Cloudflare sub-processors
Cloudflare publishes the list below on its own site. We check that page daily and record what moves, so this page shows the current list and what changed before it.
Current sub-processors
| Sub-processor | Purpose | Location |
|---|---|---|
| Slack Technologies, Inc. | Customer support communications | United States |
| Zendesk, Inc. | Customer support and account management | United States, the European Economic Area, Japan, and Australia |
| Salesforce, Inc. | Customer support and account management | United States |
| Google LLC | Cloudflare Developer Platform, Cloudflare Zero Trust and AI Gateway | European Economic Area, United States, Australia, India |
| Oracle America, Inc. | Cloudflare Developer Platform and Cache Reserve | United States, European Economic Area, UK, Japan, Australia, Canada, Singapore |
| Amazon Web Services (AWS) | Cloudflare Email Security (formerly Area 1) | United States, European Economic Area |
| CoreWeave, Inc. | Workers AI | United States |
| Nebius BV | Workers AI | England |
| Anthropic PBC | AI Gateway | United States |
| OpenAI, Inc. | AI Gateway | — |
| X.AI Corp. | AI Gateway | United States |
| Groq, Inc. | AI Gateway | United States |
| Cloudflare Ltd. | — | United Kingdom |
| Cloudflare Pte. Ltd. | — | Singapore |
| Cloudflare Australia Pty Ltd | — | Australia |
| Cloudflare Germany GmbH | — | Germany |
| Cloudflare Portugal, Unipessoal Lda. | — | Portugal |
| Cloudflare France SAS | — | France |
| Cloudflare Japan K.K. | — | Japan |
| Cloudflare (Canada) Information Technology Co., Ltd. | — | Canada |
| Cloudflare Netherlands B.V. | — | Netherlands |
| Cloudflare Middle East FZ-LLC | — | Dubai, U.A.E. |
| Cloudflare India Private Limited (for India customers only) | — | India |
| Area 1 Security, LLC | — | United States |
| Cloudflare Korea LLC | — | South Korea |
| Cloudflare Mexico S. de R.L de C.V. | — | Mexico |
| Cloudflare Malaysia Sdn. Bhd. | — | Malaysia |
| Cloudflare Capability Center (India) Private Limited | — | India |
| Cloudflare Sweden AB | — | Sweden |
| Cloudflare Switzerland GmbH | — | Switzerland |
Change history
No changes since monitoring began.
Watching this page daily since 01 Sep 2026.
Why this matters if you use Cloudflare
Under GDPR Article 28(2), your own customers are usually entitled to notice before you add or replace a sub-processor — and Cloudflare's sub-processors are part of that chain. The notice period in a typical DPA is 10 to 30 days, and it starts when the vendor updates their page, not when you notice.
Monitor Cloudflare on your own trust page — free3 vendors free, permanently. No card.