business-automated.com/tutorials/is-airtable-safe-security-guide

**Yes, but only under specific, strict conditions** **.** [](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) Airtable supports HIPAA compliance for qualifying organizations, but it is **not** HIPAA-compliant out of the box on standard self-service plans.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.accountablehq.com/post/airtable-hipaa-compliance-baa-security-features-and-what-to-know-in-2026) Requirements for HIPAA Compliance on Airtable 1. **Enterprise Scale Plan:** You must be subscribed to Airtable's highest-tier **Enterprise Scale** plan. HIPAA compliance features and agreements are explicitly prohibited or unavailable on Free, Team, and Business plans.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) 2. **Execute a BAA:** You must sign Airtable’s **Health Information Exhibit** , which contains their Business Associate Agreement (BAA). Without a signed BAA in place, storing Protected Health Information (PHI) on the platform violates compliance guidelines.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[3]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) 3. **Strict Configuration & Boundaries:** You must properly configure administrative controls (such as Enterprise Single Sign-On (SSO), Enterprise Key Management (EKM), Data Loss Prevention (DLP), and audit logs).[](https://www.paubox.com/blog/airtable-hipaa-compliant) [[1]](https://www.paubox.com/blog/airtable-hipaa-compliant)[[2]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[3]](https://www.knack.com/blog/hipaa-compliant-apps-knack-vs-airtable/)[[4]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-plan-requirements-and-using-airtable-for-phi) Critical Restrictions & Limitations to Keep in Mind Even with an Enterprise Scale plan and a signed BAA, Airtable enforces strict boundaries regarding where and how patient data can touch the platform (detailed further in the [Airtable Health Information Datasheet](https://www.airtable.com/company/health-info-datasheet)):[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) - **Where PHI Lives:** Electronic Protected Health Information (ePHI) may **only** be stored inside standard "Records" within Airtable bases or interfaces.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Airtable AI:** You cannot process or store PHI using Airtable AI features unless specific supplemental health information terms apply.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Customer Support:** You must never include PHI or medical data in screenshots, support tickets, or communications with Airtable’s customer support team.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Automations & Emails:** You cannot use automated functions to email records if those records contain PHI.[[1]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) - **No Patient Portals:** Airtable explicitly prohibits using their platform as a patient portal or as the underlying technology for one.[[1]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) - **Integrations:** Any third-party integration connected to your Airtable bases (such as Slack, Zapier, or external APIs) must also independently support HIPAA and be covered by its own BAA.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) If you'd like, let me know: - What **tier of Airtable plan** your organization currently uses - What **type of patient workflow or data** you are planning to build - Whether you plan to **integrate Airtable with other third-party tools** I can help you evaluate whether Airtable fits your project or if a specialized backend is a safer bet. Yes, but only under specific, strict conditions. Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... HIPAA: The Part Everyone Gets Wrong Every couple of weeks a client asks us, "Is Airtable HIPAA compliant?" The honest answer is "i... Airtable supports HIPAA compliance for qualifying organizations, but it is not HIPAA-compliant out of the box on standard self-service plans. Airtable supports HIPAA compliance for qualifying organizations, but it is **not** HIPAA-compliant out of the box on standard self-service plans.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.accountablehq.com/post/airtable-hipaa-compliance-baa-security-features-and-what-to-know-in-2026) Is HIPAA compliance available on all Airtable plans? No. HIPAA support requires an executed BAA and is generally available to ente... Requirements for HIPAA Compliance on Airtable Even with an Enterprise Scale plan and a signed BAA, Airtable enforces strict boundaries regarding where and how patient data can touch the platform (detailed further in the Airtable Health Information Datasheet ): Even with an Enterprise Scale plan and a signed BAA, Airtable enforces strict boundaries regarding where and how patient data can touch the platform (detailed further in the [Airtable Health Information Datasheet](https://www.airtable.com/company/health-info-datasheet)):[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... Where PHI Lives: Electronic Protected Health Information (ePHI) may only be stored inside standard "Records" within Airtable bases or interfaces. Airtable AI: You cannot process or store PHI using Airtable AI features unless specific supplemental health information terms apply. Customer Support: You must never include PHI or medical data in screenshots, support tickets, or communications with Airtable’s customer support team. Automations & Emails: You cannot use automated functions to email records if those records contain PHI. No Patient Portals: Airtable explicitly prohibits using their platform as a patient portal or as the underlying technology for one. Integrations: Any third-party integration connected to your Airtable bases (such as Slack, Zapier, or external APIs) must also independently support HIPAA and be covered by its own BAA. - **Where PHI Lives:** Electronic Protected Health Information (ePHI) may **only** be stored inside standard "Records" within Airtable bases or interfaces.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Airtable AI:** You cannot process or store PHI using Airtable AI features unless specific supplemental health information terms apply.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Customer Support:** You must never include PHI or medical data in screenshots, support tickets, or communications with Airtable’s customer support team.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Automations & Emails:** You cannot use automated functions to email records if those records contain PHI.[[1]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) - **No Patient Portals:** Airtable explicitly prohibits using their platform as a patient portal or as the underlying technology for one.[[1]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) - **Integrations:** Any third-party integration connected to your Airtable bases (such as Slack, Zapier, or external APIs) must also independently support HIPAA and be covered by its own BAA.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... In healthcare, Airtable has many potential uses. It could be used to keep track of appointments and consultant availability, strea... Off-load the PHI, Keep Only “Breadcrumbs” in Airtable * Shape-shift PHI into opaque IDs. Store patient details in a hardened backe... If you'd like, let me know: What tier of Airtable plan your organization currently uses What type of patient workflow or data you are planning to build Whether you plan to integrate Airtable with other third-party tools - What **tier of Airtable plan** your organization currently uses - What **type of patient workflow or data** you are planning to build - Whether you plan to **integrate Airtable with other third-party tools** I can help you evaluate whether Airtable fits your project or if a specialized backend is a safer bet. What does the Airtable BAA cover? The Airtable BAA is part of the Health Information Exhibit, which supports HIPAA compliance for ... Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP...

