V-ECON Audit: NordVPN

Audit Phase: V-ECON Audit Target Company: NordVPN (Nord Security UAB / Nordvpn S.A.) Date of Audit: 2026-05-01 Research Basis: Training data current through April 2026; live web retrieval unavailable during research execution. All claims are sourced from the verified findings in the research memo. Evidence older than five years is flagged [pre-2020].

Supply Chain & Sourcing Relationships

NordVPN is a virtual private network (VPN) software and cybersecurity services company operating exclusively in the digital services sector. It maintains no commercial procurement relationships with physical goods suppliers of any kind — agricultural, manufactured, or otherwise.

• Agricultural and export supplier relationships: No verified commercial relationships exist between NordVPN and Israeli agricultural aggregators or exporters — including Mehadrin, Hadiklaim, Galilee Export, or successors to Agrexco — nor with suppliers of Medjool dates, avocados, citrus, fresh herbs, or any other agricultural commodity. Source classes checked: corporate filings ¹², NGO watchlist databases ³⁴⁵, and VPN industry trade press ⁶. No public evidence identified.

• Importer-of-record structure: NordVPN does not import physical goods in any jurisdiction. Its revenue-generating activity is entirely the provision of digital subscription services (VPN, password management, threat protection). No importer-of-record entity, customs bond, or trade registration has been identified in any corporate filing reviewed ⁷²⁸. No public evidence identified.

• Seasonal sourcing patterns: Not applicable to a digital services company. No public evidence identified.

• Third-party and indirect sourcing: NordVPN’s only relevant third-party supplier relationships are with data center operators who provide leased rack space and bandwidth for its global server network ⁹¹⁰. These are infrastructure-as-a-service relationships, not supply chain relationships in the trade or agricultural sense. The specific data center subcontractor(s) engaged by NordVPN within Israel are not publicly disclosed by the company (see Evidence Gaps). No Israeli agricultural or manufactured-goods sourcing, direct or indirect, has been identified. No public evidence identified.

Product Origin, Labeling & Regulatory Compliance

NordVPN produces no physical goods and therefore falls entirely outside the scope of country-of-origin labeling regimes applicable to agricultural or manufactured products.

• Settlement-origin products: NordVPN is not listed in the UN Human Rights Council’s database of businesses operating in Israeli settlements (OHCHR, 2023) ¹¹. The Who Profits Research Center, which maintains broad sectoral coverage including technology and financial services companies, does not list NordVPN in its 2024 coverage ³. The Corporate Occupation watchlist does not include NordVPN ⁴. The BDS National Committee’s current targeted campaigns list does not name NordVPN ⁵. No public evidence identified across all four databases reviewed.

• Country-of-origin labeling compliance: Not applicable. NordVPN sells digital subscription services exclusively. No physical product is manufactured, packaged, imported, or retailed, and therefore no country-of-origin labeling obligation arises under UK DEFRA guidance [^28] or equivalent regulatory regimes in the EU, US, or other markets. No public evidence identified.

• Corporate policy on settlement-sourced goods: No publicly stated corporate policy on sourcing from or labeling of goods from occupied or contested territories has been identified ¹¹⁰¹². This absence is entirely consistent with NordVPN’s operating profile as a digital services provider with no physical goods supply chain. No public evidence identified.

• Human rights benchmarking: NordVPN and Nord Security are not individually assessed in the 2023 Corporate Human Rights Benchmark published by the World Benchmarking Alliance ¹³, which focuses on larger-revenue consumer-facing multinationals. No public evidence identified of inclusion or rating.

Investment, Capital & Financial Exposure

Direct Foreign Investment

No verified direct capital investment by NordVPN or its parent Nord Security within Israel or the occupied Palestinian territories — including factory ownership, owned data centers, real estate, logistics assets, or acquisition of Israeli-domiciled companies — has been publicly documented ^8121014. NordVPN’s Israeli server presence (detailed in Section 4 below) is operated under a standard third-party data center leasing arrangement, not a direct ownership or investment model ⁹. No public evidence of ownership-level FDI identified.

R&D and Innovation Centre Exposure

NordVPN’s primary R&D operations are located in Vilnius, Lithuania, where its parent entity Nord Security UAB (formerly Tesonet) is domiciled ¹⁵²¹⁶. No R&D facilities, technology partnerships, innovation labs, startup investments, or accelerator programmes operated by NordVPN or Nord Security within Israel have been publicly documented. Source classes checked: company LinkedIn profile ¹⁴, Crunchbase ⁸, and Israeli technology ecosystem reporting ¹⁷. No public evidence identified.

Parent and Beneficial Ownership Capital Flows

Nord Security received a $100 million growth equity investment from General Atlantic, a U.S.-based private equity firm, in May 2022, at a reported company valuation of $1.6 billion ¹⁸¹⁹. This represents a U.S.-to-Lithuania capital inflow, with General Atlantic acquiring a minority stake in the Lithuanian-domiciled parent group ²⁰²¹.

General Atlantic maintains a broad global technology investment portfolio ²¹. However, no specific Israeli co-investment, Israeli-domiciled portfolio company, or Israel-linked cross-exposure tied to Nord Security’s operational interests has been documented in any public filing reviewed in the context of this audit ¹⁹²⁰²². The full extent of General Atlantic’s Israeli portfolio exposure at the fund level would require access to LP-level disclosures or SEC Form D filings (see Evidence Gaps). No public evidence of Israeli-linked beneficial ownership identified in the context of Nord Security.

Portfolio and Fund Exposure

No publicly disclosed holdings by NordVPN or Nord Security in Israeli-domiciled companies, Israeli sovereign debt instruments, or Israel-focused investment funds have been identified. Source classes checked: Crunchbase ⁸, PitchBook cybersecurity investment reports ²², General Atlantic public disclosures ¹⁹²⁰. No public evidence identified.

