airtable.com/company/health-info-datasheet

**Yes, but only under specific, strict conditions** **.** [](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) Airtable supports HIPAA compliance for qualifying organizations, but it is **not** HIPAA-compliant out of the box on standard self-service plans.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.accountablehq.com/post/airtable-hipaa-compliance-baa-security-features-and-what-to-know-in-2026) Requirements for HIPAA Compliance on Airtable 1. **Enterprise Scale Plan:** You must be subscribed to Airtable's highest-tier **Enterprise Scale** plan. HIPAA compliance features and agreements are explicitly prohibited or unavailable on Free, Team, and Business plans.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) 2. **Execute a BAA:** You must sign Airtable’s **Health Information Exhibit** , which contains their Business Associate Agreement (BAA). Without a signed BAA in place, storing Protected Health Information (PHI) on the platform violates compliance guidelines.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[3]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) 3. **Strict Configuration & Boundaries:** You must properly configure administrative controls (such as Enterprise Single Sign-On (SSO), Enterprise Key Management (EKM), Data Loss Prevention (DLP), and audit logs).[](https://www.paubox.com/blog/airtable-hipaa-compliant) [[1]](https://www.paubox.com/blog/airtable-hipaa-compliant)[[2]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[3]](https://www.knack.com/blog/hipaa-compliant-apps-knack-vs-airtable/)[[4]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-plan-requirements-and-using-airtable-for-phi) Critical Restrictions & Limitations to Keep in Mind Even with an Enterprise Scale plan and a signed BAA, Airtable enforces strict boundaries regarding where and how patient data can touch the platform (detailed further in the [Airtable Health Information Datasheet](https://www.airtable.com/company/health-info-datasheet)):[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) - **Where PHI Lives:** Electronic Protected Health Information (ePHI) may **only** be stored inside standard "Records" within Airtable bases or interfaces.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Airtable AI:** You cannot process or store PHI using Airtable AI features unless specific supplemental health information terms apply.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Customer Support:** You must never include PHI or medical data in screenshots, support tickets, or communications with Airtable’s customer support team.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Automations & Emails:** You cannot use automated functions to email records if those records contain PHI.[[1]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) - **No Patient Portals:** Airtable explicitly prohibits using their platform as a patient portal or as the underlying technology for one.[[1]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) - **Integrations:** Any third-party integration connected to your Airtable bases (such as Slack, Zapier, or external APIs) must also independently support HIPAA and be covered by its own BAA.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) If you'd like, let me know: - What **tier of Airtable plan** your organization currently uses - What **type of patient workflow or data** you are planning to build - Whether you plan to **integrate Airtable with other third-party tools** I can help you evaluate whether Airtable fits your project or if a specialized backend is a safer bet. Yes, but only under specific, strict conditions. Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... HIPAA: The Part Everyone Gets Wrong Every couple of weeks a client asks us, "Is Airtable HIPAA compliant?" The honest answer is "i... Airtable supports HIPAA compliance for qualifying organizations, but it is not HIPAA-compliant out of the box on standard self-service plans. Airtable supports HIPAA compliance for qualifying organizations, but it is **not** HIPAA-compliant out of the box on standard self-service plans.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.accountablehq.com/post/airtable-hipaa-compliance-baa-security-features-and-what-to-know-in-2026) Is HIPAA compliance available on all Airtable plans? No. HIPAA support requires an executed BAA and is generally available to ente... Requirements for HIPAA Compliance on Airtable Even with an Enterprise Scale plan and a signed BAA, Airtable enforces strict boundaries regarding where and how patient data can touch the platform (detailed further in the Airtable Health Information Datasheet ): Even with an Enterprise Scale plan and a signed BAA, Airtable enforces strict boundaries regarding where and how patient data can touch the platform (detailed further in the [Airtable Health Information Datasheet](https://www.airtable.com/company/health-info-datasheet)):[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... Where PHI Lives: Electronic Protected Health Information (ePHI) may only be stored inside standard "Records" within Airtable bases or interfaces. Airtable AI: You cannot process or store PHI using Airtable AI features unless specific supplemental health information terms apply. Customer Support: You must never include PHI or medical data in screenshots, support tickets, or communications with Airtable’s customer support team. Automations & Emails: You cannot use automated functions to email records if those records contain PHI. No Patient Portals: Airtable explicitly prohibits using their platform as a patient portal or as the underlying technology for one. Integrations: Any third-party integration connected to your Airtable bases (such as Slack, Zapier, or external APIs) must also independently support HIPAA and be covered by its own BAA. - **Where PHI Lives:** Electronic Protected Health Information (ePHI) may **only** be stored inside standard "Records" within Airtable bases or interfaces.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Airtable AI:** You cannot process or store PHI using Airtable AI features unless specific supplemental health information terms apply.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Customer Support:** You must never include PHI or medical data in screenshots, support tickets, or communications with Airtable’s customer support team.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Automations & Emails:** You cannot use automated functions to email records if those records contain PHI.[[1]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) - **No Patient Portals:** Airtable explicitly prohibits using their platform as a patient portal or as the underlying technology for one.[[1]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) - **Integrations:** Any third-party integration connected to your Airtable bases (such as Slack, Zapier, or external APIs) must also independently support HIPAA and be covered by its own BAA.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... In healthcare, Airtable has many potential uses. It could be used to keep track of appointments and consultant availability, strea... Off-load the PHI, Keep Only “Breadcrumbs” in Airtable * Shape-shift PHI into opaque IDs. Store patient details in a hardened backe... If you'd like, let me know: What tier of Airtable plan your organization currently uses What type of patient workflow or data you are planning to build Whether you plan to integrate Airtable with other third-party tools - What **tier of Airtable plan** your organization currently uses - What **type of patient workflow or data** you are planning to build - Whether you plan to **integrate Airtable with other third-party tools** I can help you evaluate whether Airtable fits your project or if a specialized backend is a safer bet. What does the Airtable BAA cover? The Airtable BAA is part of the Health Information Exhibit, which supports HIPAA compliance for ... Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP...

