community.airtable.com/announcements-6/airtable-is-now-hipaa-compliant-1542

Yes, Airtable can be HIPAA compliant, but only for **Enterprise Scale** plan subscribers who sign a **Business Associate Agreement (BAA)** via Airtable 's Health Information Exhibit . It is not compliant on lower tiers (Free, Team, or Business), and storing protected health information (PHI) there violates their terms.[](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Requirements for Compliance - **Enterprise Scale Plan:** You must upgrade to Airtable 's highest organizational tier. - **Signed BAA:** You must formally execute the [Airtable Health Information Exhibit](https://www.airtable.com/company/hipaa-airtable) containing the BAA. - **Security Controls:** You must properly configure enterprise controls like SAML SSO, audit logs, and access permissions.[](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[3]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[4]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) Usage Restrictions - **Data Location:** ePHI must only be stored within records inside bases or interfaces. - **Exclusions:** Do not use Airtable AI or include PHI in customer support tickets. - **Integrations:** Third-party add-ons and automated outgoing emails must also maintain independent HIPAA compliance.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) If you'd like, let me know: - Your current **Airtable plan level** - What **type of patient data** you plan to track I can help you review your workflow constraints or alternative options. Yes, Airtable can be HIPAA compliant, but only for Enterprise Scale plan subscribers who sign a Business Associate Agreement (BAA) via Airtable 's Health Information Exhibit. It is not compliant on lower tiers (Free, Team, or Business), and storing protected health information (PHI) there violates their terms. A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Enterprise Scale Plan: You must upgrade to Airtable 's highest organizational tier. Signed BAA: You must formally execute the Airtable Health Information Exhibit containing the BAA. Security Controls: You must properly configure enterprise controls like SAML SSO, audit logs, and access permissions. - **Enterprise Scale Plan:** You must upgrade to Airtable 's highest organizational tier. - **Signed BAA:** You must formally execute the [Airtable Health Information Exhibit](https://www.airtable.com/company/hipaa-airtable) containing the BAA. - **Security Controls:** You must properly configure enterprise controls like SAML SSO, audit logs, and access permissions.[](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[3]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[4]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... Is Airtable Technically HIPAA-Compliant? * Enterprise-only paywall. HIPAA support didn't exist until April 2024 and is still gated... Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP... Data Location: ePHI must only be stored within records inside bases or interfaces. Exclusions: Do not use Airtable AI or include PHI in customer support tickets. Integrations: Third-party add-ons and automated outgoing emails must also maintain independent HIPAA compliance. - **Data Location:** ePHI must only be stored within records inside bases or interfaces. - **Exclusions:** Do not use Airtable AI or include PHI in customer support tickets. - **Integrations:** Third-party add-ons and automated outgoing emails must also maintain independent HIPAA compliance.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... In healthcare, Airtable has many potential uses. It could be used to keep track of appointments and consultant availability, strea... If you'd like, let me know:Your current Airtable plan level What type of patient data you plan to track I can help you review your workflow constraints or alternative options. If you'd like, let me know: - Your current **Airtable plan level** - What **type of patient data** you plan to track I can help you review your workflow constraints or alternative options. Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Airtable is HIPAA compliant **only** for customers on the highest-tier **Enterprise Scale** plan who sign a formal **Business Associate Agreement (BAA)** via Airtable's Health Information Exhibit . Users on Free, Team, or Business plans are strictly prohibited from storing protected health information (PHI).[](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[3]](https://www.paubox.com/blog/airtable-hipaa-compliant)Requirements and Limitations - **Plan Tier:** Gated exclusively behind the [Airtable Enterprise Scale](https://www.airtable.com/company/hipaa-airtable) plan. - **BAA Signature:** Must execute Airtable's Health Information Exhibit containing the BAA. - **Storage Rules:** ePHI must remain strictly inside record cells within bases or interfaces. - **Excluded Features:** Do not use Airtable AI, patient portals, or include PHI in customer support tickets. - **Integrations:** Third-party app connections and external automations (like outgoing emails) must independently meet HIPAA rules.[](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) If you'd like, let me know: - Your current **Airtable plan** - What kind of **patient data or workflow** you plan to build I can help you determine if the Enterprise tier fits your project or if you need an alternative solution. Airtable is HIPAA compliant only for customers on the highest-tier Enterprise Scale plan who sign a formal Business Associate Agreement (BAA) via Airtable's Health Information Exhibit. Users on Free, Team, or Business plans are strictly prohibited from storing protected health information (PHI). A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are... Plan Tier: Gated exclusively behind the Airtable Enterprise Scale plan. BAA Signature: Must execute Airtable's Health Information Exhibit containing the BAA. Storage Rules: ePHI must remain strictly inside record cells within bases or interfaces. Excluded Features: Do not use Airtable AI, patient portals, or include PHI in customer support tickets. Integrations: Third-party app connections and external automations (like outgoing emails) must independently meet HIPAA rules. - **Plan Tier:** Gated exclusively behind the [Airtable Enterprise Scale](https://www.airtable.com/company/hipaa-airtable) plan. - **BAA Signature:** Must execute Airtable's Health Information Exhibit containing the BAA. - **Storage Rules:** ePHI must remain strictly inside record cells within bases or interfaces. - **Excluded Features:** Do not use Airtable AI, patient portals, or include PHI in customer support tickets. - **Integrations:** Third-party app connections and external automations (like outgoing emails) must independently meet HIPAA rules.[](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Is Airtable Technically HIPAA-Compliant? * Enterprise-only paywall. HIPAA support didn't exist until April 2024 and is still gated... If you'd like, let me know:Your current Airtable plan What kind of patient data or workflow you plan to build I can help you determine if the Enterprise tier fits your project or if you need an alternative solution. If you'd like, let me know: - Your current **Airtable plan** - What kind of **patient data or workflow** you plan to build I can help you determine if the Enterprise tier fits your project or if you need an alternative solution.

Yes, Airtable is HIPAA compliant, but strictly **only for Enterprise Scale plan customers** who have signed a specialized Health Information Exhibit containing a Business Associate Agreement (BAA). It is not compliant or permitted for use with Protected Health Information (PHI) on Free, Team, or Business plans.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/)[[3]](https://www.blaze.tech/post/is-airtable-hipaa-compliant)[[4]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[5]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-plan-requirements-and-using-airtable-for-phi)Requirements for HIPAA Compliance - **Enterprise Scale Plan:** You must subscribe to Airtable’s highest enterprise tier. - **Executed BAA:** You must sign Airtable’s official Health Information Exhibit (which includes the BAA) via your account team. - **Proper Configuration:** Your organization must enforce internal controls like single sign-on (SSO), granular permissions, and audit logs.[](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[3]](https://www.reddit.com/r/Airtable/comments/1jw3ion/exploring_airtable_for_med_school/) Important Restrictions & Limitations Even under an Enterprise BAA, Airtable enforces strict boundary rules regarding where and how patient data can touch the platform: - **Storage Location:** Electronic Protected Health Information (ePHI) must only be stored within standard **Records** inside Airtable bases or interfaces.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **No Airtable AI:** You cannot store or process ePHI in workspaces where Airtable AI is enabled unless specific supplemental health terms apply and are configured safely.[](https://www.airtable.com/company/health-info-datasheet) - **No Automated Emails with PHI:** You cannot use automated Airtable functions or scripts to send emails containing PHI.[](https://www.airtable.com/company/health-info-datasheet) - **No Patient Portals:** Airtable cannot be used as or behind a public-facing patient portal.[](https://www.airtable.com/company/health-info-datasheet) - **Customer Support:** You must never share screenshots or tickets containing ePHI with Airtable’s standard customer support.[](https://www.airtable.com/company/health-info-datasheet) - **Third-Party Integrations:** Any connected tool or integration (such as Slack, Google Workspace, or custom webhooks) must also independently support and be configured for HIPAA compliance.[](https://www.airtable.com/company/health-info-datasheet) If you'd like, let me know: - What **tier or plan** your organization currently uses - What **kind of workflow or data tracking** you plan to build I can help you evaluate if Airtable fits your technical setup or if an alternative tool is better. Yes, Airtable is HIPAA compliant, but strictly only for Enterprise Scale plan customers who have signed a specialized Health Information Exhibit containing a Business Associate Agreement (BAA). It is not compliant or permitted for use with Protected Health Information (PHI) on Free, Team, or Business plans. Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... In healthcare, Airtable has many potential uses. It could be used to keep track of appointments and consultant availability, strea... If you're managing sensitive healthcare information, you might wonder if Airtable is HIPAA compliant. The answer is that Airtable ... Is Airtable Technically HIPAA-Compliant? * Enterprise-only paywall. HIPAA support didn't exist until April 2024 and is still gated... Does Airtable require a BAA for HIPAA compliance? Yes. You must have a fully executed Business Associate Agreement—often provided ... Enterprise Scale Plan: You must subscribe to Airtable’s highest enterprise tier. Executed BAA: You must sign Airtable’s official Health Information Exhibit (which includes the BAA) via your account team. Proper Configuration: Your organization must enforce internal controls like single sign-on (SSO), granular permissions, and audit logs. - **Enterprise Scale Plan:** You must subscribe to Airtable’s highest enterprise tier. - **Executed BAA:** You must sign Airtable’s official Health Information Exhibit (which includes the BAA) via your account team. - **Proper Configuration:** Your organization must enforce internal controls like single sign-on (SSO), granular permissions, and audit logs.[](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[3]](https://www.reddit.com/r/Airtable/comments/1jw3ion/exploring_airtable_for_med_school/) A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... You need the top of the line Enterprise plan to get the HIPAA-compliant version of Airtable. Even under an Enterprise BAA, Airtable enforces strict boundary rules regarding where and how patient data can touch the platform: Storage Location: Electronic Protected Health Information (ePHI) must only be stored within standard Records inside Airtable bases or interfaces. No Airtable AI: You cannot store or process ePHI in workspaces where Airtable AI is enabled unless specific supplemental health terms apply and are configured safely. No Automated Emails with PHI: You cannot use automated Airtable functions or scripts to send emails containing PHI. No Patient Portals: Airtable cannot be used as or behind a public-facing patient portal. Customer Support: You must never share screenshots or tickets containing ePHI with Airtable’s standard customer support. Third-Party Integrations: Any connected tool or integration (such as Slack, Google Workspace, or custom webhooks) must also independently support and be configured for HIPAA compliance. - **Storage Location:** Electronic Protected Health Information (ePHI) must only be stored within standard **Records** inside Airtable bases or interfaces.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **No Airtable AI:** You cannot store or process ePHI in workspaces where Airtable AI is enabled unless specific supplemental health terms apply and are configured safely.[](https://www.airtable.com/company/health-info-datasheet) - **No Automated Emails with PHI:** You cannot use automated Airtable functions or scripts to send emails containing PHI.[](https://www.airtable.com/company/health-info-datasheet) - **No Patient Portals:** Airtable cannot be used as or behind a public-facing patient portal.[](https://www.airtable.com/company/health-info-datasheet) - **Customer Support:** You must never share screenshots or tickets containing ePHI with Airtable’s standard customer support.[](https://www.airtable.com/company/health-info-datasheet) - **Third-Party Integrations:** Any connected tool or integration (such as Slack, Google Workspace, or custom webhooks) must also independently support and be configured for HIPAA compliance.[](https://www.airtable.com/company/health-info-datasheet) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... If you'd like, let me know:What tier or plan your organization currently uses What kind of workflow or data tracking you plan to build I can help you evaluate if Airtable fits your technical setup or if an alternative tool is better. If you'd like, let me know: - What **tier or plan** your organization currently uses - What **kind of workflow or data tracking** you plan to build I can help you evaluate if Airtable fits your technical setup or if an alternative tool is better. Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

