Cloudflare
Cloudflare AI Gateway
Verified: 2026-06-22 Changed: 2026-06-23
C77 Pts
Privacy Grade Breakdown
Scores are calculated based on default weights. Visit the Methodology page for the formulas.
Default Training
A+100/100
Opt-Out Ease
F0/100
Data Retention
B-80/100
Deletion Rights
A+100/100
Third-Party Sharing
A+100/100
Human Review
A+100/100

Policy Details & Nuances

Default Model Training
No

Cloudflare AI Gateway acts as a proxy and does not train on user data. Cloudflare's broader privacy policy covers general data handling.

Opt-Out Mechanism
No

Not applicable - no training occurs.

Data Retention & Deletion

Retention Period

Logs are retained for up to 30 days by default, configurable by customer.

Deletion on Request

Yes

Data can be deleted via API or dashboard at any time.

Third-Party Data Sharing

Data is forwarded to the configured upstream AI provider. Cloudflare does not share data with third parties for training purposes.

Human Review of Chats
No

No human review of AI Gateway traffic.

Context & Variations

Regional Variations

GDPR compliant. Data processing occurs in the customer's selected Cloudflare region.

Children's Data Policy

Enterprise platform restricted to users 18 years or older.

Enterprise vs. Consumer
No

Same privacy terms for all users. Cloudflare acts as a data processor only.