- What are the 5 Eyes, 9 Eyes, and 14 Eyes Alliances?
- What data do the 5, 9, and 14 Eyes collect?
- What surveillance systems do the Eyes Alliances use?
- How do the Eyes Alliances impact user privacy?
- What can you do to protect yourself from the Eyes Alliances?
- Best VPNs outside the 14 Eyes Alliance
- The 5, 9, and 14 Eyes Alliances: Final thoughts
- FAQ
The terms 5 Eyes, 9 Eyes, and 14 Eyes refer to government surveillance alliances established across different countries. Member nations can monitor and log internet activity of online users and share it across borders, typically for security and law enforcement purposes. In addition, the 5, 9, and 14 refer to the number of countries in each alliance. Here’s which countries are included in each alliance:
- 5 Eyes: The United States, the United Kingdom, Canada, Australia and New Zealand.
- 9 Eyes: The United States, the United Kingdom, Canada, Australia, New Zealand, Denmark, France, the Netherlands, and Norway.
- 14 Eyes: The United States, the United Kingdom, Canada, Australia, New Zealand, Denmark, France, the Netherlands, Norway, Germany, Belgium, Italy, Sweden, and Spain.
The Eyes Alliance collects a wide range of data on individuals, including their communications, location information, and internet activity. This extensive surveillance compromises user privacy and makes truly anonymous browsing nearly impossible.
If you want to stay anonymous despite global surveillance, a VPN is your best option. As long as the VPN isn’t based in one of the 14 Eyes countries, it can help protect your online privacy. I recommend NordVPN, based in Panama, which offers strong encryption and a strict no-logs policy.
This article also outlines the types of information these alliances typically collect and the steps you can take to reduce your exposure to online surveillance. While there are several precautions worth considering, using a VPN is one of the most effective and convenient options, as it encrypts your internet traffic. Choosing a VPN based outside Eyes Alliance member countries, such as NordVPN, can offer stronger privacy protections and minimize the risk of government data sharing.
What are the 5 Eyes, 9 Eyes, and 14 Eyes Alliances?
The 5 Eyes, 9 Eyes, and 14 Eyes are alliances that enable collaboration between state agencies to share data about private citizens for national security purposes.
Initially, five countries formed a close intelligence partnership during World War II, which was later formalized under the 1946 UKUSA Agreement. This alliance, now known as the Five Eyes (FVEY), brings together the United States, the United Kingdom, Canada, Australia, and New Zealand to collaborate on signals intelligence (SIGINT), cyber threats, and foreign espionage. SIGINT refers to the interception of electronic signals and communications, which generally fall into two main categories:
- Communication Intelligence (COMINT): Communications between individuals or organizations, such as phone calls, emails, text messages, radio transmissions, and other digital exchanges.
- Electronic Intelligence (ELINT): Collection and analysis of non-communication electronic signals, such as radar systems, weapons systems signals, and other technical emissions used for military or surveillance purposes.
With time, the 5 Eyes Alliance expanded to include other countries. Now, there are three main alliances, each with a different level of information sharing. The image below captures the members of the 5, 9, and 14 Eyes Alliances.
What is the 5 Eyes Alliance?
After World War II, the United Kingdom and the United States were concerned about the Soviet Union’s rise. To monitor Soviet activities, they signed the UK-US Agreement (UKUSA), which established collaboration and information sharing in signals intelligence (SIGINT), with a focus on Russia and other potential adversaries.
Over time, the UKUSA pact expanded to include Canada, Australia, and New Zealand, nations strategically aligned with the UK and US, forming what is now known as the Five Eyes (FVEY) Alliance.
The UK and USA were worried about the rise of Soviet Russia in the aftermath of World War II. To keep a check on Soviet activities, they entered into the UK-US Agreement (UKUSA), which enabled collaboration and information sharing in signals intelligence (SIGINT) about Russia and other adversaries.
Gradually, UKUSA expanded to include three other nations, namely, Canada, Australia, and New Zealand. All three nations were strategically aligned with the UK and the US, and their inclusion led to the creation of the 5 Eyes.