**Yes, but only under strict conditions.** Airtable supports HIPAA compliance for organizations that meet specific plan and configuration requirements.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/)[[3]](https://community.airtable.com/announcements-6/airtable-is-now-hipaa-compliant-1542)[[4]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) Key Requirements for HIPAA Compliance in Airtable - **Enterprise Scale Plan:** HIPAA support and the ability to sign a Business Associate Agreement (BAA) are restricted exclusively to customers on Airtable's **Enterprise Scale** tier. Standard, Team, and Business plans are **not** HIPAA compliant and prohibit storing electronic Protected Health Information (ePHI).[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Signed Health Information Exhibit (BAA):** You must execute Airtable's official Health Information Exhibit, which contains their Business Associate Addendum, before introducing any patient data or PHI into the platform.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Enterprise Controls:** Proper setup requires leveraging enterprise-grade features such as Enterprise Key Management (EKM) for customer-managed encryption, Enterprise Single Sign-On (SSO), Data Loss Prevention (DLP), and Audit Logs.[](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) [[1]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[2]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) Strict Operational Boundaries & Limitations Even with a signed BAA and an Enterprise Scale plan, Airtable enforces tight operational rules regarding where patient data can live:[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.techrepublic.com/article/airtable-alternatives/)[[2]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) - **Records Only:** ePHI must only be stored inside standard **Records** (cells) within Airtable bases or interfaces. It cannot be placed in un-scoped metadata, comments, or general workspace text fields.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.airtable.com/company/health-info-datasheet) - **No Automated PHI Emails:** You cannot configure Airtable automations to send out emails containing actual PHI.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **No Airtable AI with PHI:** Airtable AI features sit completely outside the HIPAA compliance boundary unless specifically covered by supplemental health terms—standard practice is to ensure AI is disabled in workspaces handling patient data.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Support Ticket Restrictions:** You must never include screenshots or text containing actual ePHI when communicating with Airtable's digital or verbal customer support team.[](https://www.airtable.com/company/health-info-datasheet) - **No Patient Portals:** Airtable cannot be used as—or as the underlying tech stack for—a patient-facing portal.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Third-Party Integrations:** Any external tools or integrations connected to your Airtable base (such as Zapier, Slack, or Google Workspace) must also be HIPAA-compliant and covered by their own separate BAAs.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) If you'd like, let me know: - What **tier of Airtable** your organization currently uses - What **specific workflows or data** (e.g., internal tracking vs. integrations) you plan to build I can help you evaluate whether Airtable fits your use case or if you need alternative architectures. Yes, but only under strict conditions. Airtable supports HIPAA compliance for organizations that meet specific plan and configuration requirements. Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... In healthcare, Airtable has many potential uses. It could be used to keep track of appointments and consultant availability, strea... * 🩺📈 Exciting news for healthcare providers and organizations! Airtable is now HIPAA compliant and ready to support your critica... HIPAA: The Part Everyone Gets Wrong Every couple of weeks a client asks us, "Is Airtable HIPAA compliant?" The honest answer is "i... Enterprise Scale Plan: HIPAA support and the ability to sign a Business Associate Agreement (BAA) are restricted exclusively to customers on Airtable's Enterprise Scale tier. Standard, Team, and Business plans are not HIPAA compliant and prohibit storing electronic Protected Health Information (ePHI). Signed Health Information Exhibit (BAA): You must execute Airtable's official Health Information Exhibit, which contains their Business Associate Addendum, before introducing any patient data or PHI into the platform. Enterprise Controls: Proper setup requires leveraging enterprise-grade features such as Enterprise Key Management (EKM) for customer-managed encryption, Enterprise Single Sign-On (SSO), Data Loss Prevention (DLP), and Audit Logs. - **Enterprise Scale Plan:** HIPAA support and the ability to sign a Business Associate Agreement (BAA) are restricted exclusively to customers on Airtable's **Enterprise Scale** tier. Standard, Team, and Business plans are **not** HIPAA compliant and prohibit storing electronic Protected Health Information (ePHI).[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Signed Health Information Exhibit (BAA):** You must execute Airtable's official Health Information Exhibit, which contains their Business Associate Addendum, before introducing any patient data or PHI into the platform.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Enterprise Controls:** Proper setup requires leveraging enterprise-grade features such as Enterprise Key Management (EKM) for customer-managed encryption, Enterprise Single Sign-On (SSO), Data Loss Prevention (DLP), and Audit Logs.[](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) [[1]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[2]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP... Even with a signed BAA and an Enterprise Scale plan, Airtable enforces tight operational rules regarding where patient data can live: Even with a signed BAA and an Enterprise Scale plan, Airtable enforces tight operational rules regarding where patient data can live:[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.techrepublic.com/article/airtable-alternatives/)[[2]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) Airtable can be HIPAA compliant, but this is only available under its Enterprise Scale plan. For Airtable to be HIPAA compliant, u... Off-load the PHI, Keep Only “Breadcrumbs” in Airtable * Shape-shift PHI into opaque IDs. Store patient details in a hardened backe... Records Only: ePHI must only be stored inside standard Records (cells) within Airtable bases or interfaces. It cannot be placed in un-scoped metadata, comments, or general workspace text fields. No Automated PHI Emails: You cannot configure Airtable automations to send out emails containing actual PHI. No Airtable AI with PHI: Airtable AI features sit completely outside the HIPAA compliance boundary unless specifically covered by supplemental health terms—standard practice is to ensure AI is disabled in workspaces handling patient data. Support Ticket Restrictions: You must never include screenshots or text containing actual ePHI when communicating with Airtable's digital or verbal customer support team. No Patient Portals: Airtable cannot be used as—or as the underlying tech stack for—a patient-facing portal. Third-Party Integrations: Any external tools or integrations connected to your Airtable base (such as Zapier, Slack, or Google Workspace) must also be HIPAA-compliant and covered by their own separate BAAs. - **Records Only:** ePHI must only be stored inside standard **Records** (cells) within Airtable bases or interfaces. It cannot be placed in un-scoped metadata, comments, or general workspace text fields.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.airtable.com/company/health-info-datasheet) - **No Automated PHI Emails:** You cannot configure Airtable automations to send out emails containing actual PHI.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **No Airtable AI with PHI:** Airtable AI features sit completely outside the HIPAA compliance boundary unless specifically covered by supplemental health terms—standard practice is to ensure AI is disabled in workspaces handling patient data.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Support Ticket Restrictions:** You must never include screenshots or text containing actual ePHI when communicating with Airtable's digital or verbal customer support team.[](https://www.airtable.com/company/health-info-datasheet) - **No Patient Portals:** Airtable cannot be used as—or as the underlying tech stack for—a patient-facing portal.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Third-Party Integrations:** Any external tools or integrations connected to your Airtable base (such as Zapier, Slack, or Google Workspace) must also be HIPAA-compliant and covered by their own separate BAAs.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... If you'd like, let me know: What tier of Airtable your organization currently uses What specific workflows or data (e.g., internal tracking vs. integrations) you plan to build - What **tier of Airtable** your organization currently uses - What **specific workflows or data** (e.g., internal tracking vs. integrations) you plan to build I can help you evaluate whether Airtable fits your use case or if you need alternative architectures.

Yes, [Airtable](https://www.airtable.com/company/hipaa-airtable) is HIPAA compliant , but strictly for **Enterprise Scale** plan subscribers who have signed a Business Associate Agreement (BAA) via a Health Information Exhibit. It is not compliant on lower-tier plans (Free, Team, or Business).[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Requirements for Compliance - **Enterprise Scale Plan:** You must be on Airtable's highest custom-priced enterprise tier. - **Signed BAA:** You must execute Airtable’s Health Information Exhibit, which contains the official Business Associate Addendum.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) Platform Restrictions & Rules - **Where Data Lives:** Protected Health Information (PHI) must only be stored within records in Airtable bases or interfaces. - **Exclusions:** Airtable AI, customer support interactions, and standard automated emails containing PHI are excluded or restricted. - **Patient Portals:** You cannot use Airtable as a patient portal or the backend technology for one. - **Integrations:** Any third-party tools or integrations connected to your bases must also independently support HIPAA compliance.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) If you'd like, let me know: - What **tier** your organization is currently on - What kind of **healthcare workflow or data tracking** you plan to build I can help you determine the best architectural approach or look into alternative tools. Yes, Airtable is HIPAA compliant, but strictly for Enterprise Scale plan subscribers who have signed a Business Associate Agreement (BAA) via a Health Information Exhibit. It is not compliant on lower-tier plans (Free, Team, or Business). A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Enterprise Scale Plan: You must be on Airtable's highest custom-priced enterprise tier. Signed BAA: You must execute Airtable’s Health Information Exhibit, which contains the official Business Associate Addendum. - **Enterprise Scale Plan:** You must be on Airtable's highest custom-priced enterprise tier. - **Signed BAA:** You must execute Airtable’s Health Information Exhibit, which contains the official Business Associate Addendum.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) Is Airtable Technically HIPAA-Compliant? * Enterprise-only paywall. HIPAA support didn't exist until April 2024 and is still gated... Where Data Lives: Protected Health Information (PHI) must only be stored within records in Airtable bases or interfaces. Exclusions: Airtable AI, customer support interactions, and standard automated emails containing PHI are excluded or restricted. Patient Portals: You cannot use Airtable as a patient portal or the backend technology for one. Integrations: Any third-party tools or integrations connected to your bases must also independently support HIPAA compliance. - **Where Data Lives:** Protected Health Information (PHI) must only be stored within records in Airtable bases or interfaces. - **Exclusions:** Airtable AI, customer support interactions, and standard automated emails containing PHI are excluded or restricted. - **Patient Portals:** You cannot use Airtable as a patient portal or the backend technology for one. - **Integrations:** Any third-party tools or integrations connected to your bases must also independently support HIPAA compliance.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... In healthcare, Airtable has many potential uses. It could be used to keep track of appointments and consultant availability, strea... If you'd like, let me know:What tier your organization is currently on What kind of healthcare workflow or data tracking you plan to build I can help you determine the best architectural approach or look into alternative tools. If you'd like, let me know: - What **tier** your organization is currently on - What kind of **healthcare workflow or data tracking** you plan to build I can help you determine the best architectural approach or look into alternative tools. Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Airtable is HIPAA compliant **only** for customers on the [Airtable Enterprise Scale Plan](https://support.airtable.com/docs/understanding-hipaa-at-airtable) who sign a Health Information Exhibit containing a Business Associate Agreement (BAA). Users on Free, Team, or Business plans are strictly prohibited from storing electronic Protected Health Information (ePHI).[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[3]](https://www.paubox.com/blog/airtable-hipaa-compliant)Plan and Agreement Requirements - **Enterprise Scale Plan:** Required to access Airtable's HIPAA compliance program. - **Business Associate Agreement (BAA):** Must be executed via Airtable's Health Information Exhibit. - **Lower Tiers:** Free, Team, and Business plans do not offer a BAA and cannot legally hold patient data.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) Usage Rules and Restrictions - **Storage Boundaries:** Patient health data (ePHI) must only live inside records within bases or interfaces. - **No AI Features:** Airtable AI cannot be used or enabled in workspaces handling ePHI. - **Support Limits:** You must never share or disclose ePHI with Airtable’s customer support team in tickets or screenshots. - **Automations & Emails:** You cannot use automated email features to transmit raw ePHI out of the system. - **External Integrations:** Any third-party tools or apps connected to your bases must also be HIPAA compliant and covered by their own BAAs. - **No Patient Portals:** Airtable cannot be used as a public or direct patient portal.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) If you'd like, let me know: - What **tier or plan** your organization currently uses - What **type of workflow or data** you plan to build I can help you evaluate if Airtable fits your project or suggest alternative ways to structure your data safely. Airtable is HIPAA compliant only for customers on the Airtable Enterprise Scale Plan who sign a Health Information Exhibit containing a Business Associate Agreement (BAA). Users on Free, Team, or Business plans are strictly prohibited from storing electronic Protected Health Information (ePHI). A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are... Enterprise Scale Plan: Required to access Airtable's HIPAA compliance program. Business Associate Agreement (BAA): Must be executed via Airtable's Health Information Exhibit. Lower Tiers: Free, Team, and Business plans do not offer a BAA and cannot legally hold patient data. - **Enterprise Scale Plan:** Required to access Airtable's HIPAA compliance program. - **Business Associate Agreement (BAA):** Must be executed via Airtable's Health Information Exhibit. - **Lower Tiers:** Free, Team, and Business plans do not offer a BAA and cannot legally hold patient data.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) Storage Boundaries: Patient health data (ePHI) must only live inside records within bases or interfaces. No AI Features: Airtable AI cannot be used or enabled in workspaces handling ePHI. Support Limits: You must never share or disclose ePHI with Airtable’s customer support team in tickets or screenshots. Automations & Emails: You cannot use automated email features to transmit raw ePHI out of the system. External Integrations: Any third-party tools or apps connected to your bases must also be HIPAA compliant and covered by their own BAAs. No Patient Portals: Airtable cannot be used as a public or direct patient portal. - **Storage Boundaries:** Patient health data (ePHI) must only live inside records within bases or interfaces. - **No AI Features:** Airtable AI cannot be used or enabled in workspaces handling ePHI. - **Support Limits:** You must never share or disclose ePHI with Airtable’s customer support team in tickets or screenshots. - **Automations & Emails:** You cannot use automated email features to transmit raw ePHI out of the system. - **External Integrations:** Any third-party tools or apps connected to your bases must also be HIPAA compliant and covered by their own BAAs. - **No Patient Portals:** Airtable cannot be used as a public or direct patient portal.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... In healthcare, Airtable has many potential uses. It could be used to keep track of appointments and consultant availability, strea... If you'd like, let me know:What tier or plan your organization currently uses What type of workflow or data you plan to build I can help you evaluate if Airtable fits your project or suggest alternative ways to structure your data safely. If you'd like, let me know: - What **tier or plan** your organization currently uses - What **type of workflow or data** you plan to build I can help you evaluate if Airtable fits your project or suggest alternative ways to structure your data safely. Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Airtable is HIPAA compliant **only** for users on the **Enterprise Scale plan** who sign a Business Associate Agreement (BAA) via Airtable's Health Information Exhibit . Users on Free, Team, or Business plans are **not** permitted to store protected health information (PHI) on the platform.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Requirements and Plan Limits - **Plan Tier:** Restricted exclusively to [Airtable's Enterprise Scale plan](https://support.airtable.com/docs/understanding-hipaa-at-airtable). - **Legal Agreement:** Requires executing a formal BAA/Health Information Exhibit with Airtable. - **Lower Tiers:** Prohibited from holding electronic Protected Health Information (ePHI) on lower-tier subscription plans.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.paubox.com/blog/airtable-hipaa-compliant) Usage Restrictions & Rules - **Storage Boundaries:** ePHI must be stored strictly inside standard "Records" within bases or interfaces. - **Feature Exclusions:** Do not use Airtable AI or include PHI in support tickets or customer service chats. - **Integrations & Communication:** Automated emails from automations cannot contain raw PHI, and any connected third-party tool requires its own independent BAA. - **Prohibited Uses:** The platform cannot be utilized as a patient portal.