hushmail.com

Yes—but only under specific conditions. Airtable can be used in a HIPAA-compliant manner **only if** all of the following are true: - You're on the **Enterprise Scale** plan. - You execute Airtable's **Business Associate Agreement (BAA)** (provided as part of its Health Information Exhibit). - You configure and use the platform in a way that complies with HIPAA's administrative, technical, and physical safeguard requirements. HIPAA compliance depends on both the vendor and your organization's implementation. [www.airtable.com](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com)[support.airtable.com](https://support.airtable.com/docs/hipaa-and-ferpa-compliance?utm_source=chatgpt.com) If you're using: - **Free** - **Team** - **Business** - **Enterprise** (non-Enterprise Scale) then you **should not store protected health information (PHI/ePHI)** in Airtable. Airtable states that HIPAA support is available only for Enterprise Scale customers with the required agreement in place. [www.airtable.com](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com)[support.airtable.com](https://support.airtable.com/docs/hipaa-and-ferpa-compliance?utm_source=chatgpt.com) Some features available with HIPAA-enabled Enterprise Scale accounts include: - Business Associate Agreement (BAA) - Enterprise audit logs - Single sign-on (SSO) - Enterprise Key Management (optional) - Data loss prevention (DLP) integrations - Administrative controls for managing HIPAA settings [www.airtable.com](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com)[support.airtable.com](https://support.airtable.com/docs/hipaa-and-ferpa-compliance?utm_source=chatgpt.com) If your use case involves **patient scheduling, medical records, diagnoses, insurance information, or any other PHI**, make sure your Airtable environment is covered by the BAA before entering that data. If you tell me: - what type of patient data you want to store, and - which Airtable plan you're on, I can help determine whether your planned workflow is likely to meet HIPAA requirements or suggest a more suitable approach.