Processed near your users.
Pinned to your jurisdiction.
Cloudflare's anycast network routes each request to the nearest PoP — PII never travels further than it needs to. And on Enterprise, processing is pinned to a specific region: you guarantee the data never leaves your jurisdiction.
310+ cities total · Enterprise pins processing to any Cloudflare Regional Services region
Edge Inference: For the most sensitive cases, Privedge runs inference with Workers AI on the same edge node — the prompt never leaves Cloudflare. Learn more about Edge Inference →
One request.
One isolate.
Zero shared state.
Every prompt that passes through Privedge runs inside a dedicated V8 isolate — the same sandboxing model that separates Chrome tabs. There is no shared heap, no global variables, no possibility of one tenant's data leaking into another's request.
This is the architecture guarantee: even if an attacker compromises one isolate, they access data from exactly one request. There is no lateral movement possible.
Certifications you inherit.
Privedge runs on Cloudflare Workers. You inherit enterprise-grade certifications without procuring hardware or auditing the infrastructure layer yourself.
| Certification | Status | Provider | Scope |
|---|---|---|---|
| SOC 2 Type II | Active | Cloudflare | Compute + network layer |
| ISO/IEC 27001 | Active | Cloudflare | Data center physical security |
| HIPAA-eligible | Active | Cloudflare Workers | PHI processing workloads |
| PCI DSS Level 1 | Active | Cloudflare | Network + data in transit |
| GDPR | Compliant | Cloudflare + Privedge | EU data processing + DPA |
| SOC 2 Type II | Roadmap | Privedge | Application layer (Phase 5, ~Q4) |