Yes, Airtable can be HIPAA compliant, but only for **Enterprise Scale** plan subscribers who sign a **Business Associate Agreement (BAA)** via Airtable 's Health Information Exhibit . It is not compliant on lower tiers (Free, Team, or Business), and storing protected health information (PHI) there violates their terms.[](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Requirements for Compliance - **Enterprise Scale Plan:** You must upgrade to Airtable 's highest organizational tier. - **Signed BAA:** You must formally execute the [Airtable Health Information Exhibit](https://www.airtable.com/company/hipaa-airtable) containing the BAA. - **Security Controls:** You must properly configure enterprise controls like SAML SSO, audit logs, and access permissions.[](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[3]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[4]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) Usage Restrictions - **Data Location:** ePHI must only be stored within records inside bases or interfaces. - **Exclusions:** Do not use Airtable AI or include PHI in customer support tickets. - **Integrations:** Third-party add-ons and automated outgoing emails must also maintain independent HIPAA compliance.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) If you'd like, let me know: - Your current **Airtable plan level** - What **type of patient data** you plan to track I can help you review your workflow constraints or alternative options. Yes, Airtable can be HIPAA compliant, but only for Enterprise Scale plan subscribers who sign a Business Associate Agreement (BAA) via Airtable 's Health Information Exhibit. It is not compliant on lower tiers (Free, Team, or Business), and storing protected health information (PHI) there violates their terms. A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Enterprise Scale Plan: You must upgrade to Airtable 's highest organizational tier. Signed BAA: You must formally execute the Airtable Health Information Exhibit containing the BAA. Security Controls: You must properly configure enterprise controls like SAML SSO, audit logs, and access permissions. - **Enterprise Scale Plan:** You must upgrade to Airtable 's highest organizational tier. - **Signed BAA:** You must formally execute the [Airtable Health Information Exhibit](https://www.airtable.com/company/hipaa-airtable) containing the BAA. - **Security Controls:** You must properly configure enterprise controls like SAML SSO, audit logs, and access permissions.[](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[3]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[4]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... Is Airtable Technically HIPAA-Compliant? * Enterprise-only paywall. HIPAA support didn't exist until April 2024 and is still gated... Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP... Data Location: ePHI must only be stored within records inside bases or interfaces. Exclusions: Do not use Airtable AI or include PHI in customer support tickets. Integrations: Third-party add-ons and automated outgoing emails must also maintain independent HIPAA compliance. - **Data Location:** ePHI must only be stored within records inside bases or interfaces. - **Exclusions:** Do not use Airtable AI or include PHI in customer support tickets. - **Integrations:** Third-party add-ons and automated outgoing emails must also maintain independent HIPAA compliance.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... In healthcare, Airtable has many potential uses. It could be used to keep track of appointments and consultant availability, strea... If you'd like, let me know:Your current Airtable plan level What type of patient data you plan to track I can help you review your workflow constraints or alternative options. If you'd like, let me know: - Your current **Airtable plan level** - What **type of patient data** you plan to track I can help you review your workflow constraints or alternative options. Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

**Yes, Airtable can be HIPAA compliant** , but only under specific, strict conditions . It is not compliant out-of-the-box on standard self-serve plans.[](https://www.accountablehq.com/post/airtable-hipaa-compliance-baa-security-features-and-what-to-know-in-2026) [[1]](https://www.accountablehq.com/post/airtable-hipaa-compliance-baa-security-features-and-what-to-know-in-2026)[[2]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) Key Requirements for HIPAA Compliance on Airtable 1. **Enterprise Scale Plan Required** : Airtable only supports HIPAA compliance for customers on its **Enterprise Scale plan** . If you are on the Free, Team, or Business plans, storing electronic Protected Health Information (ePHI) violates Airtable's terms.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) 2. **Execute a Business Associate Agreement (BAA)** : You must formally execute Airtable's **Health Information Exhibit** , which includes their BAA. Without a signed BAA in place, the platform is not considered compliant for medical or patient data.[](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) [[1]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[2]](https://www.complysaas.com/compliance/airtable)[[3]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) 3. **Strict Boundary and Configuration Rules** : Even with a BAA and the Enterprise plan, Airtable enforces rigid operational boundaries outlined in their Airtable Health Information Datasheet: - **Where PHI Lives** : ePHI must only be stored inside record cells within designated Airtable bases or interfaces. - **Airtable AI** : Do not store ePHI in workspaces where Airtable AI is enabled unless you have specifically agreed to the Supplemental AI Terms for Health Information. - **No Patient Portals** : Airtable explicitly states the platform should **not** be used as a patient portal. - **Automations & Emails** : Be cautious with automations that send outgoing emails, as transmitting ePHI improperly outside secure confines breaks compliance. - **Customer Support** : You must never include ePHI or medical information in support tickets or screenshots sent to Airtable support. - **Integrations** : Any third-party tool connected to Airtable (like Zapier, Slack, or custom APIs) must also be HIPAA-compliant and covered by its own BAA.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.accountablehq.com/post/common-low-level-hipaa-security-rule-violations-examples-risks-and-fixes) If you'd like to proceed, tell me: - What **tier of Airtable** your organization currently uses - Whether you plan to **integrate Airtable** with other external apps or tools I can help you evaluate your **workflow architecture** for patient data. Yes, Airtable can be HIPAA compliant, but only under specific, strict conditions. It is not compliant out-of-the-box on standard self-serve plans. Is HIPAA compliance available on all Airtable plans? No. HIPAA support requires an executed BAA and is generally available to ente... HIPAA: The Part Everyone Gets Wrong Every couple of weeks a client asks us, "Is Airtable HIPAA compliant?" The honest answer is "i... If you'd like to proceed, tell me: What tier of Airtable your organization currently uses Whether you plan to integrate Airtable with other external apps or tools - What **tier of Airtable** your organization currently uses - Whether you plan to **integrate Airtable** with other external apps or tools I can help you evaluate your workflow architecture for patient data. I can help you evaluate your **workflow architecture** for patient data. Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP... HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... HIPAA, BAA, and SOC 2 summary ... Airtable states that HIPAA support is available on Enterprise Scale and that customers intending...

Airtable is HIPAA compliant **only** for customers on the highest-tier **Enterprise Scale** plan who sign a formal **Business Associate Agreement (BAA)** via Airtable's Health Information Exhibit . Users on Free, Team, or Business plans are strictly prohibited from storing protected health information (PHI).[](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[3]](https://www.paubox.com/blog/airtable-hipaa-compliant)Requirements and Limitations - **Plan Tier:** Gated exclusively behind the [Airtable Enterprise Scale](https://www.airtable.com/company/hipaa-airtable) plan. - **BAA Signature:** Must execute Airtable's Health Information Exhibit containing the BAA. - **Storage Rules:** ePHI must remain strictly inside record cells within bases or interfaces. - **Excluded Features:** Do not use Airtable AI, patient portals, or include PHI in customer support tickets. - **Integrations:** Third-party app connections and external automations (like outgoing emails) must independently meet HIPAA rules.[](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) If you'd like, let me know: - Your current **Airtable plan** - What kind of **patient data or workflow** you plan to build I can help you determine if the Enterprise tier fits your project or if you need an alternative solution. Airtable is HIPAA compliant only for customers on the highest-tier Enterprise Scale plan who sign a formal Business Associate Agreement (BAA) via Airtable's Health Information Exhibit. Users on Free, Team, or Business plans are strictly prohibited from storing protected health information (PHI). A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are... Plan Tier: Gated exclusively behind the Airtable Enterprise Scale plan. BAA Signature: Must execute Airtable's Health Information Exhibit containing the BAA. Storage Rules: ePHI must remain strictly inside record cells within bases or interfaces. Excluded Features: Do not use Airtable AI, patient portals, or include PHI in customer support tickets. Integrations: Third-party app connections and external automations (like outgoing emails) must independently meet HIPAA rules. - **Plan Tier:** Gated exclusively behind the [Airtable Enterprise Scale](https://www.airtable.com/company/hipaa-airtable) plan. - **BAA Signature:** Must execute Airtable's Health Information Exhibit containing the BAA. - **Storage Rules:** ePHI must remain strictly inside record cells within bases or interfaces. - **Excluded Features:** Do not use Airtable AI, patient portals, or include PHI in customer support tickets. - **Integrations:** Third-party app connections and external automations (like outgoing emails) must independently meet HIPAA rules.[](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Is Airtable Technically HIPAA-Compliant? * Enterprise-only paywall. HIPAA support didn't exist until April 2024 and is still gated... If you'd like, let me know:Your current Airtable plan What kind of patient data or workflow you plan to build I can help you determine if the Enterprise tier fits your project or if you need an alternative solution. If you'd like, let me know: - Your current **Airtable plan** - What kind of **patient data or workflow** you plan to build I can help you determine if the Enterprise tier fits your project or if you need an alternative solution.

