C5:2020

The C5:2020 standard is an update from 2016 and ensures cloud service providers adhere to a baseline of information security criteria based on ISO 27001 and Cloud Controls Matrix of the Cloud Security Alliance ("CSA"). C5:2020 evaluates an organization's security program against a standard of robust cloud security controls. Both German government agencies and private companies place a high level of importance on aligning their cloud computing requirements with these standards. Learn more about C5 here.

• C5:2020 represents an organization's measures to comply with German federal data protection laws and other EU regulations. Customers can use Cloudflare's attestation of services to assist their own C5:2020 compliance.
• C5:2020 is a validation against a defined baseline security level for cloud computing that focuses on data protection, structured risk assessments, and continuous monitoring.
• C5:2020 is an independent auditing standard and requires attestation from a third-party auditor.

Learn more about how Cloudflare can help your org address compliance requirements.

Application Security: API Shield, Bot Management, DDoS Protection, Page Shield, Rate Limiting, Cloudflare SSL/TLS, SSL/TLS for SaaS, Turnstile, WAF, Log Explorer

Application Performance: Argo Smart Routing, Cache/CDN, DNS, Load Balancing, Speed, Waiting Room, Zaraz

Secure Access Service Edge (SASE) and SSE (Security Service Edge): Access, Browser Isolation, CASB, Cloudflare One, Cloudflare Tunnel, Cloudflare Zero Trust, E-mail Security, Gateway, WARP Client

Network Services: Cloudflare WAN, Magic Transit, Cloudflare Network Firewall, Network Interconnect, Spectrum, Time Services, Network Flow

Developer Platform: Browser Rendering, Cloudflare Images, Cloudflare for SaaS, D1, Durable Objects, Hyperdrive, Cloudflare Workers KV, Cloudflare Pages, R2, Stream, Vectorize, Workers, AI Gateway, Cloudflare Workers AI

Analytics and Insights: Analytics, Web Analytics, Logs, Radar, Security Center

Privacy and Compliance: Data Localization Suite

Cloudflare continuously introduces new features/functions across our platform throughout the year. We introduce those to our C5 scope depending on the annual audit cycle.

The C5:2020 report covers security controls to protect customer data and is available to download from the Cloudflare dashboard. Attestation is provided from a third-party auditor annually. Cloudflare requires all future and current customers to sign a nondisclosure agreement ("NDA") before our report is provided.

For detailed instructions, visit Cloudflare's guide.

Visit Cloudflare's Trust Hub to learn about additional compliance resources.

Learn more about how Cloudflare's connectivity cloud capabilities help enterprises streamline and map to compliance requirements across multiple standards by visiting our data compliance and protection page.