Skip to content
Cloudflare Docs
Docs DirectoryAPIsSDKs

Region support

The Data Localization Suite allows you to restrict where your data is processed and stored. The table below shows which regions are available for each DLS feature:

  • Geo Key Manager — restricts where your TLS private keys are stored.
  • Regional Services — restricts which Cloudflare data centers can decrypt and inspect your HTTPS traffic.
  • Customer Metadata Boundary (CMB) — restricts where your logs and analytics data are stored.

Some regions are defined by geography (for example, "Germany"), while others are defined by compliance frameworks:

  • FedRAMP Moderate — the US Federal Risk and Authorization Management Program, a government security certification standard. "Domestic" means only US-based certified data centers. "International" includes certified data centers outside the US.
  • IRAP Protected — the Australian government's Information Security Registered Assessors Program. This region includes IRAP-assessed data centers, which may be located outside Australia.
  • ISO 27001 Certified European Union — restricts traffic to EU data centers that hold ISO 27001 certification, an international standard for information security management.
  • Cloudflare Green Energy — restricts traffic to data centers powered by renewable energy sources. This is an energy-sourcing constraint, not a geographic one.

"Exclusive of" regions work in reverse — they exclude specific countries rather than restricting to them. For example, "Exclusive of Russia and Belarus" means Cloudflare will use any data center worldwide except those in Russia and Belarus.

Support by product and region is summarized in the following table:

RegionGeo Key ManagerRegional ServicesCustomer Metadata Boundary
Australia✅ 1✅✘
Austria✘✅Can use EU metadata boundary.
Brazil✘✅✘
Canada✅ 1✅✘
Cloudflare Green Energy✘✅✘
European Union✅✅✅
Exclusive of Hong Kong and Macau✘✅✘
Exclusive of Russia and Belarus✘✅✘
FedRAMP Moderate Compliant (Domestic)✅ 1✅✅
FedRAMP Moderate Compliant (International)✘✅✅
France✘✅Can use EU metadata boundary.
Germany✅ 1✅Can use EU metadata boundary.
Hong Kong✘✅✘
India✅ 1✅✘
IRAP ↗ Protected✘✅✘
ISO 27001 Certified European Union✘✅Can use EU metadata boundary.
Italy✘✅Can use EU metadata boundary.
Japan✅ 1✅✘
NATO✘✅✘
Netherlands✘✅Can use EU metadata boundary.
Russia✘✅✘
Saudi Arabia✘✅✘
Singapore✅ 1✅✘
South Africa✘✅✘
South Korea✅ 1✅✘
Spain✘✅Can use EU metadata boundary.
Switzerland✘✅✘
Taiwan✘✅✘
Turkey✘✅✘
United Arab Emirates✘✅✘
United Kingdom✅ 1✅Can use EU metadata boundary.
United States of America✅✅✅
US State of California✘✅✘
US State of Florida✘✅✘
US State of Texas✘✅✘

Refer to the table below for the complete list of available regions and their definitions.

RegionDefinition
AustraliaCloudflare will only use data centers that are physically located within Australia to decrypt and service HTTPS traffic.
AustriaCloudflare will only use data centers that are physically located within Austria to decrypt and service HTTPS traffic.
BrazilCloudflare will only use data centers that are physically located within Brazil to decrypt and service HTTPS traffic.
CanadaCloudflare will only use data centers that are physically located within Canada to decrypt and service HTTPS traffic.
Cloudflare Green EnergyCloudflare will only use data centers that are committed to powering their operations with renewable energy ↗.
European UnionCloudflare will only use data centers that are physically located within the European Union. For more details, refer to the list of European Union countries ↗.
Exclusive of Hong Kong and MacauCloudflare will only use data centers that are NOT physically located within Hong Kong and Macau to decrypt and service HTTPS traffic.
Exclusive of Russia and BelarusCloudflare will only use data centers that are NOT physically located within Russia and Belarus to decrypt and service HTTPS traffic.
FedRAMP Moderate Compliant (Domestic)Cloudflare will only use data centers that are FedRAMP Moderate certified and located within the United States.
FedRAMP Moderate Compliant (International)Cloudflare will only use data centers that are FedRAMP Moderate certified, including certified locations outside the United States.
FranceCloudflare will only use data centers that are physically located within Metropolitan France (the European territory of France) to decrypt and service HTTPS traffic.
GermanyCloudflare will only use data centers that are physically located within Germany to decrypt and service HTTPS traffic.
Hong KongCloudflare will only use data centers that are physically located within Hong Kong to decrypt and service HTTPS traffic.
IndiaCloudflare will only use data centers that are physically located within India to decrypt and service HTTPS traffic.
ISO 27001 Certified European UnionCloudflare will only use data centers that are physically located within the European Union ↗ and that adhere to the ISO 27001 certification.
IRAP ProtectedCloudflare will only use data centers that are IRAP protected, including certified locations outside Australia.
ItalyCloudflare will only use data centers that are physically located within Italy to decrypt and service HTTPS traffic.
JapanCloudflare will only use data centers that are physically located within Japan to decrypt and service HTTPS traffic.
NATOCloudflare will only use data centers that are physically located within North Atlantic Treaty Organization (NATO) countries. For more details, refer to the list of NATO countries ↗.
NetherlandsCloudflare will only use data centers that are physically located within the Netherlands to decrypt and service HTTPS traffic.
RussiaCloudflare will only use data centers that are physically located within Russia to decrypt and service HTTPS traffic.
Saudi ArabiaCloudflare will only use data centers that are physically located within Saudi Arabia to decrypt and service HTTPS traffic.
SingaporeCloudflare will only use data centers that are physically located within Singapore to decrypt and service HTTPS traffic.
South AfricaCloudflare will only use data centers that are physically located within South Africa to decrypt and service HTTPS traffic.
South KoreaCloudflare will only use data centers that are physically located within South Korea to decrypt and service HTTPS traffic.
SpainCloudflare will only use data centers that are physically located within Spain to decrypt and service HTTPS traffic.
SwitzerlandCloudflare will only use data centers that are physically located within Switzerland to decrypt and service HTTPS traffic.
TaiwanCloudflare will only use data centers that are physically located within Taiwan to decrypt and service HTTPS traffic.
TurkeyCloudflare will only use data centers that are physically located within Turkey to decrypt and service HTTPS traffic.
United Arab EmiratesCloudflare will only use data centers that are physically located within United Arab Emirates to decrypt and service HTTPS traffic.
United KingdomCloudflare will only use data centers that are physically located within the United Kingdom to decrypt and service HTTPS traffic.
United States of AmericaCloudflare will only use data centers that are physically located within the United States of America to decrypt and service HTTPS traffic.
US State of CaliforniaCloudflare will only use data centers that are physically located within the US State of California to decrypt and service HTTPS traffic.
US State of FloridaCloudflare will only use data centers that are physically located within the US State of Florida to decrypt and service HTTPS traffic.
US State of TexasCloudflare will only use data centers that are physically located within the US State of Texas to decrypt and service HTTPS traffic.

Footnotes

  1. Only supported in Geo Key Manager v2, the current version with expanded region support. ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8 ↩9