knack.com/blog/knack-health-vs-airtable-hipaa

**Yes, Airtable can be HIPAA compliant** , but only under very specific conditions, plan tiers, and strict configuration rules.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) 1. Plan Requirement: Enterprise Scale Only Airtable supports HIPAA compliance **only** for customers on the **Enterprise Scale plan**.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - If you are on a **Free, Team, or Business plan** , you are **not** permitted to store Electronic Protected Health Information (ePHI) under any circumstances.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) - To enable HIPAA compliance, Enterprise organizations must execute Airtable's **Health Information Exhibit** , which includes a formal **Business Associate Agreement (BAA)**.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.complysaas.com/compliance/airtable) 2. Strict Boundary Rules for PHI Even with an Enterprise Scale plan and a signed BAA, Airtable enforces rigid boundaries on where and how patient data can live within the platform:[[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) - **In-Scope:** ePHI and medical information may only be stored directly inside **Records within Airtable bases or interfaces**.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Out-of-Scope / Prohibited:** - **Airtable AI:** AI features are completely excluded from the BAA. You must ensure Airtable AI is disabled in any workspace handling PHI. - **Automations & Email:** Outgoing emails triggered by Airtable automations **cannot** contain PHI. - **Customer Support:** You must never include PHI in screenshots, support tickets, or chats with Airtable support. - **Patient Portals:** Airtable explicitly states the platform **cannot** be used as a patient portal.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) 3. Shared Responsibility and Integrations Achieving compliance is a shared-responsibility model. While Airtable provides the necessary technical safeguards (such as Enterprise Key Management, audit logs, SSO, and data loss prevention), **you** are responsible for proper configuration:[](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) [[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[2]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[3]](https://www.blaze.tech/post/is-airtable-hipaa-compliant)[[4]](https://community.airtable.com/announcements-6/airtable-is-now-hipaa-compliant-1542) - Enforcing role-based access controls and the "minimum necessary" standard. - Ensuring any third-party integrations connected to Airtable (like Zapier, Slack, or external APIs) are also HIPAA-compliant and covered under their own BAAs. - Restricting view links and collaborator permissions so unauthorized users cannot access sensitive records.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[2]](https://www.accountablehq.com/post/airtable-hipaa-compliance-baa-security-features-and-what-to-know-in-2026)[[3]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) If you'd like to share **your current Airtable plan** or **what kind of workflow or data** you are hoping to build, I can help you determine the right architectural approach or alternatives. Yes, Airtable can be HIPAA compliant, but only under very specific conditions, plan tiers, and strict configuration rules. Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Airtable is a customizable business management platform with automation capabilities that helps organizations better manage data b... Airtable supports HIPAA compliance only for customers on the Enterprise Scale plan. Airtable supports HIPAA compliance **only** for customers on the **Enterprise Scale plan**.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) If you are on a Free, Team, or Business plan, you are not permitted to store Electronic Protected Health Information (ePHI) under any circumstances. To enable HIPAA compliance, Enterprise organizations must execute Airtable's Health Information Exhibit, which includes a formal Business Associate Agreement (BAA). - If you are on a **Free, Team, or Business plan** , you are **not** permitted to store Electronic Protected Health Information (ePHI) under any circumstances.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) - To enable HIPAA compliance, Enterprise organizations must execute Airtable's **Health Information Exhibit** , which includes a formal **Business Associate Agreement (BAA)**.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.complysaas.com/compliance/airtable) Key takeaways * Airtable HIPAA support is available only on the Enterprise Scale plan. Free, Team, and Business plan customers can... HIPAA, BAA, and SOC 2 summary ... Airtable states that HIPAA support is available on Enterprise Scale and that customers intending... Even with an Enterprise Scale plan and a signed BAA, Airtable enforces rigid boundaries on where and how patient data can live within the platform: Even with an Enterprise Scale plan and a signed BAA, Airtable enforces rigid boundaries on where and how patient data can live within the platform:[[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... In-Scope: ePHI and medical information may only be stored directly inside Records within Airtable bases or interfaces. Out-of-Scope / Prohibited:Airtable AI: AI features are completely excluded from the BAA. You must ensure Airtable AI is disabled in any workspace handling PHI. Automations & Email: Outgoing emails triggered by Airtable automations cannot contain PHI. Customer Support: You must never include PHI in screenshots, support tickets, or chats with Airtable support. Patient Portals: Airtable explicitly states the platform cannot be used as a patient portal. Airtable AI: AI features are completely excluded from the BAA. You must ensure Airtable AI is disabled in any workspace handling PHI. Automations & Email: Outgoing emails triggered by Airtable automations cannot contain PHI. Customer Support: You must never include PHI in screenshots, support tickets, or chats with Airtable support. Patient Portals: Airtable explicitly states the platform cannot be used as a patient portal. - **In-Scope:** ePHI and medical information may only be stored directly inside **Records within Airtable bases or interfaces**.