“From day one of our operations, we have never provided any customer data to law enforcement, nor have we ever received a binding court order to log user data. We never, for a second, logged user VPN traffic, and the results of multiple audits prove that we are true to our policies,” the company said.
You can comply with the law whilst not having anything to provide the law. Such as Mullvad does.
That is also now Nord works, they just clarified that they would comply with a court order if necessary which is how legal businesses work.
https://www.pcmag.com/news/nordvpn-actually-we-do-comply-with-law-enforcement-data-requests