eucsoft

Cloudflare

cdn-edge · cloudflare.com · last checked 2026-09-19

Identity

Legal entity—
HQUS
Ultimate ownershipUS
EU contracting entity—
LEI—
US CLOUD Act reachdirect
Sourcecloudflare.com · 2026-09-17

Data location

RegionEU data locationMinimum planSourceObserved
euPaid upgradeEnterprisedevelopers.cloudflare.com2026-09-18

eu: The Data Localization Suite is described on the page as an 'Enterprise-only paid add-on'. Regional Services keeps traffic metadata, logs and analytics in the selected region.

Subprocessor chain

12 transcribed · 12 with a country outside the EEA

SubprocessorCountryPurposeObserved
Amazon Web Services (AWS)US, EEACloudflare Email Security (formerly Area 1)2026-09-17
Anthropic PBCUSAI Gateway2026-09-17
CoreWeave, Inc.USWorkers AI2026-09-17
Google LLCEEA, US, AU, INCloudflare Developer Platform, Zero Trust and AI Gateway2026-09-17
Groq, Inc.USAI Gateway2026-09-17
Nebius BVEnglandWorkers AI2026-09-17
OpenAI, Inc.GlobalAI Gateway2026-09-17
Oracle America, Inc.US, EEA, UK, JP, AU, CA, SGCloudflare Developer Platform and Cache Reserve2026-09-17
Salesforce, Inc.USCustomer support and account management2026-09-17
Slack Technologies, Inc.USCustomer support communications2026-09-17
X.AI Corp.USAI Gateway2026-09-17
Zendesk, Inc.US, EEA, JP, AUCustomer support and account management2026-09-17

The count outside the EEA is arithmetic over the country column, not a judgement about lawfulness. A transfer outside the EEA can be perfectly lawful; whether this one is depends on your use, not on the vendor.

Assurance

No certification claims transcribed yet.

Support window

ProductSupport periodStateSBOMSourceObserved
Cloudflare (SaaS)—Service onlyunknowncloudflare.com2026-09-18

Documents

What we read, how it was disclosed, and when.
DocumentDisclosureTranscriptionHTTPObserved
subprocessorsPublicfull2002026-09-17

History

DetectedWhat movedWhySource
2026-09-19
EU data location unstated → paid-upgrade
Minimum plan set to Enterprise
Note rewritten
we read a better pagedevelopers.cloudflare.com