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) If you want, let me know: - Your current **Airtable plan level** - What **type of patient data** you plan to track I can help you figure out if Airtable fits your workflow or if you need an alternative setup. Airtable is HIPAA compliant only for users on the Enterprise Scale plan who sign a Business Associate Agreement (BAA) via Airtable's Health Information Exhibit. Users on Free, Team, or Business plans are not permitted to store protected health information (PHI) on the platform. A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Plan Tier: Restricted exclusively to Airtable's Enterprise Scale plan. Legal Agreement: Requires executing a formal BAA/Health Information Exhibit with Airtable. Lower Tiers: Prohibited from holding electronic Protected Health Information (ePHI) on lower-tier subscription plans. - **Plan Tier:** Restricted exclusively to [Airtable's Enterprise Scale plan](https://support.airtable.com/docs/understanding-hipaa-at-airtable). - **Legal Agreement:** Requires executing a formal BAA/Health Information Exhibit with Airtable. - **Lower Tiers:** Prohibited from holding electronic Protected Health Information (ePHI) on lower-tier subscription plans.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.paubox.com/blog/airtable-hipaa-compliant) What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are... Storage Boundaries: ePHI must be stored strictly inside standard "Records" within bases or interfaces. Feature Exclusions: Do not use Airtable AI or include PHI in support tickets or customer service chats. Integrations & Communication: Automated emails from automations cannot contain raw PHI, and any connected third-party tool requires its own independent BAA. Prohibited Uses: The platform cannot be utilized as a patient portal. - **Storage Boundaries:** ePHI must be stored strictly inside standard "Records" within bases or interfaces. - **Feature Exclusions:** Do not use Airtable AI or include PHI in support tickets or customer service chats. - **Integrations & Communication:** Automated emails from automations cannot contain raw PHI, and any connected third-party tool requires its own independent BAA. - **Prohibited Uses:** The platform cannot be utilized as a patient portal.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP... If you want, let me know:Your current Airtable plan level What type of patient data you plan to track I can help you figure out if Airtable fits your workflow or if you need an alternative setup. If you want, let me know: - Your current **Airtable plan level** - What **type of patient data** you plan to track I can help you figure out if Airtable fits your workflow or if you need an alternative setup. Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Yes, Airtable is HIPAA compliant, but only for organizations on the **Enterprise Scale plan** that sign a Business Associate Agreement (BAA) via Airtable's Health Information Exhibit . It is strictly prohibited to store protected health information (PHI) on Free, Team, or Business plans.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Plan and Agreement Requirements - **Enterprise Scale Plan Only:** Lower-tier plans do not support HIPAA compliance or qualify for a BAA. - **Business Associate Agreement (BAA):** You must execute Airtable's Health Information Exhibit before inputting any electronic Protected Health Information (ePHI).[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.paubox.com/blog/airtable-hipaa-compliant) Usage Rules and Restrictions - **Data Location:** ePHI must only be stored inside standard record cells within bases or interfaces, not in metadata, comments, or unsupported features.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Airtable AI:** Do not enable or use Airtable AI in workspaces containing ePHI unless specific supplemental health terms are accepted.[](https://www.airtable.com/company/health-info-datasheet) - **No Patient Portals:** Airtable cannot be used as a public or patient-facing portal.[](https://www.airtable.com/company/health-info-datasheet) - **Integrations and Support:** Third-party integrations must independently support HIPAA compliance, and users must avoid putting PHI into support tickets or screenshots.[](https://www.airtable.com/company/health-info-datasheet) If you'd like, let me know: - What **plan** your organization currently uses - What **type of healthcare workflow** you plan to build I can help you review if your setup meets these requirements. Yes, Airtable is HIPAA compliant, but only for organizations on the Enterprise Scale plan that sign a Business Associate Agreement (BAA) via Airtable's Health Information Exhibit. It is strictly prohibited to store protected health information (PHI) on Free, Team, or Business plans. A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Enterprise Scale Plan Only: Lower-tier plans do not support HIPAA compliance or qualify for a BAA. Business Associate Agreement (BAA): You must execute Airtable's Health Information Exhibit before inputting any electronic Protected Health Information (ePHI). - **Enterprise Scale Plan Only:** Lower-tier plans do not support HIPAA compliance or qualify for a BAA. - **Business Associate Agreement (BAA):** You must execute Airtable's Health Information Exhibit before inputting any electronic Protected Health Information (ePHI).[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.paubox.com/blog/airtable-hipaa-compliant) What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are... Data Location: ePHI must only be stored inside standard record cells within bases or interfaces, not in metadata, comments, or unsupported features. Airtable AI: Do not enable or use Airtable AI in workspaces containing ePHI unless specific supplemental health terms are accepted. No Patient Portals: Airtable cannot be used as a public or patient-facing portal. Integrations and Support: Third-party integrations must independently support HIPAA compliance, and users must avoid putting PHI into support tickets or screenshots. - **Data Location:** ePHI must only be stored inside standard record cells within bases or interfaces, not in metadata, comments, or unsupported features.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Airtable AI:** Do not enable or use Airtable AI in workspaces containing ePHI unless specific supplemental health terms are accepted.[](https://www.airtable.com/company/health-info-datasheet) - **No Patient Portals:** Airtable cannot be used as a public or patient-facing portal.[](https://www.airtable.com/company/health-info-datasheet) - **Integrations and Support:** Third-party integrations must independently support HIPAA compliance, and users must avoid putting PHI into support tickets or screenshots.[](https://www.airtable.com/company/health-info-datasheet) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... If you'd like, let me know:What plan your organization currently uses What type of healthcare workflow you plan to build I can help you review if your setup meets these requirements. If you'd like, let me know: - What **plan** your organization currently uses - What **type of healthcare workflow** you plan to build I can help you review if your setup meets these requirements. Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

**Yes, Airtable can be HIPAA compliant** , but only under very specific conditions, plan tiers, and strict configuration rules.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) 1. Plan Requirement: Enterprise Scale Only Airtable supports HIPAA compliance **only** for customers on the **Enterprise Scale plan**.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - If you are on a **Free, Team, or Business plan** , you are **not** permitted to store Electronic Protected Health Information (ePHI) under any circumstances.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) - To enable HIPAA compliance, Enterprise organizations must execute Airtable's **Health Information Exhibit** , which includes a formal **Business Associate Agreement (BAA)**.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.complysaas.com/compliance/airtable) 2. Strict Boundary Rules for PHI Even with an Enterprise Scale plan and a signed BAA, Airtable enforces rigid boundaries on where and how patient data can live within the platform:[[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) - **In-Scope:** ePHI and medical information may only be stored directly inside **Records within Airtable bases or interfaces**.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Out-of-Scope / Prohibited:** - **Airtable AI:** AI features are completely excluded from the BAA. You must ensure Airtable AI is disabled in any workspace handling PHI. - **Automations & Email:** Outgoing emails triggered by Airtable automations **cannot** contain PHI. - **Customer Support:** You must never include PHI in screenshots, support tickets, or chats with Airtable support. - **Patient Portals:** Airtable explicitly states the platform **cannot** be used as a patient portal.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) 3. Shared Responsibility and Integrations Achieving compliance is a shared-responsibility model. While Airtable provides the necessary technical safeguards (such as Enterprise Key Management, audit logs, SSO, and data loss prevention), **you** are responsible for proper configuration:[](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) [[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[2]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[3]](https://www.blaze.tech/post/is-airtable-hipaa-compliant)[[4]](https://community.airtable.com/announcements-6/airtable-is-now-hipaa-compliant-1542) - Enforcing role-based access controls and the "minimum necessary" standard. - Ensuring any third-party integrations connected to Airtable (like Zapier, Slack, or external APIs) are also HIPAA-compliant and covered under their own BAAs. - Restricting view links and collaborator permissions so unauthorized users cannot access sensitive records.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[2]](https://www.accountablehq.com/post/airtable-hipaa-compliance-baa-security-features-and-what-to-know-in-2026)[[3]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) If you'd like to share **your current Airtable plan** or **what kind of workflow or data** you are hoping to build, I can help you determine the right architectural approach or alternatives. Yes, Airtable can be HIPAA compliant, but only under very specific conditions, plan tiers, and strict configuration rules. Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Airtable is a customizable business management platform with automation capabilities that helps organizations better manage data b... Airtable supports HIPAA compliance only for customers on the Enterprise Scale plan. Airtable supports HIPAA compliance **only** for customers on the **Enterprise Scale plan**.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) If you are on a Free, Team, or Business plan, you are not permitted to store Electronic Protected Health Information (ePHI) under any circumstances. To enable HIPAA compliance, Enterprise organizations must execute Airtable's Health Information Exhibit, which includes a formal Business Associate Agreement (BAA). - If you are on a **Free, Team, or Business plan** , you are **not** permitted to store Electronic Protected Health Information (ePHI) under any circumstances.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) - To enable HIPAA compliance, Enterprise organizations must execute Airtable's **Health Information Exhibit** , which includes a formal **Business Associate Agreement (BAA)**.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.complysaas.com/compliance/airtable) Key takeaways * Airtable HIPAA support is available only on the Enterprise Scale plan. Free, Team, and Business plan customers can... HIPAA, BAA, and SOC 2 summary ... Airtable states that HIPAA support is available on Enterprise Scale and that customers intending... Even with an Enterprise Scale plan and a signed BAA, Airtable enforces rigid boundaries on where and how patient data can live within the platform: Even with an Enterprise Scale plan and a signed BAA, Airtable enforces rigid boundaries on where and how patient data can live within the platform:[[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... In-Scope: ePHI and medical information may only be stored directly inside Records within Airtable bases or interfaces. Out-of-Scope / Prohibited:Airtable AI: AI features are completely excluded from the BAA. You must ensure Airtable AI is disabled in any workspace handling PHI. Automations & Email: Outgoing emails triggered by Airtable automations cannot contain PHI. Customer Support: You must never include PHI in screenshots, support tickets, or chats with Airtable support. Patient Portals: Airtable explicitly states the platform cannot be used as a patient portal. Airtable AI: AI features are completely excluded from the BAA. You must ensure Airtable AI is disabled in any workspace handling PHI. Automations & Email: Outgoing emails triggered by Airtable automations cannot contain PHI. Customer Support: You must never include PHI in screenshots, support tickets, or chats with Airtable support. Patient Portals: Airtable explicitly states the platform cannot be used as a patient portal. - **In-Scope:** ePHI and medical information may only be stored directly inside **Records within Airtable bases or interfaces**.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Out-of-Scope / Prohibited:** - **Airtable AI:** AI features are completely excluded from the BAA. You must ensure Airtable AI is disabled in any workspace handling PHI. - **Automations & Email:** Outgoing emails triggered by Airtable automations **cannot** contain PHI. - **Customer Support:** You must never include PHI in screenshots, support tickets, or chats with Airtable support. - **Patient Portals:** Airtable explicitly states the platform **cannot** be used as a patient portal.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Achieving compliance is a shared-responsibility model. While Airtable provides the necessary technical safeguards (such as Enterprise Key Management, audit logs, SSO, and data loss prevention), you are responsible for proper configuration: Achieving compliance is a shared-responsibility model. While Airtable provides the necessary technical safeguards (such as Enterprise Key Management, audit logs, SSO, and data loss prevention), **you** are responsible for proper configuration:[](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) [[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[2]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[3]](https://www.blaze.tech/post/is-airtable-hipaa-compliant)[[4]](https://community.airtable.com/announcements-6/airtable-is-now-hipaa-compliant-1542) Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP... How to Ensure Airtable Complies with HIPAA Regulation. To make sure your use of Airtable aligns with HIPAA regulations, follow the... * 🩺📈 Exciting news for healthcare providers and organizations! Airtable is now HIPAA compliant and ready to support your critica... Enforcing role-based access controls and the "minimum necessary" standard. Ensuring any third-party integrations connected to Airtable (like Zapier, Slack, or external APIs) are also HIPAA-compliant and covered under their own BAAs. Restricting view links and collaborator permissions so unauthorized users cannot access sensitive records. - Enforcing role-based access controls and the "minimum necessary" standard. - Ensuring any third-party integrations connected to Airtable (like Zapier, Slack, or external APIs) are also HIPAA-compliant and covered under their own BAAs. - Restricting view links and collaborator permissions so unauthorized users cannot access sensitive records.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[2]](https://www.accountablehq.com/post/airtable-hipaa-compliance-baa-security-features-and-what-to-know-in-2026)[[3]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) Off-load the PHI, Keep Only “Breadcrumbs” in Airtable * Shape-shift PHI into opaque IDs. Store patient details in a hardened backe... HIPAA Compliance Requirements for ePHI * Risk analysis and risk management tailored to Airtable data flows and integrations. * Rol... Should You Trust Airtable With Sensitive Data? Our answer, after building hundreds of client Airtable systems: yes, with appropria... If you'd like to share your current Airtable plan or what kind of workflow or data you are hoping to build, I can help you determine the right architectural approach or alternatives. If you'd like to share **your current Airtable plan** or **what kind of workflow or data** you are hoping to build, I can help you determine the right architectural approach or alternatives.

