Cloudflare, Inc.: Certificate of Registration
Cloudflare, Inc.: Certificate of Registration
The Certification Body of Schellman & Company, LLC hereby certifies that the following organization operates an Information
Security Management System that conforms to the requirements of ISO/IEC 27001:2013
Cloudflare, Inc.
for the following scope of registration
The scope of the ISO/IEC 27001:2013 certification is limited to the Information Security Management System (ISMS) supporting
the confidentiality, integrity, and availability of the policies and procedures supporting Cloudflare’s Global Managed Network,
and inclusive of the requirements and control implementation guidance of ISO/IEC 27701:2019 for a privacy information
management system (PIMS) as both PII Processor and PII Controller of Customer Information per the ISMS statement of
applicability version 3.1 dated January 26, 2021, and the PIMS statement of applicability version 1.0 dated January 8, 2021.
Authorized by:
Ryan Mackie
Principal, Schellman & Company
4010 W Boy Scout Blvd., Suite 600
Tampa, Florida 33607, United States
www.schellman.com
Page 1 of 2
CONDITIONS & LIMITATIONS:
1. The aforementioned organization has a perpetual responsibility to maintain compliance with ISO/IEC 27001:2013 during the period of certification.
2. This certificate is subject to the satisfactory completion of annual surveillance audits by Schellman & Company, LLC
3. ISO/IEC 27001:2013 compliance audits are not designed to detect or prevent criminal activity or other acts that may result in an information security breach. As such, this certification should not be
construed as a guarantee or assurance that an organization is unsusceptible to information security breaches.
4. The information in this document is provided “AS IS”, without warranties of any kind. Schellman & Company, LLC expressly disclaims any representations and warranties, including, without limitation,
the implied warranties of merchantability and fitness for a particular purpose.
5. This certificate is the property of Schellman & Company, LLC and is bound by the conditions of contract. The authenticity of this certificate can be validated by contacting Schellman & Company, LLC
Certificate Number: 1188448-1
In-Scope Location(s)
101 Townsend Street Corporate Headquarters and Main Location of the ISMS
San Francisco, California 94107 and PIMS
United States
Page 2 of 2
CONDITIONS & LIMITATIONS:
1. The aforementioned organization has a perpetual responsibility to maintain compliance with ISO/IEC 27001:2013 during the period of certification.
2. This certificate is subject to the satisfactory completion of annual surveillance audits by Schellman & Company, LLC
3. ISO/IEC 27001:2013 compliance audits are not designed to detect or prevent criminal activity or other acts that may result in an information security breach. As such, this certification should not be
construed as a guarantee or assurance that an organization is unsusceptible to information security breaches.
4. The information in this document is provided “AS IS”, without warranties of any kind. Schellman & Company, LLC expressly disclaims any representations and warranties, including, without limitation,
the implied warranties of merchantability and fitness for a particular purpose.
5. This certificate is the property of Schellman & Company, LLC and is bound by the conditions of contract. The authenticity of this certificate can be validated by contacting Schellman & Company, LLC