**Yes, but only under very specific plan tiers, contract agreements, and configuration constraints** **.** [](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) Airtable supports HIPAA compliance for customers on its highest enterprise tier, but standard lower-tier plans are strictly **not** HIPAA compliant.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) Key Requirements for HIPAA Compliance on Airtable - **Enterprise Scale Plan Only:** HIPAA support and the ability to handle Protected Health Information (PHI) are exclusively available to organizations subscribed to Airtable's **Enterprise Scale** plan. Free, Team, and Business plans do not support HIPAA compliance or qualify for a Business Associate Agreement (BAA).[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Signed Business Associate Agreement (BAA):** You must execute Airtable's **Health Information Exhibit** , which contains their formal BAA. Storing ePHI (electronic Protected Health Information) without this signed agreement in place violates HIPAA regulations.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) Strict Boundaries and Limitations Even on an Enterprise Scale plan with a signed BAA, Airtable enforces rigid rules regarding where and how patient data can touch the platform:[[1]](https://www.facebook.com/KnackHQ/posts/airtable-is-great-until-it-is-patient-dataon-standard-plans-there-is-no-baa-the-/1661739832624383/) - **Where PHI Can Live:** ePHI must be stored *only* within standard "Records" inside Airtable bases or interfaces. - **Automated Emails:** You cannot use Airtable’s automated functions to email records if those records contain PHI. - **Customer Support:** You must never disclose PHI (via screenshots, tickets, or chat) to Airtable’s customer support team. - **Airtable AI:** Airtable AI is excluded from standard HIPAA protections unless you have specifically accepted supplemental AI health information terms. It is safest to disable AI in any workspace handling PHI. - **Patient Portals:** Airtable **cannot** be used as a patient portal or as the underlying technology for direct patient-facing portals. - **Third-Party Integrations:** Any connected integrations (such as Slack, Zapier, or Salesforce) must independently support HIPAA compliance and have their own BAAs.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/)[[3]](https://www.reddit.com/r/lovable/comments/1r84a50/question_about_hipaacompliant_usage_of_lovable/) If you'd like to proceed, tell me: - What **tier/plan** is your organization currently on? - What **specific workflows** (e.g., internal tracking, integrations) are you planning to build? I can help you evaluate whether Airtable fits your needs or if a dedicated healthcare database tool is a better option. Yes, but only under very specific plan tiers, contract agreements, and configuration constraints. Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Airtable supports HIPAA compliance for customers on its highest enterprise tier, but standard lower-tier plans are strictly not HIPAA compliant. Airtable supports HIPAA compliance for customers on its highest enterprise tier, but standard lower-tier plans are strictly **not** HIPAA compliant.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) Enterprise Scale Plan Only: HIPAA support and the ability to handle Protected Health Information (PHI) are exclusively available to organizations subscribed to Airtable's Enterprise Scale plan. Free, Team, and Business plans do not support HIPAA compliance or qualify for a Business Associate Agreement (BAA). Signed Business Associate Agreement (BAA): You must execute Airtable's Health Information Exhibit, which contains their formal BAA. Storing ePHI (electronic Protected Health Information) without this signed agreement in place violates HIPAA regulations. - **Enterprise Scale Plan Only:** HIPAA support and the ability to handle Protected Health Information (PHI) are exclusively available to organizations subscribed to Airtable's **Enterprise Scale** plan. Free, Team, and Business plans do not support HIPAA compliance or qualify for a Business Associate Agreement (BAA).[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Signed Business Associate Agreement (BAA):** You must execute Airtable's **Health Information Exhibit** , which contains their formal BAA. Storing ePHI (electronic Protected Health Information) without this signed agreement in place violates HIPAA regulations.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... Even on an Enterprise Scale plan with a signed BAA, Airtable enforces rigid rules regarding where and how patient data can touch the platform: Even on an Enterprise Scale plan with a signed BAA, Airtable enforces rigid rules regarding where and how patient data can touch the platform:[[1]](https://www.facebook.com/KnackHQ/posts/airtable-is-great-until-it-is-patient-dataon-standard-plans-there-is-no-baa-the-/1661739832624383/) Airtable is great, until it is patient data. On standard plans there is no BAA. The HIPAA add-on is enterprise-only, and even then... Where PHI Can Live: ePHI must be stored only within standard "Records" inside Airtable bases or interfaces. Automated Emails: You cannot use Airtable’s automated functions to email records if those records contain PHI. Customer Support: You must never disclose PHI (via screenshots, tickets, or chat) to Airtable’s customer support team. Airtable AI: Airtable AI is excluded from standard HIPAA protections unless you have specifically accepted supplemental AI health information terms. It is safest to disable AI in any workspace handling PHI. Patient Portals: Airtable cannot be used as a patient portal or as the underlying technology for direct patient-facing portals. Third-Party Integrations: Any connected integrations (such as Slack, Zapier, or Salesforce) must independently support HIPAA compliance and have their own BAAs. - **Where PHI Can Live:** ePHI must be stored *only* within standard "Records" inside Airtable bases or interfaces. - **Automated Emails:** You cannot use Airtable’s automated functions to email records if those records contain PHI. - **Customer Support:** You must never disclose PHI (via screenshots, tickets, or chat) to Airtable’s customer support team. - **Airtable AI:** Airtable AI is excluded from standard HIPAA protections unless you have specifically accepted supplemental AI health information terms. It is safest to disable AI in any workspace handling PHI. - **Patient Portals:** Airtable **cannot** be used as a patient portal or as the underlying technology for direct patient-facing portals. - **Third-Party Integrations:** Any connected integrations (such as Slack, Zapier, or Salesforce) must independently support HIPAA compliance and have their own BAAs.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/)[[3]](https://www.reddit.com/r/lovable/comments/1r84a50/question_about_hipaacompliant_usage_of_lovable/) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... In healthcare, Airtable has many potential uses. It could be used to keep track of appointments and consultant availability, strea... That setup is pretty standard, keeping PHI completely out of the prototyping layer is usually the safer route. If you'd like to proceed, tell me: What tier/plan is your organization currently on? What specific workflows (e.g., internal tracking, integrations) are you planning to build? - What **tier/plan** is your organization currently on? - What **specific workflows** (e.g., internal tracking, integrations) are you planning to build? I can help you evaluate whether Airtable fits your needs or if a dedicated healthcare database tool is a better option.

