Last updated March 5, 2024 (note that the "Supplemental Terms" have been renamed to the "Service-Specific Terms" as of May 10, 2023)
The following Service-Specific Terms (“Service-Specific Terms”), are an integral part of the Self-Serve Subscription Agreement, Enterprise Subscription Agreement, or any other agreement governing your use and access to Cloudflare's Service(s), as applicable (“Subscription Terms”). Unless defined below, all capitalized terms will have the definitions given to such terms in the Subscription Terms. For Enterprise customers, all references to “you” and “your” in the Service-Specific Terms below refer to the Customer named in the applicable Order Form or other ordering document.
Please click on the following links to navigate to the Service-Specific Terms applicable to your specific Cloudflare Services.
The following definitions apply to quantities referenced in orders and invoices for Cloudflare Services. Unless explicitly stated otherwise in the applicable Order Form or Insertion Order(s), the defined terms below have the same meaning regardless of whether such terms are capitalized or uncapitalized.
“95th percentile” is the 95th percentile of a Customer’s usage of a given Service as measured by Cloudflare over five minute intervals. The 95th percentile methodology is used to measure usage of Services billed in Mbps, Gbps, or any other bit per second methodology.
“Business domain” is any domain entitled to a Business subscription level of protection, products, and support (as defined at cloudflare.com/plans/), exclusive of any add-on or usage-based features for which you may be charged separately.
“Concurrent connections” is the maximum number of clients concurrently connected to Cloudflare’s servers at any one time.
“Custom hostname” is any hostname that you send to Cloudflare’s custom hostname endpoint. A custom hostname can be a domain at any level (including but not limited to second- and third-level domains). For billing purposes, foo.com, foo.co.uk, www.foo.com, x.foo.com would be considered four separate custom hostnames. Cloudflare will invoice you for any custom hostname that has been active during the billing month, regardless of the duration of the activity during such month.
“Custom SSL certificate” is an SSL certificate that is provided by you for use with the Service. Unless otherwise mutually agreed to in writing, you may only use SNI certificates.
“Dedicated SSL certificate” is an SSL certificate that is provided and managed by Cloudflare on your behalf for use with the Service.
“Domain” is a publicly registrable domain (e.g., example.com) along with its child subdomains (e.g., help.example.com) that is configured individually in the Cloudflare dashboard and assigned its own unique zone ID through the Cloudflare Service dashboard. If you require a subdomain to be managed separately from its parent domain, such subdomain must have its own zone ID and will be counted as a separate domain.
"Endpoint" is any service or hardware that intercepts and processes incoming public or private traffic. This includes Origins, hostnames, private or public IP addresses, virtual IP addresses (VIPs), servers, and other dedicated hardware boxes.
“Enterprise DNS-only domain“ is any Zone that only utilizes Cloudflare for DNS resolution and has 0 Gigabytes (GB) of data transfer per month.
“Enterprise primary domain” is any domain receiving Cloudflare’s Enterprise Services that utilizes more than 50 Gigabytes (GB) of data transfer per month.
“Enterprise secondary domain” is any domain receiving Enterprise Services that utilizes 50 GB or less of data transfer per month.
“Images Delivered” means an image subject to a Transformation or Images Stored that are delivered to an end user at any time during the applicable billing period.
“Images Stored” means images stored in Cloudflare Images at any time during the applicable billing period.
“Neuron” is a measure of compute capacity used for machine learning model workloads, as determined based on factors such as operations required to perform computation for a given inference request. The output capacity of a single Neuron is relative to the machine learning model chosen and computational complexity required for inference requests, as may be further described and estimated in the developer documentation.
“Operation” is a Request that may make changes to or retrieve information about resources.
“Origin” is any server that communicates with Cloudflare’s edge, and that hosts any content or data, or that runs one or more programs to intercept and process incoming internet requests.
“Pro domain” is a domain entitled to a Pro subscription level of protection, products, and support (as defined at cloudflare.com/plans/), exclusive of any add-on or usage-based features for which you may be charged separately.
“Read/Write/List/Delete” are defined as follows for the purposes of Cloudflare Workers KV, Durable Objects, D1, and Workers Analytics Engine (as applicable): a “Read” is where a single value for a given key, unit, or row is read; a “Write” is where a single key/value pair, unit, or row is written; a “List” is where a list of keys within a given namespace is returned; and a “Delete” is where a single key/value pair, unit, or row is removed.
"Request" is a single HTTP/S request that is received by Cloudflare’s edge. For the Cloudflare Developer Platform, a Request is a single HTTP/S request that hits a Worker or Durable Object on Cloudflare’s edge.