The intelligence agencies of the Five Eyes nations collect SIGINT on individuals and entities in adversary countries and share this information with one another. The key surveillance and intelligence agencies in each member nation are listed in the table below:
| Country | Surveillance Agency | Surveillance Law/Policy |
|---|---|---|
| USA | National Security Agency (NSA) | The PATRIOT Act allows agencies to collect vast amounts of data, including call records and email records. |
| UK | Government Communications Headquarters (GHQC) | The Investigatory Powers Act allows for the bulk collection of internet records and requires internet service providers (ISPs) to retain user logs of website activity. |
| Canada | Communications Security Establishment (CSE) | The Anti-Terrorism Act establishes the CSE’s mandate, which includes acquiring and using information from the global information infrastructure for intelligence and surveillance activities. |
| Australia | Australia Signal Directorate (ASD) | The Telecommunications Interception and Access Act allows intelligence agencies to intercept and access stored communications with a proper warrant. |
| New Zealand | Government Communications Security Bureau (GCSB) | The Intelligence and Security Act 2017 empowers surveillance agencies to collect and analyze data in keeping with government priorities. |
What is the 9 Eyes Alliance?
The Nine Eyes alliance builds on the Five Eyes by including Denmark, France, the Netherlands, and Norway. These additional members help broaden intelligence sharing and strengthen collective surveillance capabilities.
While some details of the Nine Eyes Alliance remain secret, it is known that the member countries share comprehensive signal intelligence (SIGINT) to monitor global internet traffic, satellite communications, and encrypted messages. This intelligence includes internet activity and metadata, such as browsing and search history, and IP addresses, often collected by ISPs or third-party surveillance. It also covers communication data, including private messages, emails, phone calls, and video calls. Plus, the alliance exchanges military and diplomatic intelligence related to foreign, geopolitical, or military threats.
The intelligence agencies of the four additional members of the Nine Eyes are listed below.
| Country | Surveillance Agency | Surveillance Law/Policy |
|---|---|---|
| Denmark | Danish Defence Intelligence Service (FE/DDIS) | Denmark has ratified the European Union’s Directive on Data Retention. Consequently, telephone providers and ISPs have to log user data, including IP addresses. |
| France | Directorate General for Internal Security (DGSE) | The French Intelligence Act 2015 allows intelligence agencies to lay telephone or internet wiretaps, exploit computer networks, and access metadata. |
| Netherlands | General Intelligence and Security Service (AIVD) | The Intelligence and Security Services Act 2017 allows agencies to intercept communications, hack into third-party systems, and decrypt files. |
| Norway | Norwegian Intelligence Service (NIS) | The Norwegian Intelligence Service Act 2020 empowers the NIS to collect information in collaboration with third parties for bilateral and multilateral purposes. |
What is the 14 Eyes Alliance?
The 14 Eyes alliance, also known as SIGINT Seniors Europe (SSEUR), is a broad intelligence-sharing partnership focused on the collection, analysis, and distribution of signals intelligence (SIGINT). While the Five Eyes form the core group, the 14 Eyes extend its cooperation to nine additional countries, including Belgium, Denmark, France, Germany, Italy, the Netherlands, Norway, Spain, and Sweden, enabling wider intelligence-gathering across Europe.
The information shared between these nations goes beyond standard SIGINT. It includes mass surveillance data collected from global internet traffic, telephone lines, and potentially encrypted messaging platforms. Digital footprints, such as phone numbers, email addresses, and user activity, are often gathered using advanced monitoring tools. The alliance also shares counterterrorism and cyber warfare intelligence to prevent attacks and organized crime, as well as human and defense intelligence, sometimes relayed through third-party arrangements that allow one member to bypass domestic legal restrictions on data collection.
| Country | Surveillance Agency | Surveillance Law/Policy |
|---|---|---|
| Germany | Federal Intelligence Service (BND) | The German Federal Constitutional Protection Act allows intelligence agencies to infiltrate foreign service providers to access relevant information. It also allows the decryption of encrypted messages. |
| Belgium | State Security Service (VSSE) | Belgium’s Data Retention Act required ISPs and TSPs to retain user activity logs. However, Parliaments struck down the Act. |
| Italy | Italian Intelligence and Security Services (AISE) | Italy’s Anti-terrorism law includes provisions enabling intelligence agencies to lay wiretaps and share data for national security purposes. |
| Spain | National Intelligence Centre (CNI) | The Data Retention Law allows national intelligence agencies to access user logs retained by TSPs and ISPs. |
| Sweden | Swedish Military Intelligence and Security Service (MUST) | Sweden’s Data Collection Act grants the Swedish Security Service the power to obtain logs from TSPs and ISPs and decrypt electronic communication. |
Who are third-party contributors?
