https://www.expressvpn.com/blog/kpmg-privacy-policy-cure53-trustedserver-audit/
ExpressVPN’s protections examined in 2 new independent audits, by KPMG and Cure53