LLM API Compliance
Providers / Cloudflare Workers AI

Cloudflare Workers AI

Headquarters: United States. Trust center or security page: cloudflare.com. Checked 2026-10-29. API prices: price tracker.

Certifications and attestations

NameScopeSource
SOC 2 Type IICompany-wide (whole cloud)cloudflare.com
ISO 27001:2022Company-wide (whole cloud)cloudflare.com
ISO 27701:2019Company-wide (whole cloud)cloudflare.com
ISO 27018:2019Company-wide (whole cloud)cloudflare.com
ISO 27017:2015Company-wide (whole cloud)cloudflare.com
FedRAMP HighCompany-wide (whole cloud)cloudflare.com
C5:2020Company-wide (whole cloud)cloudflare.com
PCI DSS 4.0Company-wide (whole cloud)cloudflare.com
CSA STARCompany-wide (whole cloud)cloudflare.com
EU Cloud Code of ConductCompany-wide (whole cloud)cloudflare.com

Reports are usually available under NDA from the trust center. A company-wide certificate doesn't always cover every AI product; check the report's scope.

HIPAA: BAA on request

“Contact your account team to request the HIPAA AoC.”

Source: cloudflare.com

Zero data retention: Zero retention by default

“Workers AI processes Customer Content only for as long as needed to provide the service.”

Source: developers.cloudflare.com

Training on API data: Not used for training by default

“such Customer Content is not used to train AI models or improve Cloudflare or third-party products or services”

Source: developers.cloudflare.com

EU data residency: unknown

Runs on serverless GPUs across Cloudflare's global network; no EU-only processing option stated in the Workers AI docs. Prices are per-model unit prices billed in Neurons ($0.011 per 1,000 Neurons; 10,000 free Neurons/day).

Source: developers.cloudflare.com

From the BranoLabs price tracker provider registry.

Something changed or wrong? Use the bug link in the footer. Back to all providers.