Encryption at rest

[Nick Okunew]

Hi,

My understanding is that Firebase is now encrypted at rest by default, however I can't find any documentation that specifies this.

This link outlines the state of encryption on GCP: 

https://cloud.google.com/security/encryption-at-rest/default-encryption/#granularity_of_encryption_in_each_google_cloud_platform_product

I guess the assumption is that Firebase is built on top of these services in some way, but I can't see any specific statement.

Is it possible to get documentation (or doc updates) so that either the firebase page stipulates the current state, or so that the GCP docs include firebase as a product if it is in fact encrypted.

Any links or information would be appreciated.

(p.s. I have seen previous responses, but they seem out of date, and also are not reliable sources for knowledge sharing about the platform's capabilities)

[James Askew]

HI Nick, i used one of my support tickets to get confirmation of this for our project

"To answer your question, yes, Firebase database is now encrypted at rest. Firebase is run on Google Cloud, which automatically encrypts customer content stored at rest, without any action required from you.

You can check out this link for more information."

Hope that helps

[Nick Okunew]

Hi James, thanks for the response, it's much appreciated.

For the Googlers, is there any location where firebase is explicitly mentioned (none of the docs through any of the links that James sent mention firebase by name), and firebase is suspiciously absent whenever the products included in GCP are specified around Security

I'm looking for something that I can refer enterprise security teams to which doesn't require them to take my word for it that firebase is part of GCP.
I

[Tom Larkworthy]

Yes your right, we don't have that explicitly stated as far as I can find, but James is correct, all our Database storage is hosted on GCP infrastructure and therefore encrypted at rest.

 

--
You received this message because you are subscribed to the Google Groups "Firebase Google Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to firebase-talk+unsubscribe@googlegroups.com.
To post to this group, send email to fireba...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/firebase-talk/de4f6cdd-a901-4294-b806-ff26e7d40ca5%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

[Nick Okunew]

Thanks for the response Tom. Would it be possible to get connected to someone in a PM, sales or customer relations capacity to discuss getting something slightly more formal?

[Rahul Sainani]

Sorry if this is a bit repetitive but just to be sure, are we talking about firebase database or firebase storage? Please correct me if I'm wrong but I assumed that firebase realtime database is not encrypted at rest as it needs to be realtime fast. 

[Nick Okunew]

Firebase storage is GCS, which is documented as encrypted at rest.

Firebase database isn't documented either way as far as I can find, which is what I was asking about. It seems that it is indeed encrypted at rest, however how much of firebase in activity is 'at rest' as opposed to indexed in memory unencrypted I couldn't say. Would love to get a little insight though