V-POL Audit: NordVPN

Prepared by: Domain Audit Unit Audit Phase: V-POL Target Company: NordVPN (Nord Security / Tefincom S.A.) Reference Date: 2026-05-01

Corporate Communications & Public Stance

NordVPN and its parent, Nord Security, have issued no public statement on the Israel-Palestine conflict, the October 7, 2023 Hamas attacks, the subsequent Israeli military operations in Gaza, or any related humanitarian developments. A review of the company’s public blog, press release archive, and social media channels through April 2026 identifies no such communication ¹.

This silence is notable against the backdrop of the company’s documented willingness to take public positions on other geopolitical matters:

• In March 2022, following Russia’s invasion of Ukraine, Nord Security publicly announced the withdrawal of its server infrastructure from Russia and Belarus, framing the decision explicitly in terms of opposition to censorship and support for press freedom ¹. The company also extended free service access to Ukrainian users during that period ¹.
• Nord Security published social-media content aligned with LGBTQ+ Pride Month themes in 2022 and 2023 ¹.
• No equivalent public communications have been identified addressing the Israel-Palestine conflict, the conflict in Yemen, the Uyghur situation in Xinjiang, or the Myanmar crisis.

This constitutes a pattern of selective public commentary — the company chooses to engage on certain geopolitical and social issues while remaining silent on others. The absence of statements across multiple unrelated conflict theatres limits the inference that silence on Israel-Palestine is uniquely motivated, but the contrast with the Ukraine response is the most directly comparable case.

NordVPN lists Israeli server locations (Tel Aviv) on its public server infrastructure page as standard commercial network points of presence, with no special geopolitical framing distinguishing them from other markets ². No annual report or public financial disclosure is available; Nord Security is privately held and publishes no audited financial statements ^{1 3}.

Operations in Occupied or Contested Territories

Server Infrastructure in Israel

NordVPN operates server infrastructure in Israel, listed publicly as “Israel (Tel Aviv)” on its server network page ². This presence is consistent with NordVPN’s global commercial footprint across 60+ countries and is presented without any geopolitical qualification ^{1 2}.

No public evidence has been identified of NordVPN operating servers, service contracts, dealer networks, subsidiary entities, or any form of commercial infrastructure specifically within internationally recognized Israeli settlements in the West Bank, East Jerusalem, or the Golan Heights, as distinct from operations within Israel’s pre-1967 internationally recognized borders. The precise physical location and data-center contractual arrangements underpinning the Israeli server presence cannot be independently confirmed from publicly available sources — an acknowledged evidence gap that a complete audit would require live research to close ².

UN Database Status

NordVPN, Nord Security, and Tefincom S.A. do not appear on the UN Human Rights Council database (A/HRC/43/71, published February 12, 2020) of businesses with verified activities in Israeli settlements ⁴. No subsequent UN, intergovernmental, or national court proceeding identifying NordVPN in connection with settlement-linked operations has been identified in training data.

Civil Society & Boycott Campaigns

No public evidence has been identified of NordVPN being named as a target of any organized BDS (Boycott, Divestment and Sanctions) campaign. The BDS National Committee’s publicly documented target lists, as observable in training data through April 2026, do not include NordVPN ⁵. No institutional investor divestment campaign citing NordVPN’s Israel-related operations has been identified. Because no campaign is identified, there is no company response to document.

Internal Governance, Content & Retail Policies

Employee Relations

No public evidence has been identified of HR controversies, disciplinary proceedings, employee terminations, or legal actions at NordVPN or Nord Security involving employee political speech, the display of political symbols (e.g., Palestinian flags, keffiyehs, Israeli flags), or any union organizing activity related to the Israel-Palestine conflict ^{1 6}. Nord Security is headquartered in Vilnius, Lithuania, with operational presence via Tefincom S.A. in Panama and additional offices in the Netherlands. No Lithuanian labor tribunal records involving the company on these subjects are identified in training data.

