- Insufficient1
Coverage149countries
Paying monthly$14.99monthly
Paying yearly$139.08yearly total
Free tierNopaid plans only
Devices10at once
17 out of 100Security
70 out of 100Usability
Servers in country
Providers with exit locations in the Gambia: a server here gives you an address in the country. The register’s table records no mandate for VPN operators here; the briefing below sets out what the law asks of providers.
Only a few providers publish an exit here.
Providers with exit locations in a country — a fact about a network, kept deliberately apart from where the company is registered. Only providers whose country list has a source appear: a provider that publishes nothing simply does not show up, which is a criterion already in the data rather than an editorial one.
The Gambia’s Information and Communications Act 2009 lets national security agencies and investigating authorities monitor, intercept and store communications without naming a court, and requires service providers to keep subscriber data for three years.
Section 138 of the Information and Communications Act 2009 provides that national security agencies and investigating authorities may monitor, intercept and store communications, and that the Minister may require operators and service providers to implement the capability for authorised interception (s. 138(3)).
Section 141(8) requires providers to keep the subscriber data listed in s. 141(2) for three years, and contract data for three years from termination, so they can be disclosed to national security bodies, investigating authorities and the competent court (s. 141(6)(c)). Whether a VPN operator is an information and communications service provider under these sections is not established.
A Personal Data Protection and Privacy Bill was approved by the National Assembly in September 2025 and is reported to have been enacted that year.
Section 170 makes it an offence to publish or transmit in electronic form material that is lascivious, appeals to the prurient interest or tends to deprave and corrupt, punishable by a fine of D200,000 or up to five years’ imprisonment, or both. The Gambia Press Union reads section 49 of the Criminal Offences Act, reported to have been passed in March 2025, as letting the President or a Minister ban publications without judicial oversight.
The Criminal Offences Act, reported to have been passed on 24 March 2025, is also reported to have removed sedition and criminal defamation; the Gambia Press Union says it reintroduces “False Publication and Broadcasting” and adds religious-insult provisions. A Cybercrime Bill, reintroduced in March 2024, was on the National Assembly’s approved agenda at consideration stage for its March 2026 sittings.
On 13 February 2018 the ECOWAS Community Court held that criminal sanctions for sedition, defamation and false news unduly restricted journalists’ freedom of expression, in a case brought after journalists were prosecuted and detained, and ordered the Gambia to amend its laws.
Section 138 names no court or oversight body for interception by security agencies and investigating authorities; a court appears in the Act only as a recipient of subscriber data under section 141(6)(c). The regulator may also monitor and intercept when exercising its frequency-monitoring powers (s. 138(1)). The order of the rows is the security score, and a server’s location is not a recommendation.
Gambia
Only a provider that publishes a country list appears here at all — 41 of the 77 on file. The other 27 are not missing research: they publish no list, and U02_server_countries is unknown for them rather than filled from the number their marketing claims.
A provider that says “100+ countries” and enumerates none gets no page on any of them, and the count printed on its own record is the length of the list, never the claim. With 41 providers behind 180 countries, the long tail of these pages carries one or two rows.
More countries
Coverage149countries
Paying monthly$14.99monthly
Paying yearly$139.08yearly total
Free tierNopaid plans only
Devices10at once
Security
Usability
What moved
Every row is the record’s own history[], filtered to U02_server_countries and P04_mandate_response; the whole log holds every field.
29 Aug 20261 changes
NordVPNResponse to a national logging mandateP04_mandate_response
not on the record changed to withdrew_physical
