Servers in country
Providers with exit locations in Kosovo: a server here gives you an address in the country. The register’s table records no mandate for VPN operators here; the briefing below sets out what the law asks of providers.
Only a few providers publish an exit here.
Providers with exit locations in a country — a fact about a network, kept deliberately apart from where the company is registered. Only providers whose country list has a source appear: a provider that publishes nothing simply does not show up, which is a criterion already in the data rather than an editorial one.
Kosovo’s interception law fixes a ceiling rather than a floor: providers may keep metadata for no more than nine calendar months and may not record the content of calls or messages. A court orders interception in a criminal case, and the Commissioner for Oversight is a Supreme Court judge appointed by the Judicial Council.
Law No. 05/L-030 on Interception of Electronic Communications (Official Gazette No. 18, 13 July 2015) applies to authorised institutions, network operators and public service providers licensed by the Regulatory Authority of Electronic and Postal Communications (article 2). Operators and providers must not record or retain call or message content; they may retain metadata for a maximum of nine calendar months, provide it to authorised institutions within that period, and then erase it (article 30).
They must install and maintain the facilities for lawful interception (article 31). A refusal to comply can bring a fine of EUR 86,000 up to 7% of annual electronic-communications revenue, and repeated refusal suspension or revocation of the authorisation (article 22). Whether a VPN operator is a licensed provider under the law is not established.
According to the US State Department’s 2024 human rights report, Kosovo law prohibits publicly inciting or spreading hatred, discord and intolerance between national, racial, religious, ethnic or other groups, or on grounds of sexual orientation, gender identity and other personal characteristics, in a manner likely to disturb public order.
Interception of messages or communications through computer networks in a criminal case is ordered by a court on the State Prosecutor’s request (article 10). In urgent cases the prosecutor may issue a written provisional order, which lapses, with its product unlawful, unless a judge confirms it within three days, and which cannot be repeated.
The Constitution makes the confidentiality of correspondence, telecommunication and other communication an inviolable right, which a court decision may limit temporarily only for criminal proceedings or the defence of the country (article 36). It makes the European Convention on Human Rights directly applicable, with priority over laws (article 22).
The Commissioner for Oversight of Interception is a Supreme Court judge appointed by the Judicial Council for four years, independent in its work and with a separate budget (articles 32–33). In May 2023 the Kosovar Centre for Security Studies noted that it was unclear how far the Commissioner fulfils the annual checks the law requires. The order of the rows is the security score, and a server’s location is not a recommendation.
Kosovo
Only a provider that publishes a country list appears here at all — 41 of the 77 on file. The other 27 are not missing research: they publish no list, and U02_server_countries is unknown for them rather than filled from the number their marketing claims.
A provider that says “100+ countries” and enumerates none gets no page on any of them, and the count printed on its own record is the length of the list, never the claim. With 41 providers behind 180 countries, the long tail of these pages carries one or two rows.
More countries
Coverage147countries
Paying monthly$9.99monthly
Paying yearly$53.88yearly total
Free tierYeslimited free plan
Devices10at once
Security
Usability
Coverage168countries
Paying monthly$11.99monthly
Paying yearly$47.84yearly total
Free tierYeslimited free plan
Devices5at once
Security
Usability
