PrivateVPN is based in Sweden - although it’s headquartered within the 14-Eyes jurisdiction, it follows a strict no-logs policy.
It's even better to maintain a policy where employees have to change passwords every one or two months.