Surfshark, a prominent player in the cybersecurity sector, has unveiled its 2025 Impact Report. This document provides an open view into the company's environmental impact, social programs, governance standards, and dedication to sustainable practices.

The publication details actions taken throughout 2025 to bolster user privacy, promote digital rights, minimize environmental effects, and maintain high governance levels. It also shows how continuous input from users and stakeholders influences the firm's Environmental, Social, and Governance priorities.

Environmental impact

During 2025, Surfshark calculated its greenhouse gas emissions across all three scopes and implemented specific actions to lower its overall footprint. Offices in Vilnius and Kaunas operate fully on renewable energy sources and carry Excellent BREEAM certifications, while the Vilnius site collaborates with Green Genius biogas facilities to turn organic waste into clean power. The company maintains a circular economy model by reselling or donating used electronics and furniture within the organization and recycling leftover e-waste responsibly.

Staff members planted over 9,000 trees in Lithuania via an internal walking challenge program, teaming up with more than 20 other firms to establish three hectares of fresh woodland.

Empowering change with trusted organizations

Surfshark broadened its partnerships with digital rights groups in 2025, such as Access Now, the Global Encryption Coalition, and the International Press Institute. Via its Emergency VPN initiative, the firm supplied free secure connections to over 2,500 journalists, activists, and NGO workers in areas facing strict internet controls.

Over the winter holidays, Surfshark matched employee contributions to aid children, teens, seniors, and humanitarian support projects in Ukraine.

Governance and economic impact

Surfshark centered its 2025 operations on robust ethical standards and third-party verification:

The worldwide server network now functions exclusively on 100 percent RAM-only servers that erase data with each restart.
Independent reviews by Deloitte, Cure53, and SecuRing confirmed the security of Surfshark infrastructure and applications, while the Surfshark Android app earned MASA certification.
The no-logs policy continues to receive independent audits from Deloitte.
Operations align with GDPR, the UK Data Protection Act, and the CCPA, supported by required yearly staff training on information security, privacy, and anti-bribery measures, along with vendor assessments.

The 2025 Impact Report follows the Global Reporting Initiative Standards, the SASB framework, and the UN Sustainable Development Goals. Surfshark intends to perform its next materiality assessment in 2026 to further refine its ESG approach based on user and stakeholder feedback.

ABOUT SURFSHARK

Surfshark is a cybersecurity company offering products including an audited VPN, certified antivirus, data leak warning system, private search engine, and a tool for generating an online identity. Recognized as a leading VPN by CNET and TechRadar, Surfshark has also been featured on the FT1000: Europe's Fastest Growing Companies ranking. Headquartered in the Netherlands, Surfshark has offices in Lithuania and Poland. For information on Surfshark's operations and highlights, read our Annual Wrap-up. For information about Surfshark's previous independent verifications and certifications, visit our trust center.

Contact: press@surfshark.com

SOURCE Surfshark B.V.