**Yes, Airtable can be HIPAA compliant** , but only under specific, strict conditions . It is not compliant out-of-the-box on standard self-serve plans.[](https://www.accountablehq.com/post/airtable-hipaa-compliance-baa-security-features-and-what-to-know-in-2026) [[1]](https://www.accountablehq.com/post/airtable-hipaa-compliance-baa-security-features-and-what-to-know-in-2026)[[2]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) Key Requirements for HIPAA Compliance on Airtable 1. **Enterprise Scale Plan Required** : Airtable only supports HIPAA compliance for customers on its **Enterprise Scale plan** . If you are on the Free, Team, or Business plans, storing electronic Protected Health Information (ePHI) violates Airtable's terms.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) 2. **Execute a Business Associate Agreement (BAA)** : You must formally execute Airtable's **Health Information Exhibit** , which includes their BAA. Without a signed BAA in place, the platform is not considered compliant for medical or patient data.[](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) [[1]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[2]](https://www.complysaas.com/compliance/airtable)[[3]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) 3. **Strict Boundary and Configuration Rules** : Even with a BAA and the Enterprise plan, Airtable enforces rigid operational boundaries outlined in their Airtable Health Information Datasheet: - **Where PHI Lives** : ePHI must only be stored inside record cells within designated Airtable bases or interfaces. - **Airtable AI** : Do not store ePHI in workspaces where Airtable AI is enabled unless you have specifically agreed to the Supplemental AI Terms for Health Information. - **No Patient Portals** : Airtable explicitly states the platform should **not** be used as a patient portal. - **Automations & Emails** : Be cautious with automations that send outgoing emails, as transmitting ePHI improperly outside secure confines breaks compliance. - **Customer Support** : You must never include ePHI or medical information in support tickets or screenshots sent to Airtable support. - **Integrations** : Any third-party tool connected to Airtable (like Zapier, Slack, or custom APIs) must also be HIPAA-compliant and covered by its own BAA.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.accountablehq.com/post/common-low-level-hipaa-security-rule-violations-examples-risks-and-fixes) If you'd like to proceed, tell me: - What **tier of Airtable** your organization currently uses - Whether you plan to **integrate Airtable** with other external apps or tools I can help you evaluate your **workflow architecture** for patient data. Yes, Airtable can be HIPAA compliant, but only under specific, strict conditions. It is not compliant out-of-the-box on standard self-serve plans. Is HIPAA compliance available on all Airtable plans? No. HIPAA support requires an executed BAA and is generally available to ente... HIPAA: The Part Everyone Gets Wrong Every couple of weeks a client asks us, "Is Airtable HIPAA compliant?" The honest answer is "i... If you'd like to proceed, tell me: What tier of Airtable your organization currently uses Whether you plan to integrate Airtable with other external apps or tools - What **tier of Airtable** your organization currently uses - Whether you plan to **integrate Airtable** with other external apps or tools I can help you evaluate your workflow architecture for patient data. I can help you evaluate your **workflow architecture** for patient data. Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP... HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... HIPAA, BAA, and SOC 2 summary ... Airtable states that HIPAA support is available on Enterprise Scale and that customers intending...

