# Firebase

Firebase declares [3 subprocessors](https://thirdpartyindex.com/vendors/firebase#subprocessors), plus 1 of its own affiliates, in [its subprocessor list](https://firebase.google.com/terms/subprocessors), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/2907)). They include [Fastly](https://thirdpartyindex.com/vendors/fastly), [Accenture](https://thirdpartyindex.com/vendors/accenture) and [EPAM Systems](https://thirdpartyindex.com/vendors/epam-systems). No published changes since we first read it on 2026-09-22. [38 tracked vendors](https://thirdpartyindex.com/vendors/firebase#used-by) name Firebase as a subprocessor, including [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud), [Mapbox](https://thirdpartyindex.com/vendors/mapbox) and [Qlik](https://thirdpartyindex.com/vendors/qlik).

Firebase (firebase.google.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/firebase
- Documents last verified: 2026-11-11
- Transparency rating: 68/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 0/8 (partial); Purposes 7/7; Data processing addendum 12/12; Trust center 0/8 (not found); Privacy policy 6/6; security.txt 0/6 (not found); Security page 0/5 (not found); Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Part of: [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud)
- Supply chain: relies on 3 tracked vendors directly, 5 within two hops, 35 within three; 38 tracked vendors rely on it directly, 1940 within two hops, 2797 within three
- Cite as: Firebase, Third Party Index, https://thirdpartyindex.com/vendors/firebase (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Subprocessor list | https://firebase.google.com/terms/subprocessors | 2026-11-11 | 2026-09-22 |
| Data processing addendum | https://firebase.google.com/terms/data-processing-terms | 2026-11-11 | 2026-09-22 |
| Privacy policy | https://policies.google.com/privacy | 2026-11-11 | 2026-10-16 |
| Terms | https://firebase.google.com/terms/ | 2026-11-11 | 2026-09-27 |
| Status page | https://status.firebase.google.com/ | 2026-11-11 | 2026-11-11 |
| Trust center (parent company's) | https://cloud.google.com/trust-center | 2026-11-11 | 2026-09-21 |
| Security page (parent company's) | https://cloud.google.com/solutions/security | 2026-11-11 | 2026-09-21 |

## Subprocessors (3)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Accenture, LLP](https://thirdpartyindex.com/vendors/accenture.md) | headquartered in the United States, to provide customer and technical support, which may include phone and email support, response, diagnosis and resolution services, incident tracking, and responding to customer queries. | — | 2026-09-27 |
| [EPAM Systems, Inc](https://thirdpartyindex.com/vendors/epam-systems.md) | headquartered in the United States, to provide customer and technical support, which may include phone and email support, response, diagnosis and resolution services, incident tracking, and responding to customer queries. | — | 2026-09-27 |
| [Fastly, Inc.](https://thirdpartyindex.com/vendors/fastly.md) | headquartered in the United States, to deliver content and managed services on Firebase Hosting to end-users, via the Fastly content delivery network. | — | 2026-09-27 |

Read from ([evidence](https://thirdpartyindex.com/evidence/2907)). CSV: https://thirdpartyindex.com/vendors/firebase/subprocessors.csv

### Its own affiliates (1)

- Firebase, Inc.

## Web Technologies

Firebase's homepage made 114 requests to 9 domains. Loaded on 2026-11-05 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

### Affiliates (1)

- Google Cloud: 79 requests to gstatic.com, fonts.googleapis.com, googletagmanager.com, doubleclick.net, google-analytics.com, ytimg.com; Google Analytics, Google Tag Manager

### First party (1)

- Firebase: 35 requests to google.com, firebasestorage.googleapis.com, firebase-dot-devsite-v2-prod.appspot.com; Django, Google Cloud, Google Cloud Load Balancing, Google Code Prettify, Google Font API, Google Sign-in, HSTS, HTTP/3, Open Graph, PWA, Python, lit-element 4.2.2, lit-html 3.3.3

