1314. The Israeli servers are hosted at Bezeq International’s Bareket Data Center in Petah Tiqva 234. Bezeq International Ltd. is Israel’s largest telecommunications operator and a subsidiary of Bezeq The Israeli Telecommunication Corp. Ltd. - a state-controlled telecom monopoly 234. Bezeq International was listed as one of seven expected bidders for the Israel Defense Ministry’s NIS 1 billion data center consolidation project in 2016, competing alongside Israel Aerospace Industries, Elbit Systems, Motorola Israel, Rad-Bynet Group, ECI Telecom, and Rafael Advanced Defense Systems 38. Whether Bezeq International was awarded any portion of this tender and whether it covers the Bareket Data Center facility is unconfirmed 38. Traffic to and from NordVPN’s Israeli servers routes through Interhost Networks Ltd.’s Israeli network infrastructure as the sole upstream provider for DataPacket’s Tel Aviv point-of-presence 256. The Bareket Data Center holds ISO 22301, ISO 27799, ISO 9001, ISO 27001, and ISO 27017 certifications per DataPacket’s infrastructure page 2. The Israeli server traffic chain (NordVPN → DataPacket → Bezeq Bareket → Interhost) routes through Israeli domestic network infrastructure; no evidence confirms that this traffic transits through AWS Israel (il-central-1), Google Cloud Israel (me-west1), or Microsoft Azure Israel regions 25. No evidence identified of NordVPN or Nord Security participating in Project Nimbus or any comparable Israeli government cloud initiative; searches of Israeli government procurement portals returned no NordVPN, Nord Security, or Tefincom contract awards 2138. DataPacket Ltd. is confirmed as UK-incorporated with no Israeli beneficial ownership or investors identified 1112. Nord Security reported reaching 100% renewable energy in offices and colocation services in 2025, confirmed in Business Insider coverage, which includes colocation services used by NordVPN’s Israeli servers 35.

Defence, Intelligence & Security Sector Technology Relationships

No verified contracts, partnerships, or service agreements between NordVPN/Nord Security and the Israeli Ministry of Defence, IDF, Mossad, Shin Bet, or other Israeli state security bodies were identified 2138. Bezeq International was a named bidder for the IDF’s NIS 1 billion data center consolidation tender in 2016 alongside Israeli defense contractors including Israel Aerospace Industries, Elbit Systems, and Rafael Advanced Defense Systems; whether Bezeq International won any portion of this tender and whether it covers the Bareket Data Center facility is unconfirmed 38. No verified development, sale, licensing, or maintenance of offensive cyber capabilities, zero-day exploit tools, or digital weapons systems by NordVPN or Nord Security was identified 12. NordVPN’s commercially available VPN infrastructure is consumer-grade encrypted tunnel routing with no publicly reported or documented deployment of NordVPN technology for military, intelligence, or law enforcement surveillance applications within Israel or occupied territories 121920.

AI, Algorithmic & Autonomous Systems

Nexos.ai is an enterprise AI orchestration platform launched in January 2025 by Tomas Okmanas and Eimantas Sabaliauskas (Nord Security co-founders) as a separate company, raising €30M Series A from Index Ventures, Evantic Capital, Creandum, and Dig Ventures 2728. Nexos.ai is not part of Nord Security 2728. Ofer Ben-Noon, co-founder of Talon Cyber Security (Israeli cybersecurity firm acquired by Mozilla in 2024), is listed as a Nexos.ai angel investor 44. Talon Cyber Security is an Israeli-domiciled company 44. All public reporting describes Nexos.ai as an enterprise AI governance platform for general corporate use; no Israeli state sector, defense ministry, or IDF customer references were found 2728. No verified provision of AI, machine learning, computer vision, or autonomous decision-support systems by NordVPN or Nord Security to Israeli state, military, or security bodies was identified 272844. No publicly reported instances where NordVPN’s AI models or platforms have been trained on, or provided access to, civilian population data, intercepted communications, or surveillance-derived datasets originating from Israel or occupied territories were identified 2728.