**Yes, but only under strict conditions.** Airtable supports HIPAA compliance for organizations that meet specific plan and configuration requirements.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/)[[3]](https://community.airtable.com/announcements-6/airtable-is-now-hipaa-compliant-1542)[[4]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) Key Requirements for HIPAA Compliance in Airtable - **Enterprise Scale Plan:** HIPAA support and the ability to sign a Business Associate Agreement (BAA) are restricted exclusively to customers on Airtable's **Enterprise Scale** tier. Standard, Team, and Business plans are **not** HIPAA compliant and prohibit storing electronic Protected Health Information (ePHI).[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Signed Health Information Exhibit (BAA):** You must execute Airtable's official Health Information Exhibit, which contains their Business Associate Addendum, before introducing any patient data or PHI into the platform.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Enterprise Controls:** Proper setup requires leveraging enterprise-grade features such as Enterprise Key Management (EKM) for customer-managed encryption, Enterprise Single Sign-On (SSO), Data Loss Prevention (DLP), and Audit Logs.[](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) [[1]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[2]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) Strict Operational Boundaries & Limitations Even with a signed BAA and an Enterprise Scale plan, Airtable enforces tight operational rules regarding where patient data can live:[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.techrepublic.com/article/airtable-alternatives/)[[2]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) - **Records Only:** ePHI must only be stored inside standard **Records** (cells) within Airtable bases or interfaces. It cannot be placed in un-scoped metadata, comments, or general workspace text fields.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.airtable.com/company/health-info-datasheet) - **No Automated PHI Emails:** You cannot configure Airtable automations to send out emails containing actual PHI.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **No Airtable AI with PHI:** Airtable AI features sit completely outside the HIPAA compliance boundary unless specifically covered by supplemental health terms—standard practice is to ensure AI is disabled in workspaces handling patient data.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Support Ticket Restrictions:** You must never include screenshots or text containing actual ePHI when communicating with Airtable's digital or verbal customer support team.[](https://www.airtable.com/company/health-info-datasheet) - **No Patient Portals:** Airtable cannot be used as—or as the underlying tech stack for—a patient-facing portal.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Third-Party Integrations:** Any external tools or integrations connected to your Airtable base (such as Zapier, Slack, or Google Workspace) must also be HIPAA-compliant and covered by their own separate BAAs.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) If you'd like, let me know: - What **tier of Airtable** your organization currently uses - What **specific workflows or data** (e.g., internal tracking vs. integrations) you plan to build I can help you evaluate whether Airtable fits your use case or if you need alternative architectures. Yes, but only under strict conditions. Airtable supports HIPAA compliance for organizations that meet specific plan and configuration requirements. Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... In healthcare, Airtable has many potential uses. It could be used to keep track of appointments and consultant availability, strea... * 🩺📈 Exciting news for healthcare providers and organizations! Airtable is now HIPAA compliant and ready to support your critica... HIPAA: The Part Everyone Gets Wrong Every couple of weeks a client asks us, "Is Airtable HIPAA compliant?" The honest answer is "i... Enterprise Scale Plan: HIPAA support and the ability to sign a Business Associate Agreement (BAA) are restricted exclusively to customers on Airtable's Enterprise Scale tier. Standard, Team, and Business plans are not HIPAA compliant and prohibit storing electronic Protected Health Information (ePHI). Signed Health Information Exhibit (BAA): You must execute Airtable's official Health Information Exhibit, which contains their Business Associate Addendum, before introducing any patient data or PHI into the platform. Enterprise Controls: Proper setup requires leveraging enterprise-grade features such as Enterprise Key Management (EKM) for customer-managed encryption, Enterprise Single Sign-On (SSO), Data Loss Prevention (DLP), and Audit Logs. - **Enterprise Scale Plan:** HIPAA support and the ability to sign a Business Associate Agreement (BAA) are restricted exclusively to customers on Airtable's **Enterprise Scale** tier. Standard, Team, and Business plans are **not** HIPAA compliant and prohibit storing electronic Protected Health Information (ePHI).[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Signed Health Information Exhibit (BAA):** You must execute Airtable's official Health Information Exhibit, which contains their Business Associate Addendum, before introducing any patient data or PHI into the platform.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Enterprise Controls:** Proper setup requires leveraging enterprise-grade features such as Enterprise Key Management (EKM) for customer-managed encryption, Enterprise Single Sign-On (SSO), Data Loss Prevention (DLP), and Audit Logs.[](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) [[1]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[2]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP... Even with a signed BAA and an Enterprise Scale plan, Airtable enforces tight operational rules regarding where patient data can live: Even with a signed BAA and an Enterprise Scale plan, Airtable enforces tight operational rules regarding where patient data can live:[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.techrepublic.com/article/airtable-alternatives/)[[2]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) Airtable can be HIPAA compliant, but this is only available under its Enterprise Scale plan. For Airtable to be HIPAA compliant, u... Off-load the PHI, Keep Only “Breadcrumbs” in Airtable * Shape-shift PHI into opaque IDs. Store patient details in a hardened backe... Records Only: ePHI must only be stored inside standard Records (cells) within Airtable bases or interfaces. It cannot be placed in un-scoped metadata, comments, or general workspace text fields. No Automated PHI Emails: You cannot configure Airtable automations to send out emails containing actual PHI. No Airtable AI with PHI: Airtable AI features sit completely outside the HIPAA compliance boundary unless specifically covered by supplemental health terms—standard practice is to ensure AI is disabled in workspaces handling patient data. Support Ticket Restrictions: You must never include screenshots or text containing actual ePHI when communicating with Airtable's digital or verbal customer support team. No Patient Portals: Airtable cannot be used as—or as the underlying tech stack for—a patient-facing portal. Third-Party Integrations: Any external tools or integrations connected to your Airtable base (such as Zapier, Slack, or Google Workspace) must also be HIPAA-compliant and covered by their own separate BAAs. - **Records Only:** ePHI must only be stored inside standard **Records** (cells) within Airtable bases or interfaces. It cannot be placed in un-scoped metadata, comments, or general workspace text fields.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.airtable.com/company/health-info-datasheet) - **No Automated PHI Emails:** You cannot configure Airtable automations to send out emails containing actual PHI.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **No Airtable AI with PHI:** Airtable AI features sit completely outside the HIPAA compliance boundary unless specifically covered by supplemental health terms—standard practice is to ensure AI is disabled in workspaces handling patient data.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Support Ticket Restrictions:** You must never include screenshots or text containing actual ePHI when communicating with Airtable's digital or verbal customer support team.[](https://www.airtable.com/company/health-info-datasheet) - **No Patient Portals:** Airtable cannot be used as—or as the underlying tech stack for—a patient-facing portal.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Third-Party Integrations:** Any external tools or integrations connected to your Airtable base (such as Zapier, Slack, or Google Workspace) must also be HIPAA-compliant and covered by their own separate BAAs.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... If you'd like, let me know: What tier of Airtable your organization currently uses What specific workflows or data (e.g., internal tracking vs. integrations) you plan to build - What **tier of Airtable** your organization currently uses - What **specific workflows or data** (e.g., internal tracking vs. integrations) you plan to build I can help you evaluate whether Airtable fits your use case or if you need alternative architectures.

