Servers in country

VPNs with servers in Somalia

Providers with exit locations in Somalia: a server here gives you an address in the country. The register’s table records no mandate for VPN operators here; the briefing below sets out what the law asks of providers.

3 providersOrdered by securityUpdated 21 October 2026

The HushFleet teamRegister of 21 October 2026

Providers with exit locations in a country — a fact about a network, kept deliberately apart from where the company is registered. Only providers whose country list has a source appear: a provider that publishes nothing simply does not show up, which is a criterion already in the data rather than an editorial one.

Somalia’s communications sector rests on a National Communications Act of 2017, and its Data Protection Act of 2023 sets aside its own principles for processing by authorities for investigations, penal enforcement and national security. In August 2023 the communications ministry ordered providers to block TikTok, Telegram and 1XBet.

The National Communications Act of 2017 is the sector statute. Article 41 bars anyone from providing communication services, or running a network on radio frequencies, without a licence. A licensee must protect national security and meet the Authority’s requests; in a national-security investigation a customer’s number can be requested in writing, and the licensee must keep it secret (art. 65). Providers must register every SIM card and telephone line holder (art. 66).

What the law requires of a provider standing here

The Act sets no data retention period. Whether it reaches a VPN operator is not established.

The Data Protection Act of 2023 applies to a controller domiciled, resident or operating in Somalia, to processing that occurs there, and to processing that monitors, or offers goods or services to, people in Somalia (art. 4). Under article 5(3), processing by competent authorities for criminal investigation or national security falls outside it if it uses “reasonable, proportionate and effective measures” to safeguard data subjects’ rights.

What is restricted

Article 64 of the National Communications Act makes companies responsible for the proper use of their services. It requires them to censor users who use them for things in conflict with Islam and good manners, allows suspension of service to a person who does not stop, and requires the company to tell the Authority in writing.

On 20 August 2023 the Ministry of Communications and Technology ordered internet providers to block TikTok, Telegram and the betting site 1XBet, with compliance due by 24 August 2023. Reporting gives the stated reasons as the spread of violent images and misinformation, explicit content, blackmail and gambling.

In 2022 providers had been ordered to block websites of the al-Shabaab group.

Whether posting can be prosecuted

The 1962 Penal Code remains the basis for charges over speech. Press reporting describes article 328 (false, alarming or exaggerated news: up to six months or a fine) and article 452 (defamation: up to one year, or six months to three years if spread through the media), with article 451 covering insult.

What it means for the rows below

The Data Protection Act calls its Authority an independent agency (article 6(2)), but the general manager is proposed by the Minister, confirmed by Cabinet and appointed by the President (article 13), and article 6(4) requires the Authority to comply with directions from the President and Cabinet in the interests of national security, public order and defence. The order of the rows is the security score, and a server’s location is not a recommendation.

Somalia

Ranked by security

Only a provider that publishes a country list appears here at all — 41 of the 77 on file. The other 27 are not missing research: they publish no list, and U02_server_countries is unknown for them rather than filled from the number their marketing claims.

A provider that says “100+ countries” and enumerates none gets no page on any of them, and the count printed on its own record is the length of the list, never the claim. With 41 providers behind 180 countries, the long tail of these pages carries one or two rows.

Acceptable
1
Proton VPN
Commercial VPNSwitzerland
Coverage147countries
Paying monthly$9.99monthly
Paying yearly$53.88yearly total
Free tierYeslimited free plan
Devices10at once
70 out of 100
Security
78 out of 100
Usability
Visit Review
Insufficient
2
NordVPN
Commercial VPNPanamaNord Security
Coverage149countries
Paying monthly$14.99monthly
Paying yearly$139.08yearly total
Free tierNopaid plans only
Devices10at once
17 out of 100
Security
70 out of 100
Usability
Visit Review
Not recommended
3
VeePN
Commercial VPNPanama
Coverage168countries
Paying monthly$11.99monthly
Paying yearly$47.84yearly total
Free tierYeslimited free plan
Devices5at once
7 out of 100
Security
77 out of 100
Usability
Visit Review

What moved

Changes to the country lists and mandate postures of the providers listed here

Every row is the record’s own history[], filtered to U02_server_countries and P04_mandate_response; the whole log holds every field.

29 Aug 20261 changes

NordVPNResponse to a national logging mandateP04_mandate_response

not on the record changed to withdrew_physical

VPNs with servers in Somalia

Ranked by security

The other 179 countries

Proton VPN

NordVPN

VeePN

Changes to the country lists and mandate postures of the providers listed here