Cloudflare, Inc.
Climate Impact & Sustainability Data (2021, 2022, 2023, 2024)
Reporting Period: 2021
Environmental Metrics
ESG Focus Areas
- Privacy
- Security
- Reliability
- Human Rights
- Transparency
- Ethics and Compliance
- Diversity, Equity, and Inclusivity (DEI)
- Renewable Energy
- Carbon Emissions Reduction
Environmental Achievements
- Commitment to 100% renewable energy for operations.
- Commitment to removing or offsetting all historic GHG emissions by 2025.
- Deployment of ARM-based CPUs in edge servers, processing 57% more Internet requests per watt of energy.
- Overall network processing 10x as many Internet requests per watt consumed compared to 2013.
Social Achievements
- Launched Project Fairshot, helping over 100 organizations schedule approximately 100 million COVID-19 vaccinations.
- Launched Project Galileo, providing free high-level cybersecurity services to journalists, humanitarian groups, and civil rights organizations.
- Launched Project Pangea, providing free internet connection services to underserved communities.
- Published first comprehensive international human rights policy.
- Achieved ISO/IEC 27701:2019 privacy certification.
- Donated $3M+ in services through Project Galileo in 2021.
- Donated $5M+ in services to state and local governments through the Athenian Project in 2021.
Governance Achievements
- Launched Cloudflare Impact, a comprehensive corporate responsibility and ESG initiative.
- Held first Impact Week, resulting in 16 new initiatives.
- Published first comprehensive international human rights policy.
- All employees will receive annual training on human rights policy starting in 2022.
- Became a full member of the Global Network Initiative (GNI).
Climate Goals & Targets
- Remove or offset all historic GHG emissions by 2025.
Environmental Challenges
- Wasted web crawler traffic (estimated 53%).
- Malicious bots consuming resources and generating emissions.
Mitigation Strategies
- Working with Microsoft and Yandex on a new protocol to improve search engine efficiency.
- Launched Bot Fight Mode to mitigate malicious bot activity and support tree planting projects through donations based on the number of bots stopped.
Supply Chain Management
Responsible Procurement
- Screening of suppliers, resellers, and partners at onboarding to mitigate corruption risks.
Climate-Related Risks & Opportunities
Reporting Standards
Frameworks Used: GRI Standards: Core option, SASB Standards
Certifications: ISO/IEC 27701:2019
Third-party Assurance: Sustainable Business Consulting (SBC) - Limited assurance for GHG emissions
Sustainable Products & Innovation
- Green Compute with Cloudflare Workers
Reporting Period: 2022
Environmental Metrics
ESG Focus Areas
- Environmental
- Social
- Governance
Environmental Achievements
- Powered operations with 100% renewable energy
- Completed analysis of historical network footprint (31,284 MT CO2e) and made first offset purchase (6,060 MT CO2e)
- Implemented sustainability principles in hardware design, procurement, servicing, and decommissioning
- 95% of data centers covered by agreements to resell or recycle decommissioned equipment (35% resold or recycled in the past 12 months)
Social Achievements
- Protected Ukrainian government institutions, civil society organizations, and citizens from cyberattacks at no cost
- Provided free services to over 2,150 journalists, humanitarian groups, and human rights organizations through Project Galileo
- Launched Turnstile, a free CAPTCHA alternative
- Improved Cloudflare dashboard accessibility
- Named to Newsweek’s 100 Most Loved Workplaces 2022
Governance Achievements
- Published semiannual Transparency Report on government requests for information
- Maintained various privacy and security compliance certifications (ISO 27001, ISO 27701, ISO 27018, SOC 2 Type II, PCI DSS 3.2.1, C5:2020)
- Completed companywide human rights training
- Implemented a new Third Party Code of Conduct
Climate Goals & Targets
- Offsetting or removing all historical GHG emissions by 2025
Environmental Challenges
- Cyberattacks on Ukrainian infrastructure
- Scope 3 emissions cataloging
- Addressing historical emissions
- Low adoption of RPKI to secure internet routing
Mitigation Strategies
- Provided free services and support to Ukrainian government and infrastructure providers
- Working on cataloging Scope 3 emissions
- Offsetting historical emissions through verified REDD+ project and renewable energy purchases
- Participating in AS112 project to improve DNS lookup reliability
Supply Chain Management
Responsible Procurement
- Third Party Code of Conduct
Climate-Related Risks & Opportunities
Reporting Standards
Frameworks Used: GRI, SASB, UNGC
Certifications: ISO 27001, ISO 27701, ISO 27018, SOC 2 Type II, PCI DSS 3.2.1, C5:2020
Third-party Assurance: Sustainable Business Consulting
UN Sustainable Development Goals
- SDG 4
- SDG 5
- SDG 7
- SDG 9
- SDG 13
- SDG 14
- SDG 15
- SDG 16
Cloudflare's initiatives contribute to these goals through various programs and commitments detailed in the report.