Yes, Airtable is HIPAA compliant, but strictly **only for Enterprise Scale plan customers** who have signed a specialized Health Information Exhibit containing a Business Associate Agreement (BAA). It is not compliant or permitted for use with Protected Health Information (PHI) on Free, Team, or Business plans.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/)[[3]](https://www.blaze.tech/post/is-airtable-hipaa-compliant)[[4]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[5]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-plan-requirements-and-using-airtable-for-phi)Requirements for HIPAA Compliance - **Enterprise Scale Plan:** You must subscribe to Airtable’s highest enterprise tier. - **Executed BAA:** You must sign Airtable’s official Health Information Exhibit (which includes the BAA) via your account team. - **Proper Configuration:** Your organization must enforce internal controls like single sign-on (SSO), granular permissions, and audit logs.[](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[3]](https://www.reddit.com/r/Airtable/comments/1jw3ion/exploring_airtable_for_med_school/) Important Restrictions & Limitations Even under an Enterprise BAA, Airtable enforces strict boundary rules regarding where and how patient data can touch the platform: - **Storage Location:** Electronic Protected Health Information (ePHI) must only be stored within standard **Records** inside Airtable bases or interfaces.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **No Airtable AI:** You cannot store or process ePHI in workspaces where Airtable AI is enabled unless specific supplemental health terms apply and are configured safely.[](https://www.airtable.com/company/health-info-datasheet) - **No Automated Emails with PHI:** You cannot use automated Airtable functions or scripts to send emails containing PHI.[](https://www.airtable.com/company/health-info-datasheet) - **No Patient Portals:** Airtable cannot be used as or behind a public-facing patient portal.[](https://www.airtable.com/company/health-info-datasheet) - **Customer Support:** You must never share screenshots or tickets containing ePHI with Airtable’s standard customer support.[](https://www.airtable.com/company/health-info-datasheet) - **Third-Party Integrations:** Any connected tool or integration (such as Slack, Google Workspace, or custom webhooks) must also independently support and be configured for HIPAA compliance.[](https://www.airtable.com/company/health-info-datasheet) If you'd like, let me know: - What **tier or plan** your organization currently uses - What **kind of workflow or data tracking** you plan to build I can help you evaluate if Airtable fits your technical setup or if an alternative tool is better. Yes, Airtable is HIPAA compliant, but strictly only for Enterprise Scale plan customers who have signed a specialized Health Information Exhibit containing a Business Associate Agreement (BAA). It is not compliant or permitted for use with Protected Health Information (PHI) on Free, Team, or Business plans. Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... In healthcare, Airtable has many potential uses. It could be used to keep track of appointments and consultant availability, strea... If you're managing sensitive healthcare information, you might wonder if Airtable is HIPAA compliant. The answer is that Airtable ... Is Airtable Technically HIPAA-Compliant? * Enterprise-only paywall. HIPAA support didn't exist until April 2024 and is still gated... Does Airtable require a BAA for HIPAA compliance? Yes. You must have a fully executed Business Associate Agreement—often provided ... Enterprise Scale Plan: You must subscribe to Airtable’s highest enterprise tier. Executed BAA: You must sign Airtable’s official Health Information Exhibit (which includes the BAA) via your account team. Proper Configuration: Your organization must enforce internal controls like single sign-on (SSO), granular permissions, and audit logs. - **Enterprise Scale Plan:** You must subscribe to Airtable’s highest enterprise tier. - **Executed BAA:** You must sign Airtable’s official Health Information Exhibit (which includes the BAA) via your account team. - **Proper Configuration:** Your organization must enforce internal controls like single sign-on (SSO), granular permissions, and audit logs.[](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[3]](https://www.reddit.com/r/Airtable/comments/1jw3ion/exploring_airtable_for_med_school/) A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... You need the top of the line Enterprise plan to get the HIPAA-compliant version of Airtable. Even under an Enterprise BAA, Airtable enforces strict boundary rules regarding where and how patient data can touch the platform: Storage Location: Electronic Protected Health Information (ePHI) must only be stored within standard Records inside Airtable bases or interfaces. No Airtable AI: You cannot store or process ePHI in workspaces where Airtable AI is enabled unless specific supplemental health terms apply and are configured safely. No Automated Emails with PHI: You cannot use automated Airtable functions or scripts to send emails containing PHI. No Patient Portals: Airtable cannot be used as or behind a public-facing patient portal. Customer Support: You must never share screenshots or tickets containing ePHI with Airtable’s standard customer support. Third-Party Integrations: Any connected tool or integration (such as Slack, Google Workspace, or custom webhooks) must also independently support and be configured for HIPAA compliance. - **Storage Location:** Electronic Protected Health Information (ePHI) must only be stored within standard **Records** inside Airtable bases or interfaces.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **No Airtable AI:** You cannot store or process ePHI in workspaces where Airtable AI is enabled unless specific supplemental health terms apply and are configured safely.[](https://www.airtable.com/company/health-info-datasheet) - **No Automated Emails with PHI:** You cannot use automated Airtable functions or scripts to send emails containing PHI.[](https://www.airtable.com/company/health-info-datasheet) - **No Patient Portals:** Airtable cannot be used as or behind a public-facing patient portal.[](https://www.airtable.com/company/health-info-datasheet) - **Customer Support:** You must never share screenshots or tickets containing ePHI with Airtable’s standard customer support.[](https://www.airtable.com/company/health-info-datasheet) - **Third-Party Integrations:** Any connected tool or integration (such as Slack, Google Workspace, or custom webhooks) must also independently support and be configured for HIPAA compliance.[](https://www.airtable.com/company/health-info-datasheet) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... If you'd like, let me know:What tier or plan your organization currently uses What kind of workflow or data tracking you plan to build I can help you evaluate if Airtable fits your technical setup or if an alternative tool is better. If you'd like, let me know: - What **tier or plan** your organization currently uses - What **kind of workflow or data tracking** you plan to build I can help you evaluate if Airtable fits your technical setup or if an alternative tool is better. Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