“Seat” means an employee, agent, contractor, or other third party, in each case, authorized by you to use a Cloudflare Service, as applicable.
“Session” means a single instance of a headless browser launched using the Browser Rendering API.
“Siteverify Request” is a single HTTP/S request that is received by Cloudflare’s siteverify API endpoint that Cloudflare reasonably determines is generated by a human.
“Uncached Image” is an image that is not cached on any Cloudflare server.
“Storage” or "Stored" is defined for billing purposes as the average hourly amount of data stored in gigabytes (GB) or other units set forth in an Order during a single monthly billing period.
“Transformation” is an image variant resulting from a resize and/or other Customer request(s) (e.g., blur, sharpen, crop/trim, etc.) applied to a source image. For billing purposes, the initial Customer request(s) and resulting image counts as a single Transformation that will be available for a 30-day period following generation.
“Vector Dimensions” are the number of elements in a vector.
“Zaraz Event” means an event (e.g., pageview, ‘zaraz.track’, etc.) sent to the Zaraz Service.
“Zone” is an instance configured in the Cloudflare Services dashboard which has a unique zone id assigned to it. In general, a zone would be associated with a single registrable domain and would include all of that domain’s child subdomains unless one or more of the child subdomains requires a different performance or security setting, in which case each child subdomain could either be assigned its own zone id or be grouped together with other child subdomains that share the same performance or security settings under a single zone id.
Information related to your Cloudflare account’s carbon usage is provided solely for informational purposes. You can learn more about Cloudflare's methodology for calculating this number in the Carbon Impact Report accessible in the Cloudflare Service dashboard. The information provided is not warranted to be error free and contains both original Cloudflare data and estimates, subject to update, correction and revision.
The Cloudflare for Government Service is available for the Services identified on the Cloudflare for Government Page (each such Service, a “Covered Service”) that have been purchased by Customer. Purchase of the Cloudflare for Government Service alone does not provide Customer with an entitlement to any Covered Services, unless such Covered Services are purchased separately by Customer.
Customer is responsible for configuring the Cloudflare for Government Service in accordance with the Customer Responsibilities provided by Cloudflare to Customer and for verifying that its use of the Cloudflare for Government Service will comply with laws or other obligations that may apply to Customer or Customer Content.
Cloudflare’s China Service is operated by its Chinese partner JD Cloud (the “China Service Partner”). Customer acknowledges that as part of the China Service the China Service Partner will process a portion of Customer's data in mainland China (including Zone configuration information and bindings with Cloudflare’s Developer Suite when a Customer enables the China Service for a particular Zone), and as a result such Customer data may be subject to Chinese law, including China’s Cybersecurity Law. By using Cloudflare’s China Service, Customer acknowledges and agrees that: (i) it will be solely responsible for obtaining and maintaining a valid Internet Content Provider (ICP) license (the “ICP License”) throughout the Term, as required by the Chinese Ministry of Industry and Information Technology, (ii) Cloudflare will not be liable for Customer’s inability to obtain or maintain such an ICP License, (iii) in the absence of such an ICP License, Cloudflare or its China Service Partner may refuse to provide the China Service to Customer without liability, and (iv) Cloudflare may share ICP License information, as well as Customer address and contact information with the China Service Partner. Notwithstanding any provision of the Agreement to the contrary, the China Service is provided to Customer “AS-IS,” with all faults, and without warranty, obligation, or service level of any kind, and unless otherwise explicitly agreed to in writing, any custom security requirements that have been negotiated between Customer and Cloudflare will not apply to the China Service. Cloudflare and its China Service Partner reserve the right to terminate or suspend Customer’s right to use or access the Service in China, at any time and without liability, in response to Chinese law, rule, regulation, or court order; provided, that (a) Cloudflare provides notice to Customer of such termination or suspension as soon as reasonably practicable, and (b) Cloudflare works to promptly route Customer’s traffic to the next nearest data center(s) outside of China. Termination or suspension of the China Service will have no effect upon any other Services provided to Customer under the Agreement, which will remain in full force and effect. Customer’s use of the China Service is subject to Chinese law including laws governing the dissemination of certain types of content.
By enabling Crawler Hints on your Zone, you authorize and instruct Cloudflare to share your websites’ hostnames and URL paths with third-party search engines (collectively, the “Crawler Hints Partners”).
You understand that Crawler Hints is made available to you on an “as is” and “as available” basis. Crawler Hints is not covered by Cloudflare customer support and does not have an SLA. Cloudflare reserves the right to modify or discontinue Crawler Hints at any time without notice to you.
