Last updated March 10, 2025 (note that the "Supplemental Terms" have been renamed to the "Service-Specific Terms" as of May 10, 2023)
The following Service-Specific Terms (“Service-Specific Terms”), are an integral part of the Self-Serve Subscription Agreement, Enterprise Subscription Agreement, or any other agreement governing your use and access to Cloudflare's Service(s), as applicable (“Subscription Terms”). Unless defined below, all capitalized terms will have the definitions given to such terms in the Subscription Terms. For Enterprise customers, all references to “you” and “your” in the Service-Specific Terms below refer to the Customer named in the applicable Order Form or other ordering document.
Please click on the following links to navigate to the Service-Specific Terms applicable to your specific Cloudflare Services.
The following definitions apply to quantities referenced in orders and invoices for Cloudflare Services. Unless explicitly stated otherwise in the applicable Order Form or Insertion Order(s), the defined terms below have the same meaning regardless of whether such terms are capitalized or uncapitalized.
“95th percentile” is the 95th percentile of a Customer’s usage of a given Service as measured by Cloudflare over five minute intervals. The 95th percentile methodology is used to measure usage of Services billed in Mbps, Gbps, or any other bit per second methodology.
“Business domain” is any domain entitled to a Business subscription level of protection, products, and support (as defined at cloudflare.com/plans/), exclusive of any add-on or usage-based features for which you may be charged separately.
“Concurrent connections” is the maximum number of clients concurrently connected to Cloudflare’s servers at any one time.
“Custom hostname” is any hostname that you send to Cloudflare’s custom hostname endpoint. A custom hostname can be a domain at any level (including but not limited to second- and third-level domains). For billing purposes, foo.com, foo.co.uk, www.foo.com, x.foo.com would be considered four separate custom hostnames. Cloudflare will invoice you for any custom hostname that has been active during the billing month, regardless of the duration of the activity during such month.
“Custom SSL certificate” is an SSL certificate that is provided by you for use with the Service. Unless otherwise mutually agreed to in writing, you may only use SNI certificates.
“Dedicated SSL certificate” is an SSL certificate that is provided and managed by Cloudflare on your behalf for use with the Service.
“Domain” is a publicly registrable domain (e.g., example.com) along with its child subdomains (e.g., help.example.com) that is configured individually in the Cloudflare dashboard and assigned its own unique zone ID through the Cloudflare Service dashboard. If you require a subdomain to be managed separately from its parent domain, such subdomain must have its own zone ID and will be counted as a separate domain.
"Endpoint" is any service or hardware that intercepts and processes incoming public or private traffic. This includes Origins, hostnames, private or public IP addresses, virtual IP addresses (VIPs), servers, and other dedicated hardware boxes.
“Enterprise DNS-only domain“ is any Zone that only utilizes Cloudflare for DNS resolution and has 0 Gigabytes (GB) of data transfer per month.
“Enterprise primary domain” is any domain receiving Cloudflare’s Enterprise Services that utilizes more than 50 Gigabytes (GB) of data transfer per month.
“Enterprise secondary domain” is any domain receiving Enterprise Services that utilizes 50 GB or less of data transfer per month.
“Images Delivered” means an image subject to a Transformation or Images Stored that are delivered to an end user at any time during the applicable billing period.
“Images Stored” means images stored in Cloudflare Images at any time during the applicable billing period.
“Neuron” is a measure of compute capacity used for machine learning model workloads, as determined based on factors such as operations required to perform computation for a given inference request. The output capacity of a single Neuron is relative to the machine learning model chosen and computational complexity required for inference requests, as may be further described and estimated in the developer documentation.
“Operation” is a Request that may make changes to or retrieve information about resources.
“Origin” is any server that communicates with Cloudflare’s edge, and that hosts any content or data, or that runs one or more programs to intercept and process incoming internet requests.
“Pro domain” is a domain entitled to a Pro subscription level of protection, products, and support (as defined at cloudflare.com/plans/), exclusive of any add-on or usage-based features for which you may be charged separately.
“Read/Write/List/Delete” are defined as follows for the purposes of Cloudflare Workers KV, Durable Objects, D1, and Workers Analytics Engine (as applicable): a “Read” is where a value for a given key, unit, or row is read; a “Write” is where a key/value pair, unit, or row is written; a “List” is where a list of keys within a given namespace is returned; and a “Delete” is where a single key/value pair, unit, or row is removed.
