Any legal dispute with Cloudflare will be resolved under California law, and arbitration proceedings must take place in San Francisco, California.
This analysis describes what Cloudflare's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
For users outside the US, and particularly in the EU and UK, a California governing law and arbitration venue clause may conflict with mandatory local consumer protection laws and may make it practically difficult to pursue a claim.
Interpretive note: Enforceability of the California governing law clause and San Francisco arbitration venue against EU and UK users who qualify as consumers may be limited by mandatory local law protections that cannot be contractually waived.
This clause means that if you have a dispute with Cloudflare, you are generally expected to resolve it under California law and, if arbitration is required, to participate in proceedings in San Francisco, which may be impractical and costly for non-US users.
How other platforms handle this
These Terms of Service and any dispute or claim arising out of or in connection with them or their subject matter or formation (including non-contractual disputes or claims) shall be governed by and construed in accordance with the laws of the State of Delaware, without giving effect to any choice o...
These Terms are governed by the laws of the State of Minnesota, without giving effect to any choice of law or conflict of law provisions. Any disputes not subject to arbitration will be resolved in the state or federal courts located in Hennepin County, Minnesota.
These Terms of Service and any action related thereto will be governed by the laws of the State of New York without regard to its conflict of law provisions.
Monitoring
Cloudflare has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"These Terms shall be governed by the laws of the State of California, excluding its conflicts of law rules, and the federal laws of the United States. Any dispute arising from or relating to the subject matter of these Terms shall be finally settled by arbitration in San Francisco County, California.— Excerpt from Cloudflare's Cloudflare Terms of Use
REGULATORY LANDSCAPE: Governing law and mandatory arbitration venue clauses in consumer-facing agreements are subject to review under EU Directive 93/13/EEC on unfair contract terms and equivalent UK consumer protection legislation, which may render these clauses unenforceable against EU and UK consumers. US courts generally enforce governing law clauses in commercial contracts, though consumer protection statutes in some states may override contractual choice-of-law provisions where the statute applies regardless of the parties' agreement. Rome I Regulation in the EU limits the ability of parties to contract out of mandatory protections afforded by the consumer's home country law. GOVERNANCE EXPOSURE: Medium. The California governing law clause is standard for a San Francisco-based company and is generally enforceable in B2B contexts. The exposure is elevated for EU and UK consumer-facing deployments where mandatory local law protections cannot be contractually waived and where a California venue for arbitration may be found procedurally unfair. JURISDICTION FLAGS: EU users retain rights under Rome I Regulation to the mandatory consumer protections of their home jurisdiction notwithstanding this governing law clause. UK users similarly retain statutory consumer rights under the Consumer Rights Act 2015 that cannot be waived by contract. Non-US business users should assess whether the California arbitration venue is practically viable for the value of potential disputes. CONTRACT AND VENDOR IMPLICATIONS: Enterprise agreements with Cloudflare should include negotiation of jurisdiction and venue provisions that reflect the customer's primary operating jurisdiction, particularly for EU and APAC-based organizations. Legal teams should confirm that the chosen governing law does not override mandatory protections under applicable local law. COMPLIANCE CONSIDERATIONS: EU and UK legal and compliance teams should document that California governing law does not displace mandatory consumer and data protection rights in their jurisdictions. Organizations in heavily regulated sectors should assess whether the arbitration requirement conflicts with any regulatory obligation to resolve disputes through specific mechanisms or regulatory bodies.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
For users outside the US, and particularly in the EU and UK, a California governing law and arbitration venue clause may conflict with mandatory local consumer protection laws and may make it practically difficult to pursue a claim.
This clause means that if you have a dispute with Cloudflare, you are generally expected to resolve it under California law and, if arbitration is required, to participate in proceedings in San Francisco, which may be impractical and costly for non-US users.
ConductAtlas has identified this type of provision across 200 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Cloudflare.