Technology Ecosystem & R&D Footprint

No research and development facilities, engineering offices, innovation labs, or accelerator programmes operated by NordVPN or Nord Security within Israel were identified 242529. Tesonet (the Lithuanian business incubator and holding vehicle co-founded by Tomas Okmanas, distinct from Nord Security) lists three investments on its portfolio page with HQ country “Israel, Tel Aviv”: (1) 2025, Sectors: AI Infrastructure, Business Services; (2) 2025, Sector: Cybersecurity; (3) 2026, Sector: SaaS, Cybersecurity, Business Services, AI Infrastructure; company names are withheld on the portfolio page 2443. Tesonet lists a 2026 investment in “Business Software, Digital Infrastructure, Defence Tech” headquartered in Amsterdam; a separate 2026 “Private Equity” investment with HQ Amsterdam is also listed, with company names not disclosed and whether either entity serves Israeli defense ministry end-users unconfirmed 24. Tesonet’s portfolio includes Hostinger, Oxylabs, Decodo, and Mediatech alongside the Israeli investments 2425. Tesonet is not the same legal entity as Nord Security/Cyberspace B.V., though both share co-founders Okmanas and Sabaliauskas 2425. No acquisitions of Israeli-origin technology companies by NordVPN or Nord Security were identified 2445. No significant patent portfolios, licensing agreements, or co-development arrangements between NordVPN/Nord Security and Israeli-domiciled entities or research institutions were identified 89.

Civil Society Scrutiny & Regulatory History

Searches of the UN OHCHR database of business enterprises involved in settlement activity returned no results for NordVPN, Nord Security, or Tefincom 2146. Targeted searches of whoprofits.org returned no matches for NordVPN, Nord Security, or Tefincom 21. Targeted searches of investigate.afsc.org returned no matches 21. Targeted searches of dontbuyintooccupation.org returned no matches 21. NordVPN does not appear in the Kairos Response “Companies Within Israel Settlements” database, which lists Bezeq, Partner Communications, HP Enterprise, and Paz Oil as settlement-linked telecom and technology providers 46. The OECD Watch complaints database contains no NordVPN- or Nord Security-specific complaints 21. Searches of NGO letter databases (Amnesty International, HRW, Access Now, B’Tselem, Who Profits), OECD NCP complaints, and legal databases returned no NordVPN-specific notices regarding Israeli server operations post-ICJ Advisory Opinion (July 2024) or post-ICC arrest warrants (November 2024) 21. Two US class actions were identified: Peterson v. NordVPN S.A. et al. (Colorado District Court, filed November 2024) and Kandeh v. NordVPN (NY FTC-style complaint, March 2025); both concerns auto-renewal and billing practices, and neither contains Israeli infrastructure, settlement nexus, or defense relationship claims 2137. NordVPN’s nonprofit program donated 3,572 VPN accounts to 360+ NGOs across 68 countries in 2025 (total value €89,000+); confirmed recipients include AccessNow (~$55,000, 2024), Open Rights Group, EDRi, Privacy Salon, Tech to the Rescue, Internews, Amnesty International, Human Rights Watch, Health in Harmony, HEAL Trafficking, TRIAL International, OpenMedia, and UNHCR; cross-referencing against Who Profits and Don’t Buy Into Occupation databases returned no positive matches for these recipients 31333435. No organized BDS campaigns specifically targeting NordVPN for Israeli technology provision or settlement operations were identified in the public record; one Reddit community (r/BoycottIsrael) discussed NordVPN’s Israeli servers and resale citing an unverified MintPress reference, but no major BDS organization named NordVPN in a campaign 51. NordVPN’s monthly transparency report for January 2024 recorded 35 government institution inquiries globally with 0 disclosures of user information; zero National Security Letters, gag orders, or binding warrants received; reports are aggregated globally, not country-specific 1920. Nord Security reported reaching 100% renewable energy in offices and colocation services, confirmed in Business Insider coverage 35.