**Yes, but strictly under specific conditions.** Airtable supports HIPAA compliance, but it is **not** compliant out-of-the-box on standard plans.[](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) [[1]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) Key Requirements for HIPAA Compliance on Airtable 1. **Enterprise Scale Plan:** HIPAA support is locked exclusively behind Airtable's highest-tier **Enterprise Scale** plan. It is prohibited to store electronic Protected Health Information (ePHI) on Free, Team, or Business plans.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) 2. **Signed Business Associate Agreement (BAA):** You must execute Airtable's **Health Information Exhibit** , which contains their formal BAA. Without this contract in place, storing patient data violates HIPAA.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) 3. **Enterprise Security Features:** Your organization must properly configure and maintain administrative and technical safeguards like Enterprise Single Sign-On (SSO), Audit Logs, Data Loss Prevention (DLP), and Enterprise Key Management (EKM).[](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) [[1]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) Strict Boundaries and Restrictions Even with a signed BAA and an Enterprise Scale plan, Airtable enforces hard operational rules regarding patient data outlined in their Airtable Health Information Datasheet:[[1]](https://www.reddit.com/r/Airtable/comments/d9btne/was_about_to_use_airtable_but_no_hipaa_compliant/)[[2]](https://www.facebook.com/KnackHQ/posts/airtable-is-great-until-it-is-patient-dataon-standard-plans-there-is-no-baa-the-/1661739832624383/) - **Storage Location:** ePHI and medical data must **only** be stored within individual records inside Airtable bases or interfaces. It cannot reside in comments, general metadata, or unapproved fields.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) - **Airtable AI:** AI features and agents are **excluded** from HIPAA coverage. You must not store or process ePHI in workspaces where Airtable AI is enabled (unless explicit supplemental health terms apply, though general policy restricts it).[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.knack.com/blog/hipaa-compliance-checklist-no-code/) - **Automations & Email:** You cannot use automated Airtable functions to email records containing PHI.[[1]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) - **Customer Support:** You must never include screenshots or text containing actual ePHI when opening support tickets or talking to Airtable customer service.[](https://www.airtable.com/company/health-info-datasheet) - **No Patient Portals:** Airtable explicitly prohibits using their platform as a patient portal or the direct technology backend for one.[](https://www.airtable.com/company/health-info-datasheet) - **Integrations:** Any third-party tools connected to your Airtable instance (such as Zapier, Slack, or Google Workspace) must also be HIPAA-compliant and covered under separate BAAs.[](https://www.airtable.com/company/health-info-datasheet) If you're planning a project, let me know: - What kind of **healthcare workflow or data** you plan to track - Whether you are already on an **Airtable Enterprise plan** I can help you evaluate if Airtable fits your use case or if a dedicated clinical backend is a better choice. Yes, but strictly under specific conditions. Airtable supports HIPAA compliance, but it is not compliant out-of-the-box on standard plans. HIPAA: The Part Everyone Gets Wrong Every couple of weeks a client asks us, "Is Airtable HIPAA compliant?" The honest answer is "i... Key Requirements for HIPAA Compliance on Airtable Even with a signed BAA and an Enterprise Scale plan, Airtable enforces hard operational rules regarding patient data outlined in their Airtable Health Information Datasheet : Even with a signed BAA and an Enterprise Scale plan, Airtable enforces hard operational rules regarding patient data outlined in their Airtable Health Information Datasheet:[[1]](https://www.reddit.com/r/Airtable/comments/d9btne/was_about_to_use_airtable_but_no_hipaa_compliant/)[[2]](https://www.facebook.com/KnackHQ/posts/airtable-is-great-until-it-is-patient-dataon-standard-plans-there-is-no-baa-the-/1661739832624383/) smartsheet? ill check it out... seems pricey in comparison though, you are right. ... Yeah, that's been a dealbreaker for a lot of... Airtable is great, until it is patient data. On standard plans there is no BAA. The HIPAA add-on is enterprise-only, and even then... HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... Storage Location: ePHI and medical data must only be stored within individual records inside Airtable bases or interfaces. It cannot reside in comments, general metadata, or unapproved fields. Airtable AI: AI features and agents are excluded from HIPAA coverage. You must not store or process ePHI in workspaces where Airtable AI is enabled (unless explicit supplemental health terms apply, though general policy restricts it). Automations & Email: You cannot use automated Airtable functions to email records containing PHI. Customer Support: You must never include screenshots or text containing actual ePHI when opening support tickets or talking to Airtable customer service. No Patient Portals: Airtable explicitly prohibits using their platform as a patient portal or the direct technology backend for one. Integrations: Any third-party tools connected to your Airtable instance (such as Zapier, Slack, or Google Workspace) must also be HIPAA-compliant and covered under separate BAAs. - **Storage Location:** ePHI and medical data must **only** be stored within individual records inside Airtable bases or interfaces. It cannot reside in comments, general metadata, or unapproved fields.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) - **Airtable AI:** AI features and agents are **excluded** from HIPAA coverage. You must not store or process ePHI in workspaces where Airtable AI is enabled (unless explicit supplemental health terms apply, though general policy restricts it).