From the endpoint to the prompt: a unified data security vision in Cloudflare One
Mar 6, 2026Alex Dunbrack

Summary
This post introduces several updates to Cloudflare One's data security vision. New features include browser-based RDP clipboard controls to restrict data movement between local devices and RDP sessions, enhancing productivity-security tradeoffs. Operation mapping has been extended to logging, providing richer context in events for SaaS applications, simplifying policy authoring and investigations. On-device Endpoint DLP is being brought to the Cloudflare One Client to enforce data protection on endpoints, starting with clipboard movement. Finally, API CASB now scans Microsoft 365 Copilot activity for data security issues, including chats and uploads matching DLP profiles, providing rich context for findings.