Plan a release update
Review a release, preserve recoverable state and validate a staged upgrade before changing an installed compliance workspace.
Prepare
Record the installed release, edition and actual Cloudflare resources. Review the target release's changes and migration instructions.
Take and verify backups, retain encryption keys and agree a maintenance and recovery plan.
Validate the change
Test the release against a nonproduction copy. Check sign-in and MFA, role restrictions, integrations, evidence retrieval, policy history, trust publication and auditor exports.
Follow the release's supported operator procedure to update the existing installation. The customer setup flow grants one installation; it is not a general in-place upgrade console. Do not start a second installation as an upgrade workaround.
Rollback
Preserve the previous Worker version and database. Rolling back Worker code alone does not reverse a database migration. Review compatibility before selecting an older version.
Yearly renewal for software updates is optional. The license permits continued use of the delivered version without renewal. Use the license for the commercial terms; contact support for the applicable release procedure.
Restore a workspace safely
Rehearse recovery into an isolated database, verify the evidence history and switch bindings only after the restored state has been checked.
Configure test email alerts
Send failure and recovery notifications for decisive integration-test transitions while retaining a durable delivery record.