**Yes, but only under strict conditions.** Airtable supports HIPAA compliance for organizations that meet specific plan and configuration requirements.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/)[[3]](https://community.airtable.com/announcements-6/airtable-is-now-hipaa-compliant-1542)[[4]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) Key Requirements for HIPAA Compliance in Airtable - **Enterprise Scale Plan:** HIPAA support and the ability to sign a Business Associate Agreement (BAA) are restricted exclusively to customers on Airtable's **Enterprise Scale** tier. Standard, Team, and Business plans are **not** HIPAA compliant and prohibit storing electronic Protected Health Information (ePHI).[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Signed Health Information Exhibit (BAA):** You must execute Airtable's official Health Information Exhibit, which contains their Business Associate Addendum, before introducing any patient data or PHI into the platform.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Enterprise Controls:** Proper setup requires leveraging enterprise-grade features such as Enterprise Key Management (EKM) for customer-managed encryption, Enterprise Single Sign-On (SSO), Data Loss Prevention (DLP), and Audit Logs.[](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) [[1]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[2]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) Strict Operational Boundaries & Limitations Even with a signed BAA and an Enterprise Scale plan, Airtable enforces tight operational rules regarding where patient data can live:[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.techrepublic.com/article/airtable-alternatives/)[[2]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) - **Records Only:** ePHI must only be stored inside standard **Records** (cells) within Airtable bases or interfaces. It cannot be placed in un-scoped metadata, comments, or general workspace text fields.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.airtable.com/company/health-info-datasheet) - **No Automated PHI Emails:** You cannot configure Airtable automations to send out emails containing actual PHI.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **No Airtable AI with PHI:** Airtable AI features sit completely outside the HIPAA compliance boundary unless specifically covered by supplemental health terms—standard practice is to ensure AI is disabled in workspaces handling patient data.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Support Ticket Restrictions:** You must never include screenshots or text containing actual ePHI when communicating with Airtable's digital or verbal customer support team.[](https://www.airtable.com/company/health-info-datasheet) - **No Patient Portals:** Airtable cannot be used as—or as the underlying tech stack for—a patient-facing portal.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Third-Party Integrations:** Any external tools or integrations connected to your Airtable base (such as Zapier, Slack, or Google Workspace) must also be HIPAA-compliant and covered by their own separate BAAs.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) If you'd like, let me know: - What **tier of Airtable** your organization currently uses - What **specific workflows or data** (e.g., internal tracking vs. integrations) you plan to build I can help you evaluate whether Airtable fits your use case or if you need alternative architectures. Yes, but only under strict conditions. Airtable supports HIPAA compliance for organizations that meet specific plan and configuration requirements. Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... In healthcare, Airtable has many potential uses. It could be used to keep track of appointments and consultant availability, strea... * 🩺📈 Exciting news for healthcare providers and organizations! Airtable is now HIPAA compliant and ready to support your critica... HIPAA: The Part Everyone Gets Wrong Every couple of weeks a client asks us, "Is Airtable HIPAA compliant?" The honest answer is "i... Enterprise Scale Plan: HIPAA support and the ability to sign a Business Associate Agreement (BAA) are restricted exclusively to customers on Airtable's Enterprise Scale tier. Standard, Team, and Business plans are not HIPAA compliant and prohibit storing electronic Protected Health Information (ePHI). Signed Health Information Exhibit (BAA): You must execute Airtable's official Health Information Exhibit, which contains their Business Associate Addendum, before introducing any patient data or PHI into the platform. Enterprise Controls: Proper setup requires leveraging enterprise-grade features such as Enterprise Key Management (EKM) for customer-managed encryption, Enterprise Single Sign-On (SSO), Data Loss Prevention (DLP), and Audit Logs. - **Enterprise Scale Plan:** HIPAA support and the ability to sign a Business Associate Agreement (BAA) are restricted exclusively to customers on Airtable's **Enterprise Scale** tier. Standard, Team, and Business plans are **not** HIPAA compliant and prohibit storing electronic Protected Health Information (ePHI).[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Signed Health Information Exhibit (BAA):** You must execute Airtable's official Health Information Exhibit, which contains their Business Associate Addendum, before introducing any patient data or PHI into the platform.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Enterprise Controls:** Proper setup requires leveraging enterprise-grade features such as Enterprise Key Management (EKM) for customer-managed encryption, Enterprise Single Sign-On (SSO), Data Loss Prevention (DLP), and Audit Logs.[](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) [[1]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[2]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP... Even with a signed BAA and an Enterprise Scale plan, Airtable enforces tight operational rules regarding where patient data can live: Even with a signed BAA and an Enterprise Scale plan, Airtable enforces tight operational rules regarding where patient data can live:[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.techrepublic.com/article/airtable-alternatives/)[[2]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) Airtable can be HIPAA compliant, but this is only available under its Enterprise Scale plan. For Airtable to be HIPAA compliant, u... Off-load the PHI, Keep Only “Breadcrumbs” in Airtable * Shape-shift PHI into opaque IDs. Store patient details in a hardened backe... Records Only: ePHI must only be stored inside standard Records (cells) within Airtable bases or interfaces. It cannot be placed in un-scoped metadata, comments, or general workspace text fields. No Automated PHI Emails: You cannot configure Airtable automations to send out emails containing actual PHI. No Airtable AI with PHI: Airtable AI features sit completely outside the HIPAA compliance boundary unless specifically covered by supplemental health terms—standard practice is to ensure AI is disabled in workspaces handling patient data. Support Ticket Restrictions: You must never include screenshots or text containing actual ePHI when communicating with Airtable's digital or verbal customer support team. No Patient Portals: Airtable cannot be used as—or as the underlying tech stack for—a patient-facing portal. Third-Party Integrations: Any external tools or integrations connected to your Airtable base (such as Zapier, Slack, or Google Workspace) must also be HIPAA-compliant and covered by their own separate BAAs. - **Records Only:** ePHI must only be stored inside standard **Records** (cells) within Airtable bases or interfaces. It cannot be placed in un-scoped metadata, comments, or general workspace text fields.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.airtable.com/company/health-info-datasheet) - **No Automated PHI Emails:** You cannot configure Airtable automations to send out emails containing actual PHI.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **No Airtable AI with PHI:** Airtable AI features sit completely outside the HIPAA compliance boundary unless specifically covered by supplemental health terms—standard practice is to ensure AI is disabled in workspaces handling patient data.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Support Ticket Restrictions:** You must never include screenshots or text containing actual ePHI when communicating with Airtable's digital or verbal customer support team.[](https://www.airtable.com/company/health-info-datasheet) - **No Patient Portals:** Airtable cannot be used as—or as the underlying tech stack for—a patient-facing portal.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Third-Party Integrations:** Any external tools or integrations connected to your Airtable base (such as Zapier, Slack, or Google Workspace) must also be HIPAA-compliant and covered by their own separate BAAs.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... If you'd like, let me know: What tier of Airtable your organization currently uses What specific workflows or data (e.g., internal tracking vs. integrations) you plan to build - What **tier of Airtable** your organization currently uses - What **specific workflows or data** (e.g., internal tracking vs. integrations) you plan to build I can help you evaluate whether Airtable fits your use case or if you need alternative architectures.

