Law & jurisdiction
What is Fourteen Eyes?
The Fourteen Eyes is the widest of the signals-intelligence sharing groupings, comprising the Five Eyes plus Denmark, France, the Netherlands, Norway, Belgium, Germany, Italy, Spain and Sweden. Membership is a legitimate jurisdiction signal but not a complete analysis: a non-member can still have aggressive domestic retention law, and a member can have strong judicial oversight.
Why Fourteen Eyes matters
Membership is a legitimate jurisdiction signal but not a complete analysis: a non-member can still have aggressive domestic retention law, and a member can have strong judicial oversight.
Fourteen Eyes in practice
When you run a server under Fourteen Eyes jurisdiction, assume your traffic metadata is shared with allied agencies. You would check whether your hosting provider's jurisdiction is a member, review local retention laws, and consider encrypting data in transit and at rest. Getting it wrong costs you: a target's metadata trail can be accessed without your knowledge, undermining your no-logs promises.
What people get wrong about Fourteen Eyes
People think Fourteen Eyes membership automatically means hostile surveillance. The correction: it is a signal, not a verdict. A member state may have strong judicial oversight; a non-member may have aggressive retention. Judge the specific law, not the alliance.
Fourteen Eyes — common questions
Which countries are in Fourteen Eyes?
The Fourteen Eyes comprises the Five Eyes (US, UK, Canada, Australia, New Zealand) plus Denmark, France, Netherlands, Norway, Belgium, Germany, Italy, Spain, and Sweden. It's the widest signals-intelligence sharing group.
Does Fourteen Eyes affect my server privacy?
Yes, if your server is in a member country, intelligence agencies may share your traffic metadata. But privacy also depends on local laws and provider practices. Encrypting everything reduces exposure.
Where Fourteen Eyes comes up
- Which VPS location is best for European users? Frankfurt or Amsterdam for the lowest latency — DE-CIX and AMS-IX are the two densest exchanges in Europe and both reach most of the continent inside 25 ms…
- What is offshore hosting? Offshore hosting means placing a server in a jurisdiction other than your own — usually one outside the Fourteen Eyes intelligence-sharing alliances and ou…
- Which country is best for offshore hosting? There is no single best country — it depends on which threat you are addressing. For legal protection with European latency, Switzerland or Iceland. For mi…
- Which countries are in the Five, Nine and Fourteen Eyes? Five Eyes: the United States, United Kingdom, Canada, Australia and New Zealand. Nine Eyes adds Denmark, France, the Netherlands and Norway. Fourteen Eyes …
- Is Switzerland good for privacy-focused hosting? Yes — it has the strongest and best-tested statutory framework in our fleet. Swiss law treats hosted data much like correspondence, so disclosure requires …
- Offshore vs onshore hosting: what actually changes Offshore hosting means placing a server in a jurisdiction other than your own, usually one outside the Fourteen Eyes alliances and outside EU data-retentio…
More from law & jurisdiction
- Warrant canary
- A warrant canary is a regularly republished statement that a provider has not received a secret legal demand; its disappearance implies that one has arrived.
- KYC
- KYC is the set of identity-verification duties imposed on regulated financial institutions before providing services.
- No-KYC hosting
- No-KYC hosting is server hosting that requires no identity verification — no government ID, billing address, phone number or payment card.
- Offshore hosting
- Offshore hosting means placing a server in a jurisdiction other than your own, typically one outside the Fourteen Eyes alliances and outside EU data-retention rules.
- Five Eyes
- The Five Eyes is a signals-intelligence sharing alliance between the United States, United Kingdom, Canada, Australia and New Zealand.
- MLAT
- An MLAT is a treaty through which one country formally requests another to gather evidence on its behalf.
- DMCA
- The DMCA is United States copyright statute whose notice-and-takedown procedure and safe harbour apply to service providers situated in the United States.
- Data retention
- Data retention laws require communications providers to store connection metadata for a defined period so that authorities can obtain it later.