Some things we have never done
  1. Cloudflare has never turned over our encryption or authentication keys or our customers' encryption or authentication keys to anyone.

  2. Cloudflare has never installed any law enforcement software or equipment anywhere on our network.

  3. Cloudflare has never provided any law enforcement organization a feed of our customers' content transiting our network.

  4. Cloudflare has never modified customer content at the request of law enforcement or another third party.

  5. Cloudflare has never modified the intended destination of DNS responses at the request of law enforcement or another third party.

  6. Cloudflare has never weakened, compromised, or subverted any of its encryption at the request of law enforcement or another third party.

If Cloudflare were asked to do any of these, we would exhaust all legal remedies, in order to protect our customers from what we believe are illegal or unconstitutional requests.

Accurate as of February 27, 2026