Yes, [Airtable](https://www.airtable.com/company/hipaa-airtable) is HIPAA compliant , but strictly for **Enterprise Scale** plan subscribers who have signed a Business Associate Agreement (BAA) via a Health Information Exhibit. It is not compliant on lower-tier plans (Free, Team, or Business).[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Requirements for Compliance - **Enterprise Scale Plan:** You must be on Airtable's highest custom-priced enterprise tier. - **Signed BAA:** You must execute Airtable’s Health Information Exhibit, which contains the official Business Associate Addendum.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) Platform Restrictions & Rules - **Where Data Lives:** Protected Health Information (PHI) must only be stored within records in Airtable bases or interfaces. - **Exclusions:** Airtable AI, customer support interactions, and standard automated emails containing PHI are excluded or restricted. - **Patient Portals:** You cannot use Airtable as a patient portal or the backend technology for one. - **Integrations:** Any third-party tools or integrations connected to your bases must also independently support HIPAA compliance.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) If you'd like, let me know: - What **tier** your organization is currently on - What kind of **healthcare workflow or data tracking** you plan to build I can help you determine the best architectural approach or look into alternative tools. Yes, Airtable is HIPAA compliant, but strictly for Enterprise Scale plan subscribers who have signed a Business Associate Agreement (BAA) via a Health Information Exhibit. It is not compliant on lower-tier plans (Free, Team, or Business). A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Enterprise Scale Plan: You must be on Airtable's highest custom-priced enterprise tier. Signed BAA: You must execute Airtable’s Health Information Exhibit, which contains the official Business Associate Addendum. - **Enterprise Scale Plan:** You must be on Airtable's highest custom-priced enterprise tier. - **Signed BAA:** You must execute Airtable’s Health Information Exhibit, which contains the official Business Associate Addendum.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) Is Airtable Technically HIPAA-Compliant? * Enterprise-only paywall. HIPAA support didn't exist until April 2024 and is still gated... Where Data Lives: Protected Health Information (PHI) must only be stored within records in Airtable bases or interfaces. Exclusions: Airtable AI, customer support interactions, and standard automated emails containing PHI are excluded or restricted. Patient Portals: You cannot use Airtable as a patient portal or the backend technology for one. Integrations: Any third-party tools or integrations connected to your bases must also independently support HIPAA compliance. - **Where Data Lives:** Protected Health Information (PHI) must only be stored within records in Airtable bases or interfaces. - **Exclusions:** Airtable AI, customer support interactions, and standard automated emails containing PHI are excluded or restricted. - **Patient Portals:** You cannot use Airtable as a patient portal or the backend technology for one. - **Integrations:** Any third-party tools or integrations connected to your bases must also independently support HIPAA compliance.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... In healthcare, Airtable has many potential uses. It could be used to keep track of appointments and consultant availability, strea... If you'd like, let me know:What tier your organization is currently on What kind of healthcare workflow or data tracking you plan to build I can help you determine the best architectural approach or look into alternative tools. If you'd like, let me know: - What **tier** your organization is currently on - What kind of **healthcare workflow or data tracking** you plan to build I can help you determine the best architectural approach or look into alternative tools. Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

**Yes, but strictly under specific conditions.** Airtable supports HIPAA compliance, but it is **not** compliant out-of-the-box on standard plans.[](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) [[1]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) Key Requirements for HIPAA Compliance on Airtable 1. **Enterprise Scale Plan:** HIPAA support is locked exclusively behind Airtable's highest-tier **Enterprise Scale** plan. It is prohibited to store electronic Protected Health Information (ePHI) on Free, Team, or Business plans.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) 2. **Signed Business Associate Agreement (BAA):** You must execute Airtable's **Health Information Exhibit** , which contains their formal BAA. Without this contract in place, storing patient data violates HIPAA.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) 3. **Enterprise Security Features:** Your organization must properly configure and maintain administrative and technical safeguards like Enterprise Single Sign-On (SSO), Audit Logs, Data Loss Prevention (DLP), and Enterprise Key Management (EKM).[](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) [[1]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) Strict Boundaries and Restrictions Even with a signed BAA and an Enterprise Scale plan, Airtable enforces hard operational rules regarding patient data outlined in their Airtable Health Information Datasheet:[[1]](https://www.reddit.com/r/Airtable/comments/d9btne/was_about_to_use_airtable_but_no_hipaa_compliant/)[[2]](https://www.facebook.com/KnackHQ/posts/airtable-is-great-until-it-is-patient-dataon-standard-plans-there-is-no-baa-the-/1661739832624383/) - **Storage Location:** ePHI and medical data must **only** be stored within individual records inside Airtable bases or interfaces. It cannot reside in comments, general metadata, or unapproved fields.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) - **Airtable AI:** AI features and agents are **excluded** from HIPAA coverage. You must not store or process ePHI in workspaces where Airtable AI is enabled (unless explicit supplemental health terms apply, though general policy restricts it).[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.knack.com/blog/hipaa-compliance-checklist-no-code/) - **Automations & Email:** You cannot use automated Airtable functions to email records containing PHI.[[1]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) - **Customer Support:** You must never include screenshots or text containing actual ePHI when opening support tickets or talking to Airtable customer service.[](https://www.airtable.com/company/health-info-datasheet) - **No Patient Portals:** Airtable explicitly prohibits using their platform as a patient portal or the direct technology backend for one.[](https://www.airtable.com/company/health-info-datasheet) - **Integrations:** Any third-party tools connected to your Airtable instance (such as Zapier, Slack, or Google Workspace) must also be HIPAA-compliant and covered under separate BAAs.[](https://www.airtable.com/company/health-info-datasheet) If you're planning a project, let me know: - What kind of **healthcare workflow or data** you plan to track - Whether you are already on an **Airtable Enterprise plan** I can help you evaluate if Airtable fits your use case or if a dedicated clinical backend is a better choice. Yes, but strictly under specific conditions. Airtable supports HIPAA compliance, but it is not compliant out-of-the-box on standard plans. HIPAA: The Part Everyone Gets Wrong Every couple of weeks a client asks us, "Is Airtable HIPAA compliant?" The honest answer is "i... Key Requirements for HIPAA Compliance on Airtable Even with a signed BAA and an Enterprise Scale plan, Airtable enforces hard operational rules regarding patient data outlined in their Airtable Health Information Datasheet : Even with a signed BAA and an Enterprise Scale plan, Airtable enforces hard operational rules regarding patient data outlined in their Airtable Health Information Datasheet:[[1]](https://www.reddit.com/r/Airtable/comments/d9btne/was_about_to_use_airtable_but_no_hipaa_compliant/)[[2]](https://www.facebook.com/KnackHQ/posts/airtable-is-great-until-it-is-patient-dataon-standard-plans-there-is-no-baa-the-/1661739832624383/) smartsheet? ill check it out... seems pricey in comparison though, you are right. ... Yeah, that's been a dealbreaker for a lot of... Airtable is great, until it is patient data. On standard plans there is no BAA. The HIPAA add-on is enterprise-only, and even then... HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... Storage Location: ePHI and medical data must only be stored within individual records inside Airtable bases or interfaces. It cannot reside in comments, general metadata, or unapproved fields. Airtable AI: AI features and agents are excluded from HIPAA coverage. You must not store or process ePHI in workspaces where Airtable AI is enabled (unless explicit supplemental health terms apply, though general policy restricts it). Automations & Email: You cannot use automated Airtable functions to email records containing PHI. Customer Support: You must never include screenshots or text containing actual ePHI when opening support tickets or talking to Airtable customer service. No Patient Portals: Airtable explicitly prohibits using their platform as a patient portal or the direct technology backend for one. Integrations: Any third-party tools connected to your Airtable instance (such as Zapier, Slack, or Google Workspace) must also be HIPAA-compliant and covered under separate BAAs. - **Storage Location:** ePHI and medical data must **only** be stored within individual records inside Airtable bases or interfaces. It cannot reside in comments, general metadata, or unapproved fields.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) - **Airtable AI:** AI features and agents are **excluded** from HIPAA coverage. You must not store or process ePHI in workspaces where Airtable AI is enabled (unless explicit supplemental health terms apply, though general policy restricts it).[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.knack.com/blog/hipaa-compliance-checklist-no-code/) - **Automations & Email:** You cannot use automated Airtable functions to email records containing PHI.[[1]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) - **Customer Support:** You must never include screenshots or text containing actual ePHI when opening support tickets or talking to Airtable customer service.[](https://www.airtable.com/company/health-info-datasheet) - **No Patient Portals:** Airtable explicitly prohibits using their platform as a patient portal or the direct technology backend for one.[](https://www.airtable.com/company/health-info-datasheet) - **Integrations:** Any third-party tools connected to your Airtable instance (such as Zapier, Slack, or Google Workspace) must also be HIPAA-compliant and covered under separate BAAs.[](https://www.airtable.com/company/health-info-datasheet) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Off-load the PHI, Keep Only “Breadcrumbs” in Airtable * Shape-shift PHI into opaque IDs. Store patient details in a hardened backe... Do AI features in no-code platforms need to be HIPAA-compliant separately? Yes, and importantly, this is one of the most commonly ... Airtable is a customizable business management platform with automation capabilities that helps organizations better manage data b... If you're planning a project, let me know: What kind of healthcare workflow or data you plan to track Whether you are already on an Airtable Enterprise plan - What kind of **healthcare workflow or data** you plan to track - Whether you are already on an **Airtable Enterprise plan** I can help you evaluate if Airtable fits your use case or if a dedicated clinical backend is a better choice. Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP...