Yes, Airtable is HIPAA compliant **only** for customers on its **Enterprise Scale plan** who sign an official [Airtable Health Information Exhibit](https://www.airtable.com/company/hipaa-airtable) , which includes a Business Associate Agreement (BAA). It is strictly **not** compliant or permitted for patient data (PHI) on Free, Team, or Business plans.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/)[[3]](https://www.paubox.com/blog/airtable-hipaa-compliant)Plan and Agreement Requirements - **Enterprise Scale Plan:** Required to unlock the environment and security controls needed for healthcare data. - **Executed BAA:** You must sign the Health Information Exhibit/BAA directly with Airtable before adding any protected health information (ePHI). - **Lower Tiers Prohibited:** Storing patient data on Free, Team, or Business plans violates terms of service.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) Scope and Restrictions of Airtable's BAA - **Allowed:** Storing ePHI strictly within standard records inside Airtable bases. - **Excluded:** Airtable AI features are completely excluded and cannot be used with patient data. - **Notifications:** Automated emails sent out by Airtable cannot contain PHI. - **Portals:** Airtable cannot be utilized to host a patient-facing portal. - **Integrations:** Third-party extensions, scripts, or integrations must also individually support HIPAA compliance.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) If you'd like, let me know: - What **tier of Airtable** your organization currently uses - What **type of workflow or data** you plan to build I can help you evaluate if Airtable fits your needs or if an alternative tool is better. Yes, Airtable is HIPAA compliant only for customers on its Enterprise Scale plan who sign an official Airtable Health Information Exhibit, which includes a Business Associate Agreement (BAA). It is strictly not compliant or permitted for patient data (PHI) on Free, Team, or Business plans. A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Key takeaways * Airtable HIPAA support is available only on the Enterprise Scale plan. Free, Team, and Business plan customers can... What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are... Enterprise Scale Plan: Required to unlock the environment and security controls needed for healthcare data. Executed BAA: You must sign the Health Information Exhibit/BAA directly with Airtable before adding any protected health information (ePHI). Lower Tiers Prohibited: Storing patient data on Free, Team, or Business plans violates terms of service. - **Enterprise Scale Plan:** Required to unlock the environment and security controls needed for healthcare data. - **Executed BAA:** You must sign the Health Information Exhibit/BAA directly with Airtable before adding any protected health information (ePHI). - **Lower Tiers Prohibited:** Storing patient data on Free, Team, or Business plans violates terms of service.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) Is Airtable Technically HIPAA-Compliant? * Enterprise-only paywall. HIPAA support didn't exist until April 2024 and is still gated... Allowed: Storing ePHI strictly within standard records inside Airtable bases. Excluded: Airtable AI features are completely excluded and cannot be used with patient data. Notifications: Automated emails sent out by Airtable cannot contain PHI. Portals: Airtable cannot be utilized to host a patient-facing portal. Integrations: Third-party extensions, scripts, or integrations must also individually support HIPAA compliance. - **Allowed:** Storing ePHI strictly within standard records inside Airtable bases. - **Excluded:** Airtable AI features are completely excluded and cannot be used with patient data. - **Notifications:** Automated emails sent out by Airtable cannot contain PHI. - **Portals:** Airtable cannot be utilized to host a patient-facing portal. - **Integrations:** Third-party extensions, scripts, or integrations must also individually support HIPAA compliance.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... If you'd like, let me know:What tier of Airtable your organization currently uses What type of workflow or data you plan to build I can help you evaluate if Airtable fits your needs or if an alternative tool is better. If you'd like, let me know: - What **tier of Airtable** your organization currently uses - What **type of workflow or data** you plan to build I can help you evaluate if Airtable fits your needs or if an alternative tool is better. Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Airtable is HIPAA compliant **only** for customers on the custom-priced **Enterprise Scale plan** who sign an official **Health Information Exhibit** and Business Associate Agreement (BAA). Users on Free, Team, or Business plans are strictly prohibited from storing protected health information (PHI).[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[3]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Requirements and Limitations - **Plan Tier:** Restricted exclusively to [Airtable Enterprise Scale](https://www.airtable.com/company/hipaa-airtable) subscriptions. - **Storage Rules:** ePHI must only live inside records within approved bases or interfaces. - **Exclusions:** Airtable AI features and customer support tickets must not contain PHI. - **Usage Restrictions:** The platform cannot be used as a patient portal.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.paubox.com/blog/airtable-hipaa-compliant) If you'd like, let me know: - Your **current Airtable plan** - **What kind of patient data** you plan to track I can help you evaluate your compliance options. Airtable is HIPAA compliant only for customers on the custom-priced Enterprise Scale plan who sign an official Health Information Exhibit and Business Associate Agreement (BAA). Users on Free, Team, or Business plans are strictly prohibited from storing protected health information (PHI). A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Is Airtable Technically HIPAA-Compliant? * Enterprise-only paywall. HIPAA support didn't exist until April 2024 and is still gated... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Plan Tier: Restricted exclusively to Airtable Enterprise Scale subscriptions. Storage Rules: ePHI must only live inside records within approved bases or interfaces. Exclusions: Airtable AI features and customer support tickets must not contain PHI. Usage Restrictions: The platform cannot be used as a patient portal. - **Plan Tier:** Restricted exclusively to [Airtable Enterprise Scale](https://www.airtable.com/company/hipaa-airtable) subscriptions. - **Storage Rules:** ePHI must only live inside records within approved bases or interfaces. - **Exclusions:** Airtable AI features and customer support tickets must not contain PHI. - **Usage Restrictions:** The platform cannot be used as a patient portal.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.paubox.com/blog/airtable-hipaa-compliant) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are... If you'd like, let me know:Your current Airtable plan What kind of patient data you plan to track I can help you evaluate your compliance options. If you'd like, let me know: - Your **current Airtable plan** - **What kind of patient data** you plan to track I can help you evaluate your compliance options. Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Airtable is HIPAA compliant **only** for customers on the **Enterprise Scale plan** who sign a Business Associate Agreement (BAA) via Airtable's Health Information Exhibit . Users on Free, Team, or Business plans are strictly prohibited from storing protected health information (PHI) on the platform.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/)[[3]](https://www.paubox.com/blog/airtable-hipaa-compliant)Plan and Agreement Requirements - Available exclusively on the **Enterprise Scale plan**. - Requires a signed **Health Information Exhibit** (which includes a BAA). - Lower-tier plans (Free, Team, Business) **cannot** be made compliant and do not support BAAs.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.hipaatizer.com/integrations/airtable-hipaa-compliant/) Usage Restrictions and Rules - **Where data lives:** ePHI and medical details must only be stored within records inside bases or interfaces. - **Exclusions:** Airtable AI features and general customer support interactions are excluded from the BAA scope. - **Communications:** You cannot use Airtable as a patient portal, and automated emails generated by the platform must not contain PHI. - **Integrations:** Any third-party tools or external systems connected to your bases must also independently meet HIPAA standards.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) If you would like to proceed, let me know: - **What tier of Airtable** your organization currently uses - **What type of data or workflow** you plan to build I can help you evaluate whether an enterprise upgrade fits your setup or suggest alternative options. Airtable is HIPAA compliant only for customers on the Enterprise Scale plan who sign a Business Associate Agreement (BAA) via Airtable's Health Information Exhibit. Users on Free, Team, or Business plans are strictly prohibited from storing protected health information (PHI) on the platform. A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Key takeaways * Airtable HIPAA support is available only on the Enterprise Scale plan. Free, Team, and Business plan customers can... What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are... Available exclusively on the Enterprise Scale plan. Requires a signed Health Information Exhibit (which includes a BAA). Lower-tier plans (Free, Team, Business) cannot be made compliant and do not support BAAs. - Available exclusively on the **Enterprise Scale plan**. - Requires a signed **Health Information Exhibit** (which includes a BAA). - Lower-tier plans (Free, Team, Business) **cannot** be made compliant and do not support BAAs.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.hipaatizer.com/integrations/airtable-hipaa-compliant/) Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Airtable is HIPAA Compliant only on its Enterprise plan. With HIPAAtizer, keep PHI secure and send form data to Airtable on any pl... Where data lives: ePHI and medical details must only be stored within records inside bases or interfaces. Exclusions: Airtable AI features and general customer support interactions are excluded from the BAA scope. Communications: You cannot use Airtable as a patient portal, and automated emails generated by the platform must not contain PHI. Integrations: Any third-party tools or external systems connected to your bases must also independently meet HIPAA standards. - **Where data lives:** ePHI and medical details must only be stored within records inside bases or interfaces. - **Exclusions:** Airtable AI features and general customer support interactions are excluded from the BAA scope. - **Communications:** You cannot use Airtable as a patient portal, and automated emails generated by the platform must not contain PHI. - **Integrations:** Any third-party tools or external systems connected to your bases must also independently meet HIPAA standards.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Yes, Airtable can be HIPAA compliant, but only for **Enterprise Scale** plan subscribers who execute a formal **Health Information Exhibit (BAA)** with the company . It is strictly prohibited to store protected health information (PHI) on Free, Team, or Business tier plans.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Plan and Agreement Requirements - Subscribe to the Airtable Enterprise Scale Plan. - Sign Airtable's Health Information Exhibit, which includes a Business Associate Agreement (BAA). - Enforce security controls like Single Sign-On (SSO) and audit logs.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) Scope and Restrictions - **Data location:** PHI may only reside within records inside bases. - **Excluded features:** Airtable AI and automated email notifications cannot contain or process PHI. - **Usage boundaries:** Airtable cannot be used as a patient portal. - **Integrations:** Third-party extensions or integrations must independently support HIPAA compliance.[](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) If you want, let me know: - Your **current Airtable plan** - What **type of patient data** you plan to track I can help you evaluate if Airtable fits your workflow or if another tool works better. Yes, Airtable can be HIPAA compliant, but only for Enterprise Scale plan subscribers who execute a formal Health Information Exhibit (BAA) with the company. It is strictly prohibited to store protected health information (PHI) on Free, Team, or Business tier plans. A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Subscribe to the Airtable Enterprise Scale Plan. Sign Airtable's Health Information Exhibit, which includes a Business Associate Agreement (BAA). Enforce security controls like Single Sign-On (SSO) and audit logs. - Subscribe to the Airtable Enterprise Scale Plan. - Sign Airtable's Health Information Exhibit, which includes a Business Associate Agreement (BAA). - Enforce security controls like Single Sign-On (SSO) and audit logs.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP... HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... Data location: PHI may only reside within records inside bases. Excluded features: Airtable AI and automated email notifications cannot contain or process PHI. Usage boundaries: Airtable cannot be used as a patient portal. Integrations: Third-party extensions or integrations must independently support HIPAA compliance. - **Data location:** PHI may only reside within records inside bases. - **Excluded features:** Airtable AI and automated email notifications cannot contain or process PHI. - **Usage boundaries:** Airtable cannot be used as a patient portal. - **Integrations:** Third-party extensions or integrations must independently support HIPAA compliance.[](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) Key takeaways * Airtable HIPAA support is available only on the Enterprise Scale plan. Free, Team, and Business plan customers can... Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Airtable is HIPAA compliant **only** for customers on the highest-tier **Enterprise Scale** plan who sign a Business Associate Agreement (BAA) through Airtable's Health Information Exhibit . Users on Free, Team, or Business plans are strictly prohibited from storing electronic Protected Health Information (ePHI).[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://www.paubox.com/blog/airtable-hipaa-compliant)[[3]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Requirements and Plan Restrictions - **Enterprise Scale Plan:** Must be actively subscribed to Airtable's Enterprise Scale tier. - **Executed BAA:** Must sign the official Health Information Exhibit containing the Business Associate Addendum. - **Lower Tiers:** Not available or compliant on standard or self-serve paid tiers.