Cloudflare
Cloudflare AI Gateway Verified: 2026-06-22 Changed: 2026-06-23
C77 Pts
VerifiedPrimary Policy Source
Privacy Grade Breakdown
Scores are calculated based on default weights. Visit the Methodology page for the formulas.
Default Training
A+100/100
Opt-Out Ease
F0/100
Data Retention
B-80/100
Deletion Rights
A+100/100
Third-Party Sharing
A+100/100
Human Review
A+100/100
Policy Details & Nuances
Default Model Training
NoCloudflare AI Gateway acts as a proxy and does not train on user data. Cloudflare's broader privacy policy covers general data handling.
Opt-Out Mechanism
NoNot applicable - no training occurs.
Data Retention & Deletion
Retention Period
Logs are retained for up to 30 days by default, configurable by customer.
Deletion on Request
YesData can be deleted via API or dashboard at any time.
Third-Party Data Sharing
Data is forwarded to the configured upstream AI provider. Cloudflare does not share data with third parties for training purposes.
Human Review of Chats
NoNo human review of AI Gateway traffic.
Context & Variations
Regional Variations
GDPR compliant. Data processing occurs in the customer's selected Cloudflare region.
Children's Data Policy
Enterprise platform restricted to users 18 years or older.
Enterprise vs. Consumer
NoSame privacy terms for all users. Cloudflare acts as a data processor only.