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Out-of-Scope / Prohibited:** - **Airtable AI:** AI features are completely excluded from the BAA. You must ensure Airtable AI is disabled in any workspace handling PHI. - **Automations & Email:** Outgoing emails triggered by Airtable automations **cannot** contain PHI. - **Customer Support:** You must never include PHI in screenshots, support tickets, or chats with Airtable support. - **Patient Portals:** Airtable explicitly states the platform **cannot** be used as a patient portal.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Achieving compliance is a shared-responsibility model. While Airtable provides the necessary technical safeguards (such as Enterprise Key Management, audit logs, SSO, and data loss prevention), you are responsible for proper configuration: Achieving compliance is a shared-responsibility model. While Airtable provides the necessary technical safeguards (such as Enterprise Key Management, audit logs, SSO, and data loss prevention), **you** are responsible for proper configuration:[](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) [[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[2]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[3]](https://www.blaze.tech/post/is-airtable-hipaa-compliant)[[4]](https://community.airtable.com/announcements-6/airtable-is-now-hipaa-compliant-1542) Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP... How to Ensure Airtable Complies with HIPAA Regulation. To make sure your use of Airtable aligns with HIPAA regulations, follow the... * 🩺📈 Exciting news for healthcare providers and organizations! Airtable is now HIPAA compliant and ready to support your critica... Enforcing role-based access controls and the "minimum necessary" standard. Ensuring any third-party integrations connected to Airtable (like Zapier, Slack, or external APIs) are also HIPAA-compliant and covered under their own BAAs. Restricting view links and collaborator permissions so unauthorized users cannot access sensitive records. - Enforcing role-based access controls and the "minimum necessary" standard. - Ensuring any third-party integrations connected to Airtable (like Zapier, Slack, or external APIs) are also HIPAA-compliant and covered under their own BAAs. - Restricting view links and collaborator permissions so unauthorized users cannot access sensitive records.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[2]](https://www.accountablehq.com/post/airtable-hipaa-compliance-baa-security-features-and-what-to-know-in-2026)[[3]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) Off-load the PHI, Keep Only “Breadcrumbs” in Airtable * Shape-shift PHI into opaque IDs. Store patient details in a hardened backe... HIPAA Compliance Requirements for ePHI * Risk analysis and risk management tailored to Airtable data flows and integrations. * Rol... Should You Trust Airtable With Sensitive Data? Our answer, after building hundreds of client Airtable systems: yes, with appropria... If you'd like to share your current Airtable plan or what kind of workflow or data you are hoping to build, I can help you determine the right architectural approach or alternatives. If you'd like to share **your current Airtable plan** or **what kind of workflow or data** you are hoping to build, I can help you determine the right architectural approach or alternatives.

Yes, Airtable is HIPAA compliant **only** for customers on its **Enterprise Scale plan** who sign an official [Airtable Health Information Exhibit](https://www.airtable.com/company/hipaa-airtable) , which includes a Business Associate Agreement (BAA). It is strictly **not** compliant or permitted for patient data (PHI) on Free, Team, or Business plans.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/)[[3]](https://www.paubox.com/blog/airtable-hipaa-compliant)Plan and Agreement Requirements - **Enterprise Scale Plan:** Required to unlock the environment and security controls needed for healthcare data. - **Executed BAA:** You must sign the Health Information Exhibit/BAA directly with Airtable before adding any protected health information (ePHI). - **Lower Tiers Prohibited:** Storing patient data on Free, Team, or Business plans violates terms of service.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) Scope and Restrictions of Airtable's BAA - **Allowed:** Storing ePHI strictly within standard records inside Airtable bases. - **Excluded:** Airtable AI features are completely excluded and cannot be used with patient data. - **Notifications:** Automated emails sent out by Airtable cannot contain PHI. - **Portals:** Airtable cannot be utilized to host a patient-facing portal. - **Integrations:** Third-party extensions, scripts, or integrations must also individually support HIPAA compliance.