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) Platform and Feature Restrictions - **Data Location:** ePHI must only reside inside record fields within specific Airtable bases or interfaces. - **Airtable AI:** Do not use or enable Airtable AI in workspaces holding ePHI unless specific supplemental health terms are accepted. - **Support Tickets:** Never include patient data or ePHI in screenshots sent to customer support. - **Patient Portals:** Airtable cannot be used as a direct patient portal. - **Integrations & Automations:** External integrations and automated emails must independently meet HIPAA security standards.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) If you'd like, let me know: - What **tier of Airtable** your organization currently uses - What **kind of data or workflow** you plan to build I can help you determine if the Enterprise tier fits your needs or suggest alternative paths. Airtable is HIPAA compliant only for customers on the highest-tier Enterprise Scale plan who sign a Business Associate Agreement (BAA) through Airtable's Health Information Exhibit. Users on Free, Team, or Business plans are strictly prohibited from storing electronic Protected Health Information (ePHI). A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Enterprise Scale Plan: Must be actively subscribed to Airtable's Enterprise Scale tier. Executed BAA: Must sign the official Health Information Exhibit containing the Business Associate Addendum. Lower Tiers: Not available or compliant on standard or self-serve paid tiers. - **Enterprise Scale Plan:** Must be actively subscribed to Airtable's Enterprise Scale tier. - **Executed BAA:** Must sign the official Health Information Exhibit containing the Business Associate Addendum. - **Lower Tiers:** Not available or compliant on standard or self-serve paid tiers.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP... Data Location: ePHI must only reside inside record fields within specific Airtable bases or interfaces. Airtable AI: Do not use or enable Airtable AI in workspaces holding ePHI unless specific supplemental health terms are accepted. Support Tickets: Never include patient data or ePHI in screenshots sent to customer support. Patient Portals: Airtable cannot be used as a direct patient portal. Integrations & Automations: External integrations and automated emails must independently meet HIPAA security standards. - **Data Location:** ePHI must only reside inside record fields within specific Airtable bases or interfaces. - **Airtable AI:** Do not use or enable Airtable AI in workspaces holding ePHI unless specific supplemental health terms are accepted. - **Support Tickets:** Never include patient data or ePHI in screenshots sent to customer support. - **Patient Portals:** Airtable cannot be used as a direct patient portal. - **Integrations & Automations:** External integrations and automated emails must independently meet HIPAA security standards.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Yes, Airtable is HIPAA compliant **only** for customers on the **Enterprise Scale plan** who sign Airtable's Health Information Exhibit , which includes a Business Associate Agreement (BAA). It is **not** HIPAA compliant on Free, Team, or Business plans.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Plan and Agreement Requirements - **Enterprise Scale Plan:** Required to unlock and use Airtable's HIPAA compliance capabilities. - **Business Associate Agreement (BAA):** Must be executed via Airtable's Health Information Exhibit. - **Strict Prohibition:** Storing protected health information (PHI) or electronic protected health information (ePHI) on non-Enterprise plans violates terms.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.paubox.com/blog/airtable-hipaa-compliant) Key Usage Restrictions and Rules - **Data Location:** ePHI must be stored strictly within standard records inside Airtable bases or interfaces. - **Airtable AI:** AI features are excluded from HIPAA coverage and must not be used in workspaces containing PHI unless specific supplemental terms are accepted and supported. - **Support & Communications:** Do not send screenshots or tickets containing medical information or ePHI to customer support. - **Use Cases:** Airtable cannot currently be used to build or function as a patient portal. - **Integrations:** Third-party integrations must be disabled or independently verified as HIPAA-compliant by your organization.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.knack.com/blog/hipaa-compliance-checklist-no-code/) If you'd like, let me know: - What **tier of Airtable** your organization currently uses - What kind of **healthcare workflow or data** you plan to manage I can help you evaluate whether Airtable fits your operational setup or if alternative tools are a better match. Yes, Airtable is HIPAA compliant only for customers on the Enterprise Scale plan who sign Airtable's Health Information Exhibit, which includes a Business Associate Agreement (BAA). It is not HIPAA compliant on Free, Team, or Business plans. Table_title: Understanding HIPAA at Airtable Table_content: | Plan availability | | --- | | Enterprise Scale plans only | ... A bu... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Enterprise Scale Plan: Required to unlock and use Airtable's HIPAA compliance capabilities. Business Associate Agreement (BAA): Must be executed via Airtable's Health Information Exhibit. Strict Prohibition: Storing protected health information (PHI) or electronic protected health information (ePHI) on non-Enterprise plans violates terms. - **Enterprise Scale Plan:** Required to unlock and use Airtable's HIPAA compliance capabilities. - **Business Associate Agreement (BAA):** Must be executed via Airtable's Health Information Exhibit. - **Strict Prohibition:** Storing protected health information (PHI) or electronic protected health information (ePHI) on non-Enterprise plans violates terms.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.paubox.com/blog/airtable-hipaa-compliant) What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are... Data Location: ePHI must be stored strictly within standard records inside Airtable bases or interfaces. Airtable AI: AI features are excluded from HIPAA coverage and must not be used in workspaces containing PHI unless specific supplemental terms are accepted and supported. Support & Communications: Do not send screenshots or tickets containing medical information or ePHI to customer support. Use Cases: Airtable cannot currently be used to build or function as a patient portal. Integrations: Third-party integrations must be disabled or independently verified as HIPAA-compliant by your organization. - **Data Location:** ePHI must be stored strictly within standard records inside Airtable bases or interfaces. - **Airtable AI:** AI features are excluded from HIPAA coverage and must not be used in workspaces containing PHI unless specific supplemental terms are accepted and supported. - **Support & Communications:** Do not send screenshots or tickets containing medical information or ePHI to customer support. - **Use Cases:** Airtable cannot currently be used to build or function as a patient portal. - **Integrations:** Third-party integrations must be disabled or independently verified as HIPAA-compliant by your organization.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.knack.com/blog/hipaa-compliance-checklist-no-code/) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Do AI features in no-code platforms need to be HIPAA-compliant separately? Yes, and importantly, this is one of the most commonly ... Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

**Yes, but only under strict conditions.** Airtable can support HIPAA compliance for electronic Protected Health Information (ePHI), but it is **not** HIPAA compliant by default on standard accounts.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.facebook.com/KnackHQ/posts/airtable-is-great-until-it-is-patient-dataon-standard-plans-there-is-no-baa-the-/1661739832624383/)[[3]](https://community.airtable.com/announcements-6/airtable-is-now-hipaa-compliant-1542)[[4]](https://www.reddit.com/r/Airtable/comments/d9btne/was_about_to_use_airtable_but_no_hipaa_compliant/)[[5]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) The critical requirements and boundaries for using Airtable with patient data include: - **Enterprise Scale Plan Required:** HIPAA support and the option to execute a Business Associate Agreement (BAA) are restricted exclusively to Airtable’s highest-tier **Enterprise Scale** plan. Free, Team, and Business plans are strictly non-compliant and prohibited for storing PHI.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Signed Business Associate Agreement (BAA):** You must formally execute Airtable’s **Health Information Exhibit** , which incorporates their BAA, via your Airtable account representative before any patient data enters the platform.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Strict Where-Data-Lives Boundaries:** Under Airtable's compliance rules, ePHI and medical data **must only live inside record cells** within designated bases or interfaces.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Feature Exclusions:** - **Airtable AI:** Cannot be used or enabled in workspaces containing ePHI unless specific health supplemental terms are met (and generally restricted from touching raw PHI). - **Automations & Email:** You cannot expose ePHI in unencrypted or non-compliant automated notification emails. - **Customer Support:** You must never include patient data or screenshots containing PHI in support tickets. - **Patient Portals:** Airtable explicitly prohibits using its native features as a direct patient-facing portal.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Third-Party Integrations:** Any connected tool (like Zapier, Slack, or custom APIs) must also be HIPAA-compliant and covered by its own BAA; a single unencrypted link breaks the chain of custody.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[2]](https://curogram.com/blog/mental-health/hipaa-compliant-texting-for-behavioral-health)[[3]](https://www.mindbowser.com/hipaa-compliant-app-with-flutter/)[[4]](https://www.slicktext.com/hipaa-compliant-texting) Review details on the [Airtable HIPAA Compliance Overview](https://www.airtable.com/company/hipaa-airtable) or check their explicit rules in the [Airtable Health Information Datasheet](https://www.airtable.com/company/health-info-datasheet).[[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://www.nudgesecurity.com/security-profile/airtable-com)[[3]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) If you're planning a setup, tell me: - What **tier/plan** your organization currently uses - Whether you plan to connect **external integrations or APIs** I can help you evaluate if Airtable fits your workflow or if a dedicated backend is safer. Yes, but only under strict conditions. Airtable can support HIPAA compliance for electronic Protected Health Information (ePHI), but it is not HIPAA compliant by default on standard accounts. Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Airtable is great, until it is patient data. On standard plans there is no BAA. The HIPAA add-on is enterprise-only, and even then... Airtable is now HIPAA compliant for its Enterprise Scale customers. Airtable's platform is designed to help healthcare providers a... Not sure why they're so slack on this. Smartsheet is HIPAA compliant, but there's some hoops you have to jump through and it's not... HIPAA: The Part Everyone Gets Wrong Every couple of weeks a client asks us, "Is Airtable HIPAA compliant?" The honest answer is "i... The critical requirements and boundaries for using Airtable with patient data include: Enterprise Scale Plan Required: HIPAA support and the option to execute a Business Associate Agreement (BAA) are restricted exclusively to Airtable’s highest-tier Enterprise Scale plan. Free, Team, and Business plans are strictly non-compliant and prohibited for storing PHI. Signed Business Associate Agreement (BAA): You must formally execute Airtable’s Health Information Exhibit, which incorporates their BAA, via your Airtable account representative before any patient data enters the platform. Strict Where-Data-Lives Boundaries: Under Airtable's compliance rules, ePHI and medical data must only live inside record cells within designated bases or interfaces. Feature Exclusions:Airtable AI: Cannot be used or enabled in workspaces containing ePHI unless specific health supplemental terms are met (and generally restricted from touching raw PHI). Automations & Email: You cannot expose ePHI in unencrypted or non-compliant automated notification emails. Customer Support: You must never include patient data or screenshots containing PHI in support tickets. Patient Portals: Airtable explicitly prohibits using its native features as a direct patient-facing portal. Airtable AI: Cannot be used or enabled in workspaces containing ePHI unless specific health supplemental terms are met (and generally restricted from touching raw PHI). Automations & Email: You cannot expose ePHI in unencrypted or non-compliant automated notification emails. Customer Support: You must never include patient data or screenshots containing PHI in support tickets. Patient Portals: Airtable explicitly prohibits using its native features as a direct patient-facing portal. Third-Party Integrations: Any connected tool (like Zapier, Slack, or custom APIs) must also be HIPAA-compliant and covered by its own BAA; a single unencrypted link breaks the chain of custody. - **Enterprise Scale Plan Required:** HIPAA support and the option to execute a Business Associate Agreement (BAA) are restricted exclusively to Airtable’s highest-tier **Enterprise Scale** plan. Free, Team, and Business plans are strictly non-compliant and prohibited for storing PHI.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Signed Business Associate Agreement (BAA):** You must formally execute Airtable’s **Health Information Exhibit** , which incorporates their BAA, via your Airtable account representative before any patient data enters the platform.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Strict Where-Data-Lives Boundaries:** Under Airtable's compliance rules, ePHI and medical data **must only live inside record cells** within designated bases or interfaces.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Feature Exclusions:** - **Airtable AI:** Cannot be used or enabled in workspaces containing ePHI unless specific health supplemental terms are met (and generally restricted from touching raw PHI). - **Automations & Email:** You cannot expose ePHI in unencrypted or non-compliant automated notification emails. - **Customer Support:** You must never include patient data or screenshots containing PHI in support tickets. - **Patient Portals:** Airtable explicitly prohibits using its native features as a direct patient-facing portal.