Firebase server locations

[Luke Sadler]

Greetings.

I have a question regarding server locations. I am about to make a pitch to my employers to move all our mobile analytics, crash reporting etc to Firebase. I know what the first question is going to be, so I thought I would get actual information on the subject.

Due to regulatory requirements, all of our customer details (analytics, sensitive or otherwise) needs to be stored in the EU (including UK lol). As far as I know, all firebase servers are located in the US. My questions are these:

1. Am I correct in thinking that they are, indeed, located in the US

2. Are we able run a standalone version of Firebase, in a production environment, on a box somewhere? (Western Europe, Debian server, for example)

Regards

Luke

[Kato Richardson]

Hi Luke,

See https://firebase.google.com/support/privacy/ for details on data processing agreements and EU compliance by Firebase, including which services are limited to the U.S. and which can be located elsewhere. You can't run Firebase as a standalone env--it's a Cloud product. 

Note that data doesn't have to be stored in UK to meet most regulatory requirements. You'd of course know more about your needs here. Including this since there seems to be a lot of confusion on that topic and there's more data in the link above for anyone interested.

☼, Kato

--
You received this message because you are subscribed to the Google Groups "Firebase Google Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to firebase-tal...@googlegroups.com.
To post to this group, send email to fireba...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/firebase-talk/2d9b0438-c787-419a-8b9e-93132347155e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--

Kato Richardson |

Developer Programs Eng |

kato...@google.com |

775-235-8398

[Keith Howie]

Hi Luke, just interested in which regulatory requirements affect you - as I have had faced similar questions recently but fielded them successfully. I don't have the relevant docs from the EU to hand right now (will find them at work in the morning), but my research led from the invalidation of the "Safe Harbour" agreement, straight to the EU-US Privacy Shield which Google complies with. Hope that helps!

p.s. I wouldn't rate your chances with option 2!

[Luke Sadler]

I'm not 100% of the exact ones from the top of my head as it's not my department, but basically banking. Thank you @Kato for the link - I will run that by some of our legal people tomorrow, most likely.

Thanks.

[rtec....@gmail.com]

Hi Luke,

I was kind of interested what were your findings? I heard that ex. I have to provide place and address of servers, where data is held. In that case I only found that the servers I pick while creating firebase project are placed in Belgium (cloud functions was most important for me). But I was thinking is the data copied somehow or managed in a way that could damage potential users confidentiality? 

Thanks.

[opy...@gmail.com]

I asked a similar question, see UK/Britain/England region support for Firestore/Firebase

Perhaps we can talk out-of-band (where we can share some more details), but I'm really interested in other fintech companies' usage of Firebase. (I'm working for a fintech myself, and currently making a case. Please reach out to opyate at gmail)