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) If you'd like, let me know: - What **tier of Airtable** your organization currently uses - What **type of workflow or data** you plan to build I can help you evaluate if Airtable fits your needs or if an alternative tool is better. Yes, Airtable is HIPAA compliant only for customers on its Enterprise Scale plan who sign an official Airtable Health Information Exhibit, which includes a Business Associate Agreement (BAA). It is strictly not compliant or permitted for patient data (PHI) on Free, Team, or Business plans. A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Key takeaways * Airtable HIPAA support is available only on the Enterprise Scale plan. Free, Team, and Business plan customers can... What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are... Enterprise Scale Plan: Required to unlock the environment and security controls needed for healthcare data. Executed BAA: You must sign the Health Information Exhibit/BAA directly with Airtable before adding any protected health information (ePHI). Lower Tiers Prohibited: Storing patient data on Free, Team, or Business plans violates terms of service. - **Enterprise Scale Plan:** Required to unlock the environment and security controls needed for healthcare data. - **Executed BAA:** You must sign the Health Information Exhibit/BAA directly with Airtable before adding any protected health information (ePHI). - **Lower Tiers Prohibited:** Storing patient data on Free, Team, or Business plans violates terms of service.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) Is Airtable Technically HIPAA-Compliant? * Enterprise-only paywall. HIPAA support didn't exist until April 2024 and is still gated... Allowed: Storing ePHI strictly within standard records inside Airtable bases. Excluded: Airtable AI features are completely excluded and cannot be used with patient data. Notifications: Automated emails sent out by Airtable cannot contain PHI. Portals: Airtable cannot be utilized to host a patient-facing portal. Integrations: Third-party extensions, scripts, or integrations must also individually support HIPAA compliance. - **Allowed:** Storing ePHI strictly within standard records inside Airtable bases. - **Excluded:** Airtable AI features are completely excluded and cannot be used with patient data. - **Notifications:** Automated emails sent out by Airtable cannot contain PHI. - **Portals:** Airtable cannot be utilized to host a patient-facing portal. - **Integrations:** Third-party extensions, scripts, or integrations must also individually support HIPAA compliance.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... If you'd like, let me know:What tier of Airtable your organization currently uses What type of workflow or data you plan to build I can help you evaluate if Airtable fits your needs or if an alternative tool is better. If you'd like, let me know: - What **tier of Airtable** your organization currently uses - What **type of workflow or data** you plan to build I can help you evaluate if Airtable fits your needs or if an alternative tool is better. Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Airtable is HIPAA compliant **only** for customers on the custom-priced **Enterprise Scale plan** who sign an official **Health Information Exhibit** and Business Associate Agreement (BAA). Users on Free, Team, or Business plans are strictly prohibited from storing protected health information (PHI).[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[3]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Requirements and Limitations - **Plan Tier:** Restricted exclusively to [Airtable Enterprise Scale](https://www.airtable.com/company/hipaa-airtable) subscriptions. - **Storage Rules:** ePHI must only live inside records within approved bases or interfaces. - **Exclusions:** Airtable AI features and customer support tickets must not contain PHI. - **Usage Restrictions:** The platform cannot be used as a patient portal.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.paubox.com/blog/airtable-hipaa-compliant) If you'd like, let me know: - Your **current Airtable plan** - **What kind of patient data** you plan to track I can help you evaluate your compliance options. Airtable is HIPAA compliant only for customers on the custom-priced Enterprise Scale plan who sign an official Health Information Exhibit and Business Associate Agreement (BAA). Users on Free, Team, or Business plans are strictly prohibited from storing protected health information (PHI). A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Is Airtable Technically HIPAA-Compliant? * Enterprise-only paywall. HIPAA support didn't exist until April 2024 and is still gated... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Plan Tier: Restricted exclusively to Airtable Enterprise Scale subscriptions. Storage Rules: ePHI must only live inside records within approved bases or interfaces. Exclusions: Airtable AI features and customer support tickets must not contain PHI. Usage Restrictions: The platform cannot be used as a patient portal. - **Plan Tier:** Restricted exclusively to [Airtable Enterprise Scale](https://www.airtable.com/company/hipaa-airtable) subscriptions. - **Storage Rules:** ePHI must only live inside records within approved bases or interfaces. - **Exclusions:** Airtable AI features and customer support tickets must not contain PHI. - **Usage Restrictions:** The platform cannot be used as a patient portal.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.paubox.com/blog/airtable-hipaa-compliant) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are... If you'd like, let me know:Your current Airtable plan What kind of patient data you plan to track I can help you evaluate your compliance options. If you'd like, let me know: - Your **current Airtable plan** - **What kind of patient data** you plan to track I can help you evaluate your compliance options. Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