"Request" is a single HTTP/S request that is received by Cloudflare’s edge. For the Cloudflare Developer Platform, a Request is a single HTTP/S or similar request that hits or otherwise invokes a Worker or Durable Object on Cloudflare’s edge.
“Seat” means an employee, agent, contractor, or other third party, in each case, authorized by you to use a Cloudflare Service, as applicable.
“Session” means a single instance of a headless browser launched using the Browser Rendering API.
“Siteverify Request” is a single HTTP/S request that is received by Cloudflare’s siteverify API endpoint that Cloudflare reasonably determines is generated by a human.
“Uncached Image” is an image that is not cached on any Cloudflare server.
“Storage” or "Stored" is defined for billing purposes as the average hourly amount of data stored in gigabytes (GB) or other units set forth in an Order during a single monthly billing period.
“Transformation” is (i) an image variant resulting from a resize and/or other Customer request(s) (e.g., blur, sharpen, crop/trim, etc.) applied to a source image or video or (ii) one second of an output video variant resulting from a resize and/or other Customer request(s) applied to a source video. For billing purposes, the initial Customer request(s) and resulting image or each second of output video counts as a single Transformation that will be available for a 30-day period following generation. By way of example, a 30 second output video variant will be billed as 30 Transformations.
“Vector Dimensions” are the number of elements in a vector.
"Workers Observability Event" means a single log, trace span, metric, or other similar telemetry data type that is captured or recorded as a direct result of observability instrumentation in a Worker by a Customer.
“Zaraz Event” means an event (e.g., pageview, ‘zaraz.track’, etc.) sent to the Zaraz Service.
“Zone” is an instance configured in the Cloudflare Services dashboard which has a unique zone id assigned to it. In general, a zone would be associated with a single registrable domain and would include all of that domain’s child subdomains unless one or more of the child subdomains requires a different performance or security setting, in which case each child subdomain could either be assigned its own zone id or be grouped together with other child subdomains that share the same performance or security settings under a single zone id.
Information related to your Cloudflare account’s carbon usage is provided solely for informational purposes. You can learn more about Cloudflare's methodology for calculating this number in the Carbon Impact Report accessible in the Cloudflare Service dashboard. The information provided is not warranted to be error free and contains both original Cloudflare data and estimates, subject to update, correction and revision.
The Cloudflare for Government Service is available for the Services identified on the Cloudflare for Government Page (each such Service, a “Covered Service”) that have been purchased by Customer. Purchase of the Cloudflare for Government Service alone does not provide Customer with an entitlement to any Covered Services, unless such Covered Services are purchased separately by Customer.
Customer is responsible for configuring the Cloudflare for Government Service in accordance with the Customer Responsibilities provided by Cloudflare to Customer and for verifying that its use of the Cloudflare for Government Service will comply with laws or other obligations that may apply to Customer or Customer Content.
Cloudflare’s China Service is operated by its Chinese partner JD Cloud (the “China Service Partner”). Customer acknowledges that as part of the China Service the China Service Partner will process a portion of Customer's data in mainland China (including Zone configuration information and bindings with Cloudflare’s Developer Suite when a Customer enables the China Service for a particular Zone), and as a result such Customer data may be subject to Chinese law, including China’s Cybersecurity Law. By using Cloudflare’s China Service, Customer acknowledges and agrees that: (i) it will be solely responsible for obtaining and maintaining a valid Internet Content Provider (ICP) license (the “ICP License”) throughout the Term, as required by the Chinese Ministry of Industry and Information Technology, (ii) Cloudflare will not be liable for Customer’s inability to obtain or maintain such an ICP License, (iii) in the absence of such an ICP License, Cloudflare or its China Service Partner may refuse to provide the China Service to Customer without liability, and (iv) Cloudflare may share ICP License information, as well as Customer address and contact information with the China Service Partner. Notwithstanding any provision of the Agreement to the contrary, the China Service is provided to Customer “AS-IS,” with all faults, and without warranty, obligation, or service level of any kind, and unless otherwise explicitly agreed to in writing, any custom security requirements that have been negotiated between Customer and Cloudflare will not apply to the China Service. Cloudflare and its China Service Partner reserve the right to terminate or suspend Customer’s right to use or access the Service in China, at any time and without liability, in response to Chinese law, rule, regulation, or court order; provided, that (a) Cloudflare provides notice to Customer of such termination or suspension as soon as reasonably practicable, and (b) Cloudflare works to promptly route Customer’s traffic to the next nearest data center(s) outside of China. Termination or suspension of the China Service will have no effect upon any other Services provided to Customer under the Agreement, which will remain in full force and effect. Customer’s use of the China Service is subject to Chinese law including laws governing the dissemination of certain types of content.