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Third-Party Integrations:** Any connected tool (like Zapier, Slack, or custom APIs) must also be HIPAA-compliant and covered by its own BAA; a single unencrypted link breaks the chain of custody.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[2]](https://curogram.com/blog/mental-health/hipaa-compliant-texting-for-behavioral-health)[[3]](https://www.mindbowser.com/hipaa-compliant-app-with-flutter/)[[4]](https://www.slicktext.com/hipaa-compliant-texting) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Off-load the PHI, Keep Only “Breadcrumbs” in Airtable * Shape-shift PHI into opaque IDs. Store patient details in a hardened backe... Each tool that handles PHI on your behalf needs its own BAA. This includes your texting platform, even if it integrates with your ... 4⃣ HIPAA ( Health Insurance Portability and Accountability Act ) -Compliant APIs Ensure that any third-party APIs you integrate ar... Yes, our API enables secure, HIPAA compliant messaging for your organization. When connecting with third-party services like Zapie... Review details on the Airtable HIPAA Compliance Overview or check their explicit rules in the Airtable Health Information Datasheet. Review details on the [Airtable HIPAA Compliance Overview](https://www.airtable.com/company/hipaa-airtable) or check their explicit rules in the [Airtable Health Information Datasheet](https://www.airtable.com/company/health-info-datasheet).[[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://www.nudgesecurity.com/security-profile/airtable-com)[[3]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) Your organization's use of Airtable must comply with the requirements listed in the Health Information Datasheet (opens in new tab... Review the complete security profile for Airtable, including supply chain details, privacy policy, terms of service, GDPR complian... Airtable's terms prohibit storing ePHI on the Free, Team, and Business plans, so anyone below Enterprise Scale should keep treatin... If you're planning a setup, tell me: What tier/plan your organization currently uses Whether you plan to connect external integrations or APIs - What **tier/plan** your organization currently uses - Whether you plan to connect **external integrations or APIs** I can help you evaluate if Airtable fits your workflow or if a dedicated backend is safer.

Yes, Airtable can be HIPAA compliant, but only for **Enterprise Scale** customers who execute a specific Business Associate Agreement (BAA) through the platform's Health Information Exhibit . Free, Team, and Business plans do not support HIPAA compliance or the signing of a BAA.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/)[[3]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Even on an Enterprise plan, strict usage rules apply to Protected Health Information (PHI):[](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) [[1]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) - **Where data lives:** PHI can only be stored in standard "Records" within "Bases". - **Exclusions:** Airtable AI cannot process PHI. - **Communications:** You cannot use Airtable as a patient portal, and automated emails cannot contain PHI.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) Organizations must also ensure any third-party tools or integrations used with their workspace meet HIPAA standards. You can review the full platform specifications on the [Airtable Health Information Datasheet](https://www.airtable.com/company/health-info-datasheet).If you're evaluating Airtable for your healthcare organization, could you tell me: - What **specific plan** (e.g., Enterprise Scale) is your organization considering? - Are you looking to build **internal workflows** or connect Airtable to other **electronic health record (EHR) systems**? Yes, Airtable can be HIPAA compliant, but only for Enterprise Scale customers who execute a specific Business Associate Agreement (BAA) through the platform's Health Information Exhibit. Free, Team, and Business plans do not support HIPAA compliance or the signing of a BAA. A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Key takeaways * Airtable HIPAA support is available only on the Enterprise Scale plan. Free, Team, and Business plan customers can... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Even on an Enterprise plan, strict usage rules apply to Protected Health Information (PHI): Even on an Enterprise plan, strict usage rules apply to Protected Health Information (PHI):[](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) [[1]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) In healthcare, Airtable has many potential uses. It could be used to keep track of appointments and consultant availability, strea... Where data lives: PHI can only be stored in standard "Records" within "Bases". Exclusions: Airtable AI cannot process PHI. Communications: You cannot use Airtable as a patient portal, and automated emails cannot contain PHI. - **Where data lives:** PHI can only be stored in standard "Records" within "Bases". - **Exclusions:** Airtable AI cannot process PHI. - **Communications:** You cannot use Airtable as a patient portal, and automated emails cannot contain PHI.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Organizations must also ensure any third-party tools or integrations used with their workspace meet HIPAA standards. You can review the full platform specifications on the Airtable Health Information Datasheet. Organizations must also ensure any third-party tools or integrations used with their workspace meet HIPAA standards. You can review the full platform specifications on the [Airtable Health Information Datasheet](https://www.airtable.com/company/health-info-datasheet). Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Yes, Airtable can be HIPAA compliant, but only for **Enterprise Scale** plan subscribers who execute a formal [Business Associate Agreement (BAA)](https://www.airtable.com/company/hipaa-airtable) via Airtable's Health Information Exhibit . It is strictly prohibited to store protected health information (PHI) on Free, Team, or Business plans.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Key Requirements & Restrictions - **Plan Tier:** Must be on the Enterprise Scale plan with an active BAA. - **Storage Boundaries:** ePHI must only be stored within standard records inside bases or interfaces. - **Exclusions:** You cannot use Airtable AI with PHI (unless specific supplemental terms are signed), send PHI through automated outgoing emails, share PHI with customer support, or use Airtable as a patient portal. - **Integrations:** Any connected third-party tools or integrations must independently be HIPAA compliant.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/)[[3]](https://www.paubox.com/blog/airtable-hipaa-compliant)[[4]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-plan-requirements-and-using-airtable-for-phi) If you'd like, let me know: - What **tier of Airtable** your organization currently uses - What **type of patient data** you plan to track I can help you evaluate your workflow restrictions or alternative setups. Yes, Airtable can be HIPAA compliant, but only for Enterprise Scale plan subscribers who execute a formal Business Associate Agreement (BAA) via Airtable's Health Information Exhibit. It is strictly prohibited to store protected health information (PHI) on Free, Team, or Business plans. A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Plan Tier: Must be on the Enterprise Scale plan with an active BAA. Storage Boundaries: ePHI must only be stored within standard records inside bases or interfaces. Exclusions: You cannot use Airtable AI with PHI (unless specific supplemental terms are signed), send PHI through automated outgoing emails, share PHI with customer support, or use Airtable as a patient portal. Integrations: Any connected third-party tools or integrations must independently be HIPAA compliant. - **Plan Tier:** Must be on the Enterprise Scale plan with an active BAA. - **Storage Boundaries:** ePHI must only be stored within standard records inside bases or interfaces. - **Exclusions:** You cannot use Airtable AI with PHI (unless specific supplemental terms are signed), send PHI through automated outgoing emails, share PHI with customer support, or use Airtable as a patient portal. - **Integrations:** Any connected third-party tools or integrations must independently be HIPAA compliant.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/)[[3]](https://www.paubox.com/blog/airtable-hipaa-compliant)[[4]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-plan-requirements-and-using-airtable-for-phi) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... In healthcare, Airtable has many potential uses. It could be used to keep track of appointments and consultant availability, strea... What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are... Does Airtable require a BAA for HIPAA compliance? Yes. You must have a fully executed Business Associate Agreement—often provided ... Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Airtable is HIPAA compliant **only** for Enterprise Scale plan customers who execute a formal Business Associate Agreement (BAA) via Airtable's Health Information Exhibit . Users on Free, Team, or Business plans are strictly prohibited from storing protected health information (ePHI).[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[3]](https://www.paubox.com/blog/airtable-hipaa-compliant)Plan and Agreement Requirements - **Enterprise Scale Plan:** Required to access and enable HIPAA-compliant features. - **Business Associate Agreement (BAA):** Must be signed through Airtable's Health Information Exhibit. - **Lower Tiers:** Not eligible for a BAA or ePHI storage. You can review [HIPAA at Airtable](https://www.airtable.com/company/hipaa-airtable) to see an overview of their security program.[](https://www.airtable.com/company/hipaa-airtable) [[1]](https://www.airtable.com/company/hipaa-airtable)[[2]](https://www.accountablehq.com/post/airtable-hipaa-compliance-baa-security-features-and-what-to-know-in-2026)[[3]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) Platform Usage Restrictions - **Data Location:** ePHI must be stored exclusively inside records within Airtable bases or interfaces. - **Support Boundaries:** Do not share ePHI or medical details in screenshots, support tickets, or interactions with Airtable customer support. - **Airtable AI:** Cannot be used or enabled where ePHI is stored unless explicit supplemental AI terms for health info are accepted. - **Automations & Portals:** Cannot use automated emails containing PHI or use Airtable as a patient portal. - **Integrations:** Any connected third-party tools or integrations must independently support and maintain HIPAA compliance. - Read the official setup guidelines on [Understanding HIPAA at Airtable](https://support.airtable.com/docs/understanding-hipaa-at-airtable). - Learn more from the announcement on the [Airtable Community](https://community.airtable.com/announcements-6/airtable-is-now-hipaa-compliant-1542).[[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/)[[3]](https://community.airtable.com/announcements-6/airtable-is-now-hipaa-compliant-1542) If you'd like, let me know: - Your **current Airtable plan** - **What type of healthcare data** you plan to store I can help you determine the next steps for your workflow. Airtable is HIPAA compliant only for Enterprise Scale plan customers who execute a formal Business Associate Agreement (BAA) via Airtable's Health Information Exhibit. Users on Free, Team, or Business plans are strictly prohibited from storing protected health information (ePHI). A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are... Enterprise Scale Plan: Required to access and enable HIPAA-compliant features. Business Associate Agreement (BAA): Must be signed through Airtable's Health Information Exhibit. Lower Tiers: Not eligible for a BAA or ePHI storage. You can review HIPAA at Airtable to see an overview of their security program. - **Enterprise Scale Plan:** Required to access and enable HIPAA-compliant features. - **Business Associate Agreement (BAA):** Must be signed through Airtable's Health Information Exhibit. - **Lower Tiers:** Not eligible for a BAA or ePHI storage. You can review [HIPAA at Airtable](https://www.airtable.com/company/hipaa-airtable) to see an overview of their security program.[](https://www.airtable.com/company/hipaa-airtable) [[1]](https://www.airtable.com/company/hipaa-airtable)[[2]](https://www.accountablehq.com/post/airtable-hipaa-compliance-baa-security-features-and-what-to-know-in-2026)[[3]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) Airtable's HIPAA program is designed to help customers use their product in compliance with the Health Insurance Portability and A... Is HIPAA compliance available on all Airtable plans? No. HIPAA support requires an executed BAA and is generally available to ente... Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP... Data Location: ePHI must be stored exclusively inside records within Airtable bases or interfaces. Support Boundaries: Do not share ePHI or medical details in screenshots, support tickets, or interactions with Airtable customer support. Airtable AI: Cannot be used or enabled where ePHI is stored unless explicit supplemental AI terms for health info are accepted. Automations & Portals: Cannot use automated emails containing PHI or use Airtable as a patient portal. Integrations: Any connected third-party tools or integrations must independently support and maintain HIPAA compliance. Read the official setup guidelines on Understanding HIPAA at Airtable. Learn more from the announcement on the Airtable Community. - **Data Location:** ePHI must be stored exclusively inside records within Airtable bases or interfaces. - **Support Boundaries:** Do not share ePHI or medical details in screenshots, support tickets, or interactions with Airtable customer support. - **Airtable AI:** Cannot be used or enabled where ePHI is stored unless explicit supplemental AI terms for health info are accepted. - **Automations & Portals:** Cannot use automated emails containing PHI or use Airtable as a patient portal. - **Integrations:** Any connected third-party tools or integrations must independently support and maintain HIPAA compliance. - Read the official setup guidelines on [Understanding HIPAA at Airtable](https://support.airtable.com/docs/understanding-hipaa-at-airtable). - Learn more from the announcement on the [Airtable Community](https://community.airtable.com/announcements-6/airtable-is-now-hipaa-compliant-1542).[[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/)[[3]](https://community.airtable.com/announcements-6/airtable-is-now-hipaa-compliant-1542) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... In healthcare, Airtable has many potential uses. It could be used to keep track of appointments and consultant availability, strea... Airtable is now HIPAA compliant for its Enterprise Scale customers. Airtable's platform is designed to help healthcare providers a...

