Cloudflare 1.1.1.1 DNS Resolver Completes Independent Privacy Audit for 2024
Key Points
- Independent audit confirms 1.1.1.1 DNS privacy commitments are met
- Source IP addresses anonymized and deleted within 25 hours
- No user data sold or used for advertising targeting
Summary
Cloudflare has published results of an independent privacy examination of their 1.1.1.1 public DNS resolver, conducted by a Big 4 accounting firm. This marks the second such audit since the service launched 8 years ago, with the previous examination completed in 2020.
Key Points
- Core Privacy Guarantees Confirmed: Independent audit validates that Cloudflare does not sell or share user data, does not use DNS data for advertising targeting, and anonymizes/deletes source IP addresses within 25 hours
- Infrastructure Updates: The examination covers Cloudflare's entirely rebuilt DNS platform that now powers the 1.1.1.1 resolver and other DNS systems
- Limited Data Sampling: Up to 0.05% of network traffic (including IP addresses) may be sampled for network troubleshooting and attack mitigation purposes only
- Scope Changes: Unlike the 2020 audit, this examination focused exclusively on privacy commitments rather than all operational representations
- Industry Leadership: Cloudflare claims to be the only major public DNS provider to undergo independent privacy audits
Compliance Resources
Full audit reports and compliance documentation are available on Cloudflare's official compliance page.