| Easy |
Day-one UX
Can non-technical staff use it without a project?
|
4 |
Cloudflare provides immediate access to security features like DDoS protection and WAF upon signup.
Source
|
| Easy |
Operate
Admin burden, updates, backups and language coverage.
|
5 |
Cloudflare operates a global network with 250+ data centers for low-latency delivery.
Source
|
| Easy |
Integrate
SSO, mail/CalDAV, APIs and common NGO connectors.
|
5 |
Cloudflare offers one-click integrations with major platforms like AWS, Azure, and Google Cloud.
Source
|
| Fair |
Lock-in / exit
Can you leave with your data in open formats, at known cost?
|
2 |
Rule baseline (rubric_v1): global SaaS APIs/export exist, but suite gravity and remapping remain.
Source
|
| Fair |
Sovereignty
EU legal entity, EU hosting, and exposure to extra-EU lawful access?
|
1 |
Rule baseline (rubric_v1): non-EU legal entity + global SaaS — high extra-EU lawful-access exposure.
Source
|
| Fair |
Openness
Open source or open standards? Are independent implementations possible?
|
2 |
Rule baseline (rubric_v1): proprietary / non-OSI license — openness capped unless open standards dominate.
Source
|
| Secure |
IT security
Authentication, encryption, patch cadence and independent audit.
|
5 |
Cloudflare provides enterprise-grade security including SSL/TLS encryption, DDoS mitigation, and zero-trust solutions.
Source
|
| Secure |
User security
2FA, roles, phishing resistance and safe defaults.
|
4 |
Cloudflare supports multi-factor authentication (MFA) and role-based access control (RBAC) for user accounts.
Source
|
| Secure |
Personal data
GDPR fit: DPA, residency, sub-processors and Schrems II posture.
|
3 |
Cloudflare's privacy policy states it may process personal data but does not guarantee data residency in all regions.
Source
|