Despite the expansion of the 5 Eyes alliance to include other nations, it remains largely composed of Western nations. This can limit the Alliance’s ability to effectively surveil developing nations in Asia and Africa. To fill this gap, the alliance works with other countries’ members, such as South Korea, Singapore, Japan, and Israel.
As such, third-party contributors are additional sources of information for the alliance members. They also share surveillance technology with these third parties. However, third-party contributors do not bear the same obligations and responsibilities as alliance member nations.
What data do the 5, 9, and 14 Eyes collect?
The Eyes Alliances were initially focused on monitoring traditional forms of communication and signaling information, such as telephone conversations and text messages. However, the 2013 leaks of sensitive documents on the Five Eyes’ surveillance practices by Edward Snowden revealed that the scope of surveillance was much wider.
Indeed, the 5 Eyes, 9 Eyes, and 14 Eyes Alliances now collect a lot more data, including:
- Communications data: Includes contents of phone calls, emails, and text messages. Metadata, which provides context about the communications, such as their time and location.
- Internet activity: Intelligence agencies also capture and share data on search queries, social media activity, browsing history, and other online activities. Most nations have laws that require ISPs to retain user activity logs.
- Location data: Location sensors in electronic devices, computer browsers, and other tracking systems collect data about a person’s whereabouts. Intelligence agencies can scrutinize this data to know more about a suspect’s location.
- Financial data: Agencies often track financial information, such as credit card usage and bank transactions, to create money trails, locate suspects, or freeze their assets.
- Biometric information: Fingerprints, iris scans, and DNA are key markers used by law enforcement and intelligence agencies to identify individuals.
What surveillance systems do the Eyes Alliances use?
The 5 Eyes, 9 Eyes, and 14 Eyes Alliances have developed several surveillance systems and networks to streamline information collection and sharing. Some of the prominent surveillance systems used by the Eyes Alliances are:
- ECHELON: Developed by the Five Eyes during the Cold War, Echelon was used to monitor and intercept communications from the Soviet Union and the People’s Republic of China.
- STONEGHOST: A highly secured network used to share information about military and intelligence topics among the Five Eyes. In 2012, a Canadian Marine was sentenced to 20 years for downloading and selling data from the STONEGHOST network.
- PRISM: Perhaps the best-known surveillance system used by the Eyes Alliances, PRISM was operated by the NSA, GCHQ, and ASD to obtain information from US internet companies. Plus, the 2013 Snowden leaks revealed the vast extent of online surveillance conducted by these countries.
- XKeyscore: A metadata analysis tool developed by the NSA, XKeyscore allows intelligence agencies to search through emails and other online communication metadata without prior authorization.
How do the Eyes Alliances impact user privacy?
The complex and confidential surveillance carried out by the 5, 9, and 14 Eyes raise several concerns for user privacy and anonymity online. I’ve highlighted some of the most pressing concerns below:
- Mass surveillance: The alliances collect data on a large scale, often indiscriminately. This means that even individuals who are not suspected of any wrongdoing can have their data collected and analyzed, which is a clear violation of user privacy.
- Undermining encryption: The alliances have increasingly tried to undermine encryption, a vital tool for protecting privacy and online security. For example, in 2020, they warned internet companies of the perils of end-to-end encryption and urged them to create backdoors for law enforcement and intelligence agencies.
- Data sharing: The alliances share the data they collect with each other, effectively creating a global surveillance network. As such, intelligence agencies in one nation can collect and share information about citizens in another without complying with privacy requirements. For instance, under the PRISM program, UK agencies collected data about US citizens and shared it with the NSA.
