Five Eyes, Nine Eyes & 14-Eyes Countries and VPN Jurisdiction

John Mason

John Mason

In this article, I’ll share the differences between different alliances (4 Eyes, 9 Eyes and 14 Eyes) as well as how it affects your anonymity when using a VPN.

This article will discuss available VPNs in relation to the 5 Eyes, the 9 Eyes and the 14 Eyes government surveillance alliances.

Why does 5 / 9 / 14 Eyes matter to VPN users?

For anyone considering the use of a VPN, the privacy of their actions online is clearly a concern. While a VPN can certainly help to preserve browsing privacy and protect your data from advertisers and malicious agents, they are not the be-all and end-all of online anonymity. While a VPN offers a good deal of privacy and protection from external agents, VPN providers can still access and store your data and browsing details internally. Any VPN provider in a 5, 9 or 14 Eyes jurisdiction can be legally compelled to provide whatever stored data they have to their country’s intelligence agencies, and often have frameworks in place to bypass the need to ask – frameworks which can also be exploited by malicious third parties.

This is perhaps especially important for users in 5 Eyes countries; the UK’s Investigatory Powers Act 2016 gives sweeping powers to government agencies, granting the rights to access to users’ personal data without warrant; and ISPs in the United States have recently been given the right to record and sell user activity to any third party. Awareness of which jurisdiction a VPN provider falls under is vital for any VPN user with concerns about protecting their data.

5 Eyes Jurisdiction


5 Eyes Alliance Flags

  1. United States
  2. United Kingdom
  3. Canada
  4. Australia
  5. New Zealand

The Five Eyes or FVEY Alliance is an extension of the UKUSA Agreement, the official name given in 1946 to what had begun as an informal agreement between the UK and USA in 1941. While it was originally a treaty to share critical signals intelligence, after the second world war, over the cold war and the war on terror, the agreement grew to include Canada, Australia and New Zealand; and also grew in scope as technology advanced. Snowden’s revelations brought to light how these agreements are being used to collect and share data on countries’ own citizens, and how laws protecting people from being spied on by their own government can be circumvented by allowing a cooperative foreign power to do it and then share the data.

When choosing a VPN – especially for a citizen of a 5 Eyes country – the best option for privacy is to be found outside of the Eyes alliances. Many VPN providers store data, and as with all things online no security measures are impregnable. VPN users must be aware that if their VPN service is registered in a 5 Eyes country, it falls under the jurisdiction of that country’s surveillance agency – complete with all the legal rights and tools to access any data held by or stored on that network.

It’s also important to remember the significance of allies and cooperative countries; nations which are not explicitly part of the 5, 9 or 14 Eyes groups can still be cooperative with requests for data. America’s Pacific allies, like Singapore, South Korea and Japan have a close relationship with the 5 Eyes, and Israel is known to work closely with the NSA. The British Overseas Territories, as well, have legal obligations to the UK and may be required to share intelligence or surveillance information even if they operate independently.

VPNs that belong to 5 Eyes jurisdiction: Australia, Canada, UK, USA and New Zealand

  1. Celo (Australia)
  2. VPNAUS (Australia)
  3. VPNSecure (Australia)
  4. Blockless (Canada)
  5. GetFlix (Canada)
  6. SurfEasy (Canada)
  7. TunnelBear (Canada)
  8. UnoTelly (Canada)
  9. RogueVPN (Canada)
  10. VPN Land (Canada)
  11. WindScribe (Canada)
  12. Betternet (Canada)
  13. VPNUK (UK)
  14. Flow VPN (UK)
  15. HideMyAss (UK)
  16. LibertyShield (UK)
  17. My Expat Network (UK)
  18. OverPlay (UK)
  19. TorVPN (UK)
  20. TotalVPN (UK)
  21. TVWhenAway (UK)
  22. VPN.sh (UK)
  23. WorldVPN (UK)
  24. ZoogVPN (UK)
  25. TGVPN (UK)
  26. AceVPN (USA)
  27. Anonymizer (USA)
  28. BTGuard (USA)
  29. Cloak (USA)
  30. CryptoHippie (USA)
  31. FlyVPN (USA)
  32. FrostVPN (USA)
  33. GoTrusted (USA)
  34. HideIPVPN (USA)
  35. Hotspot Shield (USA)
  36. IPinator (USA)
  37. IPVanish (USA)
  38. LibertyVPN (USA)
  39. LiquidVPN (USA)
  40. MyIP.io (USA)
  41. MyVPN.Pro (USA)
  42. Newshosting (USA)
  43. OctaneVPN (USA)
  44. Private Internet Access (USA)
  45. PrivateTunnel (USA)
  46. Spotflux (USA)
  47. Norton WiFi Privacy (USA)
  48. RA4W VPN (USA)
  49. SlickVPN (USA)
  50. StrongVPN (USA)
  51. SunVPN (USA)
  52. SuperVPN (USA)
  53. TorGuard (USA)
  54. Tunnelr (USA)
  55. UnSpyable (USA)
  56. VikingVPN (USA)
  57. VPN Master (USA)
  58. VPN Unlimited (USA)
  59. VPNJack (USA)
  60. VPNMe (USA)
  61. WiTopia (USA)
  62. CrypticVPN (USA)
  63. Hide My IP (USA)
  64. Unseen Online (USA)
  65. AnonVPN (USA)
  66. FoxyProxy (USA)
  67. NetShade (USA)
  68. IntroVPN (USA)
  69. GhostPath (USA)
  70. disconnect.me (USA)
  71. Speedify (USA)

