{
  "slug": "cloudflare-workers",
  "category": "app-hosting",
  "name": "Cloudflare Workers",
  "description": "Serverless platform that runs JavaScript, TypeScript, Python and WebAssembly on Cloudflare's global network, and hosts static sites and full-stack apps, including those formerly on Cloudflare Pages.",
  "website": "https://www.cloudflare.com/products/workers/",
  "license": null,
  "platforms": [
    "web"
  ],
  "jurisdiction": {
    "code": "US",
    "name": "United States",
    "eyes": "Five Eyes",
    "eu": false,
    "gdpr": false,
    "cloud_act": "provider"
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "D",
  "score": 47,
  "coverage": 100,
  "summary": "Cloudflare Workers scores 47 out of 100 (grade D) on the app hosting platforms criteria. It meets 3 of 8 criteria: transparency report, tells users about requests and TLS configuration. It partly meets no ads or data sales, independent audit and security headers. It does not meet open source and no trackers or telemetry. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A and Mozilla HTTP Observatory grade B+.",
  "url": "https://privacyratings.com/app-hosting/cloudflare-workers/",
  "markdown": "https://privacyratings.com/app-hosting/cloudflare-workers/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "no",
      "evidence": null,
      "note": "The platform is closed source. The workerd runtime and the Wrangler CLI are open source."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "no",
      "evidence": "https://www.cloudflare.com/privacypolicy/",
      "note": "The website loads Google Tag Manager and Intercom, and the privacy policy describes advertising cookies."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://www.cloudflare.com/privacypolicy/",
      "note": "Funded by paid plans and does not sell personal information, but marketing and advertising partners receive website data to advertise Cloudflare's services."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://developers.cloudflare.com/fundamentals/reference/policies-compliances/compliance-docs/",
      "note": "SOC 2, ISO 27001 and PCI reports exist but are only available to account administrators in the dashboard."
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://www.cloudflare.com/transparency/",
      "note": "Semi-annual reports with counts of legal requests and responses."
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://cf-assets.www.cloudflare.com/slt3lc6tev37/zItVXCvbb4LZpYG4Uh10R/7b27bba39755f0a4344acb946977704d/2H_2025_Cloudflare_s_Transparency_Report_Legal-v2.pdf",
      "note": "The transparency report states customers are notified of legal requests unless legally prohibited."
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://www.ssllabs.com/ssltest/analyze.html?d=dash.cloudflare.com&hideResults=on",
      "note": "Grade A"
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "partial",
      "evidence": "https://developer.mozilla.org/en-US/observatory/analyze?host=dash.cloudflare.com",
      "note": "Grade B+ (80/100+)"
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "pending",
      "evidence": null,
      "note": "Not tested yet."
    }
  },
  "tests": {
    "ssllabs": "A",
    "observatory": "B+",
    "internetnl_web": null,
    "internetnl_mail": null,
    "trackers": [
      {
        "name": "Cloudflare Web Analytics",
        "host": "static.cloudflareinsights.com",
        "effect": "partial"
      },
      {
        "name": "Google Tag Manager",
        "host": "inline code",
        "effect": "no"
      }
    ],
    "tested_at": "2026-10-01T07:08:14.286Z"
  },
  "last_modified": "2026-10-01T07:44:20Z"
}