Monitor Cloudflare compliance pages
CDN, DDoS protection, DNS, and edge compute platform sitting in front of a large fraction of the internet.
Cloudflare publishes several compliance and legal pages that change over time. Under GDPR Article 28, data controllers using Cloudflare as a processor must continuously verify that "sufficient guarantees" remain in place — which means tracking changes to these pages as they happen. Below are the 4 most relevant pages, what typically changes on each, and ready-to-paste monitoring prompts.
Monitor all 4 pages automatically
Choose the pages that matter most and get an alert when something meaningful changes. The free plan covers 3 monitors.
Start with 3 free monitors →Pages to monitor
Sub-processor list
https://www.cloudflare.com/gdpr/subprocessors/ ↗
Typical change frequency: quarterly
What to monitor
- New sub-processors added for customer support or sales CRM (affects sensitive customer metadata)
- Changes to payment processors and billing sub-processors
- Sub-processors added for new product lines (Workers, R2, D1, Zero Trust)
- Third-party sub-processors for abuse detection and threat intelligence
Suggested monitoring prompt
Alert me when Cloudflare adds or changes sub-processors. Report the name, product area, and processing purpose. Ignore formatting changes.
Data Processing Agreement
https://www.cloudflare.com/cloudflare-customer-dpa/ ↗
Typical change frequency: yearly
What to monitor
- Changes to how Cloudflare processes log data and analytics
- Updates to cross-border transfer mechanisms
- Modifications to the list of Cloudflare entities acting as processors
- Changes to data retention for Zero Trust and Workers logs
Suggested monitoring prompt
Monitor the Cloudflare DPA for changes to log processing, transfer mechanisms, or entity lists. Ignore version numbers.
Privacy policy
https://www.cloudflare.com/privacypolicy/ ↗
Typical change frequency: yearly
What to monitor
- Changes to what data Cloudflare collects from end-user traffic
- New retention periods for logs and analytics
- Changes to the 1.1.1.1 DNS resolver data handling
- New AI/ML features that train on customer traffic metadata
Suggested monitoring prompt
Alert me when Cloudflare changes log retention, traffic data collection, 1.1.1.1 DNS data handling, or introduces AI training from customer data. Ignore editorial changes.
Status page
https://www.cloudflarestatus.com/ ↗
Typical change frequency: weekly
What to monitor
- Global network incidents affecting routing or DNS
- Postmortems involving customer data or certificate issues
- Zero Trust and Access incidents
Suggested monitoring prompt
Alert me on Cloudflare incidents affecting global routing, Zero Trust, DNS, or any incident mentioning customer data. Ignore minor regional issues.
Compliance certifications
Data location
Hosting locations: Global edge network, 310+ cities
EU-US Data Privacy Framework: Certified
Related
Ready to start monitoring Cloudflare?
Set up monitoring free →