Firefox Enterprise
Evaluating Firefox Enterprise for your organization? Find curated information for procurement, security and compliance teams here.
⚠ Informational notice: Resources on this page refer to Firefox Enterprise On-Prem capabilities and default configurations and may be updated alongside changes. Documents are provided for informational purposes only, and are not intended to serve, and should not be construed, as legal advice. Customers are responsible for consulting their own legal advisors and privacy officers, as applicable, to understand their compliance obligations, including whether or not a DPIA is required for their use of Firefox Enterprise.
Firefox Enterprise On-Prem runs on the infrastructure you operate. Mozilla supplies the software, updates and documentation, while your organization controls the environment, data and governance.
The resources below define deployment boundaries across parties, and provide guidance on configuring Firefox Enterprise to meet your organization's requirements.
Updated on 9/24/2026
Documentation describing the scope of each party's operational authority and where responsibility transfers for Firefox Enterprise deployed on-premises. Customers should assess how these boundaries apply in their specific context.
Updated on 9/24/2026
Details the processing activities and governing responsibilities across parties. Customers should review the full documentation to confirm this applies to their deployment.
Reference of configurable enterprise policies available to administrators for managing security, data handling and browser behavior across their organization.
Firefox Enterprise provides visibility into browser-layer security controls. Browser source code and security advisories are publicly available, allowing customers to audit, verify and track vulnerabilities independently. Browser-layer controls, documentation and audit logs are available for export to your SIEM to provide audit evidence.
The resources below support your independent security review and audit evidence collection.
Mozilla's published record of Firefox security advisories, including severity ratings and affected versions, for use in vulnerability tracking and patch management cadence assessment.
Publicly auditable Firefox browser source code on GitHub for independent customer review.
Firefox Enterprise gives administrators visibility into browser connections and control over telemetry. The on-premises deployment model is designed to keep data within customer infrastructure; configurable enterprise policies give administrators controls over data flow.
The resources below are intended to support privacy and procurement due diligence.
Updated on 9/24/2026
Overview of external browser connections, telemetry behavior and local collection defaults for Firefox Enterprise on-premises deployment, including information on available administrator controls (enterprise policy, browser configuration, and network settings).
Updated on 9/17/2026
Current list of third parties that Mozilla engages to process data on behalf of Mozilla enterprise customers. The list includes details around the sub-processor's role and location of processing. This covers Mozilla's own service providers; customers should confirm scope with their legal advisors; applies to sandbox and support services.