Sustainable Products & Innovation
- Turnstile
Awards & Recognition
- Webby Award for Project Fair Shot
Reporting Period: 2023
Environmental Metrics
ESG Focus Areas
- Environmental
- Social
- Governance
Environmental Achievements
- Migrating from on-premises hardware to Cloudflare’s cloud-based services can decrease related carbon emissions between 78% and 96% (according to an independent study).
Social Achievements
- Launched Project Cybersafe Schools, providing free cybersecurity services to under-resourced K-12 public school districts in the US.
- Continued Project Galileo, protecting over 2,400 civil society and nonprofit internet properties from cyberattacks.
- Partnered with CyberPeace Institute to enhance security for small development and humanitarian organizations.
Governance Achievements
- Committed to setting near-term companywide emissions reduction targets in line with climate science with the SBTi.
- Completed its first self-assessment of its human rights practices related to the GNI Principles.
Climate Goals & Targets
- Offset or remove historical emissions associated with powering our network by 2025.
- Develop carbon reduction plan for submission to SBTi.
Environmental Challenges
- War in Ukraine, terrorist attacks, increased cyberattacks, internet shutdowns, and growing regulations threatening an open internet.
Mitigation Strategies
- Providing free cybersecurity services to vulnerable organizations and communities.
- Working with partners to share threat intelligence and improve internet security.
- Advocating for policies that support an open and interconnected internet.
Supply Chain Management
Responsible Procurement
- Third Party Code of Conduct
Climate-Related Risks & Opportunities
Reporting Standards
Frameworks Used: GRI, SASB, UN Global Compact
Certifications: ISO 14064, ISO 27001, ISO 27701, ISO 27018, PCI DSS, SOC 2 Type II, C5
Third-party Assurance: Shift Advantage
Awards & Recognition
- Newsweek’s 100 Most Loved Workplaces 2023 (#55)
Reporting Period: 2024
Environmental Metrics
ESG Focus Areas
- Sustainability
- Privacy
- Human Rights
- Governance
- Diversity & Inclusion
Environmental Achievements
- Cloudflare powers its operations with 100% renewable energy.
- Cloudflare’s 12th-generation servers are 63% more energy efficient and have a 145% performance increase.
Social Achievements
- Cloudflare mitigated over 14.5 million DDoS attacks.
- Cloudflare’s Project Galileo protected 111+ internet properties for 54 civil society partners.
- Cloudflare’s Project Cybersafe Schools protected 210K+ students and staff members in 131 school districts.
- Cloudflare’s Athenian Project provided free cybersecurity services to 33 states during the 2024 election cycle.
Governance Achievements
- Cloudflare maintains several certifications including PCI DSS 4.0, ISO 27001:2013, ISO 27701:2019, and FedRAMP Moderate.
- Cloudflare publishes a semiannual Transparency Report on government requests for user information.
- All Cloudflare employees complete annual training on bribery and corruption.
Climate Goals & Targets
- Setting near-term companywide emissions reduction targets in line with climate science with the SBTi.
- Offset or remove historical emissions associated with powering our network by 2025.
Environmental Challenges
- Increased DDoS attacks (49% increase from previous quarter, 55% over the same period in 2023).
- Connection tampering observed globally, particularly in Turkmenistan, Russia, Iran, and China.
- Rise of bad bots impacting internet performance and security.
Mitigation Strategies
- Cloudflare provides unmetered and unlimited DDoS protection for free.
- Cloudflare developed and published research on connection tampering.
- Cloudflare uses Bot Fight Mode and Super Bot Fight Mode to mitigate bot traffic and donates to reforestation projects to offset increased CPU usage.
Supply Chain Management
Responsible Procurement
- Third Party Code of Conduct
Climate-Related Risks & Opportunities
Reporting Standards
Frameworks Used: GRI, SASB, GHG Protocol, ISO 14064
Certifications: PCI DSS 4.0, ISO 27001:2013, ISO 27701:2019, FedRAMP Moderate, C5:2020, ISO 27018:2019, SOC 2 Type II
Third-party Assurance: Shift Advantage
Awards & Recognition
- Newsweek’s 100 Most Loved Workplaces (#55)
- Reuters Events Sustainability Awards Social Impact Award Finalist for Cloudflare’s Project Galileo
- Best Companies to Work for in Technology in Portugal (Teamlyzer)