# Mullvad VPN vs Surfshark: privacy compared

| Criterion | Mullvad VPN | Surfshark |
| --- | --- | --- |
| Grade | B (79/100) | D (48/100) |
| Jurisdiction | Sweden (Fourteen Eyes) | Netherlands (Nine Eyes) |
| Open source | Partial | No |
| No trackers or telemetry | Yes | No |
| No ads or data sales | Yes | Yes |
| Independent audit | Yes | Yes |
| Transparency report | Partial | Yes |
| Tells users about requests | No | No |
| TLS configuration | Yes | Yes |
| Security headers | Yes | No |
| Modern web standards | Not tested yet | Not tested yet |
| Audited no-logs policy | Partial | Partial |
| Anonymous payment | Yes | Partial |
| Open-source apps | Yes | No |
| Modern protocols | Yes | Yes |

**Mullvad VPN.** Mullvad VPN scores 79 out of 100 (grade B) on the VPN providers criteria. It meets 8 of 12 criteria: no trackers or telemetry, no ads or data sales, independent audit, TLS configuration, security headers, anonymous payment, open-source apps and modern protocols. It partly meets open source, transparency report and audited no-logs policy. It does not meet tells users about requests. It is based in Sweden: Fourteen Eyes member; EU member (GDPR). Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade A+.

**Surfshark.** Surfshark scores 48 out of 100 (grade D) on the VPN providers criteria. It meets 5 of 12 criteria: no ads or data sales, independent audit, transparency report, TLS configuration and modern protocols. It partly meets audited no-logs policy and anonymous payment. It does not meet open source, no trackers or telemetry, tells users about requests, security headers and open-source apps. It is based in the Netherlands: Nine Eyes member; EU member (GDPR). Automated tests: SSL Labs grade A and Mozilla HTTP Observatory grade C-.

Source: https://privacyratings.com/compare/vpns/mullvad-vpn-vs-surfshark/