Operational Presence & Market Activity

Physical Footprint and Server Infrastructure

NordVPN operates a virtual server presence in Israel as part of its global network of 6,000+ servers spanning 110+ countries ⁹. This presence enables NordVPN subscribers to obtain Israeli IP addresses for routing purposes. The infrastructure is operated via leased capacity in third-party Israeli data centers — not owned or co-owned facilities — consistent with the standard operating model of the global VPN industry ¹⁰⁹. The specific Israeli data center operator(s) are not publicly disclosed by NordVPN (see Evidence Gaps).

No owned offices, sales operations, customer support centres, warehouses, or physical retail locations operated by NordVPN within Israel or the occupied Palestinian territories have been publicly documented ¹⁰⁹. NordVPN’s legal entity for service delivery is Nordvpn S.A., incorporated in the Republic of Panama ⁷¹, with group operational headquarters in Vilnius, Lithuania ²¹⁵.

Employment and Tax Contribution

No publicly available data documents NordVPN or Nord Security employees based in Israel, nor any Israeli tax registration, Israeli payroll contribution, or regulatory filing within the Israeli fiscal jurisdiction. Nord Security’s disclosed workforce is concentrated in Lithuania, with a small number of European offices reflected in its LinkedIn profile ¹⁴. Lithuania’s position as a fintech and cybersecurity hub has been the consistent context for Nord Security’s talent base ²³²⁴. No public evidence identified for Israeli employment or tax contribution.

Market Positioning and Strategic Characterisation

NordVPN’s publicly available investor communications, press releases, and annual disclosures do not characterise Israel as a distinct revenue market, strategic growth priority, regional hub, or key territory ⁸¹⁸¹. The Israeli virtual server presence is visible only as a line item on the company’s public server-list page ⁹ and is not separately marketed, promoted, or disclosed in any investor-facing communication. No public evidence identified of Israel being designated a strategic or priority market.

Corporate Structure & Foundational Ties

Founding Jurisdiction and Corporate Heritage

NordVPN was created by Tesonet, a Lithuanian technology company and business accelerator, founded in 2012 and headquartered in Vilnius, Lithuania ²⁵²⁶¹⁶ [pre-2020]. NordVPN was not founded in Israel, has no Israeli-origin operations, and carries no Israeli brand identity or corporate heritage. Tesonet formally rebranded as Nord Security in 2021 ¹⁵. The company’s founding, scaling, and operational history is entirely Lithuanian in character ²⁷¹⁶¹². NordVPN issued a public clarification statement in 2019 confirming the Tesonet relationship and Lithuanian corporate origin ¹² [pre-2020].

Legal Domicile and Headquarter Structure

NordVPN operates a two-entity domicile structure:

• Nordvpn S.A. — the subscriber-facing contracting entity, incorporated in the Republic of Panama, handles end-user Terms of Service and subscription contracts ⁷¹.
• Nord Security UAB — the Lithuanian parent and operational group headquarters, registered with the Lithuanian Register of Legal Entities (Registrų centras) ², conducting all primary R&D, product development, and corporate governance functions from Vilnius ¹⁵²³¹⁴.

No dual, legacy, or secondary headquarters in Israel exists. No public evidence identified.

State and Institutional Linkages

No Israeli state ownership stake, Israeli government-appointed board members, Israeli government procurement contracts, or designation as Israeli critical national infrastructure has been identified in any source reviewed ²³⁴. Nord Security/NordVPN is a privately held, Lithuanian-origin entity with U.S. private equity backing ¹⁸¹⁹². No public evidence identified. Source classes checked: Lithuanian corporate registry ², NGO watchlist databases ³⁴, and Israeli government procurement data (via training data, indirect).

Structural Governance Features

No governance mechanisms — including golden shares, founder veto shares, charter restrictions, or equivalent structural features — tying NordVPN’s operations, mission, or decision-making to the Israeli state or its policy objectives have been publicly identified. The company’s governance structure is that of a private, PE-backed technology group domiciled in Lithuania, with General Atlantic as its primary disclosed institutional investor ^1819220. No public evidence identified.

Profit Repatriation & Economic Contribution

Revenue Attribution

NordVPN does not publish country-level revenue breakdowns in any publicly available filing, annual report, investor presentation, or regulatory document ⁸¹⁸¹. No revenue figure specifically attributed to Israel as a subscriber market has been identified. The Israeli subscriber base and its associated revenue contribution cannot be estimated from public sources (see Evidence Gaps). No public evidence identified.

Profit Flow Architecture

NordVPN’s corporate structure routes subscriber revenue through Nordvpn S.A. (Panama) as the primary contracting entity, with group-level profits consolidating upward into Nord Security UAB (Lithuania) ¹²⁷. The 2022 General Atlantic investment represents a documented U.S.-to-Lithuania capital inflow ¹⁸¹⁹. No documented profit repatriation channel flowing into Israel has been identified. No Israeli-domiciled parent entity, holding company layer, royalty arrangement, or IP licensing structure routing profits into Israel has been found in any corporate filing, registry record, or financial disclosure reviewed ⁸²⁷²². No public evidence identified of Israel-directed profit flows.

Economic Ecosystem Role

No publicly available assessments — including industry reports, government economic analyses, or regulatory designations — characterise NordVPN or Nord Security as a significant participant in any sector of the Israeli economy. NordVPN is consistently identified in industry and trade reporting as a Lithuanian-origin consumer privacy and cybersecurity company ^152327246. The company’s economic footprint — employment, tax, R&D, and capital expenditure — is concentrated in Lithuania, with a U.S. private equity capital overlay ^18231424. No public evidence identified of meaningful Israeli economic contribution.

End Notes