// Trust & Security Report
Cloudflare Workers AI
by Cloudflare, Inc.
Workers AI: serverless GPU-based AI inference on Cloudflare's global network; sub-products include AI Gateway (observability/caching/rate-limiting for AI apps), Vectorize (vector database), and integration with Workers, R2, D1, KV, Durable Objects, and Pages.
Certifications held
9
Maturity
Enterprise
Trains on your data
No
Trust center
Yes
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
Verify on cloudflare.com“Log in SOC 2 Type II Cloudflare's SOC 2 Type II report covers security, confidentiality, and availability controls to protect custom”
Verify on cloudflare.com“Cloudflare is certified as ISO 27001, 27018 and 27701 compliant.”
Verify on cloudflare.com“Cloudflare is certified as ISO 27001, 27018 and 27701 compliant.”
Verify on cloudflare.com“Cloudflare is certified as ISO 27001, 27018 and 27701 compliant.”
Verify on cloudflare.com“As always, we are continuing to monitor ongoing developments in this space and will ensure our ongoing compliance with the EU GDPR Articles 44 and 46.”
Verify on cloudflare.com“Log in PCI DSS 4.0 Cloudflare maintains PCI DSS Level 1 compliance for certain products. Cloudflare's Attestation of Compliance is ava”
Verify on cloudflare.com“controls applicable to the provision and use of cloud services. Learn more FedRAMP High Federal Risk and Authorization Management Program. Learn more GovRAMP Government Risk and Authorization Management”
Verify on cloudflare.com“Exchange assessment. Customers can request to access the risk assessment here. CSA STAR Cloud Security Alliance’s Security, Trust, Assurance, and Risk Program validates and assesses Cloudflare’s security and”
Verify on cloudflare.com“ially approved GDPR Article 40 Code of Conduct. Read the report here Learn more Cyber Essentials Cloudflare’s certificate can be found here. Learn more C5:2020 Cloud Computing Compliance Criteria Catalogue (C5:2020)”
> Show 3 unconfirmed / not-held certifications
source: cloudflare.comNo public evidence found on cloudflare.com that Cloudflare holds ISO 27017 (cloud-specific security controls) certification. Not listed on trust hub ISO certifications page or in blog posts covering their certificate portfolio.
source: cloudflare.comNo public evidence found of ISO 42001 AI management certification. Cloudflare's Responsible AI page addresses EU AI Act posture and training data policies but does not mention ISO 42001.
source: blog.cloudflare.comNo public evidence found that Workers AI is a HIPAA-covered service. Cloudflare states 'Covered healthcare entities that are leveraging our enterprise version of our security products to protect their application layer can be assured that Cloudflare can sign Business Associates Agreements (BAA),' but the BAA is Enterprise-only and the covered scope is the application-layer security products (CDN, WAF, Bot Management, Zero Trust). Workers AI and the broader developer platform are not named in the covered-services scope; healthcare customers must confirm coverage with Cloudflare sales before routing ePHI.
// Privacy & AI training
Trains on customer data
No
Data processing agreement
Offered
Data region
Primarily United States and European Economic Area. Enterprise customers can use Cloudflare's data localization suite (available in regions including Japan and EU) to restrict which regional data centers inspect traffic and where logs are sent. Workers AI inference runs on Cloudflare's global GPU network across 335+ cities.
Cloudflare explicitly states it does not use customer content to train any AI models made available on Workers AI or to improve any Cloudflare or third-party services, and would not do so unless explicit consent is received. Cloudflare also does not train LLMs itself. Customer content for Workers AI is only stored if the customer explicitly uses a Cloudflare storage service (R2, KV, Durable Objects, Vectorize) in conjunction with Workers AI; otherwise no customer content is retained by Workers AI after inference.
// Security controls
Encryption in transit
TLS/SSL on all API and Worker traffic; Cloudflare's network can encrypt data throughout its journey from origin servers to end-users using the very latest protocols (TLS 1.3 supported).
cloudflare.comEncryption at rest
AES-256 encryption at rest for KV, R2, and other storage services; encryption and decryption are automatic and require no user configuration.
developers.cloudflare.comGlobal network and DDoS
335+ PoPs across the world, within 50ms of 95% of the world's population. Unmetered DDoS mitigation included on all plans.
cloudflare.comZero Trust / SASE
Cloudflare One provides ZTNA, SWG, CASB, DLP, and email security as an integrated SASE platform; identity-aware access controls replace VPN.
cloudflare.comVulnerability disclosure
Security issues can be reported via https://www.cloudflare.com/report-security-issue/; responsible disclosure program is public.
developers.cloudflare.comSandbox isolation (Workers)
Cloudflare Workers run in V8 isolates, not containers or VMs, providing strong per-request isolation. Cloudflare has bolstered sandbox security for Workers AI workloads.
developers.cloudflare.com// Products & data scope
Data it handles: Customer prompts and completions processed in-flight; not retained after inference unless customer explicitly routes data to a Cloudflare storage service. No customer data used for model training.
50+ open-source models (text generation, image classification, object detection, embeddings). Available on Free and Paid plans. Custom requirements (private custom models, higher limits) require Enterprise agreement via Custom Requirements Form.
Data it handles: Caches, logs, and rate-limits AI requests passing through the gateway. Log retention is configurable.
Works with any LLM provider behind a gateway proxy; not limited to Cloudflare's own models.
Data it handles: Stores embeddings; data persists in Cloudflare's infrastructure within customer-selected region.
Designed for use with Workers AI for semantic search, RAG, and recommendations.
Data it handles: Code and request data processed at edge; no persistent storage unless customer uses KV, D1, R2, or Durable Objects.
In scope for SOC 2, PCI DSS. HIPAA BAA coverage must be confirmed with Cloudflare sales.
Data it handles: Customer data persists; AES-256 at rest. All within PCI DSS scope.
R2 HIPAA eligibility not confirmed publicly; must verify with Cloudflare.
// What to watch
- HIPAA BAA is Enterprise-only and explicitly covers CDN, WAF, Zero Trust, and Access services. Workers AI and the general Workers developer platform are NOT listed as covered BAA services in Cloudflare's published scope. Healthcare customers must confirm Workers AI is covered before routing ePHI.
- Cloudflare is In Process for FedRAMP High but has not received an Authority to Operate (ATO). Press release language ('initiates top federal certifications') could be read as implying more than the current status.
- CSA STAR is Level 1 self-assessment only. No independent third-party CSA STAR Level 2 certification has been issued. The self-assessment should not be conflated with a third-party-audited STAR certification.
- ISO 27017 (cloud-specific security controls) was not found in Cloudflare's public certification portfolio despite it being a logical companion to ISO 27001/27018.
- No ISO 42001 (AI management) certification found; Cloudflare addresses responsible AI principles on its trust hub but has not published an AI governance certification for Workers AI specifically.
// At a glance
Pricing model
Free tier available (25 AI requests/day, 100,000 Worker requests/day). Paid Workers plan starts at $5/month with pay-as-you-go for AI tokens. Enterprise/custom pricing for private models and higher limits.
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on Cloudflare, Inc.'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-06-27. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
cloudflare.com// Trust reports for comparable tools
Other tools in the same category, each with its own sourced report.