Airtable is HIPAA compliant **only** for Enterprise Scale plan users who sign a formal Business Associate Agreement (BAA) via Airtable's Health Information Exhibit . It is strictly prohibited to store patient data or protected health information (PHI) on Free, Team, or Business plans.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Requirements and Plan Rules - **Enterprise Scale Plan:** Required to unlock and support HIPAA-compliant workflows. - **Business Associate Agreement (BAA):** Must be executed directly with Airtable through their Health Information Exhibit. - **Lower Tiers:** Free, Team, and Business tier accounts do not support or allow ePHI storage.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) Usage Boundaries and Limitations - **Where PHI Lives:** Patient data must be kept strictly within compliant record fields inside your bases. - **Excluded Features:** Airtable AI, automated external emails, and standard customer support channels are excluded from the BAA scope and cannot process PHI. - **Integrations:** Any third-party tools or automations connected to your bases must also independently meet HIPAA standards.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) If you want to proceed, tell me: - What **tier** of Airtable is your team currently using? - What **kind of patient data** do you plan to track? I can help you review your setup or look at alternative tools. Airtable is HIPAA compliant only for Enterprise Scale plan users who sign a formal Business Associate Agreement (BAA) via Airtable's Health Information Exhibit. It is strictly prohibited to store patient data or protected health information (PHI) on Free, Team, or Business plans. HIPAA, or the Health Insurance Portability and Accountability Act of 1996, is a regulation issued by the U.S. Department of Health... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Enterprise Scale Plan: Required to unlock and support HIPAA-compliant workflows. Business Associate Agreement (BAA): Must be executed directly with Airtable through their Health Information Exhibit. Lower Tiers: Free, Team, and Business tier accounts do not support or allow ePHI storage. - **Enterprise Scale Plan:** Required to unlock and support HIPAA-compliant workflows. - **Business Associate Agreement (BAA):** Must be executed directly with Airtable through their Health Information Exhibit. - **Lower Tiers:** Free, Team, and Business tier accounts do not support or allow ePHI storage.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) Where PHI Lives: Patient data must be kept strictly within compliant record fields inside your bases. Excluded Features: Airtable AI, automated external emails, and standard customer support channels are excluded from the BAA scope and cannot process PHI. Integrations: Any third-party tools or automations connected to your bases must also independently meet HIPAA standards. - **Where PHI Lives:** Patient data must be kept strictly within compliant record fields inside your bases. - **Excluded Features:** Airtable AI, automated external emails, and standard customer support channels are excluded from the BAA scope and cannot process PHI. - **Integrations:** Any third-party tools or automations connected to your bases must also independently meet HIPAA standards.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Yes, Airtable can be HIPAA compliant, but strictly for **Enterprise Scale** plan customers who sign a formal **Business Associate Agreement (BAA)** via Airtable's Health Information Exhibit . Storing protected health information (PHI) on Free, Team, or Business plans is strictly prohibited by Airtable terms.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Requirements and Setup - **Plan Tier:** Must be on the [Airtable Enterprise Scale Plan](https://www.airtable.com/company/health-info-datasheet). - **Executed BAA:** Must complete and sign Airtable’s Health Information Exhibit containing the BAA. - **Shared Responsibility:** You must properly configure administrative controls like Single Sign-On (SSO), audit logs, and access permissions.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[2]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) Restrictions and Limitations - **Feature Boundaries:** PHI may only reside within secure base records. - **Excluded Tools:** Airtable AI, standard automated emails, and unsupported third-party integrations are excluded from the BAA coverage and cannot process PHI. - **Support Limits:** Regular customer support channels cannot be used to transmit or troubleshoot raw PHI data.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) Yes, Airtable can be HIPAA compliant, but strictly for Enterprise Scale plan customers who sign a formal Business Associate Agreement (BAA) via Airtable's Health Information Exhibit. Storing protected health information (PHI) on Free, Team, or Business plans is strictly prohibited by Airtable terms. HIPAA, or the Health Insurance Portability and Accountability Act of 1996, is a regulation issued by the U.S. Department of Health... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Plan Tier: Must be on the Airtable Enterprise Scale Plan. Executed BAA: Must complete and sign Airtable’s Health Information Exhibit containing the BAA. Shared Responsibility: You must properly configure administrative controls like Single Sign-On (SSO), audit logs, and access permissions. - **Plan Tier:** Must be on the [Airtable Enterprise Scale Plan](https://www.airtable.com/company/health-info-datasheet). - **Executed BAA:** Must complete and sign Airtable’s Health Information Exhibit containing the BAA. - **Shared Responsibility:** You must properly configure administrative controls like Single Sign-On (SSO), audit logs, and access permissions.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[2]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... Is Airtable Technically HIPAA-Compliant? * Enterprise-only paywall. HIPAA support didn't exist until April 2024 and is still gated... Feature Boundaries: PHI may only reside within secure base records. Excluded Tools: Airtable AI, standard automated emails, and unsupported third-party integrations are excluded from the BAA coverage and cannot process PHI. Support Limits: Regular customer support channels cannot be used to transmit or troubleshoot raw PHI data. - **Feature Boundaries:** PHI may only reside within secure base records. - **Excluded Tools:** Airtable AI, standard automated emails, and unsupported third-party integrations are excluded from the BAA coverage and cannot process PHI. - **Support Limits:** Regular customer support channels cannot be used to transmit or troubleshoot raw PHI data.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Yes, Airtable is HIPAA compliant **only** for customers on the **Enterprise Scale plan** who sign a formal **Business Associate Agreement (BAA)** via Airtable's Health Information Exhibit . Storing protected health information (PHI) on Free, Team, or Business plans is strictly prohibited by Airtable terms.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://www.airtable.com/company/health-info-datasheet)[[3]](https://www.paubox.com/blog/airtable-hipaa-compliant)[[4]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Requirements for HIPAA Compliance on Airtable - **Enterprise Scale Plan:** You must upgrade to Airtable's highest organizational tier. - **Executed BAA:** You must sign Airtable’s official Health Information Exhibit containing the Business Associate Addendum. - **Proper Configuration:** Admins must enforce security controls such as Enterprise Key Management (EKM), SAML SSO, and audit logs.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[2]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) Restrictions and Limitations - **Disable AI Features:** Airtable AI features must be turned off in any workspaces handling electronic protected health information (ePHI). - **Third-Party Integrations:** All connected extensions, webhooks, or external integrations must also be fully HIPAA compliant. - **Support Boundaries:** ePHI cannot be shared with Airtable support during troubleshooting interactions.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.blaze.tech/post/is-airtable-hipaa-compliant) If you'd like, let me know: - What **tier** your organization is currently using - What **type of patient data** you plan to track I can help you review your setup requirements or explore alternative tools. Yes, Airtable is HIPAA compliant only for customers on the Enterprise Scale plan who sign a formal Business Associate Agreement (BAA) via Airtable's Health Information Exhibit. Storing protected health information (PHI) on Free, Team, or Business plans is strictly prohibited by Airtable terms. HIPAA, or the Health Insurance Portability and Accountability Act of 1996, is a regulation issued by the U.S. Department of Health... To begin the Health Information Exhibit execution process or request additional information, please contact a member of your accou... What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Enterprise Scale Plan: You must upgrade to Airtable's highest organizational tier. Executed BAA: You must sign Airtable’s official Health Information Exhibit containing the Business Associate Addendum. Proper Configuration: Admins must enforce security controls such as Enterprise Key Management (EKM), SAML SSO, and audit logs. - **Enterprise Scale Plan:** You must upgrade to Airtable's highest organizational tier. - **Executed BAA:** You must sign Airtable’s official Health Information Exhibit containing the Business Associate Addendum. - **Proper Configuration:** Admins must enforce security controls such as Enterprise Key Management (EKM), SAML SSO, and audit logs.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[2]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP... Is Airtable Technically HIPAA-Compliant? * Enterprise-only paywall. HIPAA support didn't exist until April 2024 and is still gated... Disable AI Features: Airtable AI features must be turned off in any workspaces handling electronic protected health information (ePHI). Third-Party Integrations: All connected extensions, webhooks, or external integrations must also be fully HIPAA compliant. Support Boundaries: ePHI cannot be shared with Airtable support during troubleshooting interactions. - **Disable AI Features:** Airtable AI features must be turned off in any workspaces handling electronic protected health information (ePHI). - **Third-Party Integrations:** All connected extensions, webhooks, or external integrations must also be fully HIPAA compliant. - **Support Boundaries:** ePHI cannot be shared with Airtable support during troubleshooting interactions.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.blaze.tech/post/is-airtable-hipaa-compliant) Sign a Business Associate Agreement (BAA): You must enter into a formal contract with Airtable to ensure that any protected health... Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Yes, Airtable can be HIPAA compliant, but **only for Enterprise Scale customers** who enter into a specific agreement with them . It is not HIPAA compliant by default on lower-tier plans (Free, Team, or Business).[](https://community.airtable.com/announcements-6/airtable-is-now-hipaa-compliant-1542) [[1]](https://community.airtable.com/announcements-6/airtable-is-now-hipaa-compliant-1542)[[2]](https://www.airtable.com/company/health-info-datasheet)[[3]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) Here are the key details regarding HIPAA compliance in Airtable as of 2026: - **Requirement: Enterprise Scale Plan & BAA:** To use Airtable for Protected Health Information (PHI), you must be on the **Enterprise Scale plan** and execute a **Health Information Exhibit** , which includes a Business Associate Addendum (BAA).[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.complysaas.com/compliance/airtable) - **Restricted Usage:** Even with a BAA, PHI must only be stored within specifically configured Airtable bases. It should not be used in non-compliant features like certain automations, AI features, or third-party integrations that are not covered.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Security Controls:** Airtable provides specialized security features for HIPAA compliance, such as Enterprise Key Management (EKM), audit logs, and Enterprise Single Sign-On (SSO).[](https://www.paubox.com/blog/airtable-hipaa-compliant) [[1]](https://www.paubox.com/blog/airtable-hipaa-compliant)[[2]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) - **Shared Responsibility:** You are responsible for ensuring your team configures Airtable correctly, enforces [least-privilege access](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) , and properly manages integrations.[](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) [[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) If you are not on an Enterprise Scale plan, you cannot legally use Airtable to store patient data, as stated in their Health Information Datasheet.[](https://www.airtable.com/company/health-info-datasheet) Are you currently on an **Enterprise Scale plan** , or are you evaluating plans to find the best fit for managing **patient data**? Yes, Airtable can be HIPAA compliant, but only for Enterprise Scale customers who enter into a specific agreement with them. It is not HIPAA compliant by default on lower-tier plans (Free, Team, or Business). Airtable is now HIPAA compliant for its Enterprise Scale customers. Airtable's platform is designed to help healthcare providers a... To begin the Health Information Exhibit execution process or request additional information, please contact a member of your accou... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Here are the key details regarding HIPAA compliance in Airtable as of 2026: Requirement: Enterprise Scale Plan & BAA: To use Airtable for Protected Health Information (PHI), you must be on the Enterprise Scale plan and execute a Health Information Exhibit, which includes a Business Associate Addendum (BAA). Restricted Usage: Even with a BAA, PHI must only be stored within specifically configured Airtable bases. It should not be used in non-compliant features like certain automations, AI features, or third-party integrations that are not covered. Security Controls: Airtable provides specialized security features for HIPAA compliance, such as Enterprise Key Management (EKM), audit logs, and Enterprise Single Sign-On (SSO). Shared Responsibility: You are responsible for ensuring your team configures Airtable correctly, enforces least-privilege access, and properly manages integrations. - **Requirement: Enterprise Scale Plan & BAA:** To use Airtable for Protected Health Information (PHI), you must be on the **Enterprise Scale plan** and execute a **Health Information Exhibit** , which includes a Business Associate Addendum (BAA).