support.airtable.com/articles/6185273192-hipaa-and-ferpa-compliance-at-airtable

Yes, Airtable can be HIPAA compliant, but only for **Enterprise Scale** plan subscribers who sign a **Business Associate Agreement (BAA)** via Airtable 's Health Information Exhibit . It is not compliant on lower tiers (Free, Team, or Business), and storing protected health information (PHI) there violates their terms.[](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Requirements for Compliance - **Enterprise Scale Plan:** You must upgrade to Airtable 's highest organizational tier. - **Signed BAA:** You must formally execute the [Airtable Health Information Exhibit](https://www.airtable.com/company/hipaa-airtable) containing the BAA. - **Security Controls:** You must properly configure enterprise controls like SAML SSO, audit logs, and access permissions.[](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[3]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[4]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) Usage Restrictions - **Data Location:** ePHI must only be stored within records inside bases or interfaces. - **Exclusions:** Do not use Airtable AI or include PHI in customer support tickets. - **Integrations:** Third-party add-ons and automated outgoing emails must also maintain independent HIPAA compliance.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) If you'd like, let me know: - Your current **Airtable plan level** - What **type of patient data** you plan to track I can help you review your workflow constraints or alternative options. Yes, Airtable can be HIPAA compliant, but only for Enterprise Scale plan subscribers who sign a Business Associate Agreement (BAA) via Airtable 's Health Information Exhibit. It is not compliant on lower tiers (Free, Team, or Business), and storing protected health information (PHI) there violates their terms. A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Enterprise Scale Plan: You must upgrade to Airtable 's highest organizational tier. Signed BAA: You must formally execute the Airtable Health Information Exhibit containing the BAA. Security Controls: You must properly configure enterprise controls like SAML SSO, audit logs, and access permissions. - **Enterprise Scale Plan:** You must upgrade to Airtable 's highest organizational tier. - **Signed BAA:** You must formally execute the [Airtable Health Information Exhibit](https://www.airtable.com/company/hipaa-airtable) containing the BAA. - **Security Controls:** You must properly configure enterprise controls like SAML SSO, audit logs, and access permissions.[](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[3]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[4]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... Is Airtable Technically HIPAA-Compliant? * Enterprise-only paywall. HIPAA support didn't exist until April 2024 and is still gated... Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP... Data Location: ePHI must only be stored within records inside bases or interfaces. Exclusions: Do not use Airtable AI or include PHI in customer support tickets. Integrations: Third-party add-ons and automated outgoing emails must also maintain independent HIPAA compliance. - **Data Location:** ePHI must only be stored within records inside bases or interfaces. - **Exclusions:** Do not use Airtable AI or include PHI in customer support tickets. - **Integrations:** Third-party add-ons and automated outgoing emails must also maintain independent HIPAA compliance.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... In healthcare, Airtable has many potential uses. It could be used to keep track of appointments and consultant availability, strea... If you'd like, let me know:Your current Airtable plan level What type of patient data you plan to track I can help you review your workflow constraints or alternative options. If you'd like, let me know: - Your current **Airtable plan level** - What **type of patient data** you plan to track I can help you review your workflow constraints or alternative options. Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Yes, Airtable is HIPAA compliant, but only for organizations on the **Enterprise Scale plan** that sign a Business Associate Agreement (BAA) via Airtable's Health Information Exhibit . It is strictly prohibited to store protected health information (PHI) on Free, Team, or Business plans.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Plan and Agreement Requirements - **Enterprise Scale Plan Only:** Lower-tier plans do not support HIPAA compliance or qualify for a BAA. - **Business Associate Agreement (BAA):** You must execute Airtable's Health Information Exhibit before inputting any electronic Protected Health Information (ePHI).[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.paubox.com/blog/airtable-hipaa-compliant) Usage Rules and Restrictions - **Data Location:** ePHI must only be stored inside standard record cells within bases or interfaces, not in metadata, comments, or unsupported features.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Airtable AI:** Do not enable or use Airtable AI in workspaces containing ePHI unless specific supplemental health terms are accepted.[](https://www.airtable.com/company/health-info-datasheet) - **No Patient Portals:** Airtable cannot be used as a public or patient-facing portal.[](https://www.airtable.com/company/health-info-datasheet) - **Integrations and Support:** Third-party integrations must independently support HIPAA compliance, and users must avoid putting PHI into support tickets or screenshots.[](https://www.airtable.com/company/health-info-datasheet) If you'd like, let me know: - What **plan** your organization currently uses - What **type of healthcare workflow** you plan to build I can help you review if your setup meets these requirements. Yes, Airtable is HIPAA compliant, but only for organizations on the Enterprise Scale plan that sign a Business Associate Agreement (BAA) via Airtable's Health Information Exhibit. It is strictly prohibited to store protected health information (PHI) on Free, Team, or Business plans. A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Enterprise Scale Plan Only: Lower-tier plans do not support HIPAA compliance or qualify for a BAA. Business Associate Agreement (BAA): You must execute Airtable's Health Information Exhibit before inputting any electronic Protected Health Information (ePHI). - **Enterprise Scale Plan Only:** Lower-tier plans do not support HIPAA compliance or qualify for a BAA. - **Business Associate Agreement (BAA):** You must execute Airtable's Health Information Exhibit before inputting any electronic Protected Health Information (ePHI).[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.paubox.com/blog/airtable-hipaa-compliant) What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are... Data Location: ePHI must only be stored inside standard record cells within bases or interfaces, not in metadata, comments, or unsupported features. Airtable AI: Do not enable or use Airtable AI in workspaces containing ePHI unless specific supplemental health terms are accepted. No Patient Portals: Airtable cannot be used as a public or patient-facing portal. Integrations and Support: Third-party integrations must independently support HIPAA compliance, and users must avoid putting PHI into support tickets or screenshots. - **Data Location:** ePHI must only be stored inside standard record cells within bases or interfaces, not in metadata, comments, or unsupported features.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Airtable AI:** Do not enable or use Airtable AI in workspaces containing ePHI unless specific supplemental health terms are accepted.[](https://www.airtable.com/company/health-info-datasheet) - **No Patient Portals:** Airtable cannot be used as a public or patient-facing portal.[](https://www.airtable.com/company/health-info-datasheet) - **Integrations and Support:** Third-party integrations must independently support HIPAA compliance, and users must avoid putting PHI into support tickets or screenshots.[](https://www.airtable.com/company/health-info-datasheet) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... If you'd like, let me know:What plan your organization currently uses What type of healthcare workflow you plan to build I can help you review if your setup meets these requirements. If you'd like, let me know: - What **plan** your organization currently uses - What **type of healthcare workflow** you plan to build I can help you review if your setup meets these requirements. Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...