What the Five Eyes Is
The Five Eyes is an intelligence alliance between the United States, United Kingdom, Canada, Australia, and New Zealand. These countries share signals intelligence (communications surveillance data) with each other under a framework established after World War II. The alliance has expanded informally over decades to include the Nine Eyes (adding Denmark, France, Netherlands, Norway) and Fourteen Eyes (adding Germany, Belgium, Italy, Sweden, Spain).
Why This Matters for VPN Users
If a VPN provider operates in a Five Eyes or Fourteen Eyes country, that country's government can legally compel the provider to hand over user data or assist with surveillance. The provider may also be subject to gag orders prohibiting disclosure to users that data was requested. The key question is whether the provider has data to hand over, not whether the country could request it.
Jurisdiction Vs. Data Retention
VPN providers in privacy-friendly jurisdictions (Switzerland, Iceland, Panama, British Virgin Islands) operate outside the 14-Eyes framework and face weaker mandatory data retention laws. But jurisdiction is secondary to data retention policy. A provider in a 14-Eyes country that genuinely holds no logs has nothing meaningful to hand over, even under compulsion. A provider in a privacy-friendly country that retains connection logs is still a risk, regardless of jurisdiction.
Providers Outside 14 Eyes
Mullvad (Sweden, but with a strong verified no-log policy and cash payment option), ProtonVPN (Switzerland), ExpressVPN (British Virgin Islands), and NordVPN (Panama) are the most audited options outside the core surveillance alliance. Mullvad's Sweden location is technically inside the 14 Eyes, but their no-log policy has been verified through actual police seizures finding nothing.
Practical Conclusion
For most users, choosing a provider with an independently audited no-log policy matters more than jurisdiction. For high-risk users (journalists, activists, people with genuine adversaries at the nation-state level), combine jurisdiction outside 14 Eyes with a verified no-log policy and pay with cash or Monero to avoid connecting your identity to the subscription.