Servers in country
Providers with exit locations in San Marino: a server here gives you an address in the country. The register’s table records no mandate for VPN operators here; the briefing below sets out what the law asks of providers.
Only a few providers publish an exit here.
Providers with exit locations in a country — a fact about a network, kept deliberately apart from where the company is registered. Only providers whose country list has a source appear: a provider that publishes nothing simply does not show up, which is a criterion already in the data rather than an editorial one.
San Marino’s Law No. 114 of 23 August 2016 added hacking, illegal interception, data damage and computer fraud to its Criminal Code, and in its own text places no duty on a communications provider to retain data or assist interception. The 2016 committee report said the law took up the principles of the Budapest Convention without San Marino acceding to it.
Law No. 114 of 23 August 2016 (“Disciplina dei reati informatici”) adds computer offences to the Criminal Code and its text places no duty on a communications provider to retain data or to assist interception. Personal data is governed by Law No. 171 of 2018, aligned with the GDPR and overseen by an independent data protection authority, the Garante.
The 2016 committee report on the bill recorded that San Marino had not acceded to the Council of Europe’s Budapest Convention of 23 November 2001 and that the bill took up its fundamental principles. Whether a VPN operator would fall under any duty of San Marino law is not established.
The 2016 law contains no blocking or content-restriction rule; its articles concern unauthorised access, interception, damage to data, computer fraud and electronic documents.
Unauthorised access to a protected computer system (art. 182-bis of the Criminal Code) is punished by second-degree imprisonment, rising to third degree for system operators, public officials or private investigators. Unlawful interception of or interference with computer communications (art. 190-bis) is punished by third-degree imprisonment, and installing interception equipment by second degree. Damage to data and programs (art. 203-bis) and computer fraud (art. 204-ter, with a fine of EUR 600 to 3,000) are also offences.
The order of the rows is the security score, and a server’s location is not a recommendation.
San Marino
Only a provider that publishes a country list appears here at all — 41 of the 77 on file. The other 27 are not missing research: they publish no list, and U02_server_countries is unknown for them rather than filled from the number their marketing claims.
A provider that says “100+ countries” and enumerates none gets no page on any of them, and the count printed on its own record is the length of the list, never the claim. With 41 providers behind 180 countries, the long tail of these pages carries one or two rows.
More countries