Servers in country
Providers with exit locations in Mali: a server here gives you an address in the country. The register’s table records no mandate for VPN operators here; the briefing below sets out what the law asks of providers.
Only a few providers publish an exit here.
Providers with exit locations in a country — a fact about a network, kept deliberately apart from where the company is registered. Only providers whose country list has a source appear: a provider that publishes nothing simply does not show up, which is a criterion already in the data rather than an editorial one.
Mali’s cybercrime statute, Law No. 2019-056 of 5 December 2019, combines search and seizure of computer data, real-time interception with a duty on service providers to cooperate, and content offences with prison terms of up to ten years.
Law No. 2019-056 on the repression of cybercrime, promulgated on 5 December 2019, authorises searches of computer systems and the seizure or copying of data in criminal investigations (arts. 74–78) and real-time interception of communications (arts. 83–86). Under articles 83 and 85 a prosecutor or investigating judge may require a provider, within its technical capabilities, to collect or record traffic or content data in real time, or to assist.
Providers of public electronic communications services must promptly inform the authorities of illegal activity reported to them (art. 25) and keep the data identifying anyone who contributed to their services’ content (art. 26); failing either carries six months to two years in prison, a fine of CFA 500,000 to 2,000,000, or both. Article 26 sets no period. Whether these duties reach a VPN operator is not established.
A prosecutor or investigating judge may also order any person to preserve and protect the integrity of data in their possession for up to two years, and the period may be extended (art. 82).
Articles 55 and 56 punish the public dissemination of content that does not accord with good morals: six months to seven years’ imprisonment, a fine of CFA 500,000 to 10,000,000, or both. Press offences committed through ICT fall under ordinary law, except those committed by the online press (art. 54).
Article 20 punishes a threat to commit a criminal offence, made through an information system, with five to ten years’ detention (réclusion) and a fine of CFA 1,000,000 to 10,000,000. Article 21 punishes an insult made the same way with six months to two years’ imprisonment, a fine of CFA 1,000,000 to 10,000,000, or both.
Article 22 punishes distributing material that denies, grossly minimises, approves or justifies genocide or crimes against humanity with five to ten years’ detention and a fine of CFA 5,000,000 to 50,000,000. Article 23 punishes a false report made to obtain removal of content with six months to a year in prison, a fine of CFA 200,000 to 2,000,000, or both.
Under articles 83 to 86, real-time collection of traffic or content data is ordered by the prosecutor or the investigating judge, and a provider that helps must keep it secret. The prosecutor informs the person responsible for a searched system of the data copied or removed (art. 80). The order of the rows is the security score, and a server’s location is not a recommendation.
Mali
Only a provider that publishes a country list appears here at all — 41 of the 77 on file. The other 27 are not missing research: they publish no list, and U02_server_countries is unknown for them rather than filled from the number their marketing claims.
A provider that says “100+ countries” and enumerates none gets no page on any of them, and the count printed on its own record is the length of the list, never the claim. With 41 providers behind 180 countries, the long tail of these pages carries one or two rows.
More countries