support.airtable.com/docs/understanding-hipaa-at-airtable

Yes, [Airtable](https://www.airtable.com/company/hipaa-airtable) is HIPAA compliant , but strictly for **Enterprise Scale** plan subscribers who have signed a Business Associate Agreement (BAA) via a Health Information Exhibit. It is not compliant on lower-tier plans (Free, Team, or Business).[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Requirements for Compliance - **Enterprise Scale Plan:** You must be on Airtable's highest custom-priced enterprise tier. - **Signed BAA:** You must execute Airtable’s Health Information Exhibit, which contains the official Business Associate Addendum.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) Platform Restrictions & Rules - **Where Data Lives:** Protected Health Information (PHI) must only be stored within records in Airtable bases or interfaces. - **Exclusions:** Airtable AI, customer support interactions, and standard automated emails containing PHI are excluded or restricted. - **Patient Portals:** You cannot use Airtable as a patient portal or the backend technology for one. - **Integrations:** Any third-party tools or integrations connected to your bases must also independently support HIPAA compliance.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) If you'd like, let me know: - What **tier** your organization is currently on - What kind of **healthcare workflow or data tracking** you plan to build I can help you determine the best architectural approach or look into alternative tools. Yes, Airtable is HIPAA compliant, but strictly for Enterprise Scale plan subscribers who have signed a Business Associate Agreement (BAA) via a Health Information Exhibit. It is not compliant on lower-tier plans (Free, Team, or Business). A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Enterprise Scale Plan: You must be on Airtable's highest custom-priced enterprise tier. Signed BAA: You must execute Airtable’s Health Information Exhibit, which contains the official Business Associate Addendum. - **Enterprise Scale Plan:** You must be on Airtable's highest custom-priced enterprise tier. - **Signed BAA:** You must execute Airtable’s Health Information Exhibit, which contains the official Business Associate Addendum.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) Is Airtable Technically HIPAA-Compliant? * Enterprise-only paywall. HIPAA support didn't exist until April 2024 and is still gated... Where Data Lives: Protected Health Information (PHI) must only be stored within records in Airtable bases or interfaces. Exclusions: Airtable AI, customer support interactions, and standard automated emails containing PHI are excluded or restricted. Patient Portals: You cannot use Airtable as a patient portal or the backend technology for one. Integrations: Any third-party tools or integrations connected to your bases must also independently support HIPAA compliance. - **Where Data Lives:** Protected Health Information (PHI) must only be stored within records in Airtable bases or interfaces. - **Exclusions:** Airtable AI, customer support interactions, and standard automated emails containing PHI are excluded or restricted. - **Patient Portals:** You cannot use Airtable as a patient portal or the backend technology for one. - **Integrations:** Any third-party tools or integrations connected to your bases must also independently support HIPAA compliance.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... In healthcare, Airtable has many potential uses. It could be used to keep track of appointments and consultant availability, strea... If you'd like, let me know:What tier your organization is currently on What kind of healthcare workflow or data tracking you plan to build I can help you determine the best architectural approach or look into alternative tools. If you'd like, let me know: - What **tier** your organization is currently on - What kind of **healthcare workflow or data tracking** you plan to build I can help you determine the best architectural approach or look into alternative tools. Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Airtable is HIPAA compliant **only** for customers on the [Airtable Enterprise Scale Plan](https://support.airtable.com/docs/understanding-hipaa-at-airtable) who sign a Health Information Exhibit containing a Business Associate Agreement (BAA). Users on Free, Team, or Business plans are strictly prohibited from storing electronic Protected Health Information (ePHI).[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[3]](https://www.paubox.com/blog/airtable-hipaa-compliant)Plan and Agreement Requirements - **Enterprise Scale Plan:** Required to access Airtable's HIPAA compliance program. - **Business Associate Agreement (BAA):** Must be executed via Airtable's Health Information Exhibit. - **Lower Tiers:** Free, Team, and Business plans do not offer a BAA and cannot legally hold patient data.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) Usage Rules and Restrictions - **Storage Boundaries:** Patient health data (ePHI) must only live inside records within bases or interfaces. - **No AI Features:** Airtable AI cannot be used or enabled in workspaces handling ePHI. - **Support Limits:** You must never share or disclose ePHI with Airtable’s customer support team in tickets or screenshots. - **Automations & Emails:** You cannot use automated email features to transmit raw ePHI out of the system. - **External Integrations:** Any third-party tools or apps connected to your bases must also be HIPAA compliant and covered by their own BAAs. - **No Patient Portals:** Airtable cannot be used as a public or direct patient portal.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) If you'd like, let me know: - What **tier or plan** your organization currently uses - What **type of workflow or data** you plan to build I can help you evaluate if Airtable fits your project or suggest alternative ways to structure your data safely. Airtable is HIPAA compliant only for customers on the Airtable Enterprise Scale Plan who sign a Health Information Exhibit containing a Business Associate Agreement (BAA). Users on Free, Team, or Business plans are strictly prohibited from storing electronic Protected Health Information (ePHI). A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are... Enterprise Scale Plan: Required to access Airtable's HIPAA compliance program. Business Associate Agreement (BAA): Must be executed via Airtable's Health Information Exhibit. Lower Tiers: Free, Team, and Business plans do not offer a BAA and cannot legally hold patient data. - **Enterprise Scale Plan:** Required to access Airtable's HIPAA compliance program. - **Business Associate Agreement (BAA):** Must be executed via Airtable's Health Information Exhibit. - **Lower Tiers:** Free, Team, and Business plans do not offer a BAA and cannot legally hold patient data.