Surfshark

Surfshark operates as a separate product from NordVPN but shares corporate ownership under Nord Security after the 2022 merger. Using both as independent privacy bets doesn't deliver the organizational diversity most users assume. Dutch jurisdiction carries GDPR data-protection obligations, but — contrary to a common assumption — no mandatory data-retention law currently compels logging: the Dutch national retention law was struck down in 2015. An April 2026 court order gave the no-logs claim its first real-world test, and it held.

Deloitte no-logs audits (2023, 2025) publish summary reports publicly, with the full ISAE 3000 report accessible to account holders only. Cure53 (2018/2021/2026) and SecuRing (2025 x2) reports cover broader security/infrastructure scope and are fully public — no account needed — a distinction the prior evidence lumped together incorrectly. Quarterly transparency reports, launched August 2024, cover government and legal data requests; the warrant canary is being retired in favor of this more detailed reporting rather than kept running alongside it indefinitely. Apps are closed source. The Nord Security merger in 2022 is the structural fact that changes provider-diversity calculations: Surfshark and NordVPN share corporate ownership while maintaining separate infrastructure. Netherlands jurisdiction means GDPR data-protection rules apply, but no mandatory data-retention law is currently in force — the Dutch 2009 retention act was struck down by a Hague court in 2015; Surfshark's own Trust Center confirms this directly. Worth noting separately: Surfshark's Terms of Service are governed by British Virgin Islands law, not Dutch law — a holdover from before the company's move to the Netherlands, affecting contract disputes rather than data-retention obligations. In April 2026, an Amsterdam District Court warrant tested the no-logs claim in practice: Surfshark disclosed only account existence and payment data, since no activity logs existed to hand over.

Surfshark ships MultiHop as a standard feature on all paid plans — not an add-on or manual configuration exercise. The tension is in obfuscation: Camouflage Mode only applies to OpenVPN, NoBorders Mode is a server-selection aid rather than true obfuscation, and the kill switch — like on most competitors — requires a manual toggle rather than arriving switched on.

WireGuard is default and confirmed on Windows, iOS, Android, and macOS. Linux is where Surfshark's own documentation disagrees with itself: the general Protocols page lists only Windows/iOS/Android/macOS for WireGuard, but the Everlink page states WireGuard is used 'on all platforms, including... Linux,' and a separate official guide walks through manual WireGuard setup on Linux. Treat WireGuard-in-the-native-Linux-app as ambiguously documented rather than confirmed absent — manual configuration is definitely supported either way. Dausos is Surfshark's newer proprietary protocol, but it's officially released as beta and macOS-only, so it's not yet a mature default option. Shadowsocks was discontinued in 2021 and is not available. IPv6 is not supported at all — Surfshark's tunnel handles IPv4 only, and the company's own support documentation recommends manually disabling IPv6 on your network to avoid leaks, rather than offering in-tunnel IPv6 handling. NoBorders Mode detects restricted networks and surfaces a curated list of servers more likely to connect — it doesn't obfuscate traffic itself; Camouflage Mode does that, but only for OpenVPN. Kill switch is system-level on all platforms but must be manually enabled in settings. MultiHop provides two-server routing on all paid plans — one of the few providers where this is a standard UI feature rather than a manual WireGuard configuration. No officially documented per-app kill switch.

Streaming access runs across the general server network rather than a dedicated streaming tier. Surfshark's own troubleshooting documentation tells users to switch servers or try NoBorders/Camouflage Mode when a platform is blocked — useful practical advice, but it signals access isn't uniformly guaranteed across the fleet, not a confirmed reliability claim. The February 2026 SmartDNS discontinuation closed the one path that worked without installing an app at all; older smart TVs and consoles without a native Surfshark app now need router-level setup instead.

Netflix, Disney+, BBC iPlayer, Prime Video, and Hulu are reported accessible across the general server fleet — no dedicated streaming server categories and no official platform guarantee list. Native apps exist for Fire TV and Apple TV. Surfshark's own support documentation for streaming issues recommends switching servers or trying NoBorders/Camouflage Mode when blocked, rather than promising uniform access — worth knowing before assuming every server works equally well for every platform. SmartDNS, previously the way to unblock content on devices that couldn't run a VPN app, was discontinued on February 2, 2026 due to limited demand; anyone needing that kind of app-less access now has to fall back to router-level VPN installation, a meaningfully more involved setup.

