Supporting the Most Critical Missions: Cloudflare for Government Achieves FedRAMP Class D (High) Authorization

Cloudflare for Government has achieved FedRAMP Class D (High) authorization status, the highest security standard for the US federal government. This authorization was pursued with the support of Cloudflare's sponsoring agency, the National Institute of Standards and Technology (NIST).

FedRAMP is a program that standardizes the security assessment, authorization, and continuous monitoring of cloud products and services used by US government agencies. Following its FedRAMP Moderate authorization in 2022, Cloudflare has elevated its security certification level to High.

FedRAMP High targets the most sensitive non-classified data related to law enforcement, emergency services, financial systems, and national security. Because a compromise of these controls could result in loss of life or threats to the national economy and security, it requires significantly higher levels of complexity and security requirements than Moderate.

Instead of building a separate, functionally restricted platform dedicated to the public sector, Cloudflare configured its FedRAMP High environment based on a single global network that runs the same software stack across data centers worldwide. This approach uses the same equipment and services while applying software-defined locality to meet data storage and processing requirements.

Additionally, based on this FedRAMP High implementation, Cloudflare is pursuing Impact Level 4 (DoD IL4) certification from the US Department of Defense. DoD IL4 is a Department of Defense cybersecurity standard for systems processing controlled unclassified data.