These terms govern your use of the Cloudflare Community website located at https://community.cloudflare.com/ (“Cloudflare Community”), including the associated forum, chat, and other features accessible via the Cloudflare Community.
Account. You will need to log-in using your Cloudflare account to access certain features of the Cloudflare Community. We reserve the right to change the account registration requirements at our sole discretion. You agree to provide and maintain accurate, complete, and current account information in connection with your use of the Cloudflare Community. All badges and other Cloudflare Community features associated with your account are offered at our sole discretion and may be modified or discontinued at any time without prior notice.
Community Content. You may receive access to content posted by Cloudflare or other Cloudflare Community users, including without limitation posts, links, images, and other materials (collectively, “Community Content”). You acknowledge and agree that Cloudflare is not responsible for monitoring Community Content for quality, accuracy, or completeness. Your use of and reliance upon any Community Content will be at your sole risk.
Your Content. You may be permitted to contribute and make available text, files, documents, graphics, images, audio, video, or other content on the Cloudflare Community (“Your Content”). Cloudflare does not claim any ownership rights in any of Your Content.
By making Your Content available on the Cloudflare Community, you grant to Cloudflare a non-exclusive, transferable, sublicensable, worldwide, perpetual, irrevocable, royalty-free license to use, copy, modify, create derivative works, distribute, publicly display, and publicly perform Your Content for purposes of operating the Cloudflare Community and improving our Services or developing new services and features.
You represent and warrant that (i) you have all rights necessary to grant Cloudflare the license rights in Your Content under these terms and (ii) Your Content does not infringe, misappropriate, or violate any third party’s intellectual property rights or rights of publicity or privacy.
You may be permitted to delete or otherwise remove Your Content from the Cloudflare Community. Notwithstanding the foregoing, you acknowledge that Your Content that you choose to remove may continue to be accessible on the Cloudflare Community for various reasons, including without limitation in quoted content in other user posts or other Cloudflare support resources. You agree that Cloudflare will not be responsible or liable for the removal of or failure to remove any of Your Content.
Community Guidelines. You agree to comply with the community guidelines and other requirements posted at https://community.cloudflare.com/guidelines, which may be updated at our sole discretion without prior notice. Without limiting the foregoing, you agree not to do any of the following:
Submit or publish anything that: (i) is confidential, proprietary, or infringes or violates a third party’s intellectual property rights or rights of publicity or privacy; (ii) threatens, abuses, harrasses, or otherwise contains vulgar, obscene, indecent, or unlawful materials; or (iii) promotes bigotry, racism, illegal activity, or violence against any person or entity.
Attempt to access, search, download, or otherwise use Community Content using any software, tool, or other mechanism for the purpose of data mining, scraping, training artificial intelligence (“AI”) models, or similar purposes.
Impersonate or misrepresent your affiliation with any person or entity.
Use the Cloudflare Community for harvesting or otherwise collecting personal information, or for sending any unsolicited or unauthorized advertisements, promotional materials, or other forms of solicitation.
Suspension. We may immediately suspend your access to or use of the Cloudflare Community for actual or suspected violations of these terms or the Subscription Terms without prior notice. If you are aware of any violations of these terms, please let us know by Contacting Cloudflare Support.
Overview. Cloudforce One is a suite of security offerings that may include access to (i) threat briefings and research reports (“Threat Briefings”); (ii) emerging and historical threat data and intelligence made available to Customers via the Cloudflare dashboard or API(s) (“Threat Intelligence”); and (iii) briefings or threat operations reports created by Cloudflare pursuant to a Customer request for information (“RFI Reports”; together with the Threat Briefings and Threat Intelligence, the “Cloudforce One Materials”). Customer’s access to each of the Cloudforce One Materials shall be based on the relevant subscription tier purchased, including any API limits, RFI Report allotments, and other limitations set forth on the Order Form or otherwise provided by Cloudflare to Customer. RFI Reports allotted under the Order Form must be used within twelve (12) months of the Order Form Service Date and will expire thereafter.
