Sub-processor pages are an easy way to verify that sort of thing.

https://www.cloudflare.com/gdpr/subprocessors/cloudflare-ser...