Internal HR policies, employee political speech rules, and any internal communications addressing the Israel-Palestine conflict are not publicly available. The absence of public evidence here reflects the limits of open-source records rather than a confirmed absence of internal activity.

Platform & Editorial Policy

NordVPN is a VPN service provider, not a content platform or publisher. It does not moderate user-generated content, operate editorial functions, or curate speech in the conventional sense in which platform companies do.

NordVPN’s Terms of Service and Acceptable Use Policy prohibit illegal activity but contain no Israel/Palestine-specific content moderation provisions, geographic service restrictions tied to that conflict, or related carve-outs ⁷. No independent academic study, regulatory inquiry, or NGO investigation of NordVPN’s services as a tool for suppressing or amplifying content related to the Israel-Palestine conflict has been identified in training data. The Electronic Frontier Foundation and similar digital rights organizations have discussed VPN use in conflict zones in general terms, but no NordVPN-specific finding on this subject has emerged in EFF publications ⁸.

Retail & Supply Chain

NordVPN is a software and services company; it does not retail physical products and carries no product-labeling obligations under EU or national frameworks governing goods from occupied territories. No documented supply chain involving physical goods originating from Israeli settlements exists. No regulatory action or NGO investigation into NordVPN supply-chain practices related to this conflict has been identified.

Brand Heritage & State Partnerships

Marketing Positioning & Founding Narrative

NordVPN’s commercial branding centers on privacy, cybersecurity, and digital freedom. No military heritage, defense-sector origin, or state-security founding narrative appears in its consumer marketing ^{1 6}. Nord Security was incubated within Tesonet, a Lithuanian commercial technology holding company, with a founding narrative that emphasizes entrepreneurship and privacy technology rather than state-security service ^{6 6}.

State Honors & Institutional Partnerships

No public evidence has been identified of NordVPN:

• Accepting formal state honors from any government relevant to this audit domain.
• Hosting Israeli or Palestinian government officials in a non-commercial partnership capacity.
• Entering formal academic partnerships with Israeli state universities or government-linked institutions.
• Sponsoring “Brand Israel” campaigns, Israeli government public diplomacy efforts, or hasbara initiatives.
• Sponsoring equivalent Palestinian advocacy campaigns.

Documented Sponsorship Activity

NordVPN’s sponsorship footprint consists overwhelmingly of content-creator advertising partnerships across YouTube channels and podcasts — standard performance-marketing activity for the consumer VPN sector, with no documented geopolitical state-promotion dimension ¹. Lithuania’s national cybersecurity strategy (2021–2030) involves broad coordination with domestic technology firms; no specific formal NordVPN role in that strategy with any nexus to Israel-Palestine dynamics has been identified in available sources ¹.

Lobbying, Advocacy, Financing & Logistics

Political Lobbying

No public evidence has been identified of NordVPN or Nord Security registering as a lobbyist, or engaging in lobbying activity, before any legislature or regulatory body in connection with Israel-Palestine policy, BDS-related legislation, or regional trade measures. Specifically:

• No Foreign Agents Registration Act (FARA) or Lobbying Disclosure Act (LDA) registration in the United States on these subjects is identified ³.
• No entry in the EU Transparency Register for Nord Security on these subjects is identified ³.
• No equivalent UK or Israeli lobbying disclosures are identified.
• No NordVPN leadership role in geopolitical pressure groups or Israel-advocacy organizations has been documented ³.

Financial Contributions

No public evidence has been identified of NordVPN or Nord Security making corporate donations to:

• Israeli parastatal organizations.
• Settlement-linked funds or land acquisition bodies (e.g., Jewish National Fund / JNF).
• IDF welfare or support funds (e.g., Friends of the IDF / FIDF).
• Equivalent Palestinian solidarity or advocacy organizations.

