Servers in country
Providers with exit locations in Uganda: a server here gives you an address in the country. The register’s table records no mandate for VPN operators here; the briefing below sets out what the law asks of providers.
Only a few providers publish an exit here.
Providers with exit locations in a country — a fact about a network, kept deliberately apart from where the company is registered. Only providers whose country list has a source appear: a provider that publishes nothing simply does not show up, which is a criterion already in the data rather than an editorial one.
Uganda’s Regulation of Interception of Communications Act requires every service provider to keep its systems capable of lawful interception at all times, on pain of up to five years’ imprisonment and possible loss of licence. The Constitutional Court struck down offensive communication as an offence in January 2023 and declared the Computer Misuse (Amendment) Act 2022 void in March 2026 and found the Penal Code’s criminal libel offence inconsistent with the African Charter.
The Regulation of Interception of Communications Act (Chapter 101) requires a service provider to keep its systems technically capable of lawful interception at all times, with real-time and full-time monitoring and interfaces to the Monitoring Centre, which is the sole facility for authorised interceptions (sections 3 and 8). Failure is an offence punishable by a fine of up to 120 currency points or up to five years’ imprisonment, and the Minister may cancel the licence.
A telecommunications provider must obtain each customer’s name, addresses and identity number before contracting and keep records of that information and any change (section 9). The Act sets no retention period for those records or for traffic data. Whether a VPN operator is a telecommunications service provider under the Act is not established.
An authorised person may serve a written notice requiring the holder of a key to protected, encrypted information to disclose it, on grounds of national security, threat to life, drug or human trafficking, or the economic well-being of Uganda; failing to comply carries up to five years (section 10).
In January 2026 the Uganda Communications Commission ordered operators to suspend public internet access from 6 pm on 13 January, citing its powers under the Uganda Communications Act; restoration was directed on 18 January 2026. Unwanted Witness reports that major social media and messaging platforms stayed blocked for a further eight days.
Under the Computer Misuse Act (2023 edition), cyber harassment carries a fine of up to 72 currency points, up to three years, or both (section 24), and cyber stalking a fine of up to 120 currency points, up to five years, or both (section 25). The Constitutional Court struck down offensive communication on 10 January 2023 as vague and overly broad.
On 17 March 2026 the Constitutional Court held that Parliament passed the Computer Misuse (Amendment) Act 2022 without verifying a quorum, so that the Act was void. It declared void the provisions of the Computer Misuse Act challenged in the petitions, among them hate speech, unsolicited information, malicious information and misuse of social media (sections 26 to 29), and barred their enforcement by permanent injunction.
The same judgment found the criminal libel offence in section 162 of the Penal Code Act inconsistent with the African Charter on Human and Peoples’ Rights. A court may order a provider to preserve data, including traffic data and subscriber information (section 8), or to submit subscriber information (section 10); a search warrant may compel it, within its existing technical capability, to record traffic data in real time (section 31).
Interception needs a warrant from a designated judge, issued only on listed grounds. The order of the rows is the security score, and a server’s location is not a recommendation.
Uganda
Only a provider that publishes a country list appears here at all — 41 of the 77 on file. The other 27 are not missing research: they publish no list, and U02_server_countries is unknown for them rather than filled from the number their marketing claims.
A provider that says “100+ countries” and enumerates none gets no page on any of them, and the count printed on its own record is the length of the list, never the claim. With 41 providers behind 180 countries, the long tail of these pages carries one or two rows.
More countries
Coverage147countries
Paying monthly$9.99monthly
Paying yearly$53.88yearly total
Free tierYeslimited free plan
Devices10at once
Security
Usability
Coverage168countries
Paying monthly$11.99monthly
Paying yearly$47.84yearly total
Free tierYeslimited free plan
Devices5at once
Security
Usability