[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.complysaas.com/compliance/airtable) - **Restricted Usage:** Even with a BAA, PHI must only be stored within specifically configured Airtable bases. It should not be used in non-compliant features like certain automations, AI features, or third-party integrations that are not covered.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Security Controls:** Airtable provides specialized security features for HIPAA compliance, such as Enterprise Key Management (EKM), audit logs, and Enterprise Single Sign-On (SSO).[](https://www.paubox.com/blog/airtable-hipaa-compliant) [[1]](https://www.paubox.com/blog/airtable-hipaa-compliant)[[2]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) - **Shared Responsibility:** You are responsible for ensuring your team configures Airtable correctly, enforces [least-privilege access](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) , and properly manages integrations.[](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) [[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) HIPAA, BAA, and SOC 2 summary ... Airtable states that HIPAA support is available on Enterprise Scale and that customers intending... What does the Airtable BAA cover? The Airtable BAA is part of the Health Information Exhibit, which supports HIPAA compliance for ... Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP... HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... If you are not on an Enterprise Scale plan, you cannot legally use Airtable to store patient data, as stated in their Health Information Datasheet. If you are not on an Enterprise Scale plan, you cannot legally use Airtable to store patient data, as stated in their Health Information Datasheet.[](https://www.airtable.com/company/health-info-datasheet) Are you currently on an Enterprise Scale plan, or are you evaluating plans to find the best fit for managing patient data ? Are you currently on an **Enterprise Scale plan** , or are you evaluating plans to find the best fit for managing **patient data**? Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Yes, Airtable is HIPAA compliant **only** for customers on the Enterprise Scale plan who have formally signed a [Business Associate Agreement (BAA)](https://support.airtable.com/docs/understanding-hipaa-at-airtable) via Airtable's Health Information Exhibit . It is strictly prohibited to store protected health information (PHI) on Free, Team, or Business plans.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://www.airtable.com/company/health-info-datasheet)[[3]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Requirements and Limitations - **Plan Tier:** Restricted exclusively to the high-tier Enterprise Scale plan.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) - **Contract:** Must execute Airtable's Health Information Exhibit containing the BAA.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) - **Feature Restrictions:** Airtable AI features and certain third-party integrations must be disabled or managed carefully where ePHI is stored.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) - **Shared Responsibility:** Your organization must enforce security configurations like single sign-on (SSO), audit logs, and strict access controls.[](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) [[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) If you'd like to proceed, let me know: - What **tier of Airtable** your organization currently uses - Whether you need help setting up **HIPAA-compliant workflows** or alternative tools Yes, Airtable is HIPAA compliant only for customers on the Enterprise Scale plan who have formally signed a Business Associate Agreement (BAA) via Airtable's Health Information Exhibit. It is strictly prohibited to store protected health information (PHI) on Free, Team, or Business plans. HIPAA, or the Health Insurance Portability and Accountability Act of 1996, is a regulation issued by the U.S. Department of Health... To begin the Health Information Exhibit execution process or request additional information, please contact a member of your accou... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Plan Tier: Restricted exclusively to the high-tier Enterprise Scale plan. Contract: Must execute Airtable's Health Information Exhibit containing the BAA. Feature Restrictions: Airtable AI features and certain third-party integrations must be disabled or managed carefully where ePHI is stored. Shared Responsibility: Your organization must enforce security configurations like single sign-on (SSO), audit logs, and strict access controls. - **Plan Tier:** Restricted exclusively to the high-tier Enterprise Scale plan.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) - **Contract:** Must execute Airtable's Health Information Exhibit containing the BAA.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) - **Feature Restrictions:** Airtable AI features and certain third-party integrations must be disabled or managed carefully where ePHI is stored.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) - **Shared Responsibility:** Your organization must enforce security configurations like single sign-on (SSO), audit logs, and strict access controls.[](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) [[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Yes, **Airtable can be HIPAA compliant** , but only for customers on the **Enterprise Scale plan** who have executed a Business Associate Addendum (BAA).[](https://community.airtable.com/announcements-6/airtable-is-now-hipaa-compliant-1542) [[1]](https://community.airtable.com/announcements-6/airtable-is-now-hipaa-compliant-1542)[[2]](https://support.airtable.com/docs/understanding-hipaa-at-airtable) - **Requirements:** You must be on the Enterprise Scale plan and sign Airtable’s [Health Information Exhibit](https://support.airtable.com/docs/understanding-hipaa-at-airtable) (which includes the BAA).[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Limitation:** Airtable is *not* HIPAA compliant on Free, Team, or Business plans, and storing Protected Health Information (PHI) on these plans is prohibited.[](https://www.airtable.com/company/health-info-datasheet) - **Scope:** The compliance applies to data stored within records and attachments in [Airtable bases](https://www.airtable.com/company/hipaa-airtable) . However, certain features like Airtable AI sit outside the BAA agreement.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) **Key Considerations for HIPAA on Airtable:** - **Enforce Security Policies:** You must configure Single Sign-On (SSO), Audit Logs , and restrict user access (least privilege). - **No PHI in Emails:** The BAA generally covers data in bases, but you must ensure PHI does not appear in automated emails or support tickets. - **Shared Responsibility:** While Airtable provides the secure infrastructure, you are responsible for using the tool appropriately.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) If you're considering this, I can provide: - A **summary of the key differences** between Enterprise Scale and lower plans. - More details on **how to set up audit logs** for compliance monitoring. - Information on **alternative, specialized HIPAA-compliant databases**. Let me know if you need any of these! Yes, Airtable can be HIPAA compliant, but only for customers on the Enterprise Scale plan who have executed a Business Associate Addendum (BAA). Airtable Community +1 Airtable is now HIPAA compliant for its Enterprise Scale customers. Airtable's platform is designed to help healthcare providers a... A BAA is a contract required by HIPAA that formalizes the relationship between a covered entity (such as a healthcare provider or ... Requirements: You must be on the Enterprise Scale plan and sign Airtable’s Health Information Exhibit (which includes the BAA). Airtable +1 Limitation: Airtable is not HIPAA compliant on Free, Team, or Business plans, and storing Protected Health Information (PHI) on these plans is prohibited. Airtable +1 Scope: The compliance applies to data stored within records and attachments in Airtable bases. However, certain features like Airtable AI sit outside the BAA agreement. TeachMeHIPAA - **Requirements:** You must be on the Enterprise Scale plan and sign Airtable’s [Health Information Exhibit](https://support.airtable.com/docs/understanding-hipaa-at-airtable) (which includes the BAA).[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Limitation:** Airtable is *not* HIPAA compliant on Free, Team, or Business plans, and storing Protected Health Information (PHI) on these plans is prohibited.[](https://www.airtable.com/company/health-info-datasheet) - **Scope:** The compliance applies to data stored within records and attachments in [Airtable bases](https://www.airtable.com/company/hipaa-airtable) . However, certain features like Airtable AI sit outside the BAA agreement.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) To begin the Health Information Exhibit execution process or request additional information, please contact a member of your accou... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Key Considerations for HIPAA on Airtable: **Key Considerations for HIPAA on Airtable:** Enforce Security Policies: You must configure Single Sign-On (SSO), Audit Logs, and restrict user access (least privilege). No PHI in Emails: The BAA generally covers data in bases, but you must ensure PHI does not appear in automated emails or support tickets. Shared Responsibility: While Airtable provides the secure infrastructure, you are responsible for using the tool appropriately. TeachMeHIPAA +1 - **Enforce Security Policies:** You must configure Single Sign-On (SSO), Audit Logs , and restrict user access (least privilege). - **No PHI in Emails:** The BAA generally covers data in bases, but you must ensure PHI does not appear in automated emails or support tickets. - **Shared Responsibility:** While Airtable provides the secure infrastructure, you are responsible for using the tool appropriately.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... If you're considering this, I can provide: A summary of the key differences between Enterprise Scale and lower plans. More details on how to set up audit logs for compliance monitoring. Information on alternative, specialized HIPAA-compliant databases. - A **summary of the key differences** between Enterprise Scale and lower plans. - More details on **how to set up audit logs** for compliance monitoring. - Information on **alternative, specialized HIPAA-compliant databases**. Let me know if you need any of these! Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Yes, Airtable can be HIPAA compliant, but **only** for organizations on the **Enterprise Scale plan** that have formally executed a [Health Information Exhibit](https://www.airtable.com/company/health-info-datasheet) containing a Business Associate Agreement (BAA). Storing protected health information (PHI) on Free, Team, or Business plans is strictly prohibited.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://www.airtable.com/company/health-info-datasheet)[[3]](https://www.paubox.com/blog/airtable-hipaa-compliant)[[4]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Key Requirements for HIPAA Compliance on Airtable: - **Plan Tier:** Must be subscribed to the highest-tier Enterprise Scale plan. - **Executed BAA:** You must sign Airtable’s Health Information Exhibit, which includes the official Business Associate Addendum. - **Feature Restrictions:** Certain out-of-scope tools—such as Airtable AI or unauthorized third-party integrations—must be disabled or managed carefully in workspaces holding electronic Protected Health Information (ePHI). - **Proper Configuration:** Administrators must enforce security controls like SAML SSO, audit logging, and strict role-based access.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[2]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) You can read more specifics directly on [Airtable's HIPAA Program Overview](https://www.airtable.com/company/hipaa-airtable).[[1]](https://www.airtable.com/company/hipaa-airtable)[[2]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)Are you currently on an **Enterprise Scale plan** with Airtable, or are you looking for help evaluating whether to **upgrade or explore alternative platforms**? Yes, Airtable can be HIPAA compliant, but only for organizations on the Enterprise Scale plan that have formally executed a Health Information Exhibit containing a Business Associate Agreement (BAA). Storing protected health information (PHI) on Free, Team, or Business plans is strictly prohibited. Airtable +3 HIPAA, or the Health Insurance Portability and Accountability Act of 1996, is a regulation issued by the U.S. Department of Health... To begin the Health Information Exhibit execution process or request additional information, please contact a member of your accou... What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Plan Tier: Must be subscribed to the highest-tier Enterprise Scale plan. Executed BAA: You must sign Airtable’s Health Information Exhibit, which includes the official Business Associate Addendum. Feature Restrictions: Certain out-of-scope tools—such as Airtable AI or unauthorized third-party integrations—must be disabled or managed carefully in workspaces holding electronic Protected Health Information (ePHI). Proper Configuration: Administrators must enforce security controls like SAML SSO, audit logging, and strict role-based access. Airtable +4 - **Plan Tier:** Must be subscribed to the highest-tier Enterprise Scale plan. - **Executed BAA:** You must sign Airtable’s Health Information Exhibit, which includes the official Business Associate Addendum. - **Feature Restrictions:** Certain out-of-scope tools—such as Airtable AI or unauthorized third-party integrations—must be disabled or managed carefully in workspaces holding electronic Protected Health Information (ePHI). - **Proper Configuration:** Administrators must enforce security controls like SAML SSO, audit logging, and strict role-based access.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[2]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... Is Airtable Technically HIPAA-Compliant? * Enterprise-only paywall. HIPAA support didn't exist until April 2024 and is still gated... You can read more specifics directly on Airtable's HIPAA Program Overview. You can read more specifics directly on [Airtable's HIPAA Program Overview](https://www.airtable.com/company/hipaa-airtable).[[1]](https://www.airtable.com/company/hipaa-airtable)[[2]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) Airtable's HIPAA program is designed to help customers use their product in compliance with the Health Insurance Portability and A... Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP...