AirVPN is a hosted VPN operated by AIRVPN DI PAOLO BRINI, an Italian sole proprietorship in Perugia. It supports OpenVPN and WireGuard and provides the open source Eddie client. Running the client yourself does not make the commercial VPN network a self-hosted service.
Verified European control follows from the named sole proprietor and matching GLEIF, VIES and legal-document evidence. The VPN fleet uses third-party datacenters in multiple countries, so Italian ownership does not establish EU-only infrastructure or data residency. AirVPN's Terms prohibit use by residents of Italy.
Paolo Brini owns and operates AIRVPN DI PAOLO BRINI, an active Italian sole proprietorship. GLEIF records SOLE_PROPRIETOR and legal form LHBB; VIES matches the name and Perugia address for VAT IT03297800546. The Terms identify REA PG-279011 and the Privacy Notice names Brini as controller. Both GLEIF accounting-parent exceptions say NATURAL_PERSONS; Infocamere is the LEI issuer, not a parent. A paid chamber-of-commerce extract was not obtained. These records do not establish current physical residence.
Pricing
There is a single plan, with the price depending on how long you commit for. A one month subscription costs 7 euro per month.
External verification
EU verification badge
eu-alt.eu independently verified this service's European ownership. Choose a badge style and link it back to the dated evidence on this page.
Evidence last checked:
Horizontal · Black
Download SVGEmbed code
Horizontal · White
Download SVGEmbed code
Compact · Blue
Download SVGEmbed code
Compact · Black
Download SVGEmbed code
Compact · White
Download SVGEmbed code
Data and operations
Infrastructure and email path
Verified operational dependencies, shown separately from ownership and from the service's core data hosting.
Core service hosting
Third-party VPN datacenters
Provider control not verified- Observed
- The hosted VPN fleet uses third-party datacenters in multiple countries, including outside the EU. A dated staff post discusses M247 racks and a Cogent facility. The current full provider/ASN inventory and ultimate control of every host were not established; Italian ownership is not an EU-only hosting claim.
Core service hosting
AirVPN account database and backups
Provider control not verified- Observed
- The Privacy Notice says the account database is kept off VPN access servers and is not publicly accessible. Its provider, physical location and backup locations are not disclosed; these are operator statements, not an independent infrastructure audit.
Public website
OVHcloud
European provider- Observed
- Public DNS on 2026-09-15: A 5.196.64.52; AAAA 2001:41d0:a:6034::. RIPE attributes the IPv4 prefix to AS16276. This identifies the public website network, not VPN nodes, the account database or all customer-data locations.
Supporting services
GoDaddy authoritative DNS
Non-European provider- Observed
- Public NS on 2026-09-15: pdns03.domaincontrol.com and pdns04.domaincontrol.com. These identify authoritative DNS service, not VPN traffic hosting or company ownership.
Why this matters
The published disclosure lists GoDaddy authoritative DNS for supporting services. Depending on the function, account or customer data may reach this non-European provider. See the source for the documented scope.
Incoming business email
airvpn.org
Provider control not verified- Observed
- MX 10 mx.airvpn.org
- Evidence
- Current daily MX lookup ↗
Authorised outbound email
Amazon Web Services
US-controlled cloud- Observed
- SPF on 2026-09-15 authorises ip4:52.29.42.193; RIPE attributes its prefix to Amazon AS16509. Authorisation does not prove actual sending, mail volume or storage region. A reported Frankfurt-region allocation is not evidence that all mail or customer data stays there.
Why this matters
This domain authorises Amazon Web Services, infrastructure under US ultimate ownership, to send email. If active, recipient details and message content can be processed there. SPF does not prove active use, the selected AWS region, or use of the separately operated AWS European Sovereign Cloud.
Authorised outbound email
Global Layer B.V.
Provider control not verified- Observed
- SPF on 2026-09-15 authorises ip4:213.152.180.16; RIPE returns AS49453. The supplied research attributes it to Global Layer B.V. in the Netherlands. Ultimate provider control, actual mail flows and storage regions were not independently established.
Authorised outbound email
Other SPF-authorised A and MX routes
Provider control not verified- Observed
- The complete SPF record is v=spf1 a mx ip4:52.29.42.193 ip4:213.152.180.16 -all. Its a and mx mechanisms were not fully expanded; the two explicit IPs are not an exhaustive sender inventory.
Payment processing
Direct cryptocurrency payments
No external provider observed- Observed
- The public buy page lists Bitcoin, Litecoin, Bitcoin Cash, Doge and Monero as accepted directly through no intermediaries, alongside gift vouchers. This describes that payment option only, not other checkout methods or every blockchain data flow.
Payment processing
Card and intermediary processors: current set unverified
Provider control not verified- Observed
- The current card/intermediary checkout requires account access. The 2020 Privacy Notice gives PayPal as an example; a 2023 staff announcement names Amazon Pay and 2Checkout/Avangate. Those historical references do not verify the current processor set. Stripe was only reported by a secondary review.
Supporting services
Invision Community CMS
Provider control not verified- Observed
- The current footer credits CMS by IPS. This identifies application software; supplier ultimate control and any external processing scope were not re-verified.
- Evidence
- AirVPN footer: CMS by IPS ↗