Airtable is HIPAA compliant **only** for customers on the [Airtable Enterprise Scale Plan](https://support.airtable.com/docs/understanding-hipaa-at-airtable) who sign a Health Information Exhibit containing a Business Associate Agreement (BAA). Users on Free, Team, or Business plans are strictly prohibited from storing electronic Protected Health Information (ePHI).[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[3]](https://www.paubox.com/blog/airtable-hipaa-compliant)Plan and Agreement Requirements - **Enterprise Scale Plan:** Required to access Airtable's HIPAA compliance program. - **Business Associate Agreement (BAA):** Must be executed via Airtable's Health Information Exhibit. - **Lower Tiers:** Free, Team, and Business plans do not offer a BAA and cannot legally hold patient data.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) Usage Rules and Restrictions - **Storage Boundaries:** Patient health data (ePHI) must only live inside records within bases or interfaces. - **No AI Features:** Airtable AI cannot be used or enabled in workspaces handling ePHI. - **Support Limits:** You must never share or disclose ePHI with Airtable’s customer support team in tickets or screenshots. - **Automations & Emails:** You cannot use automated email features to transmit raw ePHI out of the system. - **External Integrations:** Any third-party tools or apps connected to your bases must also be HIPAA compliant and covered by their own BAAs. - **No Patient Portals:** Airtable cannot be used as a public or direct patient portal.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) If you'd like, let me know: - What **tier or plan** your organization currently uses - What **type of workflow or data** you plan to build I can help you evaluate if Airtable fits your project or suggest alternative ways to structure your data safely. Airtable is HIPAA compliant only for customers on the Airtable Enterprise Scale Plan who sign a Health Information Exhibit containing a Business Associate Agreement (BAA). Users on Free, Team, or Business plans are strictly prohibited from storing electronic Protected Health Information (ePHI). A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are... Enterprise Scale Plan: Required to access Airtable's HIPAA compliance program. Business Associate Agreement (BAA): Must be executed via Airtable's Health Information Exhibit. Lower Tiers: Free, Team, and Business plans do not offer a BAA and cannot legally hold patient data. - **Enterprise Scale Plan:** Required to access Airtable's HIPAA compliance program. - **Business Associate Agreement (BAA):** Must be executed via Airtable's Health Information Exhibit. - **Lower Tiers:** Free, Team, and Business plans do not offer a BAA and cannot legally hold patient data.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) Storage Boundaries: Patient health data (ePHI) must only live inside records within bases or interfaces. No AI Features: Airtable AI cannot be used or enabled in workspaces handling ePHI. Support Limits: You must never share or disclose ePHI with Airtable’s customer support team in tickets or screenshots. Automations & Emails: You cannot use automated email features to transmit raw ePHI out of the system. External Integrations: Any third-party tools or apps connected to your bases must also be HIPAA compliant and covered by their own BAAs. No Patient Portals: Airtable cannot be used as a public or direct patient portal. - **Storage Boundaries:** Patient health data (ePHI) must only live inside records within bases or interfaces. - **No AI Features:** Airtable AI cannot be used or enabled in workspaces handling ePHI. - **Support Limits:** You must never share or disclose ePHI with Airtable’s customer support team in tickets or screenshots. - **Automations & Emails:** You cannot use automated email features to transmit raw ePHI out of the system. - **External Integrations:** Any third-party tools or apps connected to your bases must also be HIPAA compliant and covered by their own BAAs. - **No Patient Portals:** Airtable cannot be used as a public or direct patient portal.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... In healthcare, Airtable has many potential uses. It could be used to keep track of appointments and consultant availability, strea... If you'd like, let me know:What tier or plan your organization currently uses What type of workflow or data you plan to build I can help you evaluate if Airtable fits your project or suggest alternative ways to structure your data safely. If you'd like, let me know: - What **tier or plan** your organization currently uses - What **type of workflow or data** you plan to build I can help you evaluate if Airtable fits your project or suggest alternative ways to structure your data safely. Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

**Yes, Airtable can be HIPAA compliant** , but only under strict conditions . Airtable supports HIPAA compliance for organizations that meet specific plan and configuration requirements, reversing its older policy of not offering a Business Associate Agreement (BAA).[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) Core Requirements for HIPAA Compliance - **Enterprise Scale Plan:** HIPAA support is exclusively gated behind Airtable's highest-tier **Enterprise Scale plan** . Free, Team, and Business plans are **not** eligible, and storing Protected Health Information (PHI) on those tiers violates compliance terms.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[2]](https://www.caspio.com/compare/airtable-alternative/) - **Signed Health Information Exhibit / BAA:** Eligible organizations must formally execute Airtable's **Health Information Exhibit** , which includes their official Business Associate Addendum.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) Crucial Boundaries and Restrictions Even with an Enterprise Scale plan and a signed BAA, Airtable enforces strict limitations on where and how patient data can live within the platform:[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.facebook.com/KnackHQ/posts/airtable-is-great-until-it-is-patient-dataon-standard-plans-there-is-no-baa-the-/1661739832624383/) - **Records Only:** Electronic Protected Health Information (ePHI) and medical information must be restricted strictly to **Records** (cells) inside Airtable bases or interfaces. - **No Airtable AI:** You must **not** store or process ePHI in workspaces or bases where Airtable AI is enabled unless specific health-related supplemental AI terms are accepted and supported. - **No Automated Emails with PHI:** Airtable automations cannot email out records or notifications containing raw ePHI. - **Customer Support Limits:** You cannot include patient data or ePHI in screenshots, support tickets, or chats when communicating with Airtable's Customer Support team. - **No Patient Portals:** Airtable explicitly prohibits using its platform as a patient portal or as the underlying database/technology for one. - **Third-Party Integrations:** Any external tools or integrations connected to your Airtable base (such as Zapier, Slack, or various APIs) must independently support HIPAA compliance and have their own BAAs in place.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) If you'd like to proceed, tell me: - What **tier of Airtable** your organization currently uses - What kind of **workflow or data collection** you are trying to build I can help you evaluate whether Airtable fits your architecture or if you need an alternative setup. Yes, Airtable can be HIPAA compliant, but only under strict conditions. Airtable supports HIPAA compliance for organizations that meet specific plan and configuration requirements, reversing its older policy of not offering a Business Associate Agreement (BAA). Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Business Associate Agreement (BA... For example, PHI can only be stored in “Records” (similar to Excel Cells) in “Bases” Records may not be emailed via an automated f... Enterprise Scale Plan: HIPAA support is exclusively gated behind Airtable's highest-tier Enterprise Scale plan. Free, Team, and Business plans are not eligible, and storing Protected Health Information (PHI) on those tiers violates compliance terms. Signed Health Information Exhibit / BAA: Eligible organizations must formally execute Airtable's Health Information Exhibit, which includes their official Business Associate Addendum. - **Enterprise Scale Plan:** HIPAA support is exclusively gated behind Airtable's highest-tier **Enterprise Scale plan** . Free, Team, and Business plans are **not** eligible, and storing Protected Health Information (PHI) on those tiers violates compliance terms.