Surfshark has expanded what the subscription includes — unlimited devices, antivirus, data removal, alternative identity — while building out its infrastructure in parallel rather than ahead of the feature curve. The RAM-only rollout complete — 100% of fleet and virtual server usage are the visible signs of that sequencing.

WireGuard on all platforms. RAM-only architecture complete across entire fleet — all servers run on RAM only. Virtual server locations exist and are disclosed in the app: in certain countries the IP is local but the physical hardware is elsewhere, which can introduce latency above geographic expectation. WireGuard implementation falls outside the Deloitte audit scope. The infrastructure is functional for everyday use; the gap between the breadth of features Surfshark sells and the depth of infrastructure it has standardized is the context for understanding these gaps.

Surfshark has expanded from a VPN into a broader subscription that includes antivirus, data breach monitoring, a search engine, and a data removal service. The interface manages the width reasonably well — but the product scope has moved significantly beyond what users looking for a focused VPN tool are looking for.

Full platform coverage: Windows, macOS, Linux, iOS, Android, Fire TV, Apple TV. Browser extensions for Chrome, Firefox, and Edge. Split tunneling (Bypasser) available on Windows, macOS, Android, iOS, and browser extension. CleanWeb handles ad and malware blocking. Antivirus, Alert (breach monitoring), Search, and Incogni (data removal) extend the subscription well beyond core VPN functionality. Apple TV support distinguishes Surfshark from several direct competitors at the same price tier.

Unlimited simultaneous connections isn't a feature Surfshark added — it's the positioning the entire product is built around. One subscription, every device in the household, no counting. That logic shows up in the pricing, the suite expansion, and the way the apps are designed. The extensions-as-proxy limitation is the point where the 'everything included' model meets a technical boundary.

Unlimited simultaneous connections — no cap on devices using the account at once. Browser extensions for Chrome, Firefox, and Edge run as proxy connections: browser traffic only, not full system VPN. No dedicated router firmware; extension coverage is broad but proxy-level. The unlimited tier at aggressive long-term pricing is where Surfshark's value proposition concentrates — it's the answer to the question of why someone picks this over Nord or ExpressVPN with their connection limits.

The two-year introductory price is one of the lowest per-month rates in the category. At renewal, that changes materially. Unlike most competitors, Surfshark does offer a genuine 7-day trial — not just a money-back guarantee — though it still requires payment details upfront. The refund guarantee itself has more carve-outs than a blanket '30 days on all plans' framing suggests.

Two-year pricing is among the most aggressive introductory rates for a major provider. Renewal pricing is substantially higher than the promotional rate. Monthly billing eliminates the value case — the low per-month rate requires the multi-year commitment. Surfshark offers a genuine 7-day free trial ahead of the 30-day money-back guarantee, though it still needs a card or PayPal/Apple Pay on file and caps devices at 3 during the trial. The refund guarantee itself carries several carve-outs: it excludes purchases via resellers other than Paddle, Google Play, or Cleverbridge, prepaid/gift card payments, the anonymous Dedicated IP option, and Alternative ID add-ons — and it's capped at one refund per Service. The renewal dynamic is the same issue as most large VPNs: commit to two years, get the low rate, face a different bill when it expires.

Surfshark launched in 2018 and has no documented VPN infrastructure incidents. It also has a shorter operational history than most of the providers it competes against, an RAM-only rollout complete across entire fleet, and a corporate parent — Nord Security — whose roadmap now shapes Surfshark's infrastructure investment priorities.

RAM-only rollout complete across entire fleet. No VPN infrastructure incidents in the public record. The product launched in 2018, which means less accumulated stress-testing at scale than providers with a decade or more of operational history. The 2022 Nord Security merger provides organizational stability; it also means Surfshark's infrastructure investment now depends on Nord Security's priorities rather than Surfshark's own. Both are true simultaneously.