ExpressVPN is based in the privacy-friendly British Virgin Islands — outside the 5/9/14 Eyes Alliances. This jurisdiction has no data retention laws, meaning ExpressVPN isn’t legally required to store any of your data.