Servers in country
Providers with exit locations in Puerto Rico: a server here gives you an address in the country. The register’s table records no mandate for VPN operators here; the briefing below sets out what the law asks of providers.
Providers with exit locations in a country — a fact about a network, kept deliberately apart from where the company is registered. Only providers whose country list has a source appear: a provider that publishes nothing simply does not show up, which is a criterion already in the data rather than an editorial one.
Puerto Rico is a Commonwealth of the United States, where federal statutes apply alongside its own: on a governmental request a provider must preserve records for 90 days, extendable by 90. The Commonwealth’s Constitution of 1952 separately prohibits wire-tapping and makes evidence obtained in breach inadmissible.
Puerto Rico is a Commonwealth of the United States, and federal statutes apply there alongside its own. Under 18 U.S.C. § 2703(f) a provider of electronic communication or remote computing service must, on a governmental entity’s request, preserve records in its possession for 90 days, extended by one further 90 days on a renewed request. It is triggered by a request and is no general retention period.
Carriers that offer or bill toll telephone service keep call records for 18 months (47 C.F.R. § 42.6). A provider can also be made to disclose subscriber name and address, connection records or session times, subscriber identity including temporarily assigned network addresses, and means of payment on an administrative, grand-jury or trial subpoena (§ 2703(c)(2)). Whether a VPN operator is a provider within these provisions is not established.
Article 178 of the Commonwealth’s Penal Code (Act 146 of 2012, as amended; revision of 5 August 2026) punishes, as a misdemeanour of intrusion on personal tranquillity, writing or speaking to another through a telematics system or any other means in threatening, abusive, obscene or lewd language, and repeatedly telephoning a person to bother them.
The Penal Code punishes breach of personal communications: acquiring another’s documents, letters or emails without authority, intercepting telecommunications by any means, or retrieving communications records held by service entities, carries a fixed term of three years (art. 171). Threatening specific harm to a person or family is a misdemeanour, and a felony of three years where a building or public transport facility is evacuated as a result (art. 177).
Identification of the sender runs through the subpoena route in the first answer, which reaches the temporarily assigned network address.
Article II, section 10 of the Constitution of the Commonwealth, completed on 6 February 1952, states that wire-tapping is prohibited, that arrest and search warrants issue only by judicial authority on probable cause, and that evidence obtained in violation of the section is inadmissible in the courts.
On 22 June 2018 the US Supreme Court held in Carpenter v. United States that the Government’s acquisition of historical cell-site location records was a Fourth Amendment search, for which it will generally need a warrant. The order of the rows is the security score, and a server’s location is not a recommendation.
Puerto Rico
Only a provider that publishes a country list appears here at all — 41 of the 77 on file. The other 27 are not missing research: they publish no list, and U02_server_countries is unknown for them rather than filled from the number their marketing claims.
A provider that says “100+ countries” and enumerates none gets no page on any of them, and the count printed on its own record is the length of the list, never the claim. With 41 providers behind 180 countries, the long tail of these pages carries one or two rows.
More countries
What moved
Every row is the record’s own history[], filtered to U02_server_countries and P04_mandate_response; the whole log holds every field.
29 Aug 20263 changes
ExpressVPNResponse to a national logging mandateP04_mandate_response
not on the record changed to withdrew_physical
NordVPNResponse to a national logging mandateP04_mandate_response
not on the record changed to withdrew_physical
SurfsharkResponse to a national logging mandateP04_mandate_response
not on the record changed to withdrew_physical
Coverage147countries
Paying monthly$9.99monthly
Paying yearly$53.88yearly total
Free tierYeslimited free plan
Devices10at once
Security
Usability
Coverage149countries
Paying monthly$14.99monthly
Paying yearly$139.08yearly total
Free tierNopaid plans only
Devices10at once
Security
Usability
Coverage100countries
Paying monthly$16.45monthly
Paying yearly$79.00yearly total
Free tierNopaid plans only
Devicesunlimitedat once
Security
Usability
Coverage96countries
Paying monthly$11.99monthly
Paying yearly$47.99yearly total
Free tierYeslimited free plan
Devices5at once
Security
Usability
Coverage106countries
Paying monthly$14.99monthly
Paying yearly$74.85yearly total
Free tierNopaid plans only
Devices10at once
Security
Usability
Coverage80countries
Paying monthly$9.99monthly
Paying yearly$39.99yearly total
Free tierYeslimited free plan
Devices10at once
Security
Usability
Coverage168countries
Paying monthly$11.99monthly
Paying yearly$47.84yearly total
Free tierYeslimited free plan
Devices5at once
Security
Usability
Coverage103countries
Paying monthly—no monthly plan
Paying yearly$39.99yearly total
Free tierNopaid trial only
Devices5at once
Security
Usability
Coverage109countries
Paying monthly—no monthly plan
Paying yearly$34.99yearly total
Free tierYeslimited free plan
Devices10at once
Security
Usability
Coverage82countries
Paying monthly$12.99monthly
Paying yearly$59.40yearly total
Free tierYeslimited free plan
Devices8at once
Security
Usability