CDN

Azion

Azion is a Brazilian edge computing and content delivery network platform. It routes website traffic through globally distributed edge nodes for caching, image optimisation, web application firewall and serverless edge functions. Azion does not drop tracking cookies on end users. It logs connection metadata such as IP, user agent and path on the edge for security and operations, which makes it generally low risk under GDPR.

Block Azion until consent Scan my site

Overview

What does Azion do?

What Azion is

Azion is a Brazilian edge computing platform. It provides a content delivery network, edge cache, image and video optimisation, a web application firewall, DDoS protection and a serverless edge runtime where customers can deploy JavaScript functions close to end users. Sites using Azion route their traffic through nearby edge nodes before reaching the origin.

Data processed by Azion

IP address, TLS handshake metadata, user agent, request method, path, status code, response size, latency, WAF events and bot signals. Azion does not write tracking cookies on visitors and does not build advertising profiles. Edge functions only see the data passed by the customer's code.

GDPR and ePrivacy implications

Operating a CDN is strictly necessary to deliver the requested website. Article 5(3) ePrivacy exempts strictly necessary storage from consent. Azion does not write to the device, so no consent is required for the CDN itself. Logs containing IP addresses are personal data and need a retention policy under article 5(1)(e) GDPR.

Consent requirements

No consent is required for Azion as a CDN. If you deploy edge functions that process personal data beyond the strictly necessary scope, evaluate the additional purpose against article 6 GDPR and disclose it in your privacy notice.

International data transfers

Azion is headquartered in Brazil. Edge nodes outside the EEA process connection metadata to deliver content efficiently. Brazilian LGPD aligns with GDPR principles, and EU operators rely on Standard Contractual Clauses to cover non EEA processing. Choose EU edge regions when possible for maximum proximity.

Practical steps

Sign a DPA with Azion, document the use of Azion as a sub processor in the records of processing, set a short retention on edge logs, configure WAF rules without retaining sensitive payloads longer than needed, and audit any edge function that handles personal data. List Azion in the privacy notice but not in the cookie policy.

Compliance

Azion and the GDPR

Legal basis: Azion processes connection metadata as a strictly necessary intermediary for delivering the requested content. Article 5(3) ePrivacy exempts this from consent. The legal basis is performance of contract between the website operator and the visitor and legitimate interest in security.
Risk level: low
Applicable regulations: GDPR, ePrivacy Directive, Brazilian LGPD (since Azion is Brazilian), national cookie laws.

Impact assessment (DPIA)

A DPIA is generally not required for Azion as a CDN, since it acts as a strictly necessary network intermediary. It can be appropriate when edge functions process personal data substantially (authentication, A/B testing, personalisation), in which case document the edge logic, retention and the regions involved.

Sample text for your banner

Our website is delivered through Azion's global edge network. Azion does not set tracking cookies. It processes connection metadata (IP, browser) at the edge solely to deliver the page and to protect the website. No consent is required for this strictly necessary processing.

Cookies and trackers

What Azion sets and contacts

Tracking method: Edge computing and content delivery network. Azion routes website traffic through globally distributed edge nodes for caching, image optimisation, WAF and serverless edge functions. It does not set tracking cookies on visitors. It does log connection metadata (IP, user agent, path, status code) on the edge for security, troubleshooting and rate limiting.
Server location: Global edge network with points of presence in the European Union, North America, South America (Azion is a Brazilian headquartered company), Asia and Oceania. Customer configuration data is stored centrally with regional replicas.
Cookieless mode available: Yes
Data transferred outside the EU: Azion is headquartered in Brazil, a country recognised by the European Commission as adequate following EU Commission monitoring of LGPD enforcement. Edge nodes outside the EU process EU visitor connection metadata (IP, headers) for routing and security. Where data is processed outside Brazil and the EEA, SCCs apply.

Cookies set (1)

Name	Type	Duration	Purpose
azion_waf	session	session	Optional security cookie set by the Azion WAF when challenging a suspicious client. Strictly necessary, exempt from consent.

Third-party domains contacted (3)

azion.com
azioncdn.net
edge.azion.com

Questions

Frequently asked questions about Azion

Can't find your question? Write to us, we answer fast.

Write to us

What cookies does Azion set?

Azion as a pure CDN does not set tracking cookies. It can pass through cookies set by the origin website. WAF and bot management features may temporarily set a security cookie to challenge suspicious clients. Such security cookies are strictly necessary and exempt from consent.

Does Azion require consent?

No. Azion is a strictly necessary intermediary delivering the requested website. Article 5(3) ePrivacy does not require consent for strictly necessary processing. Edge functions that go beyond and process personal data for other purposes need their own legal basis.

What is the legal basis?

Performance of contract between operator and visitor for delivering the site, and legitimate interest in protecting it (article 6(1)(f) GDPR). No prior consent under article 5(3) ePrivacy because no non essential storage is written.

Does Azion transfer data outside the EU?

Edge nodes outside the EEA can process EU visitor connection metadata. Azion is based in Brazil. Brazilian LGPD is broadly aligned with GDPR. EU operators should sign SCCs and review the regions of edge processing.

Do we need a DPIA?

Not for the CDN itself. A DPIA may be appropriate when edge functions perform substantial personal data processing (authentication, scoring, personalisation) on top of Azion.

How do we implement Azion compliantly?

Sign a DPA, document Azion as a sub processor, set short retention on edge logs, configure WAF carefully, restrict access to logs, and disclose Azion in the privacy notice as a hosting/CDN sub processor.

What alternatives to Azion exist?

EU oriented alternatives include Cloudflare (US with EU Data Localisation Suite), Bunny.net (Slovenia, EU), Fastly (US with EU controls), Akamai, Gcore (Luxembourg, EU), KeyCDN (Switzerland), and Scaleway Edge Services (France).

How do we update the cookie policy when using Azion?

You normally do not need to list Azion in the cookie policy because no tracking cookies are set. List Azion in the privacy notice as a sub processor providing CDN and security. If you add edge functions that drop cookies, list them like any other vendor.

FastPixel

FastPixel is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. FastPixel supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, FastPixel ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

CDN

Filestack

Filestack is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Filestack supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Filestack ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

CDN

DigiCDN

DigiCDN is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. DigiCDN supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, DigiCDN ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

CDN

Yandex.Cloud CDN

Yandex.Cloud CDN is a content delivery network (CDN) that accelerates website performance by distributing content across a global network of edge servers. It reduces latency, improves page load times, and handles traffic spikes by serving cached content from the nearest location. Yandex.Cloud CDN supports static and dynamic content acceleration, DDoS protection, and SSL/TLS encryption. With real-time analytics and purge capabilities, Yandex.Cloud CDN ensures fast, reliable delivery.

CDN

ArvanCloud

ArvanCloud is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. ArvanCloud integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, ArvanCloud helps organizations maintain robust websites that meet user expectations and technical requirements.

CDN

Akamai

Akamai is a versatile web technology that supports digital platforms with specialized functionality and enhanced capabilities. It provides robust tools and services that integrate with modern websites and applications seamlessly. Akamai is designed to improve operational efficiency, user experience, and digital performance. Trusted by developers and businesses alike, Akamai offers reliable solutions that scale with organizational needs and evolving web standards.

CDN

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my banner Scan my site