Serving the most critical missions: Cloudflare for Government achieves FedRAMP Class D (High) Certified status

Summary

Cloudflare for Government has achieved FedRAMP Class D (High) certification status, following its FedRAMP Moderate authorization in 2022 and sponsorship by the National Institute of Standards and Technology. FedRAMP High covers systems handling the nation’s most sensitive unclassified data, including law enforcement, emergency services, financial systems, and national security information, where a control breach could be catastrophic. Cloudflare says its offering runs the same software stack and services as its commercial platform on one global network, while its Data Localization Suite ensures traffic inspection and processing for FedRAMP High occur exclusively in U.S. data centers. The systems developed for FedRAMP High are also the foundation of Cloudflare’s stated pursuit of DoD Impact Level 4 authorization, with access to its Zero Trust, application performance, and developer features as they are released.

Takeaways

1. 1

   FedRAMP Class D (High) is intended for systems handling highly sensitive unclassified data tied to law enforcement, emergency services, financial systems, and national security; a compromise could have catastrophic consequences.

2. 2

   Cloudflare uses its Data Localization Suite to enforce U.S.-only traffic inspection and processing for FedRAMP High services while retaining the same global-network software stack.

3. 3

   The systems built for FedRAMP High are intended to support Cloudflare’s pursuit of DoD Impact Level 4 authorization, which covers controlled, unclassified data.