Cloudforce One License. Subject to Customer’s compliance with the Agreement, Cloudflare grants Customer a non-exclusive, non-transferable, non-sublicensable (except to Affiliates included to determine pricing) right to use the Cloudforce One Materials for Customer’s own internal business purposes. Following the expiration of the Term, Customer may retain copies of RFI Reports downloaded by Customer during the Term. Customer may not (i) remove, modify, or obscure any copyright or other proprietary notices included on the Cloudforce One Materials or (ii) share, disclose, or otherwise provide the Cloudforce One Materials (in whole or in part) to any third-party (other than Affiliates included to determine pricing), without the prior written consent of Cloudflare. For clarity, the Cloudforce One Materials constitute Cloudflare Technology.
RFI Reports. Each request for information must be submitted in writing to the RFI Portal (under Security Center on dash.cloudflare.com). Each request for information must include sufficient specificity and detail to allow Cloudflare to investigate and provide an RFI Report, as determined by Cloudflare in its sole discretion. Cloudflare will either accept or reject a request for information, or solicit additional details from Customer. Customer shall provide Cloudflare with access to Customer’s personnel, Internet Properties, and relevant infrastructure and data as needed in order for Cloudflare to evaluate the request for information and provide the RFI Report. The Parties understand and agree that Cloudflare is under no obligation to accept or complete RFI Reports.
Pricing. Customer understands that Cloudforce One pricing is based on Customer and its Affiliates’ total number of employees and contractors. Accordingly, Customer represents and warrants that the information Customer provides to Cloudflare regarding its and its Affiliates’ number of employees and contractors in order to obtain any price quote which forms the basis of the Agreement, is truthful, accurate, and complete, to the best of its knowledge. In the event that the number of Customer or its Affiliates employees and contractors materially increases during the Term (as a result of a merger, acquisition, or otherwise), Customer agrees to notify Cloudflare, and the Parties will negotiate in good faith an increase in the Fees. Should the Parties fail to reach an agreement on an increase within fourteen (14) days of Customer’s receipt of notice of such proposed increase from Cloudflare, Cloudflare will have the right to immediately terminate the Order Form for Cloudforce One for its convenience, and without liability to Customer or any third party.
Warranty Disclaimer. CLOUDFORCE ONE AND ALL CLOUDFORCE ONE MATERIALS ARE PROVIDED ON AN “AS IS” AND “AS AVAILABLE” BASIS. CLOUDFLARE DOES NOT REPRESENT OR WARRANT THAT CLOUDFORCE ONE WILL DETECT ALL THREATS OR PROTECT CUSTOMER’S NETWORK AND SYSTEMS FROM MALICIOUS CODE, INTRUSIONS, OR OTHER SECURITY BREACHES.
By enabling Crawler Hints on your Zone, you authorize and instruct Cloudflare to share your websites’ hostnames and URL paths with third-party search engines (collectively, the “Crawler Hints Partners”).
You understand that Crawler Hints is made available to you on an “as is” and “as available” basis. Crawler Hints is not covered by Cloudflare customer support and does not have an SLA. Cloudflare reserves the right to modify or discontinue Crawler Hints at any time without notice to you.
IN NO EVENT WILL CLOUDFLARE BE LIABLE TO YOU OR ANY THIRD PARTY FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES ARISING OUT OF OR RELATING TO YOUR ACCESS TO OR USE OF, OR YOUR INABILITY TO ACCESS OR USE CRAWLER HINTS, WHETHER BASED ON WARRANTY, CONTRACT, TORT (INCLUDING NEGLIGENCE), STATUTE, OR ANY OTHER LEGAL THEORY, WHETHER OR NOT CLOUDFLARE HAS BEEN INFORMED OF THE POSSIBILITY OF SUCH DAMAGE.
