Black Snow IntelligenceBlack Snow Intelligence
Black Snow Report

Cloudflare

Method v1.6As At 2026-08-0717 Surfaces Read1 Offering Assessed

Your own published record, as at 2026-08-07.

Your Details

The Macro Picture17

Red · Adverse
2
of 17 banded observations across 1 offering band Adverse. 1 was never measured.

1 conditional row (Hosting Locality = EU Regional Services + Customer Metadata Boundary (Enterprise paid add-on)) sit outside these counts. A Variant is a stated deployment mode, not a published offering, and the Grid Standard holds it to its own band.

What Is Published8

Your Own Words3

We may be required to disclose personal information we receive under the EU-U.S. DPF ... in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
Privacy Policy effective 4 November 2025, DPF section. · Source
Should these certifications lapse or become otherwise invalidated, Cloudflare relies on the standard contractual clauses, including supplementary measures as necessary for transfers to the United States.
Privacy Policy effective 4 November 2025, international transfers section. The DPA v6.4 elects Implementing Decision 2021/914 Module Two or Module Three by customer role, Clause 17 Option 2 (German law), Clause 18(b) Munich courts, and the UK International Data Transfer Addendum version B1.0 with Table 4 'neither party'. The UK Addendum is recorded here rather than as IDTA because Cloudflare elects the Addendum to the EU SCCs, not the standalone IDTA. · Source
We store your personal information for a period of time that is consistent with the business purposes set forth in Section 3 ... or as long as needed to fulfill and comply with legal obligations.
Privacy Policy effective 4 November 2025, retention section. A purpose-linked criterion, no period and no per-category criteria. · Source

Parties You Name17

See which of these are assessed in this register

Register Check3

AI Role By Offering1

Assessment Basis

Produced under Method v1.6 from the entity's fact record. 8 of 8 observations were measured under that generation; the rest read Not Measured, which is a fact about this register's coverage and not a finding about the entity.

Read from 17 first-party surface(s) across 1 assessed offering(s), found by the entity's own link graph and sitemap rather than by guessed paths.

Fact Record
Version 1.0, dated 2026-08-07
Standards Commit
3fc7d3917a4d
Register Control Quality
Both Views

Verification And Challenge

Every finding on this record is a statement about what could be read on your own published surfaces as at 2026-08-07. Correspondence route as recorded on this card input: ror@blacksnowintel.com.

What A Machine Could Not Establish2

2 questions are open and 6 are established, read as at 2026-08-07 under method v1.6.

The One Thing To Publish First

Publish it: say whether customer data is used to train AI models.

Amber · PartialTraining On Customer Data

Training Exclusion Instrument: Privacy Policy

Where To Put It

This was read on your own page at https://www.cloudflare.com/trust-hub/. That is the page a reader already reaches for and does not find it on, so it is the page to correct first.

Where Others Stand

24 organisations in the register say whether customer data is used to train AI models. You publish on it, but not completely.

What A Published Answer Looks Like

We will not use your data to train our AI or language models. We will not store your data except for the purpose of providing you with access to our platform and to the AI Functionality.

A question answered plainly in public, by an organisation read as Strong on it. It is not an endorsement of the position the sentence states — Black Snow reads what is published and never recommends what to practise. Read on published terms. Claim tier Quoted. The organisation that published it is not named. A name in the original is replaced; nothing else in the sentence is changed.

One is named here, and one is deliberate. The rest of the open questions are listed below without a prescription; what to publish for each, in what order, and drafted machine-readable evidence for all of them, is the Deep Dive.

Still Open

Deep Dive

The full assessment, plus consulting on what to fix.

Reviewing your record is free.