Prompt details

**Yes, but only under specific, strict conditions** **.** [](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) Airtable supports HIPAA compliance for qualifying organizations, but it is **not** HIPAA-compliant out of the box on standard self-service plans.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.accountablehq.com/post/airtable-hipaa-compliance-baa-security-features-and-what-to-know-in-2026) Requirements for HIPAA Compliance on Airtable 1. **Enterprise Scale Plan:** You must be subscribed to Airtable's highest-tier **Enterprise Scale** plan. HIPAA compliance features and agreements are explicitly prohibited or unavailable on Free, Team, and Business plans.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) 2. **Execute a BAA:** You must sign Airtable’s **Health Information Exhibit** , which contains their Business Associate Agreement (BAA). Without a signed BAA in place, storing Protected Health Information (PHI) on the platform violates compliance guidelines.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[3]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) 3. **Strict Configuration & Boundaries:** You must properly configure administrative controls (such as Enterprise Single Sign-On (SSO), Enterprise Key Management (EKM), Data Loss Prevention (DLP), and audit logs).[](https://www.paubox.com/blog/airtable-hipaa-compliant) [[1]](https://www.paubox.com/blog/airtable-hipaa-compliant)[[2]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[3]](https://www.knack.com/blog/hipaa-compliant-apps-knack-vs-airtable/)[[4]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-plan-requirements-and-using-airtable-for-phi) Critical Restrictions & Limitations to Keep in Mind Even with an Enterprise Scale plan and a signed BAA, Airtable enforces strict boundaries regarding where and how patient data can touch the platform (detailed further in the [Airtable Health Information Datasheet](https://www.airtable.com/company/health-info-datasheet)):[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) - **Where PHI Lives:** Electronic Protected Health Information (ePHI) may **only** be stored inside standard "Records" within Airtable bases or interfaces.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Airtable AI:** You cannot process or store PHI using Airtable AI features unless specific supplemental health information terms apply.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Customer Support:** You must never include PHI or medical data in screenshots, support tickets, or communications with Airtable’s customer support team.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Automations & Emails:** You cannot use automated functions to email records if those records contain PHI.[[1]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) - **No Patient Portals:** Airtable explicitly prohibits using their platform as a patient portal or as the underlying technology for one.[[1]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) - **Integrations:** Any third-party integration connected to your Airtable bases (such as Slack, Zapier, or external APIs) must also independently support HIPAA and be covered by its own BAA.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) If you'd like, let me know: - What **tier of Airtable plan** your organization currently uses - What **type of patient workflow or data** you are planning to build - Whether you plan to **integrate Airtable with other third-party tools** I can help you evaluate whether Airtable fits your project or if a specialized backend is a safer bet. Yes, but only under specific, strict conditions. Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... HIPAA: The Part Everyone Gets Wrong Every couple of weeks a client asks us, "Is Airtable HIPAA compliant?" The honest answer is "i... Airtable supports HIPAA compliance for qualifying organizations, but it is not HIPAA-compliant out of the box on standard self-service plans. Airtable supports HIPAA compliance for qualifying organizations, but it is **not** HIPAA-compliant out of the box on standard self-service plans.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.accountablehq.com/post/airtable-hipaa-compliance-baa-security-features-and-what-to-know-in-2026) Is HIPAA compliance available on all Airtable plans? No. HIPAA support requires an executed BAA and is generally available to ente... Requirements for HIPAA Compliance on Airtable Even with an Enterprise Scale plan and a signed BAA, Airtable enforces strict boundaries regarding where and how patient data can touch the platform (detailed further in the Airtable Health Information Datasheet ): Even with an Enterprise Scale plan and a signed BAA, Airtable enforces strict boundaries regarding where and how patient data can touch the platform (detailed further in the [Airtable Health Information Datasheet](https://www.airtable.com/company/health-info-datasheet)):[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... Where PHI Lives: Electronic Protected Health Information (ePHI) may only be stored inside standard "Records" within Airtable bases or interfaces. Airtable AI: You cannot process or store PHI using Airtable AI features unless specific supplemental health information terms apply. Customer Support: You must never include PHI or medical data in screenshots, support tickets, or communications with Airtable’s customer support team. Automations & Emails: You cannot use automated functions to email records if those records contain PHI. No Patient Portals: Airtable explicitly prohibits using their platform as a patient portal or as the underlying technology for one. Integrations: Any third-party integration connected to your Airtable bases (such as Slack, Zapier, or external APIs) must also independently support HIPAA and be covered by its own BAA. - **Where PHI Lives:** Electronic Protected Health Information (ePHI) may **only** be stored inside standard "Records" within Airtable bases or interfaces.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Airtable AI:** You cannot process or store PHI using Airtable AI features unless specific supplemental health information terms apply.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Customer Support:** You must never include PHI or medical data in screenshots, support tickets, or communications with Airtable’s customer support team.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Automations & Emails:** You cannot use automated functions to email records if those records contain PHI.[[1]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) - **No Patient Portals:** Airtable explicitly prohibits using their platform as a patient portal or as the underlying technology for one.[[1]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) - **Integrations:** Any third-party integration connected to your Airtable bases (such as Slack, Zapier, or external APIs) must also independently support HIPAA and be covered by its own BAA.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... In healthcare, Airtable has many potential uses. It could be used to keep track of appointments and consultant availability, strea... Off-load the PHI, Keep Only “Breadcrumbs” in Airtable * Shape-shift PHI into opaque IDs. Store patient details in a hardened backe... If you'd like, let me know: What tier of Airtable plan your organization currently uses What type of patient workflow or data you are planning to build Whether you plan to integrate Airtable with other third-party tools - What **tier of Airtable plan** your organization currently uses - What **type of patient workflow or data** you are planning to build - Whether you plan to **integrate Airtable with other third-party tools** I can help you evaluate whether Airtable fits your project or if a specialized backend is a safer bet. What does the Airtable BAA cover? The Airtable BAA is part of the Health Information Exhibit, which supports HIPAA compliance for ... Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP...

Yes, Airtable can be HIPAA compliant, but only for **Enterprise Scale** plan subscribers who sign a **Business Associate Agreement (BAA)** via Airtable 's Health Information Exhibit . It is not compliant on lower tiers (Free, Team, or Business), and storing protected health information (PHI) there violates their terms.[](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Requirements for Compliance - **Enterprise Scale Plan:** You must upgrade to Airtable 's highest organizational tier. - **Signed BAA:** You must formally execute the [Airtable Health Information Exhibit](https://www.airtable.com/company/hipaa-airtable) containing the BAA. - **Security Controls:** You must properly configure enterprise controls like SAML SSO, audit logs, and access permissions.[](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[3]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[4]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) Usage Restrictions - **Data Location:** ePHI must only be stored within records inside bases or interfaces. - **Exclusions:** Do not use Airtable AI or include PHI in customer support tickets. - **Integrations:** Third-party add-ons and automated outgoing emails must also maintain independent HIPAA compliance.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) If you'd like, let me know: - Your current **Airtable plan level** - What **type of patient data** you plan to track I can help you review your workflow constraints or alternative options. Yes, Airtable can be HIPAA compliant, but only for Enterprise Scale plan subscribers who sign a Business Associate Agreement (BAA) via Airtable 's Health Information Exhibit. It is not compliant on lower tiers (Free, Team, or Business), and storing protected health information (PHI) there violates their terms. A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Enterprise Scale Plan: You must upgrade to Airtable 's highest organizational tier. Signed BAA: You must formally execute the Airtable Health Information Exhibit containing the BAA. Security Controls: You must properly configure enterprise controls like SAML SSO, audit logs, and access permissions. - **Enterprise Scale Plan:** You must upgrade to Airtable 's highest organizational tier. - **Signed BAA:** You must formally execute the [Airtable Health Information Exhibit](https://www.airtable.com/company/hipaa-airtable) containing the BAA. - **Security Controls:** You must properly configure enterprise controls like SAML SSO, audit logs, and access permissions.[](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[3]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[4]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... Is Airtable Technically HIPAA-Compliant? * Enterprise-only paywall. HIPAA support didn't exist until April 2024 and is still gated... Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP... Data Location: ePHI must only be stored within records inside bases or interfaces. Exclusions: Do not use Airtable AI or include PHI in customer support tickets. Integrations: Third-party add-ons and automated outgoing emails must also maintain independent HIPAA compliance. - **Data Location:** ePHI must only be stored within records inside bases or interfaces. - **Exclusions:** Do not use Airtable AI or include PHI in customer support tickets. - **Integrations:** Third-party add-ons and automated outgoing emails must also maintain independent HIPAA compliance.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... In healthcare, Airtable has many potential uses. It could be used to keep track of appointments and consultant availability, strea... If you'd like, let me know:Your current Airtable plan level What type of patient data you plan to track I can help you review your workflow constraints or alternative options. If you'd like, let me know: - Your current **Airtable plan level** - What **type of patient data** you plan to track I can help you review your workflow constraints or alternative options. Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Yes — **Airtable can be used for HIPAA-compliant handling of patient data, but only under specific conditions.