Cloudflare and GDPR compliance

Cloudflare supports a number of Europe’s largest and fastest-growing companies. Learn how European companies can use Cloudflare to help meet their GDPR obligations.

cdn support byoip spot illustration

Our data privacy philosophy

Cloudflare’s network and all of our products are built with data protection in mind. As such, the GDPR was a codification of many steps we were already taking. Cloudflare does not sell personal data we process on customers’ behalf, or use it for any purpose other than to provide our services to our customers. In addition, we give people the ability to access, correct, and delete their personal information, and give our customers control over the information that passes through our network.

icon security safe blue 80x80

Encryption

Cloudflare’s network can encrypt data throughout its journey from origin servers to end-users, using the very latest protocols.

자세한 정보
icon analytics data blue 80x80

Privacy-first analytics

Cloudflare’s Web Analytics does not use any client-side state, such as cookies or localStorage, to collect usage metrics — and never ‘fingerprints’ individual users.

자세한 정보
icon geo key manager blue 80x80

Data localization

Cloudflare lets organizations control which regional data centers their traffic is inspected in and where logs are sent.

자세한 정보
security fingerprint privacy

Access management

Cloudflare for Teams lets organizations enforce country-specific access rules, block risky sites and content, and log access events for internal applications and data.

자세한 정보
icon documentation logs blue 80x80

Reporting

Cloudflare Logs gives granular insights into every HTTP request, helping you investigate potential breaches and other security incidents.

자세한 정보
icon cerificate blue modified 80x80

Certifications

In addition to complying with industry-standard security certifications, Cloudflare is considered an ‘Operator of Essential Services’ under the EU Directive on Security of Network and Information Systems.

자세한 정보
“As we tap into various public cloud services, Cloudflare serves as our independent, unified point of control — giving us the strategic flexibility to choose the right cloud solution for the job, and the ability to easily make changes down the line.”
Dr. Isabel Wolters
Chief Technology Officer

Additional resources

FAQ: Cloudflare's commitment to GDPR compliance

See responses to questions we frequently receive about how we process data on behalf of our customers in a way that complies with the GDPR.

Read FAQ

Case studies from European companies

Learn how Cloudflare has helped European companies across many industries improve their security posture and protect end-user data.

Read case studies

Protect and accelerate your websites, apps, and teams.

Sign up Contact us