Servers in country
Providers with exit locations in Madagascar: a server here gives you an address in the country. The register’s table records no mandate for VPN operators here; the briefing below sets out what the law asks of providers.
Only a few providers publish an exit here.
Providers with exit locations in a country — a fact about a network, kept deliberately apart from where the company is registered. Only providers whose country list has a source appear: a provider that publishes nothing simply does not show up, which is a criterion already in the data rather than an editorial one.
Madagascar’s cybercrime law obliges telecommunications operators and service providers to erase or anonymise traffic data, then lets erasure be deferred for up to one year for criminal investigations, leaving the categories and periods to a decree. It also makes online insult or defamation of public bodies and officials an offence.
Law No. 2014-006 on combating cybercrime requires operators and service providers running telecommunications or electronic communications networks and services to erase or anonymise all traffic data (article 26). For the investigation and prosecution of offences, erasure may be deferred for at most one year, and a decree sets the categories of data and the duration within that limit (article 27).
Billing data may be kept until the invoice can no longer be contested (article 28). Data kept under these articles may cover only the identity of users, the technical features of communications and the location of terminals, never their content (article 31). Failing to erase, or failing to keep data where the law requires it, is punishable by a fine of 1,000,000 to 150,000,000 Ariary (articles 32 and 33).
Whether a VPN operator is an operator or service provider within these articles is not established. Law No. 2014-038 on personal data applies to processing carried out in whole or in part in Madagascar, including by a controller established there or using means located there (articles 5 and 6).
The cybercrime law punishes the electronic dissemination of material that denies, grossly minimises, approves or justifies genocide or crimes against humanity (article 21: six months to five years). It defines and punishes child pornography (article 22: two to five years), sexual propositions to a minor by electronic means (article 24) and violent, pornographic, racist or xenophobic messages likely to be seen by a minor (article 25: two to five years).
Article 20, as replaced by Law No. 2016-031, punishes insult or defamation, by computer or electronic means, against constituted bodies, courts, the armed forces, public administrations, members of the Government or Parliament, public officials and persons charged with a public service, with a fine of 2,000,000 to 100,000,000 Ariary; the 2016 amendment removed the prison term the original text carried.
Unprovoked insult of a private person by the same means carries a fine of 100,000 to 10,000,000 Ariary; insult based on sex, disability, origin or membership or non-membership of an ethnic group, nation, race or religion, a fine of 2,000,000 to 100,000,000 Ariary.
Article 19 punishes knowingly using another person’s identity, or data identifying them, on a computer medium to disturb their peace or harm their honour or reputation, with six months to ten years.
Law No. 2014-038 places compliance under an independent authority, the Commission Malagasy de l’Informatique et des Libertés, with regulatory and sanctioning powers (articles 4 and 28). Where processing concerns state security, defence or public security, a person’s rights of access and correction are exercised indirectly: the request goes to the Commission, which designates one of its judge members to carry out the checks (article 26).
The order of the rows is the security score, and a server’s location is not a recommendation.
Madagascar
Only a provider that publishes a country list appears here at all — 41 of the 77 on file. The other 27 are not missing research: they publish no list, and U02_server_countries is unknown for them rather than filled from the number their marketing claims.
A provider that says “100+ countries” and enumerates none gets no page on any of them, and the count printed on its own record is the length of the list, never the claim. With 41 providers behind 180 countries, the long tail of these pages carries one or two rows.
More countries
What moved
Every row is the record’s own history[], filtered to U02_server_countries and P04_mandate_response; the whole log holds every field.
29 Aug 20261 changes
NordVPNResponse to a national logging mandateP04_mandate_response
not on the record changed to withdrew_physical
Coverage149countries
Paying monthly$14.99monthly
Paying yearly$139.08yearly total
Free tierNopaid plans only
Devices10at once
Security
Usability
Coverage168countries
Paying monthly$11.99monthly
Paying yearly$47.84yearly total
Free tierYeslimited free plan
Devices5at once
Security
Usability