**Yes, Airtable can be HIPAA compliant** , but only under strict, specific conditions . It is not compliant out of the box for standard or lower-tier plans.[](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/)[[2]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) The Core Requirements for HIPAA on Airtable 1. **Enterprise Scale Plan Required:** HIPAA compliance support and the ability to sign a Business Associate Agreement (BAA) are restricted exclusively to customers on Airtable's **Enterprise Scale** plan. If you are on the Free, Team, or Business plans, storing Protected Health Information (PHI) violates Airtable's terms.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) 2. **Execute a BAA:** You must work with an Airtable account executive to sign their Health Information Exhibit, which contains the formal **Business Associate Addendum (BAA)**.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) 3. **Admin Panel Activation:** Once contracted, an administrator must explicitly enable HIPAA compliance for the organization or specific organizational units via the [Airtable Admin Panel](https://support.airtable.com/docs/understanding-hipaa-at-airtable).[[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://support.airtable.com/docs/understanding-hipaa-at-airtable) Critical Restrictions & Boundaries Even with an active BAA and an Enterprise plan, Airtable enforces strict boundary rules outlined in their [Airtable Health Information Datasheet](https://www.airtable.com/company/health-info-datasheet):[[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Where PHI can live:** Electronic Protected Health Information (ePHI) may **only** be stored within records inside Airtable bases or interfaces. - **Airtable AI:** AI features are completely excluded from the BAA coverage. You must not store ePHI in workspaces where Airtable AI is active (unless under specific supplemental health terms, though it is generally restricted). - **Automations & Emails:** Automated outgoing emails sent directly through Airtable automations **cannot** contain PHI. - **Customer Support:** You must never include ePHI or medical details in screenshots, support tickets, or chats when communicating with Airtable support. - **No Patient Portals:** Airtable cannot be used as a patient-facing portal or direct medical interface for patients. - **Third-Party Integrations:** Any tool you connect to Airtable (such as Zapier, Slack, or custom APIs) must also be HIPAA-compliant and covered by its own separate BAA.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) If you're planning a setup, tell me: - What **tier of Airtable** your organization currently uses - What **kind of patient data** or workflow you are trying to build I can help you evaluate whether Airtable fits your project or if a specialized backend is a safer choice. Yes, Airtable can be HIPAA compliant, but only under strict, specific conditions. It is not compliant out of the box for standard or lower-tier plans. Key takeaways * Airtable HIPAA support is available only on the Enterprise Scale plan. Free, Team, and Business plan customers can... Every couple of weeks a client asks us, "Is Airtable HIPAA compliant?" The honest answer is "it depends on the configuration, and ... The Core Requirements for HIPAA on Airtable Even with an active BAA and an Enterprise plan, Airtable enforces strict boundary rules outlined in their Airtable Health Information Datasheet : Even with an active BAA and an Enterprise plan, Airtable enforces strict boundary rules outlined in their [Airtable Health Information Datasheet](https://www.airtable.com/company/health-info-datasheet):[[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Airtable's terms prohibit storing ePHI on the Free, Team, and Business plans, so anyone below Enterprise Scale should keep treatin... Where PHI can live: Electronic Protected Health Information (ePHI) may only be stored within records inside Airtable bases or interfaces. Airtable AI: AI features are completely excluded from the BAA coverage. You must not store ePHI in workspaces where Airtable AI is active (unless under specific supplemental health terms, though it is generally restricted). Automations & Emails: Automated outgoing emails sent directly through Airtable automations cannot contain PHI. Customer Support: You must never include ePHI or medical details in screenshots, support tickets, or chats when communicating with Airtable support. No Patient Portals: Airtable cannot be used as a patient-facing portal or direct medical interface for patients. Third-Party Integrations: Any tool you connect to Airtable (such as Zapier, Slack, or custom APIs) must also be HIPAA-compliant and covered by its own separate BAA. - **Where PHI can live:** Electronic Protected Health Information (ePHI) may **only** be stored within records inside Airtable bases or interfaces. - **Airtable AI:** AI features are completely excluded from the BAA coverage. You must not store ePHI in workspaces where Airtable AI is active (unless under specific supplemental health terms, though it is generally restricted). - **Automations & Emails:** Automated outgoing emails sent directly through Airtable automations **cannot** contain PHI. - **Customer Support:** You must never include ePHI or medical details in screenshots, support tickets, or chats when communicating with Airtable support. - **No Patient Portals:** Airtable cannot be used as a patient-facing portal or direct medical interface for patients. - **Third-Party Integrations:** Any tool you connect to Airtable (such as Zapier, Slack, or custom APIs) must also be HIPAA-compliant and covered by its own separate BAA.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) If you're planning a setup, tell me: What tier of Airtable your organization currently uses What kind of patient data or workflow you are trying to build - What **tier of Airtable** your organization currently uses - What **kind of patient data** or workflow you are trying to build I can help you evaluate whether Airtable fits your project or if a specialized backend is a safer choice. Identifying HIPAA compliance at your org * Navigate to admin panel (opens in new tab). * Click the Settings option on the left sid... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu...