- Compromising anonymity: In addition to undermining encryption, the alliances have sought to compromise anonymity online by requiring ISPs and TSPs to log user data and provide access upon request. Additionally, member countries have often asked VPN providers to share user logs for law enforcement purposes. Notably, no logs VPN provider IPVanish led Homeland Security to a Comcast IP address via user logs, while VPN provider Riseup opted to comply with FBI warrants rather than facing contempt of court.
What can you do to protect yourself from the Eyes Alliances?
Given the expansive and pervasive nature of surveillance by the 5 Eyes, 9 Eyes, and 14 Eyes Alliances, it’s difficult to evade surveillance completely. However, there are a few steps you can take to reduce the scope of personal information available online.
1. Switch to an anonymous email service provider
Emails constitute one of the most common sources of communication information for the Eyes Alliances. Anonymous service email providers prevent your emails from ending up in the wrong hand by encrypting them and removing any personal information, such as your IP address.
For example, ProtonMail creates an anonymous identity online. But read our roundup about the best email providers for privacy.
2. Use an end-to-end encrypted messaging service
End-to-end encrypted messaging services protect your messages from being accessed by governments and ISPs. The only way your messages can be read is if someone gains control of your device.
Not all encrypted messaging apps offer the same level of privacy. For example, WhatsApp is based in the United States and can legally be compelled to provide user data to agencies like the NSA. It also shares information with other Meta apps, like Instagram. In contrast, apps like Signal are designed with privacy in mind and actively resist government attempts to access user communications.
3. Choose a privacy-friendly browser
While popular browsers like Chrome are convenient and feature-packed, they collect a lot of user information through trackers and cookies. This provides another source of information that intelligence agencies can tap into. Privacy-friendly browsers limit the use of cookies and trackers, which prevents communications surveillance.
The Tor browser is one of the best browsers for staying anonymous and protecting personal activities.
4. Use a reliable VPN provider
While privacy-focused browsers and messaging apps encrypt some of your online data, your activity can still be tracked. For example, your IP address is visible on websites and other online services. Because of this, you can protect your privacy by using a reliable VPN. It encrypts your internet traffic and hides your IP address, making it hard for websites, ISPs, or surveillance agencies to track your online activity.
If you want to avoid surveillance by the 5 Eyes, 9 Eyes, and 14 Eyes alliances, it’s important to choose a VPN not based in any of these countries. I recommend NordVPN, based in Panama, for its robust encryption and strict no-logs policy.
Best VPNs outside the 14 Eyes Alliance
A reliable VPN should be based outside the 14 Eyes countries. However, there are several additional factors to consider when choosing a VPN to protect yourself from global surveillance:
- Encryption standards and protocols used by providers to secure your information
- The extent of its data collection and logging practices
- Network of servers globally, and in the 5, 9, and 14 Eyes countries
After extensive testing based on the above criteria, I reviewed the best VPNs outside the 14 Eyes Alliance.
1. NordVPN – overall best VPN based in Panama
Features:
- Encryption protocols: OpenVPN, IKEv2, Wireguard
- Number of servers: More than 9300 in 137+ countries
- Independently audited and certified no-logs policy
- Offers obfuscated servers and DoubleVPN
NordVPN is our highest-ranked VPN. Their company’s headquarters is in Panama, which isn’t part of the 5 Eyes, 9 Eyes, or 14 Eyes Alliances. Panama also doesn’t have mandatory data retention laws, so NordVPN isn’t legally required to store user activity logs.
Not only is NordVPN based outside the Eyes Alliances, but it’s also one of the most secure VPNs I’ve tested. User data is secured using AES-256-bit encryption and the latest protocols, including the proprietary WireGuard protocol. It also has an automatic kill switch that keeps your data safe if your VPN connection drops.
NordVPN is serious about user privacy, as reflected in its no-logs policy, which Deloitte audited as recently as 2025. This means it couldn’t hand over user logs to agencies even if they legally demanded it. Nord’s Onion over VPN and Double VPN features can help provide added anonymity and protection, and surveillance.