9 Eyes Jurisdiction


9 Eyes Alliance

5 eyes, plus:

  1. Denmark
  2. France
  3. Netherlands
  4. Norway

The 9 Eyes alliance is an extension of 5 Eyes, including the original 5 – USA, UK, Canada, Australia and New Zealand – as well as Denmark, France, The Netherlands and Norway. While 9 Eyes countries don’t have such an intimate level of cooperation and mutual information sharing as the core 5 Eyes countries, there is still extensive data sharing, especially to the US.

Whereas FVEY allows a mutual access to citizens’ data across the participating countries, the 9 Eyes countries have a less equal role. Programs like RAMPART-A, reported in Denmark’s Dagbladet Information and The Intercept, provide the NSA access to key communication networks and allow it to intercept almost all forms of digital communication – telephone, fax, e-mail, internet chats and VoIP services, including data from VPNs originating in the participating country.

In exchange, the foreign partner is granted access to resources, equipment and assistance from the NSA to surveil the data entering and leaving the country. This is granted on condition that the 9 Eyes agencies will not collect any data on US citizens, leaving the NSA with the ‘better deal’, but more importantly meaning that citizens of the participating countries can expect to have their data accessible to both their own government and those of the 5 Eyes alliance.

While 9 Eyes countries have a somewhat more restrictive relationship than the 5 Eyes countries do, there is still extensive cooperation and data sharing, and it’s a safe bet that any information that Denmark, France, Norway or The Netherlands have access to is also accessible to the NSA. It’s especially important for VPN users to be aware that RAMPART-A and similar schemes allow for the collection of VPN data, greatly compromising the privacy and security of VPNs based in these countries.

VPNs that belong to 9 Eyes jurisdiction: Denmark, France, Netherlands and Norway

  1. BeeVPN (Denmark)
  2. CitizenVPN (Denmark)
  3. Unlocator (Denmark)
  4. ActiVPN (France)
  5. ProXPN (NL)
  6. ShadeYou (NL)
  7. VPN4All (NL)
  8. WASEL Pro (NL)
  9. WifiMask (NL)
  10. RootVPN (NL)
  11. GooseVPN (NL)
  12. Opera’s integrated browser VPN (Norway)

14 Eyes Jurisdiction


14 Eyes Alliance

9 eyes, plus:

  • Germany
  • Belgium
  • Italy
  • Spain
  • Sweden

The 14 Eyes alliance is another layer of the Eyes groups, including all previous countries of the 5 and 9 Eyes as well as Germany, Belgium, Italy, Spain and Sweden. 14 Eyes is one more step removed from the close cooperation of the 5 and 9 Eyes alliances, to the point that a Belgian telecommunications company has been targeted in a cyber attack by GCHQ.

Although the 14 Eyes countries have a more distant working relationship, the alliance is more officially recognized than the 9 Eyes group, and Snowden’s documents identify the alliance as SIGINT Seniors Europe, or SSEUR. The exact nature of the agreement between the participating countries is less clear than the 9 Eyes alliance, but it is known that at least Sweden and Germany have access to the NSA’s XKEYSCORE, an internet data analysis and surveillance tool.

