Military Audit: NordVPN

Direct Defence Contracting & Procurement

No public evidence identified of any contract, tender award, framework agreement, or memorandum of understanding between NordVPN or its parent Nord Security and the Israel Ministry of Defense (IMOD), the Israel Defense Forces (IDF), the Israel Prison Service, the Israel Border Police, or any other Israeli state security body; this absence was checked against the SIBAT Defense and HLS Directory landing page maintained by the Israel Ministry of Defence Directorate of Defense Export Controls ¹, against the Who Profits company database, where a direct site search for “NordVPN” returned zero company-profile results and whose entry format was independently confirmed via a sample company profile ²³, and against the AFSC Investigate corporate-accountability database ⁴. No public evidence identified of NordVPN or Nord Security appearing in Israeli defence exhibition catalogues or procurement registries. No public evidence identified of press releases or trade-press coverage announcing defence cooperation, joint ventures, or partnership agreements between Nord Security and any Israeli defence entity.

Dual-Use Products & Tactical Variants

No public evidence identified of a militarised, tactical, or mil-spec NordVPN or NordLayer product variant of any kind. No public evidence identified of any NordVPN or NordLayer product publicly marketed to, or confirmed as sold to, Israeli security forces specifically. No public evidence identified of export licence applications, end-user certificates, or export-control reviews tied to NordVPN sales to Israeli defence or security end-users.

Heavy Machinery, Construction & Infrastructure

This category is not applicable to the target’s product line, which consists of software and VPN subscription services rather than physical plant or equipment. No public evidence identified of NordVPN equipment, vehicles, or machinery associated with construction, demolition, or infrastructure activity in occupied territories. No public evidence identified of construction or engineering contracts of any kind attributable to NordVPN or Nord Security.

Supply Chain Integration with Defence Primes

No public evidence identified of NordVPN or Nord Security supplying components, sub-systems, or manufacturing services to Elbit Systems, Israel Aerospace Industries, Rafael Advanced Defense Systems, or IMI Systems/Elbit Land; direct name-pair searches returned only general Israeli defence-industry news unconnected to NordVPN. No public evidence identified of joint development, co-production, or technology-transfer agreements between Nord Security and any Israeli defence firm.

Logistical Sustainment & Base Services

This category is not applicable to the target’s business model. No public evidence identified of NordVPN providing catering, transport, fuel, waste management, facilities maintenance, or telecommunications support services to IDF bases, training facilities, or detention centres in the West Bank, Golan Heights, East Jerusalem, the Negev, or elsewhere. No public evidence identified of shipping, freight, or port-handling contracts, as NordVPN is a software/subscription service with no freight or logistics operations.

Munitions, Weapons Systems & Strategic Platforms

No public evidence identified of any role, direct or indirect, by NordVPN or Nord Security in the manufacture, supply, or integration of small arms, armoured vehicles, drones, naval vessels, munitions, missile-defence components (Iron Dome, David’s Sling, Arrow), fighter aircraft, tanks, or warships. This category is treated as not applicable under the domain-boundary test, since NordVPN’s software is general-purpose consumer and enterprise privacy tooling rather than a product purpose-built for kill-chain, targeting, or weapons-integration effects, and no evidence surfaced even under broad searching for any such connection.

Export Licensing, Regulatory & Legal History

On 27 March 2019, NordVPN received a demand from Roskomnadzor, Russia’s media and communications regulator, requiring VPN providers to comply with Russian content-blocking rules; NordVPN refused and announced it would decommission all Russian-based servers, completing the withdrawal on 1 April 2019 ⁵⁶. This regulatory posture continued into 2024, when reporting described Russia separately blocking NordVPN’s access via a further Roskomnadzor action, indicating the adversarial regulatory relationship persisted ⁷. This episode involves Russia rather than Israel and is included only as a verified instance of the company’s general posture toward state compliance demands, not as a Military Israel finding. No public evidence identified of any export licence grant, denial, suspension, or revocation specifically concerning NordVPN sales to Israeli military or security end-users, in any jurisdiction. No public evidence identified of arms-embargo or sanctions-compliance investigations or enforcement actions concerning NordVPN and Israel-related defence trade. No public evidence identified of any court proceeding, judicial review, or legal challenge concerning NordVPN’s defence supply relationship with Israel specifically.