Airtable is HIPAA compliant **only** for customers on the **Enterprise Scale plan** who sign a Business Associate Agreement (BAA) via Airtable's Health Information Exhibit . Users on Free, Team, or Business plans are strictly prohibited from storing protected health information (PHI) on the platform.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/)[[3]](https://www.paubox.com/blog/airtable-hipaa-compliant)Plan and Agreement Requirements - Available exclusively on the **Enterprise Scale plan**. - Requires a signed **Health Information Exhibit** (which includes a BAA). - Lower-tier plans (Free, Team, Business) **cannot** be made compliant and do not support BAAs.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.hipaatizer.com/integrations/airtable-hipaa-compliant/) Usage Restrictions and Rules - **Where data lives:** ePHI and medical details must only be stored within records inside bases or interfaces. - **Exclusions:** Airtable AI features and general customer support interactions are excluded from the BAA scope. - **Communications:** You cannot use Airtable as a patient portal, and automated emails generated by the platform must not contain PHI. - **Integrations:** Any third-party tools or external systems connected to your bases must also independently meet HIPAA standards.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) If you would like to proceed, let me know: - **What tier of Airtable** your organization currently uses - **What type of data or workflow** you plan to build I can help you evaluate whether an enterprise upgrade fits your setup or suggest alternative options. Airtable is HIPAA compliant only for customers on the Enterprise Scale plan who sign a Business Associate Agreement (BAA) via Airtable's Health Information Exhibit. Users on Free, Team, or Business plans are strictly prohibited from storing protected health information (PHI) on the platform. A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Key takeaways * Airtable HIPAA support is available only on the Enterprise Scale plan. Free, Team, and Business plan customers can... What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are... Available exclusively on the Enterprise Scale plan. Requires a signed Health Information Exhibit (which includes a BAA). Lower-tier plans (Free, Team, Business) cannot be made compliant and do not support BAAs. - Available exclusively on the **Enterprise Scale plan**. - Requires a signed **Health Information Exhibit** (which includes a BAA). - Lower-tier plans (Free, Team, Business) **cannot** be made compliant and do not support BAAs.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.hipaatizer.com/integrations/airtable-hipaa-compliant/) Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Airtable is HIPAA Compliant only on its Enterprise plan. With HIPAAtizer, keep PHI secure and send form data to Airtable on any pl... Where data lives: ePHI and medical details must only be stored within records inside bases or interfaces. Exclusions: Airtable AI features and general customer support interactions are excluded from the BAA scope. Communications: You cannot use Airtable as a patient portal, and automated emails generated by the platform must not contain PHI. Integrations: Any third-party tools or external systems connected to your bases must also independently meet HIPAA standards. - **Where data lives:** ePHI and medical details must only be stored within records inside bases or interfaces. - **Exclusions:** Airtable AI features and general customer support interactions are excluded from the BAA scope. - **Communications:** You cannot use Airtable as a patient portal, and automated emails generated by the platform must not contain PHI. - **Integrations:** Any third-party tools or external systems connected to your bases must also independently meet HIPAA standards.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

**Yes, but with strict limitations and requirements** **.** [](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.complysaas.com/compliance/airtable) Airtable Go to product viewer dialog for this item. supports HIPAA compliance for patient data (ePHI/PHI), but it is **not** universally compliant out-of-the-box for all users.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) Key Conditions for HIPAA Compliance on Airtable: - **Plan Requirement:** HIPAA support is available **exclusively on the Enterprise Scale plan** . If you are on the Free, Team, or Business plans, storing Protected Health Information (PHI) is strictly prohibited by Airtable's terms.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) - **Business Associate Agreement (BAA):** Enterprise Scale customers must formally execute Airtable's Health Information Exhibit, which includes their [Business Associate Addendum](https://www.airtable.com/company/health-info-datasheet). - **Strict Boundary Rules:** Even with a signed BAA, Airtable enforces rigid boundaries on where patient data can live and how it can be used: - **Where PHI can go:** ePHI and medical information must live *only* inside records within Airtable bases or interfaces. - **Airtable AI:** AI features are completely excluded from the BAA and **cannot** be enabled in workspaces containing PHI unless specific health information AI terms are met and configured. - **Automations & Emails:** Outgoing automated emails triggered by Airtable **cannot** contain raw PHI. - **Customer Support:** You must never include PHI in screenshots or support tickets when talking to Airtable support. - **Not a Patient Portal:** Airtable explicitly prohibits using its platform to serve as a patient portal. - **Integrations:** Any third-party tools or integrations (like Zapier, Slack, or custom APIs) connected to your base must also be HIPAA-compliant and covered under separate BAAs.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[2]](https://www.airtable.com/company/health-info-datasheet)[[3]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) If you'd like to proceed, tell me: - What **tier of Airtable** your organization is currently on - **What kind of patient data or workflow** you are trying to build (e.g., internal tracking, intake form, clinical trial) I can help you evaluate whether Airtable fits your needs or if a dedicated backend/alternative is safer. Yes, but with strict limitations and requirements. Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Home Compliance Airtable Independent vendor compliance review Is Airtable HIPAA compliant? Airtable may support some HIPAA-regulat... Airtable Go to product viewer dialog for this item. supports HIPAA compliance for patient data (ePHI/PHI), but it is not universally compliant out-of-the-box for all users. Airtable Go to product viewer dialog for this item. supports HIPAA compliance for patient data (ePHI/PHI), but it is **not** universally compliant out-of-the-box for all users.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) Plan Requirement: HIPAA support is available exclusively on the Enterprise Scale plan. If you are on the Free, Team, or Business plans, storing Protected Health Information (PHI) is strictly prohibited by Airtable's terms. Business Associate Agreement (BAA): Enterprise Scale customers must formally execute Airtable's Health Information Exhibit, which includes their Business Associate Addendum. Strict Boundary Rules: Even with a signed BAA, Airtable enforces rigid boundaries on where patient data can live and how it can be used:Where PHI can go: ePHI and medical information must live only inside records within Airtable bases or interfaces. Airtable AI: AI features are completely excluded from the BAA and cannot be enabled in workspaces containing PHI unless specific health information AI terms are met and configured. Automations & Emails: Outgoing automated emails triggered by Airtable cannot contain raw PHI. Customer Support: You must never include PHI in screenshots or support tickets when talking to Airtable support. Not a Patient Portal: Airtable explicitly prohibits using its platform to serve as a patient portal. Integrations: Any third-party tools or integrations (like Zapier, Slack, or custom APIs) connected to your base must also be HIPAA-compliant and covered under separate BAAs. Where PHI can go: ePHI and medical information must live only inside records within Airtable bases or interfaces. Airtable AI: AI features are completely excluded from the BAA and cannot be enabled in workspaces containing PHI unless specific health information AI terms are met and configured. Automations & Emails: Outgoing automated emails triggered by Airtable cannot contain raw PHI. Customer Support: You must never include PHI in screenshots or support tickets when talking to Airtable support. Not a Patient Portal: Airtable explicitly prohibits using its platform to serve as a patient portal. Integrations: Any third-party tools or integrations (like Zapier, Slack, or custom APIs) connected to your base must also be HIPAA-compliant and covered under separate BAAs. - **Plan Requirement:** HIPAA support is available **exclusively on the Enterprise Scale plan** . If you are on the Free, Team, or Business plans, storing Protected Health Information (PHI) is strictly prohibited by Airtable's terms.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) - **Business Associate Agreement (BAA):** Enterprise Scale customers must formally execute Airtable's Health Information Exhibit, which includes their [Business Associate Addendum](https://www.airtable.com/company/health-info-datasheet). - **Strict Boundary Rules:** Even with a signed BAA, Airtable enforces rigid boundaries on where patient data can live and how it can be used: - **Where PHI can go:** ePHI and medical information must live *only* inside records within Airtable bases or interfaces. - **Airtable AI:** AI features are completely excluded from the BAA and **cannot** be enabled in workspaces containing PHI unless specific health information AI terms are met and configured. - **Automations & Emails:** Outgoing automated emails triggered by Airtable **cannot** contain raw PHI. - **Customer Support:** You must never include PHI in screenshots or support tickets when talking to Airtable support. - **Not a Patient Portal:** Airtable explicitly prohibits using its platform to serve as a patient portal. - **Integrations:** Any third-party tools or integrations (like Zapier, Slack, or custom APIs) connected to your base must also be HIPAA-compliant and covered under separate BAAs.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[2]](https://www.airtable.com/company/health-info-datasheet)[[3]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) Key takeaways * Airtable HIPAA support is available only on the Enterprise Scale plan. Free, Team, and Business plan customers can... Off-load the PHI, Keep Only “Breadcrumbs” in Airtable * Shape-shift PHI into opaque IDs. Store patient details in a hardened backe... Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Business Associate Agreement (BA... If you'd like to proceed, tell me: What tier of Airtable your organization is currently on What kind of patient data or workflow you are trying to build (e.g., internal tracking, intake form, clinical trial) - What **tier of Airtable** your organization is currently on - **What kind of patient data or workflow** you are trying to build (e.g., internal tracking, intake form, clinical trial) I can help you evaluate whether Airtable fits your needs or if a dedicated backend/alternative is safer.

Yes, Airtable can be HIPAA compliant, but only for **Enterprise Scale** plan subscribers who execute a formal **Health Information Exhibit (BAA)** with the company . It is strictly prohibited to store protected health information (PHI) on Free, Team, or Business tier plans.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Plan and Agreement Requirements - Subscribe to the Airtable Enterprise Scale Plan. - Sign Airtable's Health Information Exhibit, which includes a Business Associate Agreement (BAA). - Enforce security controls like Single Sign-On (SSO) and audit logs.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) Scope and Restrictions - **Data location:** PHI may only reside within records inside bases. - **Excluded features:** Airtable AI and automated email notifications cannot contain or process PHI. - **Usage boundaries:** Airtable cannot be used as a patient portal. - **Integrations:** Third-party extensions or integrations must independently support HIPAA compliance.[](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) If you want, let me know: - Your **current Airtable plan** - What **type of patient data** you plan to track I can help you evaluate if Airtable fits your workflow or if another tool works better. Yes, Airtable can be HIPAA compliant, but only for Enterprise Scale plan subscribers who execute a formal Health Information Exhibit (BAA) with the company. It is strictly prohibited to store protected health information (PHI) on Free, Team, or Business tier plans. A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Subscribe to the Airtable Enterprise Scale Plan. Sign Airtable's Health Information Exhibit, which includes a Business Associate Agreement (BAA). Enforce security controls like Single Sign-On (SSO) and audit logs. - Subscribe to the Airtable Enterprise Scale Plan. - Sign Airtable's Health Information Exhibit, which includes a Business Associate Agreement (BAA). - Enforce security controls like Single Sign-On (SSO) and audit logs.