Sweden has even informally been called ‘the Sixth Eye’. Its importance to the NSA derives from the amount of eastern European and Russian traffic that passes through the country.

Even if the 14 Eyes countries do not, in general, have as close ties to the NSA as the 9 Eyes countries do, users in the participating countries should still regard their data as vulnerable and, if not directly shared with the US, at least likely to be easily obtained by 5 Eyes countries. 14 Eyes governments are very likely to be compliant with requests made by the NSA and other surveillance agencies, so a VPN from a 14 Eyes country will not offer full protection, especially if the VPN provider stores browsing data.

VPNs that belong to 14 Eyes jurisdiction: Germany, Italy, Sweden, Belgium and Spain

  1. ChillGlobal (Germany)
  2. GoVPN (Germany)
  3. internetz.me (Germany)
  4. Steganos (Germany)
  5. Zenmate (Germany)
  6. Avira Phantom VPN (Germany)
  7. traceless.me (Germany)
  8. AirVPN (Italy)
  9. AzireVPN (Sweden)
  10. FrootVPN (Sweden)
  11. Integrity.st (Sweden)
  12. IPredator (Sweden)
  13. Mullvad (Sweden)
  14. OVPN.com (Sweden)
  15. PrivateVPN (Sweden)
  16. PRQ (Sweden)

VPN providers that are located in non-14 Eyes countries (Highly recommended)

With so many VPN services on the market, it can be time-consuming and frustrating to sift through feature-lists and review scores only to find that what seems like the ideal VPN is based in a 14 Eyes country. We have informative reviews on some of the best VPN providers which are registered outside of the 14 Eyes and EU compliant partners:

  1. ExpressVPN (British Virgin Islands): Read review
  2. NordVPN (Panama): Read review
  3. CyberGhost (Romania): Read Review
  4. PureVPN (Hong-Kong): Read review
  5. Ivacy (Singapore): Read review
  6. Hide.me (Malaysia): Read review
  7. Astrill VPN (Seychelles): Read review
  8. VPNArea (Bulgaria): Read review
  9. Trust.Zone (Seychelles): Read review
  10. iVPN (Gibraltar): Read review
  11. VyprVPN (Switzerland): Read review
  12. ProtonVPN (Switzerland): Read review

Conclusion – Should you be worried?

Anyone considering their VPN options hardly needs to be told to “be careful”; anyone seriously considering a VPN must already be motivated by care and caution over their online privacy.

No VPN is going to be perfect; many fast performance VPN services (like HotSpot Shield) are likely to be based within the Eyes security alliances, and even many of the countries outside of those jurisdictions are compliant and cooperative with the intelligence agencies’ demands. This doesn’t mean it’s a lost cause or there’s no point trying to protect yourself, however. As with all things related to online security, while you cannot eliminate all threats, the more threats you can mitigate the better.

For the best possible protection, it is recommended to choose not only a VPN outside of the Eyes alliances, but to choose one that does not keep activity logs on its users – and even then, to only connect to servers which themselves are outside of the 5, 9 and 14 Eyes’ jurisdictions. For many users, following these guidelines at all times will be impractical, but as long as users stay aware of these best practices, as well as where and whether their browsing data is being stored and who can gain access to it, the right VPN can go a long way to restoring online privacy.

Back to best VPN list.

  • A friend send me your article read on transients, great job John, very nice summary!
    Few remarks:
    – Wathever Mullvad (Sweden) is in the 14 eyes, it’s kind of exception cause you don’t need ID to register, no email, nothing. And you can pay in bitcoin and maybe other anonymous money. So and as for all other VPN including the one outside global Watch, if you surf without providing your real ID (by google account, Facebook, tweeter and other…) and if you hide you computer fingerprint, you should be anonymous by using it.
    – As I said, If you aren’t hiding your computer fingerprint and log somewhere with your real ID, technically you aren’t anymore anonymous, even so if you use a non-eye country VPN.
    – In my case for using a Non-eye country VPN for the last 12 years I saw the price rising up in the time. From around 33 bucks to start slow evo to 49, jump at 69$ a bit after Snowden breaknews and this year it just jump again from 69 to 99€ for the same yearly plan.
    Maybe You guys are making them to famous, or maybe the service protection cost are rising up cause there is more and more gov pressure on them…

Leave a Reply

Your email address will not be published. Required fields are marked *