Data Localization Suite (DLS)

The Data Localization Suite (DLS) provides granular control over where your data is inspected, stored, and processed across Cloudflare’s global network. It helps organizations comply with regional data residency regulations—such as GDPR, PDPA, or NDSR—by ensuring that encryption keys, HTTP traffic, and metadata remain confined to approved geographic boundaries.

Core Components:

• Geo Key Manager — Defines the country or region where your TLS encryption keys are physically stored and used.
• Regional Services — Restricts TLS termination and traffic processing to Cloudflare data centers within a specific region (e.g., EU, UAE, US).
• Customer Metadata Boundary — Ensures that logs, analytics, and metadata never leave the selected jurisdiction.

Why it matters:

• Supports compliance with global and local data protection laws that require data to stay within certain borders.
• Provides visibility and assurance on where traffic is processed and data is stored.
• Reduces the legal and operational risk of unauthorized cross-border data transfer.
• Allows independent or combined deployment of each DLS feature to meet specific organizational policies.

Key Enforcement Mechanisms:

• Regional Data Processing — Ensures all Layer 7 and TLS operations occur only in-region.
• Localized Key Storage — Keeps encryption keys within selected regional boundaries.
• Metadata Residency Control — Limits analytics and logs to stay in-region.
• Access Policy Enforcement — Prevents API or administrative access from unauthorized regions.

Important: Each DLS component must be configured individually—enabling one does not automatically activate others. Compliance behavior may differ depending on your Cloudflare plan and product compatibility.

For supported products, compatibility details, and deployment best practices, visit the official documentation:
Data Localization Suite Compatibility Guide

Use the following command to verify that your data traffic is routed to and processed within the correct region. Adjust the hostname to match your configured DNS records.

curl -sI https://www.cloudflaretech.online/ | grep -i cf-ray | awk '{print $2}'

curl.exe -sI https://www.cloudflaretech.online/ | findstr /I "CF-RAY"

Watch this short demo to observe the Data Localization Suite (DLS) in action.