Controlling Principals

Tomas Okmanas and Eimantas Sabaliauskas are Lithuanian nationals; no evidence of IDF, Unit 8200, Talpiot, or Israeli intelligence ties was identified; both have documented Lithuanian and European startup and tech backgrounds 262950. Birgir Már Ragnarsson (Managing Partner, Novator Partners) joined the Nord Security board per the 2022 $100M round announcement 16; Novator Partners is an investment vehicle with no Israeli defense industry or settlement-NGO affiliations identified for Ragnarsson 16. Chandler Reedy (Warburg Pincus) joined the board per the 2023 round announcement; no Israeli defense industry affiliations identified for Reedy 1740. Warburg Pincus has a Senior Adviser (Omer Cygler) focused on Israeli technology investments, active since August 2023, who has invested in Claroty, Personetics, Trax, and MAX (Leumi Card) 40. The $100M Nord Security investment was attributed to Warburg Pincus Global Growth fund; no public disclosure confirms Israeli institutional LPs in that specific fund vehicle 40. Nord Security’s disclosed investors include Warburg Pincus (US), Novator Partners (Iceland), Burda Principal Investments (Germany), General Catalyst (US), and individual angels including Nikesh Arora (Palo Alto Networks), Avishai Abrahami (Wix), Sebastian Siemiatkowski (Klarna), and Nir Zohar (Wix) 17184445. No Israeli-domiciled institutional investors or Israeli nationals holding ≥10% stakes were identified 17184445. Stalwart Holding B.V. (Dutch holding entity, KVK 81200374) appears in Nord Security’s corporate structure per the NY complaint; Bloomberg LEI data shows the Direct Parent and Ultimate Parent fields for Stalwart Holding are redacted with “Parent Information Not Provided / Non-Disclosure Reason: NATURAL_PERSONS” and the individual beneficial owners behind Stalwart Holding are not publicly visible 42. Ofer Ben-Noon, co-founder of Talon Cyber Security (Israeli cybersecurity company, acquired by Mozilla 2024), is a personal angel investor in Nexos.ai; this is a personal investment by a natural person, not a corporate relationship between Nexos.ai and Talon 44.

Settlement Nexus

NordVPN operates servers in Tel Aviv, Israel (within Israel’s pre-1967 borders); no evidence was identified of NordVPN operating servers in Israeli settlements in the West Bank, East Jerusalem, or Golan Heights specifically; the Tel Aviv server location is within Israel’s internationally recognized territory 13142. Searches for NordVPN authorized resellers or distributors in Israeli settlements (West Bank, East Jerusalem, Golan Heights) returned no results; NordVPN sells direct-to-consumer online with no physical retail presence in settlements confirmed 41. One Reddit post in r/BoycottIsrael references an unverified allegation claiming NordVPN is sold through an Israeli online reseller; this is an unverified allegation with no primary source confirming the claim retrieved 51.

End Notes

Footnotes

  1. https://www.datapacket.com/case-study/nordvpn ↩ ↩2 ↩3 ↩4 ↩5 ↩6

  2. https://www.datapacket.com/datacenters/tel-aviv ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8 ↩9 ↩10 ↩11 ↩12 ↩13

  3. https://www.datacentermap.com/israel/tel-aviv/12-bareket-st ↩ ↩2 ↩3 ↩4

  4. https://www.datacenters.com/providers/bezeq-international-bi/data-center-locations ↩ ↩2 ↩3 ↩4

  5. https://interhost.co.il ↩ ↩2 ↩3 ↩4 ↩5

  6. https://bgp.tools/as/213391 ↩ ↩2 ↩3 ↩4

  7. https://help.nordlayer.com/docs/site-to-site-check-point ↩ ↩2 ↩3 ↩4

  8. https://res.cloudinary.com/nordsec/image/upload/v1750945803/nord-security-web/corporate/reports/Nord_Security_ESG_-report_2024_lower-size.pdf ↩ ↩2 ↩3

  9. https://a.storyblok.com/f/95676/x/fa2652ccbe/nord-security-esg-report-2025.pdf ↩ ↩2 ↩3

  10. https://www.crowdstrike.com/en-us/press-releases/crowdstrike-nord-security-announce-strategic-partnership-redefine-smb-cybersecurity ↩ ↩2

  11. https://uk.linkedin.com/company/datapacketcom ↩ ↩2 ↩3

  12. https://rocketreach.co/datapacketcom-profile_b4053496fc1c087c ↩ ↩2 ↩3

  13. https://www.mynewsdesk.com/vpn/pressreleases/nordvpn-server-list-complete-overview-on-nordvpn-server-locations-and-cities-3253021 ↩ ↩2 ↩3

  14. https://nordvpn.com/servers/israel ↩ ↩2 ↩3

  15. https://www.netify.ai/resources/ips/169.150.226.32 ↩

  16. https://www.cnbc.com/2022/04/06/nordvpn-nord-security-just-became-lithuanias-second-tech-unicorn.html ↩ ↩2 ↩3