## Subprocessor of (38)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Age of Learning](https://thirdpartyindex.com/vendors/age-of-learning.md): Crash and error reporting, Report and troubleshoot application issues
- [Agilysys](https://thirdpartyindex.com/vendors/agilysys.md)
- [Bettermode](https://thirdpartyindex.com/vendors/bettermode.md): Push notifications
- [BlackBerry](https://thirdpartyindex.com/vendors/blackberry.md): Mobile app notifications provider; Mobile app notifications service provider
- [Bluebeam](https://thirdpartyindex.com/vendors/bluebeam.md): Mobile analytics and crash reporting for iOS and Android apps.
- [CallRail](https://thirdpartyindex.com/vendors/callrail.md): Deliver real-time notifications of communications through the CallRail platform to customers' mobile devices
- [Cradle](https://thirdpartyindex.com/vendors/cradle.md): Authentication, real-time database, web hosting
- [Delve AI](https://thirdpartyindex.com/vendors/delve-ai.md): Google's mobile development platform. Notifications that are triggered programmatically are sent to Android phones via Firebase.
- [Digistorm AU](https://thirdpartyindex.com/vendors/digistorm-au.md): Internal Business Operations - Applications, Services, and Support; Push notifications
- [Emphere](https://thirdpartyindex.com/vendors/emphere.md): Identity Providers
- [Featurebase](https://thirdpartyindex.com/vendors/featurebase-molecula-corp.md): Developer tooling
- [FlowEQ](https://thirdpartyindex.com/vendors/floweq.md): App development platform and data storage
- [Gleap](https://thirdpartyindex.com/vendors/gleap.md): push notification delivery. This feature must be manually activated.
- [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud.md): Service Maintenance; Technical Support
- [HYPR](https://thirdpartyindex.com/vendors/hypr.md)
- [Instruqt](https://thirdpartyindex.com/vendors/instruqt.md): Essential; Login/Single Sign-On provider
- [Ipregistry](https://thirdpartyindex.com/vendors/ipregistry.md): Authentication, Data Storage
- [JetStack AI](https://thirdpartyindex.com/vendors/jetstack-ai.md): Metadata processing and schema data mapping
- [Lead Mapper](https://thirdpartyindex.com/vendors/lead-mapper.md): Backend hosting (USA)
- [Leadbeam](https://thirdpartyindex.com/vendors/leadbeam.md): Cross-platform app development
- [Mapbox](https://thirdpartyindex.com/vendors/mapbox.md): Backend cloud computing services and application development platforms
- [Mida](https://thirdpartyindex.com/vendors/mida.md): User authentication
- [Noticeable](https://thirdpartyindex.com/vendors/noticeable.md): Authentication, Data Storage
- [Pax](https://thirdpartyindex.com/vendors/pax.md): Notificações no aplicativo móvel
- [Personify Health](https://thirdpartyindex.com/vendors/personify-health.md)
- [Pilosa](https://thirdpartyindex.com/vendors/pilosa.md): Developer tooling
- [Qlik](https://thirdpartyindex.com/vendors/qlik.md): Push notifications
- [QorusDocs](https://thirdpartyindex.com/vendors/qorusdocs.md)
- [Sprout Social](https://thirdpartyindex.com/vendors/sprout-social.md)
- [Spun s.r.l.](https://thirdpartyindex.com/vendors/spun-s-r-l.md): PurposePush notifications for incoming messages and calls
- [Storydoc](https://thirdpartyindex.com/vendors/storydoc.md): User management; Security and access control
- [Stova](https://thirdpartyindex.com/vendors/stova.md): Real time database for statistics and real time chat in Stova Virtual Platform
- [Todoist](https://thirdpartyindex.com/vendors/todoist.md): Android Push Notifications; Data elements: Android app installation IDs
- [Tulip](https://thirdpartyindex.com/vendors/tulip.md): Mobile development platform
- [Tuple](https://thirdpartyindex.com/vendors/tuple.md): macOS app crash reporting
- [UserTesting](https://thirdpartyindex.com/vendors/usertesting.md): Tool for mobile analytics, notifications and crash data collection
- [Veryfi](https://thirdpartyindex.com/vendors/veryfi.md): Mobile app performance and error troubleshooting
- [Whova](https://thirdpartyindex.com/vendors/whova.md): App Development Platform

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/firebase

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api