[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.knack.com/blog/hipaa-compliance-checklist-no-code/) - **Automations & Email:** You cannot use automated Airtable functions to email records containing PHI.[[1]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) - **Customer Support:** You must never include screenshots or text containing actual ePHI when opening support tickets or talking to Airtable customer service.[](https://www.airtable.com/company/health-info-datasheet) - **No Patient Portals:** Airtable explicitly prohibits using their platform as a patient portal or the direct technology backend for one.[](https://www.airtable.com/company/health-info-datasheet) - **Integrations:** Any third-party tools connected to your Airtable instance (such as Zapier, Slack, or Google Workspace) must also be HIPAA-compliant and covered under separate BAAs.[](https://www.airtable.com/company/health-info-datasheet) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Off-load the PHI, Keep Only “Breadcrumbs” in Airtable * Shape-shift PHI into opaque IDs. Store patient details in a hardened backe... Do AI features in no-code platforms need to be HIPAA-compliant separately? Yes, and importantly, this is one of the most commonly ... Airtable is a customizable business management platform with automation capabilities that helps organizations better manage data b... If you're planning a project, let me know: What kind of healthcare workflow or data you plan to track Whether you are already on an Airtable Enterprise plan - What kind of **healthcare workflow or data** you plan to track - Whether you are already on an **Airtable Enterprise plan** I can help you evaluate if Airtable fits your use case or if a dedicated clinical backend is a better choice. Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP...

Airtable is **not** HIPAA compliant by default , and they generally **do not sign a Business Associate Agreement (BAA)** for standard workspace plans.[[1]](https://www.blaze.tech/post/airtable-review)[[2]](https://www.makeitfuture.com/blog/compare-airtable-seatable)[[3]](https://nira.com/airtable-security/) According to Airtable's official documentation and security guidelines, you cannot use their standard or enterprise plans to store Protected Health Information (PHI) because they do not officially support HIPAA compliance or execute BAAs for regular accounts.[[1]](https://www.knack.com/blog/hipaa-compliant-apps-knack-vs-airtable/)[[2]](https://emitrr.com/blog/hipaa-compliant-online-scheduling-software/)[[3]](https://www.techrepublic.com/article/airtable-alternatives/)[[4]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) What You Need to Know - **Business Associate Agreement (BAA):** Under HIPAA law, a cloud vendor holding PHI must sign a BAA. Airtable does not offer this for typical setups.[[1]](https://www.accountablehq.com/post/hipaa-compliant-cloud-storage-solutions)[[2]](https://tadabase.io/blog/airtable-vs-caspio) - **Security Controls:** While Airtable has enterprise-grade security features (like access controls and encryption at rest), lacking the signed BAA means using it for patient medical records violates HIPAA regulations.[[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.smartsuite.com/blog/airtable-review)[[3]](https://nira.com/airtable-security/)[[4]](https://www.smartsuite.com/blog/airtable-pricing?338ea48f_page=8)[[5]](https://www.360training.com/blog/what-are-the-5-main-HIPAA-rules) - **Alternatives:** If you need a no-code database builder that *is* HIPAA compliant and will sign a BAA, you should look into platforms specifically built or configured for healthcare compliance, such as GoFormz or custom database solutions hosted on HIPAA-compliant cloud infrastructure (like AWS or Google Cloud with signed BAAs).[[1]](https://www.accountablehq.com/post/is-google-sheets-hipaa-compliant) If you'd like, I can: - List **specific no-code platforms** that do sign BAAs for healthcare data. - Help you figure out **alternative workflows** for handling intake forms or patient data securely. Let me know how you'd like to proceed! Airtable is not HIPAA compliant by default, and they generally do not sign a Business Associate Agreement (BAA) for standard workspace plans. Airtable isn't inherently HIPAA compliant — but it can be configured to meet HIPAA standards. Airtable states it is not a HIPAA compliant service and does not sign BAAs. GDPR focused, SSO, audit logging, and full control ove... Lots of organizations in the healthcare field and medical industry use Airtable to manage business processes, workflows, research, According to Airtable's official documentation and security guidelines, you cannot use their standard or enterprise plans to store Protected Health Information (PHI) because they do not officially support HIPAA compliance or execute BAAs for regular accounts. For instance, its ( Airtable ) access controls and user roles are not granular enough to protect regulated healthcare data, and it... Ans: Generally, no, they do not support a BAA, do not offer strong encryption of PHI, and do not offer audit logging. Therefore, t... For Airtable to be HIPAA compliant, users must sign a Business Associate Addendum (BAA) with Airtable. This ensures that Airtable ... Airtable's HIPAA and FERPA compliance documentation covers the specifics. The key takeaway: a default Airtable account is not HIPA... Business Associate Agreement (BAA): Under HIPAA law, a cloud vendor holding PHI must sign a BAA. Airtable does not offer this for typical setups. Security Controls: While Airtable has enterprise-grade security features (like access controls and encryption at rest), lacking the signed BAA means using it for patient medical records violates HIPAA regulations. Alternatives: If you need a no-code database builder that is HIPAA compliant and will sign a BAA, you should look into platforms specifically built or configured for healthcare compliance, such as GoFormz or custom database solutions hosted on HIPAA-compliant cloud infrastructure (like AWS or Google Cloud with signed BAAs). - **Business Associate Agreement (BAA):** Under HIPAA law, a cloud vendor holding PHI must sign a BAA. Airtable does not offer this for typical setups.