Your data stays where you put it.
7 Cloudflare regions, 3 of them under Cloudflare's EU jurisdiction, and your own Amazon Aurora database on Scale and Enterprise. This page is a summary of what our Data Processing Addendum commits to.
The regions.
The three European regions store data under Cloudflare's EU jurisdiction: Cloudflare keeps it inside the EU and chooses the datacenter. US West is the home region and the default for Free.
| Region | Code | Jurisdiction |
|---|---|---|
| US East | enam | Location |
| US West | wnam | Location |
| Europe Central | weur-1 | EU jurisdiction |
| Europe West | weur-2 | EU jurisdiction |
| Europe North | neur | EU jurisdiction |
| Asia-Pacific | apac | Location |
| Oceania | oc | Location |
Who chooses what.
The choice follows the plan.
| Plan | Where workspace data lives |
|---|---|
| Free | Always US West on Cloudflare. No region choice. |
| Starter, Pro, Pro+ and Team | One of the 7 Cloudflare regions, chosen for the workspace. |
| Scale and Enterprise | The workspace's own Amazon Aurora database in an AWS region the workspace chose. The isolation add-on does the same on the other plans. |
What is regional, and what is not.
Stated in the Data Processing Addendum; the addendum binds, this page summarizes.
Stored and processed in the data region chosen for the workspace. Receipts are customer data and follow it: in the region's shared Cloudflare D1 database on Free and Starter, in the workspace's own separate Cloudflare store on Pro, Pro+ and Team, in its own Aurora database on Scale, Enterprise and the isolation add-on.
Account data, sign-in, the dashboard and the billing records are stored in the region chosen at sign-up, which can differ from a workspace's data region. The account and billing records sit in the same region.
Payments, invoices and tax are handled by Avonao Billing, Avonao's central billing service, in the United States.
Served from the United States. They hold no customer personal data.
Cloudflare terminates network connections at the location nearest the caller, which can be outside the region. Stored data stays in the region.
When a workspace moves to Scale or Enterprise, or buys the isolation add-on, its existing receipts move into its own Aurora database. When it moves back to a Cloudflare plan they are copied back and checked before the Aurora database is retired after the grace period.
The documents.
Where each statement is binding.