Servers in country
Providers with exit locations in Kyrgyzstan: a server here gives you an address in the country. The register’s table records no mandate for VPN operators here; the briefing below sets out what the law asks of providers.
Providers with exit locations in a country — a fact about a network, kept deliberately apart from where the company is registered. Only providers whose country list has a source appear: a provider that publishes nothing simply does not show up, which is a criterion already in the data rather than an editorial one.
Kyrgyz law binds telecommunications operators to the state’s surveillance system, known as SORM: a Cabinet instruction in force since January 2023 and, from July 2026, the law on operational-search activity oblige them to give the security bodies access to their databases and digital systems.
The Law of 2 April 1998 No 31 on electric communication, whose Article 21-1 bound operators during special investigative actions and counterintelligence measures, was repealed by Law No 179 of 31 July 2025, which brought the Digital Code into force. The Code leaves operators’ dealings with the security bodies to the legislation on counterintelligence and operational-search activity (Article 187).
Law No 101 of 2 July 2026, published on 7 July 2026 and in force ten days later, amends the Law on Operational-Search Activity: operators must provide information on users, organisational and software-technical capability in their networks, and access to their databases and digital systems, and must pay for the equipment themselves.
The Cabinet’s Instruction on operators’ dealings with the security bodies (resolution No 360 of 2014, as amended by No 626 of 16 November 2022, in force from 8 January 2023) requires subscriber databases and records of users’ connections kept for three years. Its technical requirements list databases of IP addresses, NAT users and users of an anonymising proxy server. Whether a VPN operator is an operator under these provisions is not established.
The 2021 Law on Protection from False and Inaccurate Information, signed on 23 August 2021, allows authorities to remove or block online content they deem false or inaccurate without a court order; it names no body to decide what is false. As reported, access is restored after two months if the material is removed or a court decision takes effect.
Mass Media Law No. 188 of 6 August 2025, in force from 23 August 2025, requires media outlets, online resources included, to register, and limits foreign ownership to 35 per cent.
Amendments to the Code of Offences signed on 8 July 2025 make spreading “false or unreliable” information through mass media or the internet an offence punished by administrative fines of 20,000 soms for individuals and 65,000 soms for outlets. Defamation and insult have carried the same fines since February 2025. Complaints go to the police and are decided in brief administrative court hearings.
The Cabinet’s Instruction makes officials of the authorised pretrial and counterintelligence bodies responsible for lawful use of the system and of subscriber information.
On 22 April 2015 the Constitutional Chamber of the Supreme Court, in a case brought by a citizen and a company, held part 1 of Article 21-1 of the communications law and parts 3 and 5 of Article 7 of the Law on Operational-Search Activity consistent with Article 29 of the Constitution, adding that they do not remove the constitutional requirement of a court act for measures affecting the rights Article 29(2) guarantees.
The order of the rows is the security score, and a server’s location is not a recommendation.
Kyrgyzstan
Only a provider that publishes a country list appears here at all — 41 of the 77 on file. The other 27 are not missing research: they publish no list, and U02_server_countries is unknown for them rather than filled from the number their marketing claims.
A provider that says “100+ countries” and enumerates none gets no page on any of them, and the count printed on its own record is the length of the list, never the claim. With 41 providers behind 180 countries, the long tail of these pages carries one or two rows.
More countries
What moved
Every row is the record’s own history[], filtered to U02_server_countries and P04_mandate_response; the whole log holds every field.
29 Aug 20261 changes
NordVPNResponse to a national logging mandateP04_mandate_response
not on the record changed to withdrew_physical
Coverage147countries
Paying monthly$9.99monthly
Paying yearly$53.88yearly total
Free tierYeslimited free plan
Devices10at once
Security
Usability
Coverage149countries
Paying monthly$14.99monthly
Paying yearly$139.08yearly total
Free tierNopaid plans only
Devices10at once
Security
Usability
Coverage80countries
Paying monthly$12.99monthly
Paying yearly—no yearly plan
Free tierYeslimited free plan
Devices10at once
Security
Usability
Coverage168countries
Paying monthly$11.99monthly
Paying yearly$47.84yearly total
Free tierYeslimited free plan
Devices5at once
Security
Usability
Coverage82countries
Paying monthly$12.99monthly
Paying yearly$59.40yearly total
Free tierYeslimited free plan
Devices8at once
Security
Usability