Certifying our Commitment to Your Right to Information Privacy

Cloudflare recognizes privacy in personal data as a fundamental human right and has taken steps to demonstrate its commitment to privacy, including certifying to international standards. The company's multi-faceted privacy program incorporates critical privacy principles such as transparency about their privacy practices, practicing privacy by design when building products and services, using the minimum amount of personal data necessary for their services to work, and only processing personal data for specified purposes. Cloudflare became one of the first organizations in its industry to certify to a new international privacy standard for protecting and managing the processing of personal data - ISO/IEC 27701:2019. The company also maintains high-level security measures, such as obtaining ISO 27001:2013, SOC 2 Type II, PCI DSS 3.2.1, and BSI Qualification certifications. Additionally, Cloudflare has developed privacy-enhancing technologies like the 1.1.1.1 public DNS resolver and Web Analytics to help users maintain their privacy while using the internet.