The majority of major commercial VPN operators, such as SurfShark and NordVPN, have what is known as a ‘no logs’ policy. Put simply, this means that they do not keep any records of what their users do when they are connected to the service. This means that there is no risk of activity later being audited by someone else and a user being challenged on the basis of their browsing history. In order to make this possible, VPN companies are generally registered in countries with light-touch approaches to internet regulation. In some cases, the government requires that ISPs and other internet companies keep records of all internet activity. This generally means that a VPN company with a robust approach to privacy will not be able to operate in that particular country. This is the case for places such as China and Saudi Arabia, where VPN services are not generally available. Indeed, China is not even offered as a potential endpoint location by the vast majority of VPN companies for precisely this reason.