[[1]](https://www.accountablehq.com/post/hipaa-compliant-cloud-storage-solutions)[[2]](https://tadabase.io/blog/airtable-vs-caspio) - **Security Controls:** While Airtable has enterprise-grade security features (like access controls and encryption at rest), lacking the signed BAA means using it for patient medical records violates HIPAA regulations.[[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.smartsuite.com/blog/airtable-review)[[3]](https://nira.com/airtable-security/)[[4]](https://www.smartsuite.com/blog/airtable-pricing?338ea48f_page=8)[[5]](https://www.360training.com/blog/what-are-the-5-main-HIPAA-rules) - **Alternatives:** If you need a no-code database builder that *is* HIPAA compliant and will sign a BAA, you should look into platforms specifically built or configured for healthcare compliance, such as GoFormz or custom database solutions hosted on HIPAA-compliant cloud infrastructure (like AWS or Google Cloud with signed BAAs).[[1]](https://www.accountablehq.com/post/is-google-sheets-hipaa-compliant) Sign a Cloud Provider BAA: Always execute a cloud provider BAA (Business Associate Agreement) with any vendor that stores, transmi... Is Airtable HIPAA compliant? No, not by default. Only some features with enterprise plans. Available as an add-on for Enterprise Scale customers. For additional information on EKM, please see here. Data transmitted betwee... To access Airtable's advanced security measures, you'd need to be on their Business or Enterprise Scale plans. Airtable: Enterprise Scale Plan For enterprises, Airtable's enterprise-scale plan offers higher administration control, premium an... Healthcare providers are obligated to transmit patient information through authorized channels. Staff members are prohibited from ... Custom HIPAA-Compliant Databases: For organizations with unique needs, developing a custom database solution on platforms like Ama... If you'd like, I can: List specific no-code platforms that do sign BAAs for healthcare data. Help you figure out alternative workflows for handling intake forms or patient data securely. - List **specific no-code platforms** that do sign BAAs for healthcare data. - Help you figure out **alternative workflows** for handling intake forms or patient data securely. Let me know how you'd like to proceed!

**Yes, Airtable can be HIPAA compliant** , but only under very specific conditions, plan tiers, and strict configuration rules.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) 1. Plan Requirement: Enterprise Scale Only Airtable supports HIPAA compliance **only** for customers on the **Enterprise Scale plan**.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - If you are on a **Free, Team, or Business plan** , you are **not** permitted to store Electronic Protected Health Information (ePHI) under any circumstances.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) - To enable HIPAA compliance, Enterprise organizations must execute Airtable's **Health Information Exhibit** , which includes a formal **Business Associate Agreement (BAA)**.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.complysaas.com/compliance/airtable) 2. Strict Boundary Rules for PHI Even with an Enterprise Scale plan and a signed BAA, Airtable enforces rigid boundaries on where and how patient data can live within the platform:[[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) - **In-Scope:** ePHI and medical information may only be stored directly inside **Records within Airtable bases or interfaces**.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Out-of-Scope / Prohibited:** - **Airtable AI:** AI features are completely excluded from the BAA. You must ensure Airtable AI is disabled in any workspace handling PHI. - **Automations & Email:** Outgoing emails triggered by Airtable automations **cannot** contain PHI. - **Customer Support:** You must never include PHI in screenshots, support tickets, or chats with Airtable support. - **Patient Portals:** Airtable explicitly states the platform **cannot** be used as a patient portal.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) 3. Shared Responsibility and Integrations Achieving compliance is a shared-responsibility model. While Airtable provides the necessary technical safeguards (such as Enterprise Key Management, audit logs, SSO, and data loss prevention), **you** are responsible for proper configuration:[](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) [[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[2]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[3]](https://www.blaze.tech/post/is-airtable-hipaa-compliant)[[4]](https://community.airtable.com/announcements-6/airtable-is-now-hipaa-compliant-1542) - Enforcing role-based access controls and the "minimum necessary" standard. - Ensuring any third-party integrations connected to Airtable (like Zapier, Slack, or external APIs) are also HIPAA-compliant and covered under their own BAAs. - Restricting view links and collaborator permissions so unauthorized users cannot access sensitive records.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[2]](https://www.accountablehq.com/post/airtable-hipaa-compliance-baa-security-features-and-what-to-know-in-2026)[[3]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) If you'd like to share **your current Airtable plan** or **what kind of workflow or data** you are hoping to build, I can help you determine the right architectural approach or alternatives. Yes, Airtable can be HIPAA compliant, but only under very specific conditions, plan tiers, and strict configuration rules. Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Airtable is a customizable business management platform with automation capabilities that helps organizations better manage data b... Airtable supports HIPAA compliance only for customers on the Enterprise Scale plan. Airtable supports HIPAA compliance **only** for customers on the **Enterprise Scale plan**.