Back to Integrations
Firebase logo

Firebase Integration

Firestore and Realtime Database

Automatically discover and classify PII fields in your Firebase Firestore or Realtime Database. Our AI analyzes document structures and sample data to identify personal information like emails, phone numbers, Aadhaar numbers, and nested PII — helping you build your DPDP data map.

Prerequisites

Firebase Project

  • A Firebase project with Firestore or Realtime Database enabled
  • Access to Firebase Console to generate service account credentials
  • Project ID from your Firebase settings

Service Account Setup

Create a service account with read-only access:

  1. 1Go to Firebase Console → Project Settings → Service Accounts
  2. 2Click "Generate new private key"
  3. 3Download the JSON key file (keep it secure!)
  4. 4In Google Cloud Console, assign only Cloud Datastore Viewer role

Minimum Privileges Required

Required

  • Cloud Datastore Viewer
  • Firebase Realtime Database Viewer

Not Required

  • Cloud Datastore User/Owner
  • Firebase Admin

Step-by-Step Setup

1

Navigate to Integrations

In your admin dashboard, go to Data Discovery → Integrations and click Add Connection.

2

Select Firebase

Choose Firebase from the list of supported databases.

3

Upload Service Account Key

Upload your service account JSON key file or paste the contents:

{
  "type": "service_account",
  "project_id": "your-project-id",
  "private_key_id": "...",
  "private_key": "-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----\n",
  "client_email": "scanner@your-project.iam.gserviceaccount.com",
  ...
}
4

Select Database Type

Choose Firestore or Realtime Database (or both).

5

Test & Save

Click Test Connection to verify, then Save.

6

Run Discovery Scan

Go to Data Discovery → Run Discovery and start the scan.

What We Scan vs. What We Don't

What We Scan

  • Collection/path names and structure
  • Document field names and types
  • Sample documents (up to 100 per collection)
  • Nested objects and arrays

What We Never Touch

  • No full collection exports
  • No write operations
  • No security rules modification
  • Sample data never persisted

Firebase-specific: We handle deeply nested documents and subcollections. Both Firestore and Realtime Database structures are fully traversed to detect embedded PII.

Security

Encrypted Credentials

Service account keys encrypted with AES-256.

Google Cloud Security

Uses Google's secure authentication.

IAM Best Practices

Minimal permissions via Google IAM roles.

Audit Logged

All scan activities are logged.

Ready to Scan Your Firebase Database?

Connect in under 5 minutes and discover PII fields automatically.

Book a Demo