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[2]](https://www.caspio.com/compare/airtable-alternative/) - **Signed Health Information Exhibit / BAA:** Eligible organizations must formally execute Airtable's **Health Information Exhibit** , which includes their official Business Associate Addendum.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) The boundary is drawn tightly: PHI may only live in records within bases, it can't appear in automated emails or be shared with Ai... any external integrations used with the Airtable platform must also support HIPAA compliance (i.e., MS Teams, Salesforce, Google W... HIPAA features are available only with Airtable's Enterprise Scale Plan, though. Customers can sign Airtable's Business Associate ... Airtable supports HIPAA only on its top-tier Enterprise Scale plan and does not offer FERPA, private cloud, or government cloud de... Even with an Enterprise Scale plan and a signed BAA, Airtable enforces strict limitations on where and how patient data can live within the platform : Even with an Enterprise Scale plan and a signed BAA, Airtable enforces strict limitations on where and how patient data can live within the platform:[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.facebook.com/KnackHQ/posts/airtable-is-great-until-it-is-patient-dataon-standard-plans-there-is-no-baa-the-/1661739832624383/) Airtable is great, until it is patient data. On standard plans there is no BAA. The HIPAA add-on is enterprise-only, and even then... Records Only: Electronic Protected Health Information (ePHI) and medical information must be restricted strictly to Records (cells) inside Airtable bases or interfaces. No Airtable AI: You must not store or process ePHI in workspaces or bases where Airtable AI is enabled unless specific health-related supplemental AI terms are accepted and supported. No Automated Emails with PHI: Airtable automations cannot email out records or notifications containing raw ePHI. Customer Support Limits: You cannot include patient data or ePHI in screenshots, support tickets, or chats when communicating with Airtable's Customer Support team. No Patient Portals: Airtable explicitly prohibits using its platform as a patient portal or as the underlying database/technology for one. Third-Party Integrations: Any external tools or integrations connected to your Airtable base (such as Zapier, Slack, or various APIs) must independently support HIPAA compliance and have their own BAAs in place. - **Records Only:** Electronic Protected Health Information (ePHI) and medical information must be restricted strictly to **Records** (cells) inside Airtable bases or interfaces. - **No Airtable AI:** You must **not** store or process ePHI in workspaces or bases where Airtable AI is enabled unless specific health-related supplemental AI terms are accepted and supported. - **No Automated Emails with PHI:** Airtable automations cannot email out records or notifications containing raw ePHI. - **Customer Support Limits:** You cannot include patient data or ePHI in screenshots, support tickets, or chats when communicating with Airtable's Customer Support team. - **No Patient Portals:** Airtable explicitly prohibits using its platform as a patient portal or as the underlying database/technology for one. - **Third-Party Integrations:** Any external tools or integrations connected to your Airtable base (such as Zapier, Slack, or various APIs) must independently support HIPAA compliance and have their own BAAs in place.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) ePHI and medical information must only be stored in records within Airtable bases or interfaces. do not include ePHI or medical in... If you'd like to proceed, tell me: What tier of Airtable your organization currently uses What kind of workflow or data collection you are trying to build - What **tier of Airtable** your organization currently uses - What kind of **workflow or data collection** you are trying to build I can help you evaluate whether Airtable fits your architecture or if you need an alternative setup. Requirements for HIPAA and/or CMIA Customers. Airtable automations allow users to automate workflows, including outgoing email. wi...

Airtable is HIPAA compliant **only** for users on the **Enterprise Scale plan** who sign a Business Associate Agreement (BAA) via Airtable's Health Information Exhibit . Users on Free, Team, or Business plans are **not** permitted to store protected health information (PHI) on the platform.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Requirements and Plan Limits - **Plan Tier:** Restricted exclusively to [Airtable's Enterprise Scale plan](https://support.airtable.com/docs/understanding-hipaa-at-airtable). - **Legal Agreement:** Requires executing a formal BAA/Health Information Exhibit with Airtable. - **Lower Tiers:** Prohibited from holding electronic Protected Health Information (ePHI) on lower-tier subscription plans.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.paubox.com/blog/airtable-hipaa-compliant) Usage Restrictions & Rules - **Storage Boundaries:** ePHI must be stored strictly inside standard "Records" within bases or interfaces. - **Feature Exclusions:** Do not use Airtable AI or include PHI in support tickets or customer service chats. - **Integrations & Communication:** Automated emails from automations cannot contain raw PHI, and any connected third-party tool requires its own independent BAA. - **Prohibited Uses:** The platform cannot be utilized as a patient portal.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) If you want, let me know: - Your current **Airtable plan level** - What **type of patient data** you plan to track I can help you figure out if Airtable fits your workflow or if you need an alternative setup. Airtable is HIPAA compliant only for users on the Enterprise Scale plan who sign a Business Associate Agreement (BAA) via Airtable's Health Information Exhibit. Users on Free, Team, or Business plans are not permitted to store protected health information (PHI) on the platform. A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Plan Tier: Restricted exclusively to Airtable's Enterprise Scale plan. Legal Agreement: Requires executing a formal BAA/Health Information Exhibit with Airtable. Lower Tiers: Prohibited from holding electronic Protected Health Information (ePHI) on lower-tier subscription plans. - **Plan Tier:** Restricted exclusively to [Airtable's Enterprise Scale plan](https://support.airtable.com/docs/understanding-hipaa-at-airtable). - **Legal Agreement:** Requires executing a formal BAA/Health Information Exhibit with Airtable. - **Lower Tiers:** Prohibited from holding electronic Protected Health Information (ePHI) on lower-tier subscription plans.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.paubox.com/blog/airtable-hipaa-compliant) What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are... Storage Boundaries: ePHI must be stored strictly inside standard "Records" within bases or interfaces. Feature Exclusions: Do not use Airtable AI or include PHI in support tickets or customer service chats. Integrations & Communication: Automated emails from automations cannot contain raw PHI, and any connected third-party tool requires its own independent BAA. Prohibited Uses: The platform cannot be utilized as a patient portal. - **Storage Boundaries:** ePHI must be stored strictly inside standard "Records" within bases or interfaces. - **Feature Exclusions:** Do not use Airtable AI or include PHI in support tickets or customer service chats. - **Integrations & Communication:** Automated emails from automations cannot contain raw PHI, and any connected third-party tool requires its own independent BAA. - **Prohibited Uses:** The platform cannot be utilized as a patient portal.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP... If you want, let me know:Your current Airtable plan level What type of patient data you plan to track I can help you figure out if Airtable fits your workflow or if you need an alternative setup. If you want, let me know: - Your current **Airtable plan level** - What **type of patient data** you plan to track I can help you figure out if Airtable fits your workflow or if you need an alternative setup. Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...