IN NO EVENT WILL CLOUDFLARE BE LIABLE TO YOU OR ANY THIRD PARTY FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES ARISING OUT OF OR RELATING TO YOUR ACCESS TO OR USE OF, OR YOUR INABILITY TO ACCESS OR USE CRAWLER HINTS, WHETHER BASED ON WARRANTY, CONTRACT, TORT (INCLUDING NEGLIGENCE), STATUTE, OR ANY OTHER LEGAL THEORY, WHETHER OR NOT CLOUDFLARE HAS BEEN INFORMED OF THE POSSIBILITY OF SUCH DAMAGE.
Overview
Cloudflare Customers that purchase the Data Localization Suite will be entitled to Cloudflare’s Regional Services, Geo Key Manager, Customer Metadata Boundary, and Keyless SSL Services for Customer Zones that are on Cloudflare’s Enterprise plan for the sole use of Data Localization suite. Customers are responsible for configurations related to the Data Localization Suite.
The compatible Cloudflare Services, available geographic regions, and other limitations for the Data Localization Suite are indicated on Cloudflare's developer documentation available at https://developers.cloudflare.com/data-localization/ ("Data Localization Suite Page").
Pricing
By purchasing Cloudflare’s Data Localization Suite, you understand that Cloudflare includes an additional fee equal to thirty percent (30%) of the monthly Fees (“Localization Suite Fee”) for any Services identified on the Data Localization Suite Page (each such Service, a “Covered Service”). The Localization Suite Fee will apply to all Covered Services, regardless of whether such Covered Services are invoiced on a fixed fee or variable basis. The Localization Suite Fee will apply to all future, as well as all previously quoted, pricing including any volume discounts extended to you by Cloudflare. For the avoidance of doubt, the Data Localization Suite does not provide you with an entitlement to a Covered Service, which must be purchased separately.
Regional Services
As a Data Localization Suite customer, you may configure Regional Services for Covered Services on your Enterprise subscription that support Regional Services as described on the Data Localization Suite Page. If you have enabled Regional Services for your Domain(s), Cloudflare will terminate TLS and apply application layer services for HTTPS traffic transmitted between End Users and the origin web server(s) for such a Domain only in Cloudflare data centers located in the geographic region you have selected. The geographic regions available for the Regional Service are listed on the Data Localization Suite Page.
Customer Metadata Boundary
As a Data Localization Suite customer, you may configure the Customer Metadata Boundary (CMB) for Covered Services on your Enterprise account(s). The geographic regions available and compatible Services for CMB are listed on the Data Localization Suite Page. Customer understands that not all Services will be available when CMB is enabled and that some Services will have reduced functionality.
Cloudflare will not transfer outside the configured region(s) any Customer Logs arising from Covered Services. Customer is responsible for all configurations related to CMB.
Compliance
Customer is solely responsible for ensuring that its use of the Data Localization Suite is compliant with all applicable laws and regulations as well as any and all privacy policies, agreements or other obligations Customer may maintain or enter into.
If no regional data usage limitations are set forth in Customer’s Order Form or Insertion Order, as applicable, then the geographic distribution of Customer’s data usage must not exceed in any billing period (i) 25% in the Tier II region or (ii) 8% in the Tier III region, as such regions are defined below.
In general, (i) the Tier I region includes North America and Europe; (ii) the Tier II region includes China, India, South America, Middle East, Africa, and elsewhere in Asia (except for Korea and Taiwan); and the Tier III region includes Taiwan, Korea, Australia, and New Zealand.
If regional data usage limitations are specified in Customer’s Order Form or Insertion Order, then the geographic distribution of Customer’s data usage must not exceed for any region in any billing period the sum of the usage caps for all countries in such region. Notwithstanding the foregoing, any unused data capacity for a given regional tier may be used by Customer in any lower regional tier without incurring additional Fees. By way of example, for a Customer with regularly allotted usage limitations of 30% in the Tier II region and 15% in the Tier III region, there would be no overage charges if in a given billing period the geographic distribution of Customer’s data usage is 35% in the Tier II region and 10% in the Tier III region.
The Mobile SDK Service is a Service that facilitates and analyzes network calls for mobile applications. Paid and enterprise plans of the Mobile SDK Service are available that can be used to optimize how data is transferred over networks through the use of ASAP™, a UDP-based protocol that accelerates the last mile to mobile devices.
Any use of the term “website” in the General Terms or any other written agreement between you and Cloudflare, as applicable, shall be deemed to mean “website or mobile application” with respect to your use of the Mobile SDK Service.