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) If you are on a Free, Team, or Business plan, you are not permitted to store Electronic Protected Health Information (ePHI) under any circumstances. To enable HIPAA compliance, Enterprise organizations must execute Airtable's Health Information Exhibit, which includes a formal Business Associate Agreement (BAA). - If you are on a **Free, Team, or Business plan** , you are **not** permitted to store Electronic Protected Health Information (ePHI) under any circumstances.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) - To enable HIPAA compliance, Enterprise organizations must execute Airtable's **Health Information Exhibit** , which includes a formal **Business Associate Agreement (BAA)**.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.complysaas.com/compliance/airtable) Key takeaways * Airtable HIPAA support is available only on the Enterprise Scale plan. Free, Team, and Business plan customers can... HIPAA, BAA, and SOC 2 summary ... Airtable states that HIPAA support is available on Enterprise Scale and that customers intending... Even with an Enterprise Scale plan and a signed BAA, Airtable enforces rigid boundaries on where and how patient data can live within the platform: Even with an Enterprise Scale plan and a signed BAA, Airtable enforces rigid boundaries on where and how patient data can live within the platform:[[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... In-Scope: ePHI and medical information may only be stored directly inside Records within Airtable bases or interfaces. Out-of-Scope / Prohibited:Airtable AI: AI features are completely excluded from the BAA. You must ensure Airtable AI is disabled in any workspace handling PHI. Automations & Email: Outgoing emails triggered by Airtable automations cannot contain PHI. Customer Support: You must never include PHI in screenshots, support tickets, or chats with Airtable support. Patient Portals: Airtable explicitly states the platform cannot be used as a patient portal. Airtable AI: AI features are completely excluded from the BAA. You must ensure Airtable AI is disabled in any workspace handling PHI. Automations & Email: Outgoing emails triggered by Airtable automations cannot contain PHI. Customer Support: You must never include PHI in screenshots, support tickets, or chats with Airtable support. Patient Portals: Airtable explicitly states the platform cannot be used as a patient portal. - **In-Scope:** ePHI and medical information may only be stored directly inside **Records within Airtable bases or interfaces**.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Out-of-Scope / Prohibited:** - **Airtable AI:** AI features are completely excluded from the BAA. You must ensure Airtable AI is disabled in any workspace handling PHI. - **Automations & Email:** Outgoing emails triggered by Airtable automations **cannot** contain PHI. - **Customer Support:** You must never include PHI in screenshots, support tickets, or chats with Airtable support. - **Patient Portals:** Airtable explicitly states the platform **cannot** be used as a patient portal.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Achieving compliance is a shared-responsibility model. While Airtable provides the necessary technical safeguards (such as Enterprise Key Management, audit logs, SSO, and data loss prevention), you are responsible for proper configuration: Achieving compliance is a shared-responsibility model. While Airtable provides the necessary technical safeguards (such as Enterprise Key Management, audit logs, SSO, and data loss prevention), **you** are responsible for proper configuration:[](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) [[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[2]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[3]](https://www.blaze.tech/post/is-airtable-hipaa-compliant)[[4]](https://community.airtable.com/announcements-6/airtable-is-now-hipaa-compliant-1542) Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP... How to Ensure Airtable Complies with HIPAA Regulation. To make sure your use of Airtable aligns with HIPAA regulations, follow the... * 🩺📈 Exciting news for healthcare providers and organizations! Airtable is now HIPAA compliant and ready to support your critica... Enforcing role-based access controls and the "minimum necessary" standard. Ensuring any third-party integrations connected to Airtable (like Zapier, Slack, or external APIs) are also HIPAA-compliant and covered under their own BAAs. Restricting view links and collaborator permissions so unauthorized users cannot access sensitive records. - Enforcing role-based access controls and the "minimum necessary" standard. - Ensuring any third-party integrations connected to Airtable (like Zapier, Slack, or external APIs) are also HIPAA-compliant and covered under their own BAAs. - Restricting view links and collaborator permissions so unauthorized users cannot access sensitive records.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[2]](https://www.accountablehq.com/post/airtable-hipaa-compliance-baa-security-features-and-what-to-know-in-2026)[[3]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) Off-load the PHI, Keep Only “Breadcrumbs” in Airtable * Shape-shift PHI into opaque IDs. Store patient details in a hardened backe... HIPAA Compliance Requirements for ePHI * Risk analysis and risk management tailored to Airtable data flows and integrations. * Rol... Should You Trust Airtable With Sensitive Data? Our answer, after building hundreds of client Airtable systems: yes, with appropria... If you'd like to share your current Airtable plan or what kind of workflow or data you are hoping to build, I can help you determine the right architectural approach or alternatives. If you'd like to share **your current Airtable plan** or **what kind of workflow or data** you are hoping to build, I can help you determine the right architectural approach or alternatives.

