SOC 2 or ISO27001


Hello - back in Oct 2017 a poster asked about SOC 2 and a Cloudflare representative said that they were looking into it. Did Cloudflare gave up on having an independent attestation of their security controls? (other than PCI which is very limited)

SOC2 or ISO27001 will work or did Cloudflare subscribe to something else which we can use to get comfort that they are properly securing our data as it traverses their internal networks and systems? We need this for our own satisfaction but also for users of our services.



Not that i am aware of. They have their servers in certified data centers, PCI and SOC2. But i couldn’t find any certificate.

Any news on this?




If you are an Enterprise customer you should contact your Cloudflare account team.

1 Like