To access content available only in 14 Eyes countries, you will need a VPN with an extensive North American and European server network. NordVPN stands out in this regard and has one or more servers in all 14 Eyes nations. Its servers deliver excellent speeds and help unblock all kinds of content, including TV and some of the best free sports streaming sites.
Get more information on this provider’s speed, safety, and privacy in our full NordVPN review. NordVPN offers a 30-day money-back guarantee, allowing you to try its features and cancel the subscription at no cost if you don’t like it.
2. Surfshark – secure VPN with strong privacy protections
Features:
- Encryption protocols: WireGuard, OpenVPN, IKEv2
- Server network: 4500+ in 100 countries
- Fast speeds across servers
- One of the cheapest premium VPNs
Surfshark VPN is one of the most affordable premium VPNs available, making it a great option for users who want strong privacy features without paying a high price.
The company is based in the Netherlands, which is part of the 14 Eyes intelligence-sharing alliance. However, Surfshark has taken several steps to strengthen user privacy. It follows a strict no-logs policy that was independently verified by Deloitte in 2025. In addition, Surfshark’s infrastructure was audited by SecuRing in 2026, which found no critical security issues and confirmed that the company’s systems are designed and maintained with security as a priority.
Surfshark also supports trusted protocols like WireGuard and OpenVPN, along with tools such as a kill switch, MultiHop, and an IP Rotator that regularly changes your IP address for extra anonymity. Its Camouflage Mode uses obfuscation to disguise VPN traffic as normal internet traffic, which bypasses network restrictions and hides VPN usage. The NoBorders mode automatically activates on restricted networks and recommends servers optimized for heavily censored environments.
Surfshark plans start at $ 1.99 per month. It also provides a 7-day free trial and a 30-day money-back guarantee, giving users plenty of time to test the service risk-free.
3. Proton VPN – privacy-focused VPN outside 14 Eyes Alliances
Features:
- Encryption protocols: WireGuard, OpenVPN (UDP/TCP), Stealth
- Server network: 20000+ servers in 145 countries
- Secure the free version
- Advanced security features
Proton VPN is a privacy-focused VPN. It offers both premium and free plans, making it a strong option for users who want reliable protection.
The company is based in Switzerland, a country known for its strict privacy laws and strong data protection regulations. Proton VPN also follows a strict no-logs policy, meaning it does not record or store sensitive information such as IP addresses, browsing history, or connection data. This policy is regularly verified through independent audits, including the latest no-logs audit conducted by Securitum in late 2025.
Proton VPN includes several advanced security features to protect users’ privacy. These include DNS, IPv6, and WebRTC leak protection to prevent accidental data exposure. It also offers a built-in kill switch and an Always-On VPN feature to ensure your connection remains protected at all times. In addition, Proton VPN provides Secure Core servers, which route traffic through multiple privacy-friendly countries for extra protection. The service also stands out for its open-source apps and regular independent security audits.
Proton VPN offers flexible plans starting at $ 2.99 per month. It also provides a free plan with servers in 10 countries, including the US, Netherlands, Japan, Romania, Poland, Norway, Switzerland, Singapore, Mexico, and Canada. Paid plans come with a 30-day money-back guarantee, allowing users to test the service risk-free.
The 5, 9, and 14 Eyes Alliances: Final thoughts
The 5 Eyes, 9 Eyes, and 14 Eyes alliances form a large Western intelligence network that shares sensitive information and conducts mass surveillance. Over time, this cooperation has evolved into a broad global monitoring system. These agreements allow member countries to exchange intelligence and, in some cases, bypass certain national privacy limitations to access more data.
If you live in a 14 Eyes country, your government may share collected intelligence with other alliance members. For this reason, following online privacy best practices and using a reliable VPN can reduce your exposure to surveillance.
NordVPN is the best VPN for protecting your privacy from the 5, 9, and 14 Eyes alliances because it combines strong security features with excellent speeds and a large global server network. Since it is based in Panama, it operates outside the jurisdiction of all Eyes Alliance countries. While a VPN is a strong first line of defense for online privacy, tools such as anonymous email providers, end-to-end encrypted messaging apps like Signal, and privacy-focused browsers can add additional layers of protection.