Civil Society Scrutiny & Documented Investigations

Institutional and UN-linked databases. No NordVPN, Nord Security, or Tesonet entry was identified in the OHCHR Business & Human Rights settlement database landing page or its September 2025 update announcement ⁸⁹. An OpenSanctions structured mirror of the same OHCHR settlement dataset likewise showed no cybersecurity or VPN entity, checked against its “recent additions” listing ¹⁰; the underlying 30 June 2023 OHCHR update PDF could not itself be parsed as text by the research tool used, so this specific absence rests on the database landing page and the OpenSanctions mirror rather than a direct read of that document ¹¹. No NordVPN or Nord Security mention was located in searches of Francesca Albanese’s Special Rapporteur report “From economy of occupation to economy of genocide,” A/HRC/59/23, dated 2 July 2025, or its full advance-edited PDF, though a complete paragraph-by-paragraph read of the source document was not completed ¹²¹³. No listing for Nord Security or NordVPN was found in the AFSC Investigate database ⁴ or in the SIBAT Defense and HLS Directory landing page ¹.

Boycott-adjacent commentary. A boycott-advisory site, Masjid Al-Aqsa’s “BDS List,” classifies NordVPN as “boycott safe,” stating there is no verified evidence of ties to Israel, while citing no primary sources for that determination ¹⁴. A separate blog post canvassing “NordVPN and Israel” rumours concludes that no formal evidence links NordVPN to Israel, discussing unrelated NSO Group/Pegasus reporting only as general context rather than evidence against NordVPN ¹⁵. No public evidence identified of any organised, sourced boycott or divestment campaign - a BDS Movement named list, or an institutional pension-fund or sovereign-wealth-fund divestment decision - specifically targeting NordVPN on defence-sector grounds. No public evidence identified of any NordVPN or Nord Security public statement, policy change, contract termination, or end-use monitoring commitment issued in response to civil society pressure regarding a defence supply chain relationship with Israel. By comparison, the only documented state-conflict-related operational action identified for Nord Security in this research is the 2019 Russia server withdrawal following the Roskomnadzor demand, which recurred in 2024 reporting on Russian-side blocking ⁵⁶⁷; no equivalent dated, sourced NordVPN statement or operational action specific to the Israel-Gaza conflict since October 2023 was identified.

Ownership and principal attribution. Nord Security describes its corporate history on its own corporate site ¹⁶ and publishes a leadership roster of sixteen named executives plus three co-founders, with no biographical detail on prior employers, military service, or industry affiliations disclosed for any individual ¹⁷. Nord Security originated as a venture built by Tesonet ¹⁸. No public evidence identified of founders Tomas Okmanas or Eimantas Sabaliauskas holding defence-industry directorships or defence-board roles, or making public co-belligerency statements regarding Israel. Novator Ventures and Warburg Pincus are named minority institutional investors in Nord Security, Novator since an April 2022 funding round and Warburg Pincus since a September 2023 round that valued the company at $3 billion, with Warburg Pincus’s own announcement explicitly characterising its stake as a “minority investment” ^19202122. No public evidence identified of Warburg Pincus’s or Novator Ventures’ exact percentage shareholding in Nord Security, leaving the question of whether either meets a controlling-principal ownership threshold unresolved. An indirect and attenuated link, flagged rather than asserted as a Nord Security corporate act, arises because Warburg Pincus’s majority-owned portfolio company Allied Universal acquired G4S in 2021, and G4S has been separately documented by the Business & Human Rights Resource Centre and other civil-society sources as having provided equipment or services at Israeli checkpoints, including Erez, prior to its 2023 divestment from Israel ²³²⁴²⁵; this link runs through an outside minority investor’s separate portfolio company and is not an act of Nord Security or its founders. No public evidence identified of General Catalyst’s or Novator Ventures’ direct investments in Israeli defence primes such as Elbit Systems, Rafael, or Israel Aerospace Industries.

Settlement nexus and infrastructure. No public evidence identified of any NordVPN licensee, franchisee, reseller, or distributor operating in West Bank, East Jerusalem, or Golan Heights settlements; NordVPN is sold as a direct-to-consumer digital subscription through its own website and app-store listings, with no retail or settlement-mall distribution model identified. NordVPN maintains a commercially marketed VPN server location and exit node attributed to Israel, including a Tel Aviv location, as part of its standard global server network available to any subscriber worldwide, though no evidence distinguishes physical racked servers from virtual, software-defined locations, and no evidence was found of any Israeli government contract, data-request compliance regime, or state order affecting this infrastructure specifically ²⁶. NordVPN separately operates an emergency VPN access programme for at-risk users ²⁷ and a broader nonprofit discount programme for organisations working in human rights, freedom of speech, cybersecurity, and education, summarised in a 2025 year-end programme recap ²⁸²⁹; no comprehensive, current list of beneficiary organisations was located, so no eligibility pattern or any specific Israel- or Palestine-related beneficiary or exclusion could be confirmed.

End Notes