# Twingate privacy rating

Hosted zero-trust remote access service that connects devices to private resources through connectors on the customer's network, managed from Twingate's cloud controller.

## Summary

Twingate scores 24 out of 100 (grade F) on the mesh VPNs and private networks criteria. It meets 1 of 7 criteria: keys stay on devices. It partly meets no ads or data sales. It does not meet open source, no trackers or telemetry, self-hosted coordination server and no connection logs by default. Still needing evidence: independent audit. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.

- Website: https://www.twingate.com
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Platforms: Windows, macOS, Linux, Android, iOS
- Home page trackers: Google Fonts (not scored), Google Tag Manager
- Category: [Mesh VPNs and private networks](https://privacyratings.com/mesh-vpns/)
- Grade: F (24/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | The clients, connectors and controller are closed source. |  |
| No trackers or telemetry | No | The website uses Google Analytics and advertising cookies. | https://www.twingate.com/privacy |
| No ads or data sales | Partial | Funded by paid plans with no ads in the product, though website data is shared with ad partners for Twingate's own retargeting. | https://www.twingate.com/privacy |
| Independent audit | Unknown |  |  |
| Keys stay on devices | Yes | The client creates the session key and connectors create their own key pairs. Relays and the controller cannot decrypt traffic. | https://www.twingate.com/docs/how-encryption-works-in-twingate |
| Self-hosted coordination server | No | The controller is only offered as Twingate's hosted service. |  |
| No connection logs by default | No | Network events for traffic through connectors are kept by Twingate for 24 hours to 12 months depending on the plan, with no documented way to turn them off. | https://www.twingate.com/docs/exporting-network-traffic |

Source: https://privacyratings.com/mesh-vpns/twingate/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/mesh-vpns/twingate.md