Mesh VPNs and private networks
ZeroTier privacy rating
Peer-to-peer virtual network platform that joins devices into encrypted virtual Ethernet networks, managed through ZeroTier's hosted controller or a self-hosted one.
Summary
ZeroTier scores 38 out of 100 (grade F) on the mesh VPNs and private networks criteria. It meets 1 of 7 criteria: keys stay on devices. It partly meets open source, no ads or data sales and self-hosted coordination server. It does not meet no trackers or telemetry and independent audit. Still needing evidence: no connection logs by default. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.
Score 38 out of 100. How scoring works
Criteria
-
Partial
Open source Weight 3 of 3
Is all the source code needed to run the product public?
The core is MPL-2.0, but parts of the repository use a source-available license and the hosted ZeroTier Central is closed source.
-
No
No trackers or telemetry Weight 3 of 3
Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
The website loads Google Analytics, HubSpot, Microsoft Clarity, Facebook, LinkedIn and Reddit trackers.
-
Partial
No ads or data sales Weight 2 of 3
Is the product funded without advertising, ad targeting or selling user data?
Funded by paid plans with no ads in the product, though the website shares data with ad partners for ZeroTier's own marketing.
-
No
Independent audit Weight 2 of 3
Has an independent security or privacy audit been published within the last three years?
No independent audit is published.
-
Yes
Keys stay on devices Weight 3 of 3
Is traffic encrypted between devices with private keys created on each device, so the coordination server and relays cannot read it?
Each node creates its identity keys locally. Traffic is end-to-end encrypted and cannot be read by root servers or network controllers.
-
Partial
Self-hosted coordination server Weight 2 of 3
Can the coordination or control server be self-hosted with open-source software?
The network controller can be self-hosted, but its code uses a source-available license that forbids commercial use without a paid license.
-
Unknown
No connection logs by default Weight 2 of 3
Are connection logs and client diagnostic logs kept off the vendor's servers unless a user or admin turns them on?
Needs evidence. Add it