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) Storage Boundaries: Patient health data (ePHI) must only live inside records within bases or interfaces. No AI Features: Airtable AI cannot be used or enabled in workspaces handling ePHI. Support Limits: You must never share or disclose ePHI with Airtable’s customer support team in tickets or screenshots. Automations & Emails: You cannot use automated email features to transmit raw ePHI out of the system. External Integrations: Any third-party tools or apps connected to your bases must also be HIPAA compliant and covered by their own BAAs. No Patient Portals: Airtable cannot be used as a public or direct patient portal. - **Storage Boundaries:** Patient health data (ePHI) must only live inside records within bases or interfaces. - **No AI Features:** Airtable AI cannot be used or enabled in workspaces handling ePHI. - **Support Limits:** You must never share or disclose ePHI with Airtable’s customer support team in tickets or screenshots. - **Automations & Emails:** You cannot use automated email features to transmit raw ePHI out of the system. - **External Integrations:** Any third-party tools or apps connected to your bases must also be HIPAA compliant and covered by their own BAAs. - **No Patient Portals:** Airtable cannot be used as a public or direct patient portal.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... In healthcare, Airtable has many potential uses. It could be used to keep track of appointments and consultant availability, strea... If you'd like, let me know:What tier or plan your organization currently uses What type of workflow or data you plan to build I can help you evaluate if Airtable fits your project or suggest alternative ways to structure your data safely. If you'd like, let me know: - What **tier or plan** your organization currently uses - What **type of workflow or data** you plan to build I can help you evaluate if Airtable fits your project or suggest alternative ways to structure your data safely. Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Airtable is HIPAA compliant **only** for users on the **Enterprise Scale plan** who sign a Business Associate Agreement (BAA) via Airtable's Health Information Exhibit . Users on Free, Team, or Business plans are **not** permitted to store protected health information (PHI) on the platform.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Requirements and Plan Limits - **Plan Tier:** Restricted exclusively to [Airtable's Enterprise Scale plan](https://support.airtable.com/docs/understanding-hipaa-at-airtable). - **Legal Agreement:** Requires executing a formal BAA/Health Information Exhibit with Airtable. - **Lower Tiers:** Prohibited from holding electronic Protected Health Information (ePHI) on lower-tier subscription plans.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.paubox.com/blog/airtable-hipaa-compliant) Usage Restrictions & Rules - **Storage Boundaries:** ePHI must be stored strictly inside standard "Records" within bases or interfaces. - **Feature Exclusions:** Do not use Airtable AI or include PHI in support tickets or customer service chats. - **Integrations & Communication:** Automated emails from automations cannot contain raw PHI, and any connected third-party tool requires its own independent BAA. - **Prohibited Uses:** The platform cannot be utilized as a patient portal.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) If you want, let me know: - Your current **Airtable plan level** - What **type of patient data** you plan to track I can help you figure out if Airtable fits your workflow or if you need an alternative setup. Airtable is HIPAA compliant only for users on the Enterprise Scale plan who sign a Business Associate Agreement (BAA) via Airtable's Health Information Exhibit. Users on Free, Team, or Business plans are not permitted to store protected health information (PHI) on the platform. A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Plan Tier: Restricted exclusively to Airtable's Enterprise Scale plan. Legal Agreement: Requires executing a formal BAA/Health Information Exhibit with Airtable. Lower Tiers: Prohibited from holding electronic Protected Health Information (ePHI) on lower-tier subscription plans. - **Plan Tier:** Restricted exclusively to [Airtable's Enterprise Scale plan](https://support.airtable.com/docs/understanding-hipaa-at-airtable). - **Legal Agreement:** Requires executing a formal BAA/Health Information Exhibit with Airtable. - **Lower Tiers:** Prohibited from holding electronic Protected Health Information (ePHI) on lower-tier subscription plans.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.paubox.com/blog/airtable-hipaa-compliant) What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are... Storage Boundaries: ePHI must be stored strictly inside standard "Records" within bases or interfaces. Feature Exclusions: Do not use Airtable AI or include PHI in support tickets or customer service chats. Integrations & Communication: Automated emails from automations cannot contain raw PHI, and any connected third-party tool requires its own independent BAA. Prohibited Uses: The platform cannot be utilized as a patient portal. - **Storage Boundaries:** ePHI must be stored strictly inside standard "Records" within bases or interfaces. - **Feature Exclusions:** Do not use Airtable AI or include PHI in support tickets or customer service chats. - **Integrations & Communication:** Automated emails from automations cannot contain raw PHI, and any connected third-party tool requires its own independent BAA. - **Prohibited Uses:** The platform cannot be utilized as a patient portal.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP... If you want, let me know:Your current Airtable plan level What type of patient data you plan to track I can help you figure out if Airtable fits your workflow or if you need an alternative setup. If you want, let me know: - Your current **Airtable plan level** - What **type of patient data** you plan to track I can help you figure out if Airtable fits your workflow or if you need an alternative setup. Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...