** It is not simply “HIPAA compliant” for every Airtable account. [Airtable](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com) [Airtable Help Center](https://support.airtable.com/docs/understanding-hipaa-at-airtable?utm_source=chatgpt.com) Key requirements: - **You must be on Airtable’s Enterprise Scale plan.** HIPAA support is only available there. [Airtable](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) [Airtable Help Center](https://support.airtable.com/articles/6185273192-hipaa-and-ferpa-compliance-at-airtable?utm_source=chatgpt.com) - **You must execute Airtable’s Health Information Exhibit / Business Associate Addendum (BAA).** Without the applicable agreement in place, you should not store electronic protected health information (ePHI) in Airtable. [Airtable](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) [Airtable Help Center](https://support.airtable.com/docs/understanding-hipaa-at-airtable?utm_source=chatgpt.com) - **Your organization is still responsible for configuring and using Airtable appropriately.** HIPAA compliance is a shared responsibility; Airtable providing HIPAA capabilities does not automatically make every workflow compliant. [Airtable](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) Examples of things you should verify before putting patient data in Airtable: - Enable appropriate access controls (least-privilege permissions). - Use SSO and strong identity management where appropriate. - Review integrations carefully; data sent outside Airtable may create separate HIPAA obligations. [Airtable](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) - Avoid using Airtable as a patient portal (Airtable specifically notes this limitation). [Airtable](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) - Have policies for audits, retention, exports, and handling disclosures. [Airtable](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) For a healthcare workflow (e.g., patient tracking, referrals, care coordination, intake management), Airtable may be workable if configured correctly. For a full electronic medical record (EMR/EHR) replacement, you would typically want to evaluate whether it meets your clinical, regulatory, audit, and interoperability needs. If you tell me **what kind of patient data/workflow you want to put in Airtable** (e.g., scheduling, intake forms, case management, clinical notes, lab results, PHI database), I can help assess the HIPAA risk level. [Airtable](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com) [Airtable Help Center](https://support.airtable.com/docs/understanding-hipaa-at-airtable?utm_source=chatgpt.com) [Airtable](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) [Airtable Help Center](https://support.airtable.com/articles/6185273192-hipaa-and-ferpa-compliance-at-airtable?utm_source=chatgpt.com)

**Yes, Airtable can be HIPAA compliant** , but only under specific, strict conditions . It is not compliant out-of-the-box on standard self-serve plans.[](https://www.accountablehq.com/post/airtable-hipaa-compliance-baa-security-features-and-what-to-know-in-2026) [[1]](https://www.accountablehq.com/post/airtable-hipaa-compliance-baa-security-features-and-what-to-know-in-2026)[[2]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) Key Requirements for HIPAA Compliance on Airtable 1. **Enterprise Scale Plan Required** : Airtable only supports HIPAA compliance for customers on its **Enterprise Scale plan** . If you are on the Free, Team, or Business plans, storing electronic Protected Health Information (ePHI) violates Airtable's terms.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) 2. **Execute a Business Associate Agreement (BAA)** : You must formally execute Airtable's **Health Information Exhibit** , which includes their BAA. Without a signed BAA in place, the platform is not considered compliant for medical or patient data.[](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) [[1]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[2]](https://www.complysaas.com/compliance/airtable)[[3]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) 3. **Strict Boundary and Configuration Rules** : Even with a BAA and the Enterprise plan, Airtable enforces rigid operational boundaries outlined in their Airtable Health Information Datasheet: - **Where PHI Lives** : ePHI must only be stored inside record cells within designated Airtable bases or interfaces. - **Airtable AI** : Do not store ePHI in workspaces where Airtable AI is enabled unless you have specifically agreed to the Supplemental AI Terms for Health Information. - **No Patient Portals** : Airtable explicitly states the platform should **not** be used as a patient portal. - **Automations & Emails** : Be cautious with automations that send outgoing emails, as transmitting ePHI improperly outside secure confines breaks compliance. - **Customer Support** : You must never include ePHI or medical information in support tickets or screenshots sent to Airtable support. - **Integrations** : Any third-party tool connected to Airtable (like Zapier, Slack, or custom APIs) must also be HIPAA-compliant and covered by its own BAA.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.accountablehq.com/post/common-low-level-hipaa-security-rule-violations-examples-risks-and-fixes) If you'd like to proceed, tell me: - What **tier of Airtable** your organization currently uses - Whether you plan to **integrate Airtable** with other external apps or tools I can help you evaluate your **workflow architecture** for patient data. Yes, Airtable can be HIPAA compliant, but only under specific, strict conditions. It is not compliant out-of-the-box on standard self-serve plans. Is HIPAA compliance available on all Airtable plans? No. HIPAA support requires an executed BAA and is generally available to ente... HIPAA: The Part Everyone Gets Wrong Every couple of weeks a client asks us, "Is Airtable HIPAA compliant?" The honest answer is "i... If you'd like to proceed, tell me: What tier of Airtable your organization currently uses Whether you plan to integrate Airtable with other external apps or tools - What **tier of Airtable** your organization currently uses - Whether you plan to **integrate Airtable** with other external apps or tools I can help you evaluate your workflow architecture for patient data. I can help you evaluate your **workflow architecture** for patient data. Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP... HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... HIPAA, BAA, and SOC 2 summary ... Airtable states that HIPAA support is available on Enterprise Scale and that customers intending...

Airtable is HIPAA compliant **only** for customers on the highest-tier **Enterprise Scale** plan who sign a formal **Business Associate Agreement (BAA)** via Airtable's Health Information Exhibit . Users on Free, Team, or Business plans are strictly prohibited from storing protected health information (PHI).[](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[3]](https://www.paubox.com/blog/airtable-hipaa-compliant)Requirements and Limitations - **Plan Tier:** Gated exclusively behind the [Airtable Enterprise Scale](https://www.airtable.com/company/hipaa-airtable) plan. - **BAA Signature:** Must execute Airtable's Health Information Exhibit containing the BAA. - **Storage Rules:** ePHI must remain strictly inside record cells within bases or interfaces. - **Excluded Features:** Do not use Airtable AI, patient portals, or include PHI in customer support tickets. - **Integrations:** Third-party app connections and external automations (like outgoing emails) must independently meet HIPAA rules.[](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) If you'd like, let me know: - Your current **Airtable plan** - What kind of **patient data or workflow** you plan to build I can help you determine if the Enterprise tier fits your project or if you need an alternative solution. Airtable is HIPAA compliant only for customers on the highest-tier Enterprise Scale plan who sign a formal Business Associate Agreement (BAA) via Airtable's Health Information Exhibit. Users on Free, Team, or Business plans are strictly prohibited from storing protected health information (PHI). A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are... Plan Tier: Gated exclusively behind the Airtable Enterprise Scale plan. BAA Signature: Must execute Airtable's Health Information Exhibit containing the BAA. Storage Rules: ePHI must remain strictly inside record cells within bases or interfaces. Excluded Features: Do not use Airtable AI, patient portals, or include PHI in customer support tickets. Integrations: Third-party app connections and external automations (like outgoing emails) must independently meet HIPAA rules. - **Plan Tier:** Gated exclusively behind the [Airtable Enterprise Scale](https://www.airtable.com/company/hipaa-airtable) plan. - **BAA Signature:** Must execute Airtable's Health Information Exhibit containing the BAA. - **Storage Rules:** ePHI must remain strictly inside record cells within bases or interfaces. - **Excluded Features:** Do not use Airtable AI, patient portals, or include PHI in customer support tickets. - **Integrations:** Third-party app connections and external automations (like outgoing emails) must independently meet HIPAA rules.[](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Is Airtable Technically HIPAA-Compliant? * Enterprise-only paywall. HIPAA support didn't exist until April 2024 and is still gated... If you'd like, let me know:Your current Airtable plan What kind of patient data or workflow you plan to build I can help you determine if the Enterprise tier fits your project or if you need an alternative solution. If you'd like, let me know: - Your current **Airtable plan** - What kind of **patient data or workflow** you plan to build I can help you determine if the Enterprise tier fits your project or if you need an alternative solution.

Yes, **Airtable can be used for HIPAA-regulated patient data, but only under specific conditions**. It is not automatically HIPAA compliant just because you create a healthcare-related base. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com) Key requirements: - **You must be on Airtable’s Enterprise Scale plan.** HIPAA support is only available on that plan. [www.airtable.com](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com) - **You must execute Airtable’s Health Information Exhibit, which includes a Business Associate Addendum (BAA).** Without the required agreement in place, Airtable does not permit storing electronic protected health information (ePHI) in the Airtable environment. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) - **Your organization still has HIPAA responsibilities.** Airtable providing HIPAA support does not make your workflows automatically compliant—you must configure access controls, permissions, auditing, policies, and procedures appropriately. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com) - **Do not use Airtable as a patient portal.** Airtable’s HIPAA materials specifically state that HIPAA-enabled use cases should not use Airtable as a patient portal. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) A typical compliant setup would include things like: - Enterprise Scale workspace - Signed BAA/Health Information Exhibit - Least-privilege user permissions - SSO/MFA controls - Audit logging and access reviews - Careful review of integrations and automations that touch patient data [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com) So the short answer: **Yes, Airtable may be HIPAA-usable for patient data when properly contracted and configured; a standard Airtable account or free/team plan should not be used to store PHI.** [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) If you tell me what you want to store in Airtable (e.g., patient directory, scheduling, intake forms, clinical notes, care coordination, research data), I can help assess whether that use case fits.

