NordVPN

NordVPN introduces transparency reports

https://nordvpn.com/blog/nordvpn-introduces-transparency-reports/

They claim they don't release customer info to third parties, but are
skimpy on details concerning law enforcement.

They indicate "Number of automated DMCA requests: 2,421,053,"  but
don't explain what is happening here.

Their current policy supports cyberbullies since they implicitly claim
they don't keep records.

But on the other hand, they say " We have never disclosed any user
data or provided any access to user traffic to any third party."  I
believe "third party" excludes law enforcement

third party - A third party is someone who is not one of the main
people involved in a business agreement or legal case, but who is
involved in it in a minor role.