CloudflareCompliance, certifications and attestations

...Program. Learn more GovRAMP Government Risk and Authorization Management Program. Learn more SOC 2 Type II Certification to attest to Security, Confidentiality, and Availability controls in place in accordance...

...through the dashboard. Download from dashboard Get instructions Certifications and Reports ISO 27001:2022 Implementation of an Information Security Management System (ISMS) and security risk management processes...

...protect personal data when being processed in the cloud; privacy certification. Learn more ISO 27017:2015 ISO 27017 provides specialized guidelines for information security controls applicable to the provision and...

...of a comprehensive Privacy Information Management system (PIMS) certification. Learn more ISO 27018:2019 Extension of an ISMS to protect personal data when being processed in the cloud; privacy certification. Learn...

...Management System (ISMS) and security risk management processes certification. Learn more ISO 27701:2019 Implementation of a comprehensive Privacy Information Management system (PIMS) certification. Learn more...

Cloudflare for Government - High

FedRAMP Authorized, High impact; authorized 2026-08-06 (Agency); assessor Schellman Compliance, LLC; 23 agency authorizations

...services. Learn more FedRAMP High Federal Risk and Authorization Management Program. Learn more GovRAMP Government Risk and Authorization Management Program. Learn more SOC 2 Type II Certification to attest to Security,...

...System Security Management and Assessment Program, Cloudflare for Government-Japan. Learn more HIPAA The Health Insurance Portability and Accountability Act (HIPAA) sets the standard for protecting sensitive patient...

...Availability controls in place in accordance to the AICPA Trust Service Criteria. Learn more PCI DSS 4.0 Payment Card Industry Data Security Standard Attestation of Compliance. Learn more Global CBPR The Global...

EU-US, UK extension, Swiss-US; non-HR data and HR data. Cloudflare, Inc.

EU-US status: Active - Re-certification under Review; certified since 2016-11-09; recertification due 2027-09-15; verification: Self-Assessment

Partner entry in the STAR Registry

Listed as Cloudflare, Inc. since 2022-12-28; EU Cloud Code of Conduct entry

...Recognition for Processors (Global PRP) system. Certified organizations are listed here. Learn more EU Cloud Code of Conduct The EU Cloud Code of Conduct is an officially approved GDPR Article 40 Code of Conduct. Read the report here Learn...

CAIQ

Listed as Cloudflare, Inc. since 2022-12-28; Level 1 (self-assessment)

...Learn more ENS Spain National Security framework - Esquema Nacional de Seguridad. Learn more IRAP Information Security Registered Assessors Program, Cloudflare for Government-Australia. Learn more ISMAP Information...

...report here Learn more Cyber Essentials Cloudflare’s certificate can be found here. Learn more C5:2020 Cloud Computing Compliance Criteria Catalogue (C5:2020) is an auditing standard created by Germany's Federal Office...

...Information Security Registered Assessors Program, Cloudflare for Government-Australia. Learn more ISMAP Information System Security Management and Assessment Program, Cloudflare for Government-Japan. Learn more HIPAA...