**Yes, but only under very specific plan tiers, contract agreements, and configuration constraints** **.** [](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) Airtable supports HIPAA compliance for customers on its highest enterprise tier, but standard lower-tier plans are strictly **not** HIPAA compliant.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) Key Requirements for HIPAA Compliance on Airtable - **Enterprise Scale Plan Only:** HIPAA support and the ability to handle Protected Health Information (PHI) are exclusively available to organizations subscribed to Airtable's **Enterprise Scale** plan. Free, Team, and Business plans do not support HIPAA compliance or qualify for a Business Associate Agreement (BAA).[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Signed Business Associate Agreement (BAA):** You must execute Airtable's **Health Information Exhibit** , which contains their formal BAA. Storing ePHI (electronic Protected Health Information) without this signed agreement in place violates HIPAA regulations.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) Strict Boundaries and Limitations Even on an Enterprise Scale plan with a signed BAA, Airtable enforces rigid rules regarding where and how patient data can touch the platform:[[1]](https://www.facebook.com/KnackHQ/posts/airtable-is-great-until-it-is-patient-dataon-standard-plans-there-is-no-baa-the-/1661739832624383/) - **Where PHI Can Live:** ePHI must be stored *only* within standard "Records" inside Airtable bases or interfaces. - **Automated Emails:** You cannot use Airtable’s automated functions to email records if those records contain PHI. - **Customer Support:** You must never disclose PHI (via screenshots, tickets, or chat) to Airtable’s customer support team. - **Airtable AI:** Airtable AI is excluded from standard HIPAA protections unless you have specifically accepted supplemental AI health information terms. It is safest to disable AI in any workspace handling PHI. - **Patient Portals:** Airtable **cannot** be used as a patient portal or as the underlying technology for direct patient-facing portals. - **Third-Party Integrations:** Any connected integrations (such as Slack, Zapier, or Salesforce) must independently support HIPAA compliance and have their own BAAs.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/)[[3]](https://www.reddit.com/r/lovable/comments/1r84a50/question_about_hipaacompliant_usage_of_lovable/) If you'd like to proceed, tell me: - What **tier/plan** is your organization currently on? - What **specific workflows** (e.g., internal tracking, integrations) are you planning to build? I can help you evaluate whether Airtable fits your needs or if a dedicated healthcare database tool is a better option. Yes, but only under very specific plan tiers, contract agreements, and configuration constraints. Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Airtable supports HIPAA compliance for customers on its highest enterprise tier, but standard lower-tier plans are strictly not HIPAA compliant. Airtable supports HIPAA compliance for customers on its highest enterprise tier, but standard lower-tier plans are strictly **not** HIPAA compliant.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) Enterprise Scale Plan Only: HIPAA support and the ability to handle Protected Health Information (PHI) are exclusively available to organizations subscribed to Airtable's Enterprise Scale plan. Free, Team, and Business plans do not support HIPAA compliance or qualify for a Business Associate Agreement (BAA). Signed Business Associate Agreement (BAA): You must execute Airtable's Health Information Exhibit, which contains their formal BAA. Storing ePHI (electronic Protected Health Information) without this signed agreement in place violates HIPAA regulations. - **Enterprise Scale Plan Only:** HIPAA support and the ability to handle Protected Health Information (PHI) are exclusively available to organizations subscribed to Airtable's **Enterprise Scale** plan. Free, Team, and Business plans do not support HIPAA compliance or qualify for a Business Associate Agreement (BAA).[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Signed Business Associate Agreement (BAA):** You must execute Airtable's **Health Information Exhibit** , which contains their formal BAA. Storing ePHI (electronic Protected Health Information) without this signed agreement in place violates HIPAA regulations.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... Even on an Enterprise Scale plan with a signed BAA, Airtable enforces rigid rules regarding where and how patient data can touch the platform: Even on an Enterprise Scale plan with a signed BAA, Airtable enforces rigid rules regarding where and how patient data can touch the platform:[[1]](https://www.facebook.com/KnackHQ/posts/airtable-is-great-until-it-is-patient-dataon-standard-plans-there-is-no-baa-the-/1661739832624383/) Airtable is great, until it is patient data. On standard plans there is no BAA. The HIPAA add-on is enterprise-only, and even then... Where PHI Can Live: ePHI must be stored only within standard "Records" inside Airtable bases or interfaces. Automated Emails: You cannot use Airtable’s automated functions to email records if those records contain PHI. Customer Support: You must never disclose PHI (via screenshots, tickets, or chat) to Airtable’s customer support team. Airtable AI: Airtable AI is excluded from standard HIPAA protections unless you have specifically accepted supplemental AI health information terms. It is safest to disable AI in any workspace handling PHI. Patient Portals: Airtable cannot be used as a patient portal or as the underlying technology for direct patient-facing portals. Third-Party Integrations: Any connected integrations (such as Slack, Zapier, or Salesforce) must independently support HIPAA compliance and have their own BAAs. - **Where PHI Can Live:** ePHI must be stored *only* within standard "Records" inside Airtable bases or interfaces. - **Automated Emails:** You cannot use Airtable’s automated functions to email records if those records contain PHI. - **Customer Support:** You must never disclose PHI (via screenshots, tickets, or chat) to Airtable’s customer support team. - **Airtable AI:** Airtable AI is excluded from standard HIPAA protections unless you have specifically accepted supplemental AI health information terms. It is safest to disable AI in any workspace handling PHI. - **Patient Portals:** Airtable **cannot** be used as a patient portal or as the underlying technology for direct patient-facing portals. - **Third-Party Integrations:** Any connected integrations (such as Slack, Zapier, or Salesforce) must independently support HIPAA compliance and have their own BAAs.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/)[[3]](https://www.reddit.com/r/lovable/comments/1r84a50/question_about_hipaacompliant_usage_of_lovable/) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... In healthcare, Airtable has many potential uses. It could be used to keep track of appointments and consultant availability, strea... That setup is pretty standard, keeping PHI completely out of the prototyping layer is usually the safer route. If you'd like to proceed, tell me: What tier/plan is your organization currently on? What specific workflows (e.g., internal tracking, integrations) are you planning to build? - What **tier/plan** is your organization currently on? - What **specific workflows** (e.g., internal tracking, integrations) are you planning to build? I can help you evaluate whether Airtable fits your needs or if a dedicated healthcare database tool is a better option.

Yes, Airtable is HIPAA compliant, but strictly **only for Enterprise Scale plan customers** who have signed a specialized Health Information Exhibit containing a Business Associate Agreement (BAA). It is not compliant or permitted for use with Protected Health Information (PHI) on Free, Team, or Business plans.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/)[[3]](https://www.blaze.tech/post/is-airtable-hipaa-compliant)[[4]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[5]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-plan-requirements-and-using-airtable-for-phi)Requirements for HIPAA Compliance - **Enterprise Scale Plan:** You must subscribe to Airtable’s highest enterprise tier. - **Executed BAA:** You must sign Airtable’s official Health Information Exhibit (which includes the BAA) via your account team. - **Proper Configuration:** Your organization must enforce internal controls like single sign-on (SSO), granular permissions, and audit logs.[](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[3]](https://www.reddit.com/r/Airtable/comments/1jw3ion/exploring_airtable_for_med_school/) Important Restrictions & Limitations Even under an Enterprise BAA, Airtable enforces strict boundary rules regarding where and how patient data can touch the platform: - **Storage Location:** Electronic Protected Health Information (ePHI) must only be stored within standard **Records** inside Airtable bases or interfaces.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **No Airtable AI:** You cannot store or process ePHI in workspaces where Airtable AI is enabled unless specific supplemental health terms apply and are configured safely.[](https://www.airtable.com/company/health-info-datasheet) - **No Automated Emails with PHI:** You cannot use automated Airtable functions or scripts to send emails containing PHI.[](https://www.airtable.com/company/health-info-datasheet) - **No Patient Portals:** Airtable cannot be used as or behind a public-facing patient portal.[](https://www.airtable.com/company/health-info-datasheet) - **Customer Support:** You must never share screenshots or tickets containing ePHI with Airtable’s standard customer support.[](https://www.airtable.com/company/health-info-datasheet) - **Third-Party Integrations:** Any connected tool or integration (such as Slack, Google Workspace, or custom webhooks) must also independently support and be configured for HIPAA compliance.[](https://www.airtable.com/company/health-info-datasheet) If you'd like, let me know: - What **tier or plan** your organization currently uses - What **kind of workflow or data tracking** you plan to build I can help you evaluate if Airtable fits your technical setup or if an alternative tool is better. Yes, Airtable is HIPAA compliant, but strictly only for Enterprise Scale plan customers who have signed a specialized Health Information Exhibit containing a Business Associate Agreement (BAA). It is not compliant or permitted for use with Protected Health Information (PHI) on Free, Team, or Business plans. Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... In healthcare, Airtable has many potential uses. It could be used to keep track of appointments and consultant availability, strea... If you're managing sensitive healthcare information, you might wonder if Airtable is HIPAA compliant. The answer is that Airtable ... Is Airtable Technically HIPAA-Compliant? * Enterprise-only paywall. HIPAA support didn't exist until April 2024 and is still gated... Does Airtable require a BAA for HIPAA compliance? Yes. You must have a fully executed Business Associate Agreement—often provided ... Enterprise Scale Plan: You must subscribe to Airtable’s highest enterprise tier. Executed BAA: You must sign Airtable’s official Health Information Exhibit (which includes the BAA) via your account team. Proper Configuration: Your organization must enforce internal controls like single sign-on (SSO), granular permissions, and audit logs. - **Enterprise Scale Plan:** You must subscribe to Airtable’s highest enterprise tier. - **Executed BAA:** You must sign Airtable’s official Health Information Exhibit (which includes the BAA) via your account team. - **Proper Configuration:** Your organization must enforce internal controls like single sign-on (SSO), granular permissions, and audit logs.[](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[3]](https://www.reddit.com/r/Airtable/comments/1jw3ion/exploring_airtable_for_med_school/) A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... You need the top of the line Enterprise plan to get the HIPAA-compliant version of Airtable. Even under an Enterprise BAA, Airtable enforces strict boundary rules regarding where and how patient data can touch the platform: Storage Location: Electronic Protected Health Information (ePHI) must only be stored within standard Records inside Airtable bases or interfaces. No Airtable AI: You cannot store or process ePHI in workspaces where Airtable AI is enabled unless specific supplemental health terms apply and are configured safely. No Automated Emails with PHI: You cannot use automated Airtable functions or scripts to send emails containing PHI. No Patient Portals: Airtable cannot be used as or behind a public-facing patient portal. Customer Support: You must never share screenshots or tickets containing ePHI with Airtable’s standard customer support. Third-Party Integrations: Any connected tool or integration (such as Slack, Google Workspace, or custom webhooks) must also independently support and be configured for HIPAA compliance. - **Storage Location:** Electronic Protected Health Information (ePHI) must only be stored within standard **Records** inside Airtable bases or interfaces.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **No Airtable AI:** You cannot store or process ePHI in workspaces where Airtable AI is enabled unless specific supplemental health terms apply and are configured safely.[](https://www.airtable.com/company/health-info-datasheet) - **No Automated Emails with PHI:** You cannot use automated Airtable functions or scripts to send emails containing PHI.[](https://www.airtable.com/company/health-info-datasheet) - **No Patient Portals:** Airtable cannot be used as or behind a public-facing patient portal.[](https://www.airtable.com/company/health-info-datasheet) - **Customer Support:** You must never share screenshots or tickets containing ePHI with Airtable’s standard customer support.[](https://www.airtable.com/company/health-info-datasheet) - **Third-Party Integrations:** Any connected tool or integration (such as Slack, Google Workspace, or custom webhooks) must also independently support and be configured for HIPAA compliance.[](https://www.airtable.com/company/health-info-datasheet) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... If you'd like, let me know:What tier or plan your organization currently uses What kind of workflow or data tracking you plan to build I can help you evaluate if Airtable fits your technical setup or if an alternative tool is better. If you'd like, let me know: - What **tier or plan** your organization currently uses - What **kind of workflow or data tracking** you plan to build I can help you evaluate if Airtable fits your technical setup or if an alternative tool is better. Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Yes — **Airtable can be used for HIPAA-regulated patient data, but only under specific conditions.** It is not accurate to say that every Airtable account/workspace is automatically HIPAA compliant. As of July 2026, Airtable says: - **You must be on Airtable’s Enterprise Scale plan.** - You must execute Airtable’s **Health Information Exhibit**, which includes its **Business Associate Addendum (BAA)**. - HIPAA must be enabled for the applicable organization/org units. - Your organization is still responsible for configuring and using Airtable appropriately; Airtable's HIPAA support does not make your particular workflow automatically compliant. [support.airtable.com](https://support.airtable.com/understanding-hipaa-at-airtable?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) ### Important restrictions If you're storing patient information such as names, diagnoses, treatment information, insurance information, etc., pay particular attention to these: - **Don't put ePHI into a non-HIPAA-enabled Airtable environment.** Airtable explicitly says customers may not store ePHI unless they're on Enterprise Scale and have executed the Health Information Exhibit. [support.airtable.com](https://support.airtable.com/understanding-hipaa-at-airtable?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) - **Don't use Airtable as a patient portal**; Airtable currently says this is not an allowed use case. [support.airtable.com](https://support.airtable.com/understanding-hipaa-at-airtable?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) - **Integrations matter.** If patient data leaves Airtable through an integration/API, you are responsible for making sure the other system/vendor is also appropriately covered under HIPAA. [support.airtable.com](https://support.airtable.com/understanding-hipaa-at-airtable?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) - **Airtable AI has additional requirements.** You can't simply assume AI features are covered because your organization has a BAA; Airtable has separate health-information AI terms and requirements. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) - Airtable provides security capabilities such as encryption, access controls, audit-related functionality, SSO, and other Enterprise features to support HIPAA compliance. [support.airtable.com](https://support.airtable.com/understanding-hipaa-at-airtable?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) ### Bottom line If you're asking, **"Can my medical practice use Airtable to maintain a database containing identifiable patient information?"** — **potentially yes**, provided you use **Enterprise Scale + the Health Information Exhibit/BAA + HIPAA-enabled configuration + compliant workflows**. If you're considering Airtable for a **specific patient-data workflow** (e.g., patient intake, referral tracking, clinical case management, appointment tracking, lab results, or a CRM), tell me what you want to store and how you'll use it. I can tell you **whether that particular setup is likely to be HIPAA-compatible and what you'd need to configure.** [Airtable's current HIPAA guidance](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com)  [Airtable's current HIPAA guidance](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com)

**Yes, but only under strict conditions.** Airtable supports HIPAA compliance for organizations that meet specific plan and configuration requirements.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/)[[3]](https://community.airtable.com/announcements-6/airtable-is-now-hipaa-compliant-1542)[[4]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) Key Requirements for HIPAA Compliance in Airtable - **Enterprise Scale Plan:** HIPAA support and the ability to sign a Business Associate Agreement (BAA) are restricted exclusively to customers on Airtable's **Enterprise Scale** tier. Standard, Team, and Business plans are **not** HIPAA compliant and prohibit storing electronic Protected Health Information (ePHI).[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Signed Health Information Exhibit (BAA):** You must execute Airtable's official Health Information Exhibit, which contains their Business Associate Addendum, before introducing any patient data or PHI into the platform.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Enterprise Controls:** Proper setup requires leveraging enterprise-grade features such as Enterprise Key Management (EKM) for customer-managed encryption, Enterprise Single Sign-On (SSO), Data Loss Prevention (DLP), and Audit Logs.[](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) [[1]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[2]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) Strict Operational Boundaries & Limitations Even with a signed BAA and an Enterprise Scale plan, Airtable enforces tight operational rules regarding where patient data can live:[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.techrepublic.com/article/airtable-alternatives/)[[2]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) - **Records Only:** ePHI must only be stored inside standard **Records** (cells) within Airtable bases or interfaces. It cannot be placed in un-scoped metadata, comments, or general workspace text fields.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.airtable.com/company/health-info-datasheet) - **No Automated PHI Emails:** You cannot configure Airtable automations to send out emails containing actual PHI.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **No Airtable AI with PHI:** Airtable AI features sit completely outside the HIPAA compliance boundary unless specifically covered by supplemental health terms—standard practice is to ensure AI is disabled in workspaces handling patient data.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Support Ticket Restrictions:** You must never include screenshots or text containing actual ePHI when communicating with Airtable's digital or verbal customer support team.[](https://www.airtable.com/company/health-info-datasheet) - **No Patient Portals:** Airtable cannot be used as—or as the underlying tech stack for—a patient-facing portal.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Third-Party Integrations:** Any external tools or integrations connected to your Airtable base (such as Zapier, Slack, or Google Workspace) must also be HIPAA-compliant and covered by their own separate BAAs.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) If you'd like, let me know: - What **tier of Airtable** your organization currently uses - What **specific workflows or data** (e.g., internal tracking vs. integrations) you plan to build I can help you evaluate whether Airtable fits your use case or if you need alternative architectures. Yes, but only under strict conditions. Airtable supports HIPAA compliance for organizations that meet specific plan and configuration requirements. Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... In healthcare, Airtable has many potential uses. It could be used to keep track of appointments and consultant availability, strea... * 🩺📈 Exciting news for healthcare providers and organizations! Airtable is now HIPAA compliant and ready to support your critica... HIPAA: The Part Everyone Gets Wrong Every couple of weeks a client asks us, "Is Airtable HIPAA compliant?" The honest answer is "i... Enterprise Scale Plan: HIPAA support and the ability to sign a Business Associate Agreement (BAA) are restricted exclusively to customers on Airtable's Enterprise Scale tier. Standard, Team, and Business plans are not HIPAA compliant and prohibit storing electronic Protected Health Information (ePHI). Signed Health Information Exhibit (BAA): You must execute Airtable's official Health Information Exhibit, which contains their Business Associate Addendum, before introducing any patient data or PHI into the platform. Enterprise Controls: Proper setup requires leveraging enterprise-grade features such as Enterprise Key Management (EKM) for customer-managed encryption, Enterprise Single Sign-On (SSO), Data Loss Prevention (DLP), and Audit Logs. - **Enterprise Scale Plan:** HIPAA support and the ability to sign a Business Associate Agreement (BAA) are restricted exclusively to customers on Airtable's **Enterprise Scale** tier. Standard, Team, and Business plans are **not** HIPAA compliant and prohibit storing electronic Protected Health Information (ePHI).[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Signed Health Information Exhibit (BAA):** You must execute Airtable's official Health Information Exhibit, which contains their Business Associate Addendum, before introducing any patient data or PHI into the platform.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Enterprise Controls:** Proper setup requires leveraging enterprise-grade features such as Enterprise Key Management (EKM) for customer-managed encryption, Enterprise Single Sign-On (SSO), Data Loss Prevention (DLP), and Audit Logs.[](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) [[1]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[2]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP... Even with a signed BAA and an Enterprise Scale plan, Airtable enforces tight operational rules regarding where patient data can live: Even with a signed BAA and an Enterprise Scale plan, Airtable enforces tight operational rules regarding where patient data can live:[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.techrepublic.com/article/airtable-alternatives/)[[2]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) Airtable can be HIPAA compliant, but this is only available under its Enterprise Scale plan. For Airtable to be HIPAA compliant, u... Off-load the PHI, Keep Only “Breadcrumbs” in Airtable * Shape-shift PHI into opaque IDs. Store patient details in a hardened backe... Records Only: ePHI must only be stored inside standard Records (cells) within Airtable bases or interfaces. It cannot be placed in un-scoped metadata, comments, or general workspace text fields. No Automated PHI Emails: You cannot configure Airtable automations to send out emails containing actual PHI. No Airtable AI with PHI: Airtable AI features sit completely outside the HIPAA compliance boundary unless specifically covered by supplemental health terms—standard practice is to ensure AI is disabled in workspaces handling patient data. Support Ticket Restrictions: You must never include screenshots or text containing actual ePHI when communicating with Airtable's digital or verbal customer support team. No Patient Portals: Airtable cannot be used as—or as the underlying tech stack for—a patient-facing portal. Third-Party Integrations: Any external tools or integrations connected to your Airtable base (such as Zapier, Slack, or Google Workspace) must also be HIPAA-compliant and covered by their own separate BAAs. - **Records Only:** ePHI must only be stored inside standard **Records** (cells) within Airtable bases or interfaces. It cannot be placed in un-scoped metadata, comments, or general workspace text fields.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.airtable.com/company/health-info-datasheet) - **No Automated PHI Emails:** You cannot configure Airtable automations to send out emails containing actual PHI.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **No Airtable AI with PHI:** Airtable AI features sit completely outside the HIPAA compliance boundary unless specifically covered by supplemental health terms—standard practice is to ensure AI is disabled in workspaces handling patient data.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Support Ticket Restrictions:** You must never include screenshots or text containing actual ePHI when communicating with Airtable's digital or verbal customer support team.[](https://www.airtable.com/company/health-info-datasheet) - **No Patient Portals:** Airtable cannot be used as—or as the underlying tech stack for—a patient-facing portal.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Third-Party Integrations:** Any external tools or integrations connected to your Airtable base (such as Zapier, Slack, or Google Workspace) must also be HIPAA-compliant and covered by their own separate BAAs.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... If you'd like, let me know: What tier of Airtable your organization currently uses What specific workflows or data (e.g., internal tracking vs. integrations) you plan to build - What **tier of Airtable** your organization currently uses - What **specific workflows or data** (e.g., internal tracking vs. integrations) you plan to build I can help you evaluate whether Airtable fits your use case or if you need alternative architectures.

Yes, [Airtable](https://www.airtable.com/company/hipaa-airtable) is HIPAA compliant , but strictly for **Enterprise Scale** plan subscribers who have signed a Business Associate Agreement (BAA) via a Health Information Exhibit. It is not compliant on lower-tier plans (Free, Team, or Business).[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Requirements for Compliance - **Enterprise Scale Plan:** You must be on Airtable's highest custom-priced enterprise tier. - **Signed BAA:** You must execute Airtable’s Health Information Exhibit, which contains the official Business Associate Addendum.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) Platform Restrictions & Rules - **Where Data Lives:** Protected Health Information (PHI) must only be stored within records in Airtable bases or interfaces. - **Exclusions:** Airtable AI, customer support interactions, and standard automated emails containing PHI are excluded or restricted. - **Patient Portals:** You cannot use Airtable as a patient portal or the backend technology for one. - **Integrations:** Any third-party tools or integrations connected to your bases must also independently support HIPAA compliance.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) If you'd like, let me know: - What **tier** your organization is currently on - What kind of **healthcare workflow or data tracking** you plan to build I can help you determine the best architectural approach or look into alternative tools. Yes, Airtable is HIPAA compliant, but strictly for Enterprise Scale plan subscribers who have signed a Business Associate Agreement (BAA) via a Health Information Exhibit. It is not compliant on lower-tier plans (Free, Team, or Business). A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Enterprise Scale Plan: You must be on Airtable's highest custom-priced enterprise tier. Signed BAA: You must execute Airtable’s Health Information Exhibit, which contains the official Business Associate Addendum. - **Enterprise Scale Plan:** You must be on Airtable's highest custom-priced enterprise tier. - **Signed BAA:** You must execute Airtable’s Health Information Exhibit, which contains the official Business Associate Addendum.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) Is Airtable Technically HIPAA-Compliant? * Enterprise-only paywall. HIPAA support didn't exist until April 2024 and is still gated... Where Data Lives: Protected Health Information (PHI) must only be stored within records in Airtable bases or interfaces. Exclusions: Airtable AI, customer support interactions, and standard automated emails containing PHI are excluded or restricted. Patient Portals: You cannot use Airtable as a patient portal or the backend technology for one. Integrations: Any third-party tools or integrations connected to your bases must also independently support HIPAA compliance. - **Where Data Lives:** Protected Health Information (PHI) must only be stored within records in Airtable bases or interfaces. - **Exclusions:** Airtable AI, customer support interactions, and standard automated emails containing PHI are excluded or restricted. - **Patient Portals:** You cannot use Airtable as a patient portal or the backend technology for one. - **Integrations:** Any third-party tools or integrations connected to your bases must also independently support HIPAA compliance.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... In healthcare, Airtable has many potential uses. It could be used to keep track of appointments and consultant availability, strea... If you'd like, let me know:What tier your organization is currently on What kind of healthcare workflow or data tracking you plan to build I can help you determine the best architectural approach or look into alternative tools. If you'd like, let me know: - What **tier** your organization is currently on - What kind of **healthcare workflow or data tracking** you plan to build I can help you determine the best architectural approach or look into alternative tools. Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Yes — **Airtable can be used for HIPAA-covered patient data, but only under specific conditions.** It is not accurate to say that every Airtable account or workspace is automatically HIPAA compliant. As of July 2026, Airtable states that organizations storing ePHI must: - Be on the **Enterprise Scale** plan. - Execute Airtable's **Health Information Exhibit**, which includes its **Business Associate Addendum (BAA)**. - Have HIPAA enabled for the relevant organization/workspaces. - Configure Airtable appropriately and maintain their own HIPAA safeguards. [support.airtable.com](https://support.airtable.com/understanding-hipaa-at-airtable?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) ### Important limitations A few things are particularly important if you're considering Airtable for patient records: - **Do not put PHI into a regular/free/Team/Business Airtable account** without the required HIPAA agreement and enablement. Airtable explicitly says customers may not store ePHI unless they are on Enterprise Scale and have executed the Health Information Exhibit. [support.airtable.com](https://support.airtable.com/understanding-hipaa-at-airtable?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) - **Airtable is not currently intended to be used as a patient portal.** [support.airtable.com](https://support.airtable.com/understanding-hipaa-at-airtable?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) - **Integrations are your responsibility.** If PHI leaves Airtable through an integration, you need to ensure the receiving system and integration are also HIPAA compliant and appropriately covered. [support.airtable.com](https://support.airtable.com/understanding-hipaa-at-airtable?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) - **Airtable AI requires additional attention.** Airtable allows AI with HIPAA-enabled environments under its Supplemental AI Terms for Health Information, but there are specific restrictions and responsibilities. [www.airtable.com](https://www.airtable.com/company/ai-terms-health-information?utm_source=chatgpt.com) - Airtable provides relevant security controls such as encryption, audit capabilities, SSO, and enterprise security features, but **HIPAA compliance is a shared responsibility** between Airtable and your organization. [support.airtable.com](https://support.airtable.com/understanding-hipaa-at-airtable?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) So, if your question is **"Can I build a patient-tracking system in Airtable containing names, diagnoses, appointments, insurance information, etc.?"** the answer is **potentially yes, but you'd need the Enterprise Scale + Health Information Exhibit/BAA arrangement and a properly configured workflow.** If you tell me **what patient data you want to store and what you're using Airtable for** (e.g., patient intake, referral tracking, case management, scheduling, clinical notes), I can tell you whether Airtable is a reasonable HIPAA-compliant architecture for that particular use case.

**Yes, but strictly under specific conditions.** Airtable supports HIPAA compliance, but it is **not** compliant out-of-the-box on standard plans.[](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) [[1]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) Key Requirements for HIPAA Compliance on Airtable 1. **Enterprise Scale Plan:** HIPAA support is locked exclusively behind Airtable's highest-tier **Enterprise Scale** plan. It is prohibited to store electronic Protected Health Information (ePHI) on Free, Team, or Business plans.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) 2. **Signed Business Associate Agreement (BAA):** You must execute Airtable's **Health Information Exhibit** , which contains their formal BAA. Without this contract in place, storing patient data violates HIPAA.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) 3. **Enterprise Security Features:** Your organization must properly configure and maintain administrative and technical safeguards like Enterprise Single Sign-On (SSO), Audit Logs, Data Loss Prevention (DLP), and Enterprise Key Management (EKM).[](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) [[1]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) Strict Boundaries and Restrictions Even with a signed BAA and an Enterprise Scale plan, Airtable enforces hard operational rules regarding patient data outlined in their Airtable Health Information Datasheet:[[1]](https://www.reddit.com/r/Airtable/comments/d9btne/was_about_to_use_airtable_but_no_hipaa_compliant/)[[2]](https://www.facebook.com/KnackHQ/posts/airtable-is-great-until-it-is-patient-dataon-standard-plans-there-is-no-baa-the-/1661739832624383/) - **Storage Location:** ePHI and medical data must **only** be stored within individual records inside Airtable bases or interfaces. It cannot reside in comments, general metadata, or unapproved fields.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) - **Airtable AI:** AI features and agents are **excluded** from HIPAA coverage. You must not store or process ePHI in workspaces where Airtable AI is enabled (unless explicit supplemental health terms apply, though general policy restricts it).[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.knack.com/blog/hipaa-compliance-checklist-no-code/) - **Automations & Email:** You cannot use automated Airtable functions to email records containing PHI.[[1]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) - **Customer Support:** You must never include screenshots or text containing actual ePHI when opening support tickets or talking to Airtable customer service.[](https://www.airtable.com/company/health-info-datasheet) - **No Patient Portals:** Airtable explicitly prohibits using their platform as a patient portal or the direct technology backend for one.[](https://www.airtable.com/company/health-info-datasheet) - **Integrations:** Any third-party tools connected to your Airtable instance (such as Zapier, Slack, or Google Workspace) must also be HIPAA-compliant and covered under separate BAAs.[](https://www.airtable.com/company/health-info-datasheet) If you're planning a project, let me know: - What kind of **healthcare workflow or data** you plan to track - Whether you are already on an **Airtable Enterprise plan** I can help you evaluate if Airtable fits your use case or if a dedicated clinical backend is a better choice. Yes, but strictly under specific conditions. Airtable supports HIPAA compliance, but it is not compliant out-of-the-box on standard plans. HIPAA: The Part Everyone Gets Wrong Every couple of weeks a client asks us, "Is Airtable HIPAA compliant?" The honest answer is "i... Key Requirements for HIPAA Compliance on Airtable Even with a signed BAA and an Enterprise Scale plan, Airtable enforces hard operational rules regarding patient data outlined in their Airtable Health Information Datasheet : Even with a signed BAA and an Enterprise Scale plan, Airtable enforces hard operational rules regarding patient data outlined in their Airtable Health Information Datasheet:[[1]](https://www.reddit.com/r/Airtable/comments/d9btne/was_about_to_use_airtable_but_no_hipaa_compliant/)[[2]](https://www.facebook.com/KnackHQ/posts/airtable-is-great-until-it-is-patient-dataon-standard-plans-there-is-no-baa-the-/1661739832624383/) smartsheet? ill check it out... seems pricey in comparison though, you are right. ... Yeah, that's been a dealbreaker for a lot of... Airtable is great, until it is patient data. On standard plans there is no BAA. The HIPAA add-on is enterprise-only, and even then... HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... Storage Location: ePHI and medical data must only be stored within individual records inside Airtable bases or interfaces. It cannot reside in comments, general metadata, or unapproved fields. Airtable AI: AI features and agents are excluded from HIPAA coverage. You must not store or process ePHI in workspaces where Airtable AI is enabled (unless explicit supplemental health terms apply, though general policy restricts it). Automations & Email: You cannot use automated Airtable functions to email records containing PHI. Customer Support: You must never include screenshots or text containing actual ePHI when opening support tickets or talking to Airtable customer service. No Patient Portals: Airtable explicitly prohibits using their platform as a patient portal or the direct technology backend for one. Integrations: Any third-party tools connected to your Airtable instance (such as Zapier, Slack, or Google Workspace) must also be HIPAA-compliant and covered under separate BAAs. - **Storage Location:** ePHI and medical data must **only** be stored within individual records inside Airtable bases or interfaces. It cannot reside in comments, general metadata, or unapproved fields.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) - **Airtable AI:** AI features and agents are **excluded** from HIPAA coverage. You must not store or process ePHI in workspaces where Airtable AI is enabled (unless explicit supplemental health terms apply, though general policy restricts it).[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.knack.com/blog/hipaa-compliance-checklist-no-code/) - **Automations & Email:** You cannot use automated Airtable functions to email records containing PHI.[[1]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) - **Customer Support:** You must never include screenshots or text containing actual ePHI when opening support tickets or talking to Airtable customer service.[](https://www.airtable.com/company/health-info-datasheet) - **No Patient Portals:** Airtable explicitly prohibits using their platform as a patient portal or the direct technology backend for one.[](https://www.airtable.com/company/health-info-datasheet) - **Integrations:** Any third-party tools connected to your Airtable instance (such as Zapier, Slack, or Google Workspace) must also be HIPAA-compliant and covered under separate BAAs.[](https://www.airtable.com/company/health-info-datasheet) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Off-load the PHI, Keep Only “Breadcrumbs” in Airtable * Shape-shift PHI into opaque IDs. Store patient details in a hardened backe... Do AI features in no-code platforms need to be HIPAA-compliant separately? Yes, and importantly, this is one of the most commonly ... Airtable is a customizable business management platform with automation capabilities that helps organizations better manage data b... If you're planning a project, let me know: What kind of healthcare workflow or data you plan to track Whether you are already on an Airtable Enterprise plan - What kind of **healthcare workflow or data** you plan to track - Whether you are already on an **Airtable Enterprise plan** I can help you evaluate if Airtable fits your use case or if a dedicated clinical backend is a better choice. Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP...

Airtable is HIPAA compliant **only** for customers on the [Airtable Enterprise Scale Plan](https://support.airtable.com/docs/understanding-hipaa-at-airtable) who sign a Health Information Exhibit containing a Business Associate Agreement (BAA). Users on Free, Team, or Business plans are strictly prohibited from storing electronic Protected Health Information (ePHI).[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[3]](https://www.paubox.com/blog/airtable-hipaa-compliant)Plan and Agreement Requirements - **Enterprise Scale Plan:** Required to access Airtable's HIPAA compliance program. - **Business Associate Agreement (BAA):** Must be executed via Airtable's Health Information Exhibit. - **Lower Tiers:** Free, Team, and Business plans do not offer a BAA and cannot legally hold patient data.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) Usage Rules and Restrictions - **Storage Boundaries:** Patient health data (ePHI) must only live inside records within bases or interfaces. - **No AI Features:** Airtable AI cannot be used or enabled in workspaces handling ePHI. - **Support Limits:** You must never share or disclose ePHI with Airtable’s customer support team in tickets or screenshots. - **Automations & Emails:** You cannot use automated email features to transmit raw ePHI out of the system. - **External Integrations:** Any third-party tools or apps connected to your bases must also be HIPAA compliant and covered by their own BAAs. - **No Patient Portals:** Airtable cannot be used as a public or direct patient portal.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) If you'd like, let me know: - What **tier or plan** your organization currently uses - What **type of workflow or data** you plan to build I can help you evaluate if Airtable fits your project or suggest alternative ways to structure your data safely. Airtable is HIPAA compliant only for customers on the Airtable Enterprise Scale Plan who sign a Health Information Exhibit containing a Business Associate Agreement (BAA). Users on Free, Team, or Business plans are strictly prohibited from storing electronic Protected Health Information (ePHI). A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are... Enterprise Scale Plan: Required to access Airtable's HIPAA compliance program. Business Associate Agreement (BAA): Must be executed via Airtable's Health Information Exhibit. Lower Tiers: Free, Team, and Business plans do not offer a BAA and cannot legally hold patient data. - **Enterprise Scale Plan:** Required to access Airtable's HIPAA compliance program. - **Business Associate Agreement (BAA):** Must be executed via Airtable's Health Information Exhibit. - **Lower Tiers:** Free, Team, and Business plans do not offer a BAA and cannot legally hold patient data.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) Storage Boundaries: Patient health data (ePHI) must only live inside records within bases or interfaces. No AI Features: Airtable AI cannot be used or enabled in workspaces handling ePHI. Support Limits: You must never share or disclose ePHI with Airtable’s customer support team in tickets or screenshots. Automations & Emails: You cannot use automated email features to transmit raw ePHI out of the system. External Integrations: Any third-party tools or apps connected to your bases must also be HIPAA compliant and covered by their own BAAs. No Patient Portals: Airtable cannot be used as a public or direct patient portal. - **Storage Boundaries:** Patient health data (ePHI) must only live inside records within bases or interfaces. - **No AI Features:** Airtable AI cannot be used or enabled in workspaces handling ePHI. - **Support Limits:** You must never share or disclose ePHI with Airtable’s customer support team in tickets or screenshots. - **Automations & Emails:** You cannot use automated email features to transmit raw ePHI out of the system. - **External Integrations:** Any third-party tools or apps connected to your bases must also be HIPAA compliant and covered by their own BAAs. - **No Patient Portals:** Airtable cannot be used as a public or direct patient portal.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... In healthcare, Airtable has many potential uses. It could be used to keep track of appointments and consultant availability, strea... If you'd like, let me know:What tier or plan your organization currently uses What type of workflow or data you plan to build I can help you evaluate if Airtable fits your project or suggest alternative ways to structure your data safely. If you'd like, let me know: - What **tier or plan** your organization currently uses - What **type of workflow or data** you plan to build I can help you evaluate if Airtable fits your project or suggest alternative ways to structure your data safely. Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Yes — **Airtable can be used for HIPAA-compliant handling of patient data, but only under specific conditions.** It is not accurate to say that every Airtable account/workspace is automatically HIPAA compliant. As of Airtable's July 2026 documentation: - **HIPAA support is limited to Airtable's Enterprise Scale plan.** [www.airtable.com](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com) - Your organization must execute Airtable's **Health Information Exhibit**, which includes its **Business Associate Addendum (BAA)**. Airtable says you may not store ePHI in Airtable unless you're on Enterprise Scale **and** have executed that agreement. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) - Airtable provides security controls relevant to HIPAA, including encryption, SSO/SCIM, audit capabilities, retention controls, and other administrative/security features. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) - **Your organization remains responsible for configuring and using Airtable appropriately.** HIPAA compliance is a shared responsibility, not something Airtable's BAA automatically guarantees. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) - There are important restrictions: for example, Airtable currently says **not to use Airtable as a patient portal**, and integrations that move ePHI outside Airtable need to be separately assessed for HIPAA compliance. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) - Airtable AI has additional requirements if ePHI is involved. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) This is consistent with HHS guidance: a cloud service can store/process ePHI when there is an appropriate **BAA** and the covered entity/business associate otherwise complies with HIPAA. [www.hhs.gov](https://www.hhs.gov/hipaa/for-professionals/faq/2075/may-a-hipaa-covered-entity-or-business-associate-use-cloud-service-to-store-or-process-ephi/index.html?utm_source=chatgpt.com) **Bottom line:** If you're considering Airtable for something like a patient database, referral tracker, care-management workflow, or clinical operations, **don't put patient-identifiable information into a standard Airtable plan.** Use Enterprise Scale, get the Health Information Exhibit/BAA executed, configure the required controls, and have your HIPAA/privacy counsel or compliance officer review the specific workflow. [Airtable's current HIPAA documentation](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) If you tell me **what patient data/workflow you want to put in Airtable**, I can also tell you whether I'd consider that particular setup reasonably HIPAA-compatible and what I'd change. [Airtable's current HIPAA documentation](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com)

**Yes, Airtable can be HIPAA compliant** , but only under strict conditions . Airtable supports HIPAA compliance for organizations that meet specific plan and configuration requirements, reversing its older policy of not offering a Business Associate Agreement (BAA).[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) Core Requirements for HIPAA Compliance - **Enterprise Scale Plan:** HIPAA support is exclusively gated behind Airtable's highest-tier **Enterprise Scale plan** . Free, Team, and Business plans are **not** eligible, and storing Protected Health Information (PHI) on those tiers violates compliance terms.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[2]](https://www.caspio.com/compare/airtable-alternative/) - **Signed Health Information Exhibit / BAA:** Eligible organizations must formally execute Airtable's **Health Information Exhibit** , which includes their official Business Associate Addendum.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) Crucial Boundaries and Restrictions Even with an Enterprise Scale plan and a signed BAA, Airtable enforces strict limitations on where and how patient data can live within the platform:[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.facebook.com/KnackHQ/posts/airtable-is-great-until-it-is-patient-dataon-standard-plans-there-is-no-baa-the-/1661739832624383/) - **Records Only:** Electronic Protected Health Information (ePHI) and medical information must be restricted strictly to **Records** (cells) inside Airtable bases or interfaces. - **No Airtable AI:** You must **not** store or process ePHI in workspaces or bases where Airtable AI is enabled unless specific health-related supplemental AI terms are accepted and supported. - **No Automated Emails with PHI:** Airtable automations cannot email out records or notifications containing raw ePHI. - **Customer Support Limits:** You cannot include patient data or ePHI in screenshots, support tickets, or chats when communicating with Airtable's Customer Support team. - **No Patient Portals:** Airtable explicitly prohibits using its platform as a patient portal or as the underlying database/technology for one. - **Third-Party Integrations:** Any external tools or integrations connected to your Airtable base (such as Zapier, Slack, or various APIs) must independently support HIPAA compliance and have their own BAAs in place.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) If you'd like to proceed, tell me: - What **tier of Airtable** your organization currently uses - What kind of **workflow or data collection** you are trying to build I can help you evaluate whether Airtable fits your architecture or if you need an alternative setup. Yes, Airtable can be HIPAA compliant, but only under strict conditions. Airtable supports HIPAA compliance for organizations that meet specific plan and configuration requirements, reversing its older policy of not offering a Business Associate Agreement (BAA). Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Business Associate Agreement (BA... For example, PHI can only be stored in “Records” (similar to Excel Cells) in “Bases” Records may not be emailed via an automated f... Enterprise Scale Plan: HIPAA support is exclusively gated behind Airtable's highest-tier Enterprise Scale plan. Free, Team, and Business plans are not eligible, and storing Protected Health Information (PHI) on those tiers violates compliance terms. Signed Health Information Exhibit / BAA: Eligible organizations must formally execute Airtable's Health Information Exhibit, which includes their official Business Associate Addendum. - **Enterprise Scale Plan:** HIPAA support is exclusively gated behind Airtable's highest-tier **Enterprise Scale plan** . Free, Team, and Business plans are **not** eligible, and storing Protected Health Information (PHI) on those tiers violates compliance terms.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[2]](https://www.caspio.com/compare/airtable-alternative/) - **Signed Health Information Exhibit / BAA:** Eligible organizations must formally execute Airtable's **Health Information Exhibit** , which includes their official Business Associate Addendum.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) The boundary is drawn tightly: PHI may only live in records within bases, it can't appear in automated emails or be shared with Ai... any external integrations used with the Airtable platform must also support HIPAA compliance (i.e., MS Teams, Salesforce, Google W... HIPAA features are available only with Airtable's Enterprise Scale Plan, though. Customers can sign Airtable's Business Associate ... Airtable supports HIPAA only on its top-tier Enterprise Scale plan and does not offer FERPA, private cloud, or government cloud de... Even with an Enterprise Scale plan and a signed BAA, Airtable enforces strict limitations on where and how patient data can live within the platform : Even with an Enterprise Scale plan and a signed BAA, Airtable enforces strict limitations on where and how patient data can live within the platform:[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.facebook.com/KnackHQ/posts/airtable-is-great-until-it-is-patient-dataon-standard-plans-there-is-no-baa-the-/1661739832624383/) Airtable is great, until it is patient data. On standard plans there is no BAA. The HIPAA add-on is enterprise-only, and even then... Records Only: Electronic Protected Health Information (ePHI) and medical information must be restricted strictly to Records (cells) inside Airtable bases or interfaces. No Airtable AI: You must not store or process ePHI in workspaces or bases where Airtable AI is enabled unless specific health-related supplemental AI terms are accepted and supported. No Automated Emails with PHI: Airtable automations cannot email out records or notifications containing raw ePHI. Customer Support Limits: You cannot include patient data or ePHI in screenshots, support tickets, or chats when communicating with Airtable's Customer Support team. No Patient Portals: Airtable explicitly prohibits using its platform as a patient portal or as the underlying database/technology for one. Third-Party Integrations: Any external tools or integrations connected to your Airtable base (such as Zapier, Slack, or various APIs) must independently support HIPAA compliance and have their own BAAs in place. - **Records Only:** Electronic Protected Health Information (ePHI) and medical information must be restricted strictly to **Records** (cells) inside Airtable bases or interfaces. - **No Airtable AI:** You must **not** store or process ePHI in workspaces or bases where Airtable AI is enabled unless specific health-related supplemental AI terms are accepted and supported. - **No Automated Emails with PHI:** Airtable automations cannot email out records or notifications containing raw ePHI. - **Customer Support Limits:** You cannot include patient data or ePHI in screenshots, support tickets, or chats when communicating with Airtable's Customer Support team. - **No Patient Portals:** Airtable explicitly prohibits using its platform as a patient portal or as the underlying database/technology for one. - **Third-Party Integrations:** Any external tools or integrations connected to your Airtable base (such as Zapier, Slack, or various APIs) must independently support HIPAA compliance and have their own BAAs in place.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) ePHI and medical information must only be stored in records within Airtable bases or interfaces. do not include ePHI or medical in... If you'd like to proceed, tell me: What tier of Airtable your organization currently uses What kind of workflow or data collection you are trying to build - What **tier of Airtable** your organization currently uses - What kind of **workflow or data collection** you are trying to build I can help you evaluate whether Airtable fits your architecture or if you need an alternative setup. Requirements for HIPAA and/or CMIA Customers. Airtable automations allow users to automate workflows, including outgoing email. wi...