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP... HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... Data location: PHI may only reside within records inside bases. Excluded features: Airtable AI and automated email notifications cannot contain or process PHI. Usage boundaries: Airtable cannot be used as a patient portal. Integrations: Third-party extensions or integrations must independently support HIPAA compliance. - **Data location:** PHI may only reside within records inside bases. - **Excluded features:** Airtable AI and automated email notifications cannot contain or process PHI. - **Usage boundaries:** Airtable cannot be used as a patient portal. - **Integrations:** Third-party extensions or integrations must independently support HIPAA compliance.[](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) Key takeaways * Airtable HIPAA support is available only on the Enterprise Scale plan. Free, Team, and Business plan customers can... Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

**Yes, Airtable can be HIPAA compliant** , but only under very strict operational and contractual conditions . It is not compliant out-of-the-box on standard plans.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[3]](https://www.complysaas.com/compliance/airtable) The critical requirements and boundaries for using Airtable with Protected Health Information (PHI) include: - **Enterprise Scale Plan Required:** HIPAA support and the execution of a formal Business Associate Agreement (BAA)—via Airtable’s Health Information Exhibit—are restricted exclusively to customers on the **Enterprise Scale** plan. Free, Team, and Business plans are strictly non-compliant and prohibited from storing electronic Protected Health Information (ePHI).[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Signed Business Associate Agreement (BAA):** You must formally execute Airtable's Health Information Exhibit/BAA before introducing any patient data to your workspace.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Strict Data Boundaries:** Per Airtable's [Health Information Datasheet](https://www.airtable.com/company/health-info-datasheet) , ePHI must only be stored inside **records within bases or interfaces**.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Feature Restrictions & Exclusions:** - **Airtable AI** is entirely excluded from the BAA and cannot be enabled in workspaces containing ePHI unless specific supplemental terms are managed—though general guidance advises keeping AI completely off patient data. - **Automations & Emails:** Outgoing emails triggered via Airtable automations cannot contain PHI. - **Customer Support:** You must never include ePHI in screenshots, attachments, or tickets submitted to Airtable support. - **Patient Portals:** Airtable cannot be used to serve as a patient portal.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) - **Integrations & Shared Responsibility:** Any third-party integrations connected to your bases (like Zapier, Slack, or custom APIs) must also be HIPAA-compliant and covered under separate BAAs; a single unsecure bridge breaks the compliance chain.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/)[[3]](https://intuitionlabs.ai/articles/hipaa-compliant-api-guide)[[4]](https://www.hakunamatatatech.com/our-resources/blog/hipaa-compliant-llm)[[5]](https://www.accountablehq.com/post/cerner-patient-portal-and-hipaa-compliance-what-you-need-to-know) If you're planning a healthcare workflow, tell me: - **What specific type of patient data** you plan to track - **Which integrations or automations** you need to connect to Airtable I can help you evaluate whether Airtable fits your architecture or if a dedicated backend is safer. Yes, Airtable can be HIPAA compliant, but only under very strict operational and contractual conditions. It is not compliant out-of-the-box on standard plans. Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... Independent vendor compliance review Is Airtable HIPAA compliant? Airtable may support some HIPAA-regulated workflows only for Ent... The critical requirements and boundaries for using Airtable with Protected Health Information (PHI) include: Enterprise Scale Plan Required: HIPAA support and the execution of a formal Business Associate Agreement (BAA)—via Airtable’s Health Information Exhibit—are restricted exclusively to customers on the Enterprise Scale plan. Free, Team, and Business plans are strictly non-compliant and prohibited from storing electronic Protected Health Information (ePHI). Signed Business Associate Agreement (BAA): You must formally execute Airtable's Health Information Exhibit/BAA before introducing any patient data to your workspace. Strict Data Boundaries: Per Airtable's Health Information Datasheet, ePHI must only be stored inside records within bases or interfaces. Feature Restrictions & Exclusions:Airtable AI is entirely excluded from the BAA and cannot be enabled in workspaces containing ePHI unless specific supplemental terms are managed—though general guidance advises keeping AI completely off patient data. Automations & Emails: Outgoing emails triggered via Airtable automations cannot contain PHI. Customer Support: You must never include ePHI in screenshots, attachments, or tickets submitted to Airtable support. Patient Portals: Airtable cannot be used to serve as a patient portal. Airtable AI is entirely excluded from the BAA and cannot be enabled in workspaces containing ePHI unless specific supplemental terms are managed—though general guidance advises keeping AI completely off patient data. Automations & Emails: Outgoing emails triggered via Airtable automations cannot contain PHI. Customer Support: You must never include ePHI in screenshots, attachments, or tickets submitted to Airtable support. Patient Portals: Airtable cannot be used to serve as a patient portal. Integrations & Shared Responsibility: Any third-party integrations connected to your bases (like Zapier, Slack, or custom APIs) must also be HIPAA-compliant and covered under separate BAAs; a single unsecure bridge breaks the compliance chain. - **Enterprise Scale Plan Required:** HIPAA support and the execution of a formal Business Associate Agreement (BAA)—via Airtable’s Health Information Exhibit—are restricted exclusively to customers on the **Enterprise Scale** plan. Free, Team, and Business plans are strictly non-compliant and prohibited from storing electronic Protected Health Information (ePHI).