Overview
Cloudflare Customers that purchase the Data Localization Suite will be entitled to Cloudflare’s Regional Services, Geo Key Manager, Customer Metadata Boundary, and Keyless SSL Services for Customer Zones that are on Cloudflare’s Enterprise plan for the sole use of Data Localization suite. Customers are responsible for configurations related to the Data Localization Suite.
The compatible Cloudflare Services, available geographic regions, and other limitations for the Data Localization Suite are indicated on Cloudflare's developer documentation available at https://developers.cloudflare.com/data-localization/ ("Data Localization Suite Page").
Pricing
By purchasing Cloudflare’s Data Localization Suite, you understand that Cloudflare includes an additional fee equal to thirty percent (30%) of the monthly Fees (“Localization Suite Fee”) for any Services identified on the Data Localization Suite Page (each such Service, a “Covered Service”). The Localization Suite Fee will apply to all Covered Services, regardless of whether such Covered Services are invoiced on a fixed fee or variable basis. The Localization Suite Fee will apply to all future, as well as all previously quoted, pricing including any volume discounts extended to you by Cloudflare. For the avoidance of doubt, the Data Localization Suite does not provide you with an entitlement to a Covered Service, which must be purchased separately.
Regional Services
As a Data Localization Suite customer, you may configure Regional Services for Covered Services on your Enterprise subscription that support Regional Services as described on the Data Localization Suite Page. If you have enabled Regional Services for your Domain(s), Cloudflare will terminate TLS and apply application layer services for HTTPS traffic transmitted between End Users and the origin web server(s) for such a Domain only in Cloudflare data centers located in the geographic region you have selected. The geographic regions available for the Regional Service are listed on the Data Localization Suite Page.
You agree that if you configure Regional Services for a geographic region that is a single country, not including the United States of America, or smaller that the Cloudflare SLA does not apply to any Covered Services provided in that region.
Customer Metadata Boundary
As a Data Localization Suite customer, you may configure the Customer Metadata Boundary (CMB) for Covered Services on your Enterprise account(s). The geographic regions available and compatible Services for CMB are listed on the Data Localization Suite Page. Customer understands that not all Services will be available when CMB is enabled and that some Services will have reduced functionality.
Cloudflare will not transfer outside the configured region(s) any Customer Logs arising from Covered Services. Customer is responsible for all configurations related to CMB.
Compliance
Customer is solely responsible for ensuring that its use of the Data Localization Suite is compliant with all applicable laws and regulations as well as any and all privacy policies, agreements or other obligations Customer may maintain or enter into.
If no regional data usage limitations are set forth in Customer’s Order Form or Insertion Order, as applicable, then the geographic distribution of Customer’s data usage must not exceed in any billing period (i) 25% in the Tier II region or (ii) 8% in the Tier III region, as such regions are defined below.
In general, (i) the Tier I region includes North America and Europe; (ii) the Tier II region includes China, India, South America, Middle East, Africa, and elsewhere in Asia (except for Korea and Taiwan); and the Tier III region includes Taiwan, Korea, Australia, and New Zealand.
If regional data usage limitations are specified in Customer’s Order Form or Insertion Order, then the geographic distribution of Customer’s data usage must not exceed for any region in any billing period the sum of the usage caps for all countries in such region. Notwithstanding the foregoing, any unused data capacity for a given regional tier may be used by Customer in any lower regional tier without incurring additional Fees. By way of example, for a Customer with regularly allotted usage limitations of 30% in the Tier II region and 15% in the Tier III region, there would be no overage charges if in a given billing period the geographic distribution of Customer’s data usage is 35% in the Tier II region and 10% in the Tier III region.
The Mobile SDK Service is a Service that facilitates and analyzes network calls for mobile applications. Paid and enterprise plans of the Mobile SDK Service are available that can be used to optimize how data is transferred over networks through the use of ASAP™, a UDP-based protocol that accelerates the last mile to mobile devices.
Any use of the term “website” in the General Terms or any other written agreement between you and Cloudflare, as applicable, shall be deemed to mean “website or mobile application” with respect to your use of the Mobile SDK Service.
In addition, the capitalized terms below shall have the following meanings:
“Access Key” means a confidential access key provided by Cloudflare to Customer for enabling the Mobile SDK Service in a Mobile App.
