You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: src/content/docs/cache/reference/csam-scanning.mdx
+18-31Lines changed: 18 additions & 31 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -7,7 +7,7 @@ title: CSAM Scanning Tool
7
7
8
8
The Child Sexual Abuse Material (CSAM) Scanning Tool allows website owners to proactively identify and take action on CSAM located on their website. By enabling this tool, Cloudflare will compare content served for your website through the Cloudflare cache to known lists of CSAM. These lists are provided to Cloudflare by leading child safety advocacy groups such as the National Center for Missing and Exploited Children (NCMEC).
9
9
10
-
Remember, by enabling the Service, you agree to the [Supplemental Terms](https://www.cloudflare.com/supplemental-terms/) for the CSAM Scanning Tool. You agree to use this tool solely for the purposes of preventing the spread of CSAM.
10
+
Remember, by enabling the Service, you agree to the [Service-Specific Terms](https://www.cloudflare.com/service-specific-terms-application-services/#csam-scanning-tool-terms) for the CSAM Scanning Tool. You agree to use this tool solely for the purposes of preventing the spread of CSAM.
11
11
12
12
***
13
13
@@ -21,64 +21,51 @@ Because knowingly distributing or viewing CSAM is illegal, the owner of the webs
21
21
22
22
To enable the tool:
23
23
24
-
1. Log into the [Cloudflare dashboard](https://dash.cloudflare.com).
24
+
1. Log into the [Cloudflare dashboard](https://dash.cloudflare.com/).
25
25
2. Select your account and zone.
26
26
3. Go to **Caching** > **Configuration**.
27
27
4. For **CSAM Scanning Tool**, select **Configure**.
28
28
29
-
When enabling the tool, you must provide an email address and NCMEC CyberTipline credentials for reporting purposes.
30
-
31
-
This email address will be used to both notify you in the event Cloudflare detects a positive match, and to provide NCMEC in case they or law enforcement need more information about the content reported to them.
32
-
33
-
In order to get CyberTipline API credentials, you can email the [[email protected]](mailto:[email protected]) to get an application started. Go to the [NCMEC website](https://www.missingkids.org/theissues/csam) for more information. Cloudflare will use the credentials you provide in order to create reports to NCMEC when potential CSAM is identified on your zones.
34
-
35
-
Once you’ve verified your reporting email and entered your NCMEC credentials, scanning to identify potential CSAM will begin.
29
+
You must provide an email address, which will be used to notify you in the event Cloudflare detects a positive match.
36
30
37
31
***
38
32
39
33
## What happens when a match is detected?
40
34
41
-
Three things happen when a potential match is detected with the tool:
42
-
43
-
1. A report is filed to NCMEC. This report includes the following:
44
-
* The email address you provided when setting up the tool so that NCMEC can reach out for further information if required
45
-
* The url of the matched content
46
-
* The date and time the content was identified by the tool
35
+
When a potential match is detected with the tool:
47
36
48
-
2. An email is sent to you to inform you of the detection and the report. This email will include:
49
-
* The file path of the content that was matched
50
-
* The ID of the report that was filed with NCMEC
51
-
* The date and time the report was filed
52
-
53
-
3. If possible, a firewall block is placed to prevent further serving of the matched content. If a firewall block fails, we will indicate that the content has not been blocked in the email.
37
+
1. An email is sent to you once per day to inform you of any detections made in the past 24 hours. This email will include the file paths of any content that was matched.
38
+
2. If possible, a block is placed to prevent further serving of the matched content. If a block fails, we will indicate that the content has not been blocked in the email.
54
39
55
40
***
56
41
57
42
## What action should I take when a match is detected?
58
43
59
44
You are responsible for understanding and complying with any legal obligations you have as a website owner when made aware of any potential CSAM. Although legal obligations vary based on the provider and the jurisdiction, website owners often have obligations to report apparent CSAM, to remove content, and to preserve records. Some of those possible obligations are as follows:
60
45
61
-
* You may need to preserve and securely store a copy of the content and related data in the case NCMEC or law enforcement reach out for additional details.
46
+
- You likely have an obligation to report apparent CSAM to the appropriate authorities. You can file a report to NCMEC with additional information via NCMEC's CyberTip reporting form or find the preferred reporting portal for your jurisdiction via the INHOPE website.
47
+
48
+
<br/>
62
49
63
-
You likely have an obligation to securely preserve certain information related to your report for at least 90 days in the case of an investigation. To ensure that access to the content is limited, take care not to store this information anywhere accessible to anyone but those within your organization responsible for legal requests.
50
+
- You may need to preserve and securely store a copy of the content and related data in the case NCMEC or law enforcement reach out for additional details.
51
+
- You likely have an obligation to securely preserve certain information related to your report for at least 90 days in the case of an investigation. To ensure that access to the content is limited, take care not to store this information anywhere accessible to anyone but those within your organization responsible for legal requests.
64
52
65
-
* You should remove the content and notify Cloudflare of the removal.
53
+
<br/>
66
54
67
-
Once any preservation obligations have been fulfilled, you should remove the content from your website. This is especially important if Cloudflare’s notice to you indicates that our block was unsuccessful.
55
+
- You should remove the content and notify Cloudflare of the removal.
56
+
- Once any preservation obligations have been fulfilled, you should remove the content from your website. This is especially important if Cloudflare's notice to you indicates that our block was unsuccessful.
68
57
69
58
***
70
59
71
60
## How do I have a block removed from my website?
72
61
73
-
To disable a block, either because you have determined that the blocked content is not CSAM (a false positive) or because you have taken down the blocked content, go to the Cloudflare dashboard for your zone and request reviews on the relevant blocks. A request to remove a block must be accompanied by a representation from you confirming that the blocked content is not CSAM or has been removed. If applicable, we will notify NCMEC when a false positive has been identified on the reported URL.
74
-
75
-
62
+
To disable a block, either because you have determined that the blocked content is not CSAM (a false positive) or because you have taken down the blocked content, view [Blocked Content in the Security Center](/security-center/blocked-content/) in the Cloudflare Dashboard and request reviews on the relevant blocks. A request to remove a block must be accompanied by a representation from you confirming that the blocked content is not CSAM or has been removed.
76
63
77
64
These actions are available to users with the following roles:
0 commit comments