Nord Security’s confirmed external investor as of its 2022 Series A is Novator Partners, a European venture capital firm ^{9 10}. No investor with a documented parastatal, settlement-linked, or conflict-adjacent financial profile has been identified in the company’s disclosed capital structure ^{9 3}.

Crisis Asset Mobilization

No public evidence has been identified of NordVPN directing corporate resources — including free VPN subscriptions, server capacity, crisis credits, or logistical support — to Israeli state bodies, IDF-aligned organizations, settler groups, or Palestinian organizations during or following the October 2023 escalation.

For comparative context: NordVPN did offer free service access to users in Ukraine following the February 2022 Russian invasion ¹. This constitutes a documented instance of crisis asset mobilization in a separate conflict context. No parallel action directed at any party in the Israel-Palestine conflict has been identified.

Corporate Structure & Primary Mission

Legal Entity & Jurisdiction

NordVPN is operated by Tefincom S.A., a company incorporated in Panama, functioning as the legal entity through which the VPN service is contracted to end users ⁶. Tefincom S.A. is part of the Nord Security group, with its operational and corporate headquarters in Vilnius, Lithuania ^{1 6}. The Panama incorporation structure is a common feature among consumer VPN providers seeking jurisdictional distance from national data-retention and surveillance laws; it is not specific to Israel-Palestine-related operational considerations ⁶.

Nord Security was incubated within Tesonet, a Lithuanian technology holding company, before establishing independent corporate identity ^{6 3}. The full beneficial ownership chain of Tefincom S.A. cannot be confirmed from publicly available sources; a Panama Registro Público search would be required to verify current registered ownership. Nord Security is privately held; no state-held golden shares, sovereign wealth fund equity stakes, or confirmed governmental equity participation are documented in training data ^{6 3}.

Primary Mission

Nord Security’s publicly stated corporate mission is commercial: the development and sale of consumer and enterprise privacy and cybersecurity products, including NordVPN, NordPass, NordLocker, and NordLayer ¹. No corporate charter language or founding document tying Nord Security’s primary mission to advancing any state’s geopolitical goals — Israeli, Lithuanian, or otherwise — has been identified ¹. The company’s 2022 Series A funding of $100 million at a $1.6 billion valuation reflects a commercial growth trajectory oriented toward the cybersecurity product market ⁹.

Executive & Leadership Footprint

Founders & Key Executives

NordVPN’s key founders include Tom Okman and Eimantas Sabaliauskas, both Lithuanian nationals who were central to the company’s founding within the Tesonet ecosystem ^{6 3}. No additional C-suite executives at Nord Security are identified in training data with a publicly documented profile relevant to this audit domain.

Personal Philanthropy & Financial Contributions

No verifiable personal donations, family foundation grants, or fundraising activities by Tom Okman, Eimantas Sabaliauskas, or any other identified Nord Security executive directed toward Israeli parastatal organizations (e.g., FIDF, JNF), settlement-linked groups, or Palestinian advocacy organizations have been identified in training data ^{6 3}.

The absence of documented personal philanthropy reflects the limits of public records available for private individuals at privately held companies — it does not constitute a confirmed absence of such activity. No public financial disclosures, executive compensation filings, or charity commission records pertaining to these individuals on these subjects are available in open sources.

Public Advocacy & Statements

No public statements, social media posts, op-eds, signed open letters, or conference remarks by Tom Okman, Eimantas Sabaliauskas, or other identified Nord Security executives regarding the Israel-Palestine conflict have been identified in training data. Neither founder’s public persona is documented as closely associated with Israeli or Palestinian political causes.

Board Memberships & Organizational Affiliations

No public evidence has been identified of NordVPN founders or key executives holding board seats, advisory positions, or leadership roles in:

• Israel-advocacy organizations.
• Pro-Palestinian organizations.
• Israeli state-aligned academic or research institutions.
• Geopolitical lobbying bodies connected to either side of this conflict.

End Notes