“Active User” means with respect to paid and enterprise Mobile SDK Service subscriptions, a unique user who has performed some action in a Mobile App in the applicable billing period. Each installation of the Mobile App on a device shall count as a unique user. For example, if a user installs and uninstalls a Mobile App 5 times in a day on the same device, such user will count as 5 unique users for the applicable billing period.
“Mobile App” means a discrete compiled handheld or mobile device application that integrates the Cloudflare Mobile SDK to access the Cloudflare Mobile SDK Service. Each variation of compiled code that uses the Mobile SDK Service is counted as a unique Mobile App (e.g., iOS and Android each count as unique Mobile Apps). Cloudflare will provide one (1) Access Key for each unique Mobile App.
“Platform Access Fee” means with respect to paid and enterprise Mobile SDK Service subscriptions, the Monthly Fee charged by Cloudflare for each Mobile App.
“Total Active Users” means with respect to paid and enterprise Mobile SDK Service subscriptions the sum of all Active Users in all of Customer’s Mobile Apps for the applicable billing period. For example, if Customer’s iOS Mobile App has 300,000 Active Users in a given billing period, and Customer’s Android Mobile App has 200,000 Active Users in such billing period, the Total Active Users for such billing period is 500,000 Active Users.
Subject to your compliance with the terms and conditions of the Agreement, Cloudflare hereby grants you a non-exclusive, non-transferable, license, to enable the Mobile SDK Service in your Mobile App(s), solely in accordance with the Documentation and any other restrictions or obligations mutually agreed upon by the Parties. All rights not expressly granted to you herein are reserved to Cloudflare.
You acknowledge that you are solely responsible for your Mobile Apps, including the Mobile App’s performance and functioning with the Service. As between you and Cloudflare, you will provide all support of any type requested by Cloudflare or your End Users related to your Mobile App(s) and be responsible for any warranty, liability or obligation to any End User or any third party that arises in connection with their use of your Mobile App.
Each Access Key may only be used by one (1) Mobile App to access the Service. You acknowledge and agree that: (a) you will ensure that each Access Key issued to a Mobile App will be used only by the Mobile App for which it was issued; (b) you are responsible for maintaining the confidentiality of all Access Keys, and are solely responsible for all activities that occur with such Access Keys; and (c) you will notify Cloudflare promptly of any actual or suspected unauthorized use of any Access Key, or any other breach or suspected breach of the Agreement. Cloudflare reserves the right to terminate any Access Key that Cloudflare reasonably determines may have been used by an unauthorized third party, and shall provide you with immediate notice of such. For your own security, Cloudflare strongly encourages that you take all necessary security precautions in conjunction with all Access Keys.
Your access or use of the Cloudflare Registrar Services is subject to the Cloudflare Domain Registration Agreement available here.
Cloudflare will provide proactive monitoring, alerting, analysis, and mitigation support (“SOC Service”) in accordance with the SOC Service SLA and any provisioning, configuration, or other support as agreed in the relevant Order Form. Any changes to the scope of the SOC Service or related support must be agreed in writing by Cloudflare.
Configuration changes for Customer’s use of the SOC Service may be completed by Cloudflare or initiated by Customer. Customer authorizes Cloudflare to implement configuration changes that Cloudflare deems reasonable in its sole discretion to prevent or mitigate adverse impacts on Customer Internet Properties.
Customer acknowledges and agrees that (i) Cloudflare’s performance of the SOC Service shall be contingent on reasonable access to Customer’s account and assistance from Customer personnel from time to time; (ii) the SOC Service cannot detect, prevent, or mitigate all possible attacks or threats; and (iii) Cloudflare will have no liability for any harm or damage arising out of or in connection with Cloudflare’s performance of the SOC Service in accordance with industry standards.
The following terms apply to Cloudflare’s Web3 Gateway Services to which you subscribe through your Cloudflare account, such as Ethereum Gateway and IPFS Gateway.
Customer is solely responsible for determining which content is accessible through its Web3 Gateway on a domain receiving Cloudflare’s Enterprise Services. Customer agrees to provide Cloudflare with an email address for receiving abuse reports made against such Web3 Gateway. Cloudflare may make the email address available to the reporters of such abuse reports.
For non-Enterprise Web3 Gateways, Cloudflare reserves the right to remove access to any content through a Customer’s Web3 Gateway.