Hacker News Reader

I used to be a PIA customer and I liked the idea that they do not log anything. However, the lack of a good third-party audits that support their claims, is something that I found weird. Is there a way you can prove that you do not log anything beyond just blog posts?

View on HN

Great question - this is indeed an issue as it's difficult to prove to others that you are/aren't doing something which they cannot verify without gaining full access to all of your servers in their entirety.

However, our trust comes from the many years that we have operated this business in this fashion and the good faith of our users.

With that said, we have been in discussions with some well known privacy organizations regarding the setup of an auditing body that could verify these sort of things.

Thanks for your reply. When can we hear about those bodies or organizations? I am highly interested in that because that is one of the things that is keeping me away from PIA at this point.

Reply on news.ycombinator.com