This policy is a draft, not yet approved by independent legal counsel.
The Service operates on Cloudflare global edge network. Data is processed at the edge closest to the user. relational database database locations are determined by Cloudflare regional configuration.
Data may be transferred across borders as part of normal edge processing. Tenants subject to specific residency requirements should configure their deployment accordingly.
For tenants in the EEA, the Service supports GDPR data subject rights including access, rectification, deletion, and portability through the Export and Deletion policies.
For tenants in Vietnam, the Service complies with Decree 13/2023/ND-CP. Personal data processing is documented and auditable.
The Service may restrict access from jurisdictions where operation is not legally permitted. Tenants are responsible for ensuring their use complies with local law.
Sub-processors are listed in the Subprocessors document. The regions where sub-processors operate are documented and updated when changes occur.