In addition, the capitalized terms below shall have the following meanings:
“Access Key” means a confidential access key provided by Cloudflare to Customer for enabling the Mobile SDK Service in a Mobile App.
“Active User” means with respect to paid and enterprise Mobile SDK Service subscriptions, a unique user who has performed some action in a Mobile App in the applicable billing period. Each installation of the Mobile App on a device shall count as a unique user. For example, if a user installs and uninstalls a Mobile App 5 times in a day on the same device, such user will count as 5 unique users for the applicable billing period.
“Mobile App” means a discrete compiled handheld or mobile device application that integrates the Cloudflare Mobile SDK to access the Cloudflare Mobile SDK Service. Each variation of compiled code that uses the Mobile SDK Service is counted as a unique Mobile App (e.g., iOS and Android each count as unique Mobile Apps). Cloudflare will provide one (1) Access Key for each unique Mobile App.
“Platform Access Fee” means with respect to paid and enterprise Mobile SDK Service subscriptions, the Monthly Fee charged by Cloudflare for each Mobile App.
“Total Active Users” means with respect to paid and enterprise Mobile SDK Service subscriptions the sum of all Active Users in all of Customer’s Mobile Apps for the applicable billing period. For example, if Customer’s iOS Mobile App has 300,000 Active Users in a given billing period, and Customer’s Android Mobile App has 200,000 Active Users in such billing period, the Total Active Users for such billing period is 500,000 Active Users.
Subject to your compliance with the terms and conditions of the Agreement, Cloudflare hereby grants you a non-exclusive, non-transferable, license, to enable the Mobile SDK Service in your Mobile App(s), solely in accordance with the Documentation and any other restrictions or obligations mutually agreed upon by the Parties. All rights not expressly granted to you herein are reserved to Cloudflare.
You acknowledge that you are solely responsible for your Mobile Apps, including the Mobile App’s performance and functioning with the Service. As between you and Cloudflare, you will provide all support of any type requested by Cloudflare or your End Users related to your Mobile App(s) and be responsible for any warranty, liability or obligation to any End User or any third party that arises in connection with their use of your Mobile App.
Each Access Key may only be used by one (1) Mobile App to access the Service. You acknowledge and agree that: (a) you will ensure that each Access Key issued to a Mobile App will be used only by the Mobile App for which it was issued; (b) you are responsible for maintaining the confidentiality of all Access Keys, and are solely responsible for all activities that occur with such Access Keys; and (c) you will notify Cloudflare promptly of any actual or suspected unauthorized use of any Access Key, or any other breach or suspected breach of the Agreement. Cloudflare reserves the right to terminate any Access Key that Cloudflare reasonably determines may have been used by an unauthorized third party, and shall provide you with immediate notice of such. For your own security, Cloudflare strongly encourages that you take all necessary security precautions in conjunction with all Access Keys.
Your access or use of the Cloudflare Registrar Services is subject to the Cloudflare Domain Registration Agreement available here.
Cloudflare will provide proactive monitoring, alerting, analysis, and mitigation support (“SOC Service”) in accordance with the SOC Service SLA and any provisioning, configuration, or other support as agreed in the relevant Order Form. Any changes to the scope of the SOC Service or related support must be agreed in writing by Cloudflare.
Configuration changes for Customer’s use of the SOC Service may be completed by Cloudflare or initiated by Customer. Customer authorizes Cloudflare to implement configuration changes that Cloudflare deems reasonable in its sole discretion to prevent or mitigate adverse impacts on Customer Internet Properties.
Customer acknowledges and agrees that (i) Cloudflare’s performance of the SOC Service shall be contingent on reasonable access to Customer’s account and assistance from Customer personnel from time to time; (ii) the SOC Service cannot detect, prevent, or mitigate all possible attacks or threats; and (iii) Cloudflare will have no liability for any harm or damage arising out of or in connection with Cloudflare’s performance of the SOC Service in accordance with industry standards.
The following terms apply to Cloudflare’s Web3 Gateway Services to which you subscribe through your Cloudflare account, such as Ethereum Gateway and IPFS Gateway.
Customer is solely responsible for determining which content is accessible through its Web3 Gateway on a domain receiving Cloudflare’s Enterprise Services. Customer agrees to provide Cloudflare with an email address for receiving abuse reports made against such Web3 Gateway. Cloudflare may make the email address available to the reporters of such abuse reports.
For non-Enterprise Web3 Gateways, Cloudflare reserves the right to remove access to any content through a Customer’s Web3 Gateway.