Related articles:
What is my IP
How to hide your IP
Best internet browsers for privacy
FAQ
5 Eyes, 9 Eyes, and 14 Eyes refer to alliances between countries that monitor, log, and exchange surveillance data. These countries gather information about their citizens and share it when needed. Many have referred to it as a global spying network.
The 5 Eyes Alliance comprise the US, UK, Australia, Canada, and New Zealand. It was set up post-World War II to share surveillance information on the Soviet Union and China. The 5 Eyes members capture and share data for national security purposes. Such data often includes personal information about their citizens.
14 Eyes refers to a broad-based surveillance alliance. It comprise of North American, European, and Oceanic nations, such as Canada, the US, Australia, Norway, France, Germany, Italy, and Spain. The 14 Eyes capture and share surveillance information among themselves under the pretext of safeguarding national security.
A VPN is an effective tool against mass surveillance. When you connect to a VPN server, your IP address will change to the VPN server’s IP. Your online actions can now only be traced back to the VPN server, not to you. Just make sure you choose a VPN that isn’t based in one of the 5, 9, and 14 Eyes countries. Based on my tests, NordVPN is the best VPN to protect your privacy and stay secure online.
I wonder if Cyberghost for example is a good choice though they are located in Romania, as their ISP are societies whose head is in UK London (Datacamp and Cogent) even for France location, or in Germany (Velia.net Romania)
Hi Menard! Good question. Since CyberGhost uses RAM-only servers, you won't have to be too worried about it logging information, so in practice it is definitely a good choice for your privacy. If you're interested in how exactly this VPN deals with security and logging, you can read our full CyberGhost review or have a look at our list of best VPNs outside 14 Eyes.
CyberGhost says it keeps detailed Ip and traffic logs and works with law enforcement without a warrant in its Terms of Service.
Suppose we are using NorVPN and using the Sydney server when living in Australia which is part of FVEY. Don't you think when the server located in Sydney is bound to give information to the Australian Govt even NordVPN's Head office is in Panama?
Good question! Luckily, since NordVPN has a "no logs" policy, this can't happen. There simply is no information to give, because they don't store it.
How would you rate VPNunlimited? Or Proton VPN?
Hi Dale! When it comes to privacy and overall usability, we definitely prefer Proton over VPN Unlimited. VPN Unlimited lacked in speed and collects more info about its users than we'd like - you can read more about this in our full VPN Unlimited review. Proton VPN is among our favorite VPNs, as it is great for your privacy and comes with lots of extra options. You can read more about this in our Proton test.
Is there a security risk in using a VPN server that's located in one of these countries, even if the VPN is based somewhere else?
Generally, the location of the provider itself is more important than the location of your chosen server. If you want to be extra cautious, you can take the Eyes coalitions into account when choosing your VPN server, but as long as your VPN has a proven no logging policy, you shouldn't have anything to worry about.
What is the possibility of other countries not aligned with 5/9/14 Eyes having their own surveillance alliance that have not yet been exposed to the public?
There's always a chance, however small, that governments or other organizations are working on secret surveillance systems that aren't known to us yet, especially in countries where censorship is an important tool used to keep citizens under control. We try to keep as up-to-date on each country's situation as possible. You can read about any information that is public in our censorship section.
Excellently described.
Can we know which year the 9 eyes agreement was made? I believe in the 1990s but was it under George HW Bush or Bill Clinton?
As far as we can tell, no public information is available that reveals an exact year when the agreement was formed. It's not backed by any treaty, and is really an extension of 9 Eyes, but at slightly less intense levels. The only reason we know as much about it as we do, is because of the data leaked in 2013 by Edward Snowden.
Excellent overview of information, even for novice such as me. Thanks for well organized article with excellent graphics. Am a new VPN user and was unfamiliar with the "eye" reference and you answered it perfectly. Many thanks. Great job. Would be interested in your take on the recent leak of info allegedly about PIA, particularly whether the year or multi year products are less robust than the monthly subscription app.
Thank you for the compliment! Concerning your comments about PIA: could you specify what leak you're referring to? We haven't had any issues with PIA and are unaware of any current leaks or problems concerning the VPN service.