EU Alts
Mullvad VPN logo

Mullvad VPN

No-logs VPN with anonymous accounts — a Swedish privacy alternative to NordVPN and ExpressVPN.

Overview

Mullvad VPN is a Gothenburg, Sweden-based European company building privacy, security, and vpn software since 2009. As an EU-headquartered provider, Mullvad VPN operates under GDPR and is outside the reach of the US CLOUD Act, making it a privacy-friendly alternative to well-known US incumbents for European teams.

Why European teams pick Mullvad VPN

Teams in Europe pick Mullvad VPN when they want a privacy provider that bills in EUR, supports their local data-protection officer requirements, and keeps customer data under Sweden law, operating since 2009. Compared with well-known US incumbents, Mullvad VPN avoids cross-border data transfers under Schrems II and the US CLOUD Act, which is often the deciding factor for European procurement and legal teams.

See more EU privacy tools or browse other startups from Sweden.

About

Mullvad VPN is a Swedish privacy-focused VPN provider founded in Gothenburg in 2009 with an unusually strong commitment to anonymity and data minimisation. It does not require an email address to sign up — accounts are identified only by a randomly generated 16-digit number. Mullvad accepts cash, cryptocurrency, and bank transfer, allowing truly anonymous payment. It enforces a strict no-logs policy that has been independently verified by Cure53 in annual audits. The Mullvad browser, co-developed with the Tor Project, is designed to prevent fingerprinting and tracking. Mullvad operates its own DNS servers and VPN infrastructure in Sweden and across Europe, with no reliance on US infrastructure or US-regulated entities.

Details

Founded
2009
Headquarters
Gothenburg, Sweden

Other EU startups like Mullvad VPN

  • FormVaultNorway GDPR-compliant form builder with end-to-end encryption (AES-256-GCM), EU data residency, and a submission dashboard. No cookie banners needed.
  • IubendaItaly Legal compliance tools for websites and apps — an Italian alternative to Osano.
  • NotesnookGermany Zero-knowledge encrypted note-taking app — an alternative to Evernote.
  • Standard NotesFrance End-to-end encrypted notes app — a European alternative to Evernote and Notion.
  • CookiebotDenmark Automated cookie scanning and consent management — a Danish alternative to OneTrust.
  • UsercentricsGermany Consent management platform for GDPR compliance — a German alternative to OneTrust.

Frequently asked questions

What is Mullvad VPN?

Mullvad VPN is a Swedish privacy-focused VPN provider founded in Gothenburg in 2009 with an unusually strong commitment to anonymity and data minimisation. It does not require an email address to sign up — accounts are identified only by a randomly generated 16-digit number. Mullvad accepts cash, cryptocurrency, and bank transfer, allowing truly anonymous payment. It enforces a strict no-logs policy that has been independently verified by Cure53 in annual audits. The Mullvad browser, co-developed with the Tor Project, is designed to prevent fingerprinting and tracking. Mullvad operates its own DNS servers and VPN infrastructure in Sweden and across Europe, with no reliance on US infrastructure or US-regulated entities.

What does Mullvad VPN do?

Mullvad VPN is no-logs vpn with anonymous accounts — a swedish privacy alternative to nordvpn and expressvpn. It is listed under privacy, security, and vpn on EU Alts because its core functionality serves teams looking for a European privacy tool with EU data residency, typically as a switch away from well-known US incumbents.

Is Mullvad VPN a good European privacy alternative?

Mullvad VPN is a fit for European businesses evaluating privacy options where data residency and GDPR alignment matter — typical buyers include EU-based SaaS teams, public-sector projects, regulated industries (healthcare, finance, legal), and any organisation that needs to demonstrate that customer data does not leave the EU. It also overlaps with security and vpn use cases.

Is Mullvad VPN GDPR compliant?

Mullvad VPN is headquartered in Gothenburg, Sweden and falls under EU jurisdiction, so it processes user data under the GDPR by default. Customer data processing is supervised by Sweden's data protection authority, the Integritetsskyddsmyndigheten (IMY). Because the company is not US-incorporated, it is not subject to the US CLOUD Act — meaning US authorities cannot compel Mullvad VPN to disclose customer data the way they can with well-known US incumbents. For European buyers, that often simplifies DPIA paperwork and standard contractual clauses.

How do teams switch from well-known US incumbents to Mullvad VPN?

Most teams move to Mullvad VPN from well-known US incumbents because they want EU data residency without giving up the core privacy workflow. Mullvad VPN's Sweden base means a single jurisdiction for both the company and (typically) its hosting infrastructure, so you can drop Schrems II transfer impact assessments for this part of your stack. Plan the migration in stages: export your data from the US incumbent, pilot Mullvad VPN with a small team, then move the rest once the integration coverage you need is confirmed.

Where is Mullvad VPN based?

Mullvad VPN is headquartered in Gothenburg, Sweden. The company was founded in 2009. Its main website is https://mullvad.net.