[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Signed Business Associate Agreement (BAA):** You must formally execute Airtable's Health Information Exhibit/BAA before introducing any patient data to your workspace.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Strict Data Boundaries:** Per Airtable's [Health Information Datasheet](https://www.airtable.com/company/health-info-datasheet) , ePHI must only be stored inside **records within bases or interfaces**.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Feature Restrictions & Exclusions:** - **Airtable AI** is entirely excluded from the BAA and cannot be enabled in workspaces containing ePHI unless specific supplemental terms are managed—though general guidance advises keeping AI completely off patient data. - **Automations & Emails:** Outgoing emails triggered via Airtable automations cannot contain PHI. - **Customer Support:** You must never include ePHI in screenshots, attachments, or tickets submitted to Airtable support. - **Patient Portals:** Airtable cannot be used to serve as a patient portal.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) - **Integrations & Shared Responsibility:** Any third-party integrations connected to your bases (like Zapier, Slack, or custom APIs) must also be HIPAA-compliant and covered under separate BAAs; a single unsecure bridge breaks the compliance chain.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/)[[3]](https://intuitionlabs.ai/articles/hipaa-compliant-api-guide)[[4]](https://www.hakunamatatatech.com/our-resources/blog/hipaa-compliant-llm)[[5]](https://www.accountablehq.com/post/cerner-patient-portal-and-hipaa-compliance-what-you-need-to-know) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Key takeaways * Airtable HIPAA support is available only on the Enterprise Scale plan. Free, Team, and Business plan customers can... Off-load the PHI, Keep Only “Breadcrumbs” in Airtable * Shape-shift PHI into opaque IDs. Store patient details in a hardened backe... Airtable is a customizable business management platform with automation capabilities that helps organizations better manage data b... Likewise, if your API then sends PHI to another third-party (say, a mapping service to show clinic locations with patient info), t... Secure Your Integrations: Every third-party service that touches PHI in your pipeline, whether it's a database, email service, or ... How do third-party integrations maintain HIPAA standards? Each integration must be vetted, covered by a BAA if it handles PHI, and... If you're planning a healthcare workflow, tell me: What specific type of patient data you plan to track Which integrations or automations you need to connect to Airtable - **What specific type of patient data** you plan to track - **Which integrations or automations** you need to connect to Airtable I can help you evaluate whether Airtable fits your architecture or if a dedicated backend is safer.

Yes, Airtable can be HIPAA compliant, but only for **Enterprise Scale** customers who execute a specific Business Associate Agreement (BAA) through the platform's Health Information Exhibit . Free, Team, and Business plans do not support HIPAA compliance or the signing of a BAA.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/)[[3]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Even on an Enterprise plan, strict usage rules apply to Protected Health Information (PHI):[](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) [[1]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) - **Where data lives:** PHI can only be stored in standard "Records" within "Bases". - **Exclusions:** Airtable AI cannot process PHI. - **Communications:** You cannot use Airtable as a patient portal, and automated emails cannot contain PHI.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) Organizations must also ensure any third-party tools or integrations used with their workspace meet HIPAA standards. You can review the full platform specifications on the [Airtable Health Information Datasheet](https://www.airtable.com/company/health-info-datasheet).If you're evaluating Airtable for your healthcare organization, could you tell me: - What **specific plan** (e.g., Enterprise Scale) is your organization considering? - Are you looking to build **internal workflows** or connect Airtable to other **electronic health record (EHR) systems**? Yes, Airtable can be HIPAA compliant, but only for Enterprise Scale customers who execute a specific Business Associate Agreement (BAA) through the platform's Health Information Exhibit. Free, Team, and Business plans do not support HIPAA compliance or the signing of a BAA. A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Key takeaways * Airtable HIPAA support is available only on the Enterprise Scale plan. Free, Team, and Business plan customers can... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Even on an Enterprise plan, strict usage rules apply to Protected Health Information (PHI): Even on an Enterprise plan, strict usage rules apply to Protected Health Information (PHI):[](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) [[1]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) In healthcare, Airtable has many potential uses. It could be used to keep track of appointments and consultant availability, strea... Where data lives: PHI can only be stored in standard "Records" within "Bases". Exclusions: Airtable AI cannot process PHI. Communications: You cannot use Airtable as a patient portal, and automated emails cannot contain PHI. - **Where data lives:** PHI can only be stored in standard "Records" within "Bases". - **Exclusions:** Airtable AI cannot process PHI. - **Communications:** You cannot use Airtable as a patient portal, and automated emails cannot contain PHI.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Organizations must also ensure any third-party tools or integrations used with their workspace meet HIPAA standards. You can review the full platform specifications on the Airtable Health Information Datasheet. Organizations must also ensure any third-party tools or integrations used with their workspace meet HIPAA standards. You can review the full platform specifications on the [Airtable Health Information Datasheet](https://www.airtable.com/company/health-info-datasheet). Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...