  17. https://warburgpincus.com/2023/09/28/nord-security-raised-another-100m-investment-round ↩ ↩2 ↩3 ↩4

  18. https://nordsecurity.com/blog/nord-security-raised-another-100m-investment-round ↩ ↩2 ↩3

  19. https://www.safetydetectives.com/news/nordvpn-replaces-warrant-canary-with-transparency-reports-to-improve-transparency ↩ ↩2 ↩3

  20. https://nordvpn.com/blog/nordvpn-introduces-transparency-reports ↩ ↩2 ↩3

  21. https://truthinadvertising.org/wp-content/uploads/2025/05/Kandeh-v-NordVPN.pdf ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8 ↩9 ↩10

  22. https://www.pcmag.com/news/nordvpns-parent-company-is-merging-with-vendor-surfshark ↩

  23. https://surfshark.com/blog/surfshark-merges-with-nord-security ↩

  24. https://tesonet.com/portfolio ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7

  25. https://en.wikipedia.org/wiki/Tesonet ↩ ↩2 ↩3 ↩4

  26. https://www.weforum.org/stories/authors/tom-okman ↩ ↩2

  27. https://techcrunch.com/2025/01/17/nord-security-founders-launch-nexos-ai ↩ ↩2 ↩3 ↩4 ↩5 ↩6

  28. https://finance.yahoo.com/news/nord-security-founders-launch-nexos-ai-095800648.html ↩ ↩2 ↩3 ↩4 ↩5 ↩6

  29. https://nordsecurity.com/leadership ↩ ↩2 ↩3

  30. https://nordsecurity.com/about-us ↩

  31. https://nordsecurity.com/corporate-responsibility ↩ ↩2

  32. https://internews.org/internews-and-nordvpn-launch-partnership-to-strengthen-digital-safety-for-journalists-and-at-risk-communities ↩

  33. https://nordvpn.org/nonprofit ↩ ↩2

  34. https://www.accessnow.org/financials ↩ ↩2

  35. https://markets.businessinsider.com/news/stocks/nord-security-reaches-100-renewable-energy-in-offices-and-colocation-services-doubles-nonprofit-support-1036221252 ↩ ↩2 ↩3 ↩4

  36. https://nordsecurity.com/privacy-notice-for-external-referrers ↩

  37. https://www.classaction.org/media/peterson-v-nordvpn-sa-et-al.pdf ↩ ↩2

  38. https://www.datacenterdynamics.com/en/news/major-israeli-military-data-center-contract-up-for-grabs ↩ ↩2 ↩3 ↩4 ↩5 ↩6

  39. https://nordsecurity.com/press-area ↩

  40. https://warburgpincus.com/2023/08/07/warburg-pincus-welcomes-omer-cygler-as-senior-advisor-to-its-technology-group ↩ ↩2 ↩3 ↩4

  41. https://nordvpn.com/reseller-program ↩ ↩2

  42. https://lei.bloomberg.com/leis/view/213800TPXSK6A2YKNV81 ↩ ↩2

  43. https://tesonet.com/blog/six-new-ai-investments ↩ ↩2

  44. https://www.linkedin.com/posts/tokmanas_its-time-to-shed-light-on-something-that-activity-7285964832195964928-zFwM ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7

  45. https://tracxn.com/d/companies/nordsecurity/__eF7C2HM7RxS1GCOJqUCkxdN_V1W9S1bPV446EBRklN4/funding-and-investors ↩ ↩2 ↩3 ↩4

  46. https://www.kairosresponse.org/companies_in_umc_investments.html ↩ ↩2 ↩3

  47. https://www.fitchratings.com/research/corporate-finance/fitch-assigns-nord-security-cyberspace-bv-bb-first-time-idr-outlook-stable-08-09-2025 ↩

  48. https://en.wikipedia.org/wiki/NordVPN ↩ ↩2

  49. https://en.wikipedia.org/wiki/Surfshark_B.V. ↩

  50. https://en.wikipedia.org/wiki/Tomas_Okmanas ↩ ↩2

  51. https://www.reddit.com/r/BoycottIsrael/comments/1j2q3v8/nordvpn_being_sold_through_an_israeli_reseller/ ↩ ↩2 ↩3