**Yes, Airtable can be HIPAA compliant** , but only under strict, specific conditions . It is not compliant out of the box for standard or lower-tier plans.[](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/)[[2]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) The Core Requirements for HIPAA on Airtable 1. **Enterprise Scale Plan Required:** HIPAA compliance support and the ability to sign a Business Associate Agreement (BAA) are restricted exclusively to customers on Airtable's **Enterprise Scale** plan. If you are on the Free, Team, or Business plans, storing Protected Health Information (PHI) violates Airtable's terms.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) 2. **Execute a BAA:** You must work with an Airtable account executive to sign their Health Information Exhibit, which contains the formal **Business Associate Addendum (BAA)**.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) 3. **Admin Panel Activation:** Once contracted, an administrator must explicitly enable HIPAA compliance for the organization or specific organizational units via the [Airtable Admin Panel](https://support.airtable.com/docs/understanding-hipaa-at-airtable).[[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://support.airtable.com/docs/understanding-hipaa-at-airtable) Critical Restrictions & Boundaries Even with an active BAA and an Enterprise plan, Airtable enforces strict boundary rules outlined in their [Airtable Health Information Datasheet](https://www.airtable.com/company/health-info-datasheet):[[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Where PHI can live:** Electronic Protected Health Information (ePHI) may **only** be stored within records inside Airtable bases or interfaces. - **Airtable AI:** AI features are completely excluded from the BAA coverage. You must not store ePHI in workspaces where Airtable AI is active (unless under specific supplemental health terms, though it is generally restricted). - **Automations & Emails:** Automated outgoing emails sent directly through Airtable automations **cannot** contain PHI. - **Customer Support:** You must never include ePHI or medical details in screenshots, support tickets, or chats when communicating with Airtable support. - **No Patient Portals:** Airtable cannot be used as a patient-facing portal or direct medical interface for patients. - **Third-Party Integrations:** Any tool you connect to Airtable (such as Zapier, Slack, or custom APIs) must also be HIPAA-compliant and covered by its own separate BAA.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) If you're planning a setup, tell me: - What **tier of Airtable** your organization currently uses - What **kind of patient data** or workflow you are trying to build I can help you evaluate whether Airtable fits your project or if a specialized backend is a safer choice. Yes, Airtable can be HIPAA compliant, but only under strict, specific conditions. It is not compliant out of the box for standard or lower-tier plans. Key takeaways * Airtable HIPAA support is available only on the Enterprise Scale plan. Free, Team, and Business plan customers can... Every couple of weeks a client asks us, "Is Airtable HIPAA compliant?" The honest answer is "it depends on the configuration, and ... The Core Requirements for HIPAA on Airtable Even with an active BAA and an Enterprise plan, Airtable enforces strict boundary rules outlined in their Airtable Health Information Datasheet : Even with an active BAA and an Enterprise plan, Airtable enforces strict boundary rules outlined in their [Airtable Health Information Datasheet](https://www.airtable.com/company/health-info-datasheet):[[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Airtable's terms prohibit storing ePHI on the Free, Team, and Business plans, so anyone below Enterprise Scale should keep treatin... Where PHI can live: Electronic Protected Health Information (ePHI) may only be stored within records inside Airtable bases or interfaces. Airtable AI: AI features are completely excluded from the BAA coverage. You must not store ePHI in workspaces where Airtable AI is active (unless under specific supplemental health terms, though it is generally restricted). Automations & Emails: Automated outgoing emails sent directly through Airtable automations cannot contain PHI. Customer Support: You must never include ePHI or medical details in screenshots, support tickets, or chats when communicating with Airtable support. No Patient Portals: Airtable cannot be used as a patient-facing portal or direct medical interface for patients. Third-Party Integrations: Any tool you connect to Airtable (such as Zapier, Slack, or custom APIs) must also be HIPAA-compliant and covered by its own separate BAA. - **Where PHI can live:** Electronic Protected Health Information (ePHI) may **only** be stored within records inside Airtable bases or interfaces. - **Airtable AI:** AI features are completely excluded from the BAA coverage. You must not store ePHI in workspaces where Airtable AI is active (unless under specific supplemental health terms, though it is generally restricted). - **Automations & Emails:** Automated outgoing emails sent directly through Airtable automations **cannot** contain PHI. - **Customer Support:** You must never include ePHI or medical details in screenshots, support tickets, or chats when communicating with Airtable support. - **No Patient Portals:** Airtable cannot be used as a patient-facing portal or direct medical interface for patients. - **Third-Party Integrations:** Any tool you connect to Airtable (such as Zapier, Slack, or custom APIs) must also be HIPAA-compliant and covered by its own separate BAA.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) If you're planning a setup, tell me: What tier of Airtable your organization currently uses What kind of patient data or workflow you are trying to build - What **tier of Airtable** your organization currently uses - What **kind of patient data** or workflow you are trying to build I can help you evaluate whether Airtable fits your project or if a specialized backend is a safer choice. Identifying HIPAA compliance at your org * Navigate to admin panel (opens in new tab). * Click the Settings option on the left sid... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu...