InferCheck

Cloudflare Workers AI

Partial (EU + SCCs)api providerdevelopers.cloudflare.com

GDPR Compliance

EU-only data residency
Inference stays in EU
No training on customer data
Opt-out available
Standard Contractual Clauses
Adequacy decision (HQ country)
EU + SCCsDPANo Training

Data Handling

Regions
EU, US

Cloudflare documents regional controls for Workers via Data Localization Suite: Regional Services can ensure processing of a Workers project occurs only in-region for a custom domain, but this does not apply to subrequests or other triggers. For Developer Platform compatibility, Cloudflare states Workers AI supports Customer Metadata Boundary EU, but Jurisdictional Restrictions (data location/storage) are not supported today, and Workers AI analytics datasets are an exception that are supported. Cloudflare also describes Workers AI as running on GPUs on Cloudflare's global network.

Retention Policy

Cloudflare states Workers AI customer content is not used to train models or improve services without explicit consent. Customer content may be stored only if the customer uses storage services such as R2, KV, Durable Objects, or Vectorize with Workers AI. Cloudflare's general privacy policy says personal information is retained for as long as needed for business purposes and legal obligations. Workers Logs retention is 3 days on Free and 7 days on Paid plans if logs are enabled.

Additional Details

Workers AI inputs, outputs, embeddings, and training data are treated as Customer Content. Cloudflare says it does not make that content available to other customers and does not use it to train AI models made available on Workers AI or to improve Cloudflare or third-party services unless it receives explicit consent.

Sub-processors
Disclosed ↗(includes EU entities)

Certifications & EU AI Act

Certifications
SOC2ISO27001ISO27701ISO27018C5
EU AI Act Status
monitoring

Cloudflare has a public Responsible AI statement and says it is committed to developing AI-powered products in ways that align with applicable law, including the EU AI Act, but it does not provide a product-specific declaration that Workers AI is already EU AI Act compliant.

Verification

Last verified2026-04-11
Verified byAI-assisted draft (pending review)
Pricing tierpay per use
Notes

Cloudflare provides a public DPA, SCC-backed transfer terms, and a public sub-processor list, and publicly states that Workers AI customer content is not used for model training or service improvement without explicit consent. However, Workers AI runs on Cloudflare's global network and Cloudflare does not publicly guarantee EU-only inference for Workers AI; its data-localization docs also state Jurisdictional Restrictions for data location/storage are not supported for Workers AI today.

← Back to all providers