united-states internet privacy international switzerland
Do VPN providers really operate under single jurisdiction, even though their servers are located in many different countries?
<p>For example, ProtonVPN claims in many places (e.g. <a href="https://protonvpn.com/blog/transparency-report/" rel="nofollow noreferrer">Transparency Report</a>, <a href="https://protonvpn.com/terms-and-conditions" rel="nofollow noreferrer">Terms and Conditions</a>, <a href="https://protonvpn.com/privacy-policy" rel="nofollow noreferrer">Privacy Policy</a>) that their service operates "<em>under Swiss law</em>", which, among other things (based on their claims), allows them not to save connection logs.</p>

<p>I would understand the logic of such claims, if all their servers were physically located in Switzerland. E.g. user from USA connects to VPN server in Switzerland, then if VPN provider asked (e.g. by court order) to reveal logs it can simply state: "under Swiss law, we are not obligated to save connection logs".</p>

<p>But when user connects to a VPN server physically located in USA but owned by company based in Switzerland, wouldn't the US law be applied in this case (concerning saving connection logs and all the other things), regardless of where company's headquarters are?</p>

<blockquote>
  <p>But when user connects to a VPN server physically located in USA but
  owned by company based in Switzerland, wouldn't the US law be applied
  in this case (concerning saving connection logs and all the other
  things), regardless of where company's headquarters are?</p>
</blockquote>

<p>The US law could well be applied if the VPN provider was challenged in a US court, or served a <a href="https://en.wikipedia.org/wiki/Warrant_canary" rel="nofollow noreferrer">secret government subpoena</a>. But until that happens and becomes publicly known they can keep claiming whatever to keep sales up.</p>

<p>Same applies to any other country where their servers are.</p>
