Summary

  • Remaining performance obligations were $2,876.8 million at 30 September 2026, up from $2,495.8 million at 31 December 2025, while the share Cloudflare expected to recognise within twelve months rose from 63% to 65%.
  • Cash already collected in advance was $916.162 million, a total the filing never prints as one line, and the slice of it stretching beyond a year fell from 5.67% to 4.30%.
  • Purchases of property and equipment were $237.001 million over nine months against $2,118.329 million of revenue, with capitalised internal-use software reported separately at $31.720 million.

Cloudflare's Form 10-Q for the quarter ended 30 September 2026 puts remaining performance obligations at $2,876.8 million. The 2025 Form 10-K put the same figure at $2,495.8 million on 31 December 2025. That is $381 million of new contracted work in nine months, or 15.3% growth — my subtraction and my ratio, since the two documents sit nine months and one reporting calendar apart and neither prints the comparison.

The direction of the growth is not the interesting part. The duration is. At the year-end the company expected to recognise 63% of that balance as revenue within twelve months. At September it expected 65%. The book got bigger and shorter at the same time.

Remaining performance obligations are not an order book and not cash. They are the transaction price allocated to work Cloudflare has promised and not yet performed, and they shrink as the work is delivered. The cash side of the same promise is deferred revenue: money already in the door for services not yet rendered. Cloudflare's balance sheet splits it, and the split is where the shortening shows up.

At 30 September 2026 the company carried $876,756 thousand of deferred revenue classified current and $39,406 thousand classified noncurrent. Add them and you get $916,162 thousand. At 31 December 2025 the same two captions were $684,207 thousand and $41,088 thousand, summing to $725,295 thousand. Neither document prints that total; both sums are mine, and the reason I trust them is the next paragraph.

The operating cash-flow statement records a $190,867 thousand increase in deferred revenue for the nine months. $916,162 thousand minus $725,295 thousand is $190,867 thousand, to the dollar. When a derived figure closes against a printed one exactly, it is safe to use. The noncurrent caption did not grow with the rest: it fell in absolute terms, from $41,088 thousand to $39,406 thousand, and as a share of the summed balance it fell from 5.67% to 4.30%, both ratios mine. The part of the prepayment book that reaches past a year is the part that shrank.

Turnover makes the same point from the other side. Cloudflare recognised $603.9 million of revenue in the nine months that had already been sitting in the contract-liability balance on 1 January. Against the $725,295 thousand opening total, that is 83.3% — my ratio, and a statement about the opening balance rather than about the closing one. Five-sixths of what was banked at the start of the year had been earned by the end of September.

Now the build. Purchases of property and equipment were $121,809 thousand in the quarter and $237,001 thousand over nine months, against revenue of $782,513 thousand and $2,118,329 thousand. That is 15.6% of quarterly revenue and 11.2% of nine-month revenue, both mine. Capitalised internal-use software development costs are reported separately — $11,476 thousand and $31,720 thousand — and are not part of the capital expenditure figure as Cloudflare presents it.

Combine the two and you get $133,285 thousand for the quarter and $268,721 thousand for nine months, on two separately defined bases; that combined measure is my sum, not a Cloudflare measure.

The sentence that fixes the population sits in the revenue discussion. Fixed subscription and support consideration is generally recognised straight-line over the contract term; contracted-customer terms typically run one to three years; most such contracts are non-cancelable over the contractual term; termination may be available for cause; and pay-as-you-go terms are typically monthly.

Read that beside the risk factors and the word non-cancelable loses its absoluteness. The same filing says contracted customers generally have no obligation to renew once the term ends, may cancel for an uncured material breach, and that some agreements permit termination without cause on little or no notice or for service-level or certification failures. Pay-as-you-go customers may terminate at will with little advance notice. A one-to-three-year non-cancelable term is a real commitment inside its window and nothing beyond it.

One boundary has to be stated plainly, because it decides how much weight the $2,876.8 million can carry. Neither document prints an express election of the accounting practical expedient that would let Cloudflare omit contracts with an original expected duration of one year or less. I looked for it in the revenue disclosures of both filings on 13 November 2026 and did not find it. That absence is a limit on my reading, not a finding that no election was made. It means I cannot say whether the balance includes or excludes the shortest contracts.

Which is why I will not subtract the two disclosures and call the difference unbilled work. The subtraction is available — $2,876.8 million less $916.162 million is $1,960.638 million — but it only holds under the assumption that the entire deferred-revenue balance sits inside the remaining-performance-obligation population, and Cloudflare publishes no reconciliation between the two. Treat that number as my arithmetic under a stated assumption, not as a company figure.

The ratios worth carrying are the plain ones. Remaining performance obligations are 3.68 times a quarter of revenue; cash collected in advance is 1.17 times. Applying Cloudflare's own stated shares, the portion expected inside twelve months was $1,869.92 million at September against $1,572.354 million at the year-end, both my arithmetic on the company's percentages.

Put those three quantities in one frame and the funding structure is not ambiguous. A book of contracted work equal to nearly four quarters of revenue, of which two-thirds lands inside the next twelve months; a prepayment balance of a little over one quarter of revenue, four-fifths of it current; and a capital programme of about a ninth of revenue. Cloudflare is not building against multi-year signed commitments and does not need to be. It is building against demand that renews annually, that can leave on notice, and that pays in advance — which is a cheaper way to fund an estate and a thinner one to defend.

The watch item is not the size of the balance. It is the 65%. If that share keeps climbing while the noncurrent caption stays flat or falls, the book is turning faster than it is compounding, and the capital programme is running on retention rather than on contract length. The company's own filings will show it before any narrative does.