Servers in country
Providers with exit locations in Sudan: a server here gives you an address in the country. The register’s table records no mandate for VPN operators here; the briefing below sets out what the law asks of providers.
Only a few providers publish an exit here.
Providers with exit locations in a country — a fact about a network, kept deliberately apart from where the company is registered. Only providers whose country list has a source appear: a provider that publishes nothing simply does not show up, which is a criterion already in the data rather than an editorial one.
Sudan’s cybercrime law of 2018 joins offences against systems with speech offences, among them false news, defamation and insults, and was amended in July 2020 to raise its penalties. Its interception offence turns on the public prosecutor’s permission.
ARTICLE 19 reports that the Law to Combat Information Crimes of 2018 was amended in July 2020 to raise its sanctions, and that section 8 makes intercepting or capturing data without the public prosecutor’s permission an offence.
The Telecommunications and Postal Regulation Law of 2018, signed on 1 February 2018, obliges every licensee to provide tools for auditing the data its subscribers’ traffic produces and to supply that data to the regulator, without conflict with national security (art. 25(1)(g)). Licensees must also let the regulator enter their sites and network and install monitoring devices (art. 25(1)(t)).
The law names no retention period; article 7(2) lets the regulator use traffic data as the regulations provide. Whether either law reaches a VPN operator is not established.
According to ARTICLE 19, the Cybercrime Law penalises provoking hatred against sects, groups and regions (s. 14) and against foreigners (s. 15), disseminating “indecent” content (s. 19), violating religious beliefs (s. 22) and publishing “false news” (s. 24). It also covers defamation (s. 25), insults and abuse (s. 26) and terrorism offences (ss. 27–29). Section 9 penalises obstructing, disrupting or disabling access to a service.
According to ARTICLE 19, section 5(3) criminalises intending to obtain data related to national security, the national economy or the structure of communications. Section 6 penalises public servants who access their institution’s information system without authorisation; its maximum of five years was raised to eight by the 2020 amendment.
ARTICLE 19 states that the Ministry of Justice has never published the 2018 law in the official gazette and that the only copy in circulation was leaked. The order of the rows is the security score, and a server’s location is not a recommendation.
Sudan
Only a provider that publishes a country list appears here at all — 41 of the 77 on file. The other 27 are not missing research: they publish no list, and U02_server_countries is unknown for them rather than filled from the number their marketing claims.
A provider that says “100+ countries” and enumerates none gets no page on any of them, and the count printed on its own record is the length of the list, never the claim. With 41 providers behind 180 countries, the long tail of these pages carries one or two rows.
More countries
Coverage147countries
Paying monthly$9.99monthly
Paying yearly$53.88yearly total
Free tierYeslimited free plan
Devices10at once
Security
Usability
Coverage168countries
Paying monthly$11.99monthly
Paying yearly$47.84yearly total
Free tierYeslimited free plan
Devices5at once
Security
Usability
