Whether or not they comply with law enforcement is not the issue. Any company will comply with their local law enforcement if they want to keep their doors open. What’s important is what data they keep on their users. Unless I’m mistaken, Nord, like many others, only keeps billing info and limited connection info for load balancing purposes (deleted after something like 15-minutes). So, the Panamanian government (where they’re headquartered); who IIRC has no data retention laws and isn’t part of 5-eyes; asks for logs, they will get something, but not much to tie a specific customer to anything.

Also, Nord has been independently audited multiple times in the past. Something quite a few other providers can’t say.

It’s popular to bash on Nord b/c they advertise a lot, but I haven’t seen a legit reason not to use them. If it exists, I’d love to see it.