{"statement_id":"st_f1714e75aeae08f254e0","subject":{"kind":"product","slug":"surfshark-vpn","name":"Surfshark VPN","url":"https://sourcetier.com/products/surfshark-vpn"},"attribute":{"key":"gdpr_compliance_stated","label":"GDPR compliance stated","unit":null,"core":true},"scope":null,"region":null,"first_recorded_at":"2026-09-06T20:39:27.730Z","current":{"claim_id":"8ffd3e64-0707-4e90-bed0-8b22ee5c4cfc","value":true,"unit":null,"verification_state":"verified","confidence_recorded":71,"observed_on":"2026-09-06","recorded_at":"2026-09-06T20:40:33.843Z","ended_at":null,"ended_by":null,"superseded_by_claim_id":null,"withdrawal_reason":null,"valid_from":null,"extraction":"muster:\\bGDPR compliance\\b","reader":"text pattern","parser_version":null,"method":null,"excerpt":".... The laws of the Netherlands do not establish any obligation to log or retain user data. GDPR compliance Since we're based in an EU country, we comply with the General Data Protection Regulation...","sources":[{"url":"https://surfshark.com/trust-center","tier":1,"type":"security_documentation","retrieved_on":"2026-09-06","role":"evidence"},{"url":"https://surfshark.com/trust-center","tier":1,"type":"security_documentation","retrieved_on":"2026-10-07","role":"evidence"}]},"version_count":2,"versions":[{"claim_id":"28d19bd5-58c9-4ce4-8f45-aa75d2522878","value":null,"unit":null,"verification_state":"unknown","confidence_recorded":0,"observed_on":"2026-09-06","recorded_at":"2026-09-06T20:39:27.730Z","ended_at":"2026-09-06T20:40:33.843Z","ended_by":"superseded","superseded_by_claim_id":"8ffd3e64-0707-4e90-bed0-8b22ee5c4cfc","withdrawal_reason":null,"valid_from":null,"extraction":"muster:kein-treffer","reader":"text patterns of this attribute; nothing on the page matched","parser_version":null,"method":null,"excerpt":null,"sources":[{"url":"https://www.surfshark.com","tier":1,"type":"official_documentation","retrieved_on":"2026-09-06","role":"checked_without_finding"}]},{"claim_id":"8ffd3e64-0707-4e90-bed0-8b22ee5c4cfc","value":true,"unit":null,"verification_state":"verified","confidence_recorded":71,"observed_on":"2026-09-06","recorded_at":"2026-09-06T20:40:33.843Z","ended_at":null,"ended_by":null,"superseded_by_claim_id":null,"withdrawal_reason":null,"valid_from":null,"extraction":"muster:\\bGDPR compliance\\b","reader":"text pattern","parser_version":null,"method":null,"excerpt":".... The laws of the Netherlands do not establish any obligation to log or retain user data. GDPR compliance Since we're based in an EU country, we comply with the General Data Protection Regulation...","sources":[{"url":"https://surfshark.com/trust-center","tier":1,"type":"security_documentation","retrieved_on":"2026-09-06","role":"evidence"},{"url":"https://surfshark.com/trust-center","tier":1,"type":"security_documentation","retrieved_on":"2026-10-07","role":"evidence"}]}],"changes":[{"id":"80138","type":"research_update","label":"Research update","material":false,"sentence":"Surfshark VPN: GDPR compliance stated is now recorded as not measured.","noticed_at":"2026-09-06T20:39:27.730Z","subject":{"kind":"product","slug":"surfshark-vpn","name":"Surfshark VPN"},"before":null,"after":{"value":null,"verification_state":"unknown","confidence":0},"claim_id":"28d19bd5-58c9-4ce4-8f45-aa75d2522878","statement_id":"st_f1714e75aeae08f254e0","corrected":null},{"id":"80449","type":"documented","label":"First documented","material":true,"sentence":"Surfshark VPN: GDPR compliance stated documented as yes (verified). A first finding of ours, not a change at the vendor.","noticed_at":"2026-09-06T20:40:33.843Z","subject":{"kind":"product","slug":"surfshark-vpn","name":"Surfshark VPN"},"before":{"value":null,"verification_state":"unknown","confidence":0},"after":{"value":true,"verification_state":"verified","confidence":71},"claim_id":"8ffd3e64-0707-4e90-bed0-8b22ee5c4cfc","statement_id":"st_f1714e75aeae08f254e0","corrected":null}],"page_url":"https://sourcetier.com/statements/st_f1714e75aeae08f254e0","contract":"A statement is the question a claim answers: one subject, one attribute, one scope and region. statement_id stays the same when a new value supersedes the old one, when we withdraw it and when two duplicate entities are merged (the old id then redirects). claim_id identifies one version. versions lists every version oldest first; ended_by is superseded, withdrawn or null for the current one. confidence_recorded is the confidence stored when that version was written, not a recomputation. unknown describes our research, never the product."}