Nord VPN has a strict no-log policy. This means that no connection data are stored on their anonymous servers. Ultimately, authorities can only trace the connection back to the anonymous server and only know that a connection was established from there. If in the unlikely event, an authority compromises the anonymous server, it would still not know which user was behind the connection, since no log and connection data are stored. And in the extremely unlikely event that an authority would gain access to the anonymous server, they would not be able to see the data flow because all connections are encrypted with the AES 256bit algorithm. To date (as of April 2023) no case us known that an authority was able to trace back a user’s connection.