Airtable is HIPAA compliant **only** for users on the **Enterprise Scale plan** who sign a Business Associate Agreement (BAA) via Airtable's Health Information Exhibit . Users on Free, Team, or Business plans are **not** permitted to store protected health information (PHI) on the platform.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Requirements and Plan Limits - **Plan Tier:** Restricted exclusively to [Airtable's Enterprise Scale plan](https://support.airtable.com/docs/understanding-hipaa-at-airtable). - **Legal Agreement:** Requires executing a formal BAA/Health Information Exhibit with Airtable. - **Lower Tiers:** Prohibited from holding electronic Protected Health Information (ePHI) on lower-tier subscription plans.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.paubox.com/blog/airtable-hipaa-compliant) Usage Restrictions & Rules - **Storage Boundaries:** ePHI must be stored strictly inside standard "Records" within bases or interfaces. - **Feature Exclusions:** Do not use Airtable AI or include PHI in support tickets or customer service chats. - **Integrations & Communication:** Automated emails from automations cannot contain raw PHI, and any connected third-party tool requires its own independent BAA. - **Prohibited Uses:** The platform cannot be utilized as a patient portal.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) If you want, let me know: - Your current **Airtable plan level** - What **type of patient data** you plan to track I can help you figure out if Airtable fits your workflow or if you need an alternative setup. Airtable is HIPAA compliant only for users on the Enterprise Scale plan who sign a Business Associate Agreement (BAA) via Airtable's Health Information Exhibit. Users on Free, Team, or Business plans are not permitted to store protected health information (PHI) on the platform. A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Plan Tier: Restricted exclusively to Airtable's Enterprise Scale plan. Legal Agreement: Requires executing a formal BAA/Health Information Exhibit with Airtable. Lower Tiers: Prohibited from holding electronic Protected Health Information (ePHI) on lower-tier subscription plans. - **Plan Tier:** Restricted exclusively to [Airtable's Enterprise Scale plan](https://support.airtable.com/docs/understanding-hipaa-at-airtable). - **Legal Agreement:** Requires executing a formal BAA/Health Information Exhibit with Airtable. - **Lower Tiers:** Prohibited from holding electronic Protected Health Information (ePHI) on lower-tier subscription plans.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.paubox.com/blog/airtable-hipaa-compliant) What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are... Storage Boundaries: ePHI must be stored strictly inside standard "Records" within bases or interfaces. Feature Exclusions: Do not use Airtable AI or include PHI in support tickets or customer service chats. Integrations & Communication: Automated emails from automations cannot contain raw PHI, and any connected third-party tool requires its own independent BAA. Prohibited Uses: The platform cannot be utilized as a patient portal. - **Storage Boundaries:** ePHI must be stored strictly inside standard "Records" within bases or interfaces. - **Feature Exclusions:** Do not use Airtable AI or include PHI in support tickets or customer service chats. - **Integrations & Communication:** Automated emails from automations cannot contain raw PHI, and any connected third-party tool requires its own independent BAA. - **Prohibited Uses:** The platform cannot be utilized as a patient portal.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP... If you want, let me know:Your current Airtable plan level What type of patient data you plan to track I can help you figure out if Airtable fits your workflow or if you need an alternative setup. If you want, let me know: - Your current **Airtable plan level** - What **type of patient data** you plan to track I can help you figure out if Airtable fits your workflow or if you need an alternative setup. Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Yes—but **only under Airtable’s HIPAA-enabled offering and with specific contractual requirements**. As of August 2026, Airtable says customers who need to store electronic protected health information (ePHI) must: - Be on the **Enterprise Scale** plan. - Execute Airtable’s **Health Information Exhibit**, which includes its **Business Associate Addendum (BAA)**. - Follow the requirements in that exhibit/BAA. Airtable explicitly says customers **may not store ePHI** in Airtable unless these conditions are met. [www.airtable.com](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com) So, **a normal/free/Team/Business Airtable account should not be used for identifiable patient data** merely because Airtable has security features. ### Important distinction HIPAA doesn't really certify a product as simply "HIPAA compliant." The healthcare organization remains responsible for its own HIPAA compliance, including risk analysis, access controls, policies, and how the platform is configured. HHS says a cloud provider handling ePHI generally needs a HIPAA-compliant **BAA** with the covered entity/business associate. [www.hhs.gov](https://www.hhs.gov/hipaa/for-professionals/faq/2075/may-a-hipaa-covered-entity-or-business-associate-use-cloud-service-to-store-or-process-ephi/index.html?utm_source=chatgpt.com) Airtable currently states that its HIPAA offering is available on **Enterprise Scale** and that it provides controls such as enterprise SSO, audit logs, DLP integrations, and optional enterprise key management. [www.airtable.com](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com) **Bottom line:** If you're considering Airtable for a patient database, you can potentially use it for ePHI, **but only after getting Airtable's HIPAA/BAA arrangement in place on Enterprise Scale and configuring/using it appropriately**. If you tell me **what patient data you want to store in Airtable and how you plan to use it** (e.g., names + DOB + appointments, clinical notes, intake forms, care coordination), I can tell you what the major HIPAA risks/requirements would be.

Airtable is **not** HIPAA compliant by default , and they generally **do not sign a Business Associate Agreement (BAA)** for standard workspace plans.[[1]](https://www.blaze.tech/post/airtable-review)[[2]](https://www.makeitfuture.com/blog/compare-airtable-seatable)[[3]](https://nira.com/airtable-security/) According to Airtable's official documentation and security guidelines, you cannot use their standard or enterprise plans to store Protected Health Information (PHI) because they do not officially support HIPAA compliance or execute BAAs for regular accounts.[[1]](https://www.knack.com/blog/hipaa-compliant-apps-knack-vs-airtable/)[[2]](https://emitrr.com/blog/hipaa-compliant-online-scheduling-software/)[[3]](https://www.techrepublic.com/article/airtable-alternatives/)[[4]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) What You Need to Know - **Business Associate Agreement (BAA):** Under HIPAA law, a cloud vendor holding PHI must sign a BAA. Airtable does not offer this for typical setups.[[1]](https://www.accountablehq.com/post/hipaa-compliant-cloud-storage-solutions)[[2]](https://tadabase.io/blog/airtable-vs-caspio) - **Security Controls:** While Airtable has enterprise-grade security features (like access controls and encryption at rest), lacking the signed BAA means using it for patient medical records violates HIPAA regulations.[[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.smartsuite.com/blog/airtable-review)[[3]](https://nira.com/airtable-security/)[[4]](https://www.smartsuite.com/blog/airtable-pricing?338ea48f_page=8)[[5]](https://www.360training.com/blog/what-are-the-5-main-HIPAA-rules) - **Alternatives:** If you need a no-code database builder that *is* HIPAA compliant and will sign a BAA, you should look into platforms specifically built or configured for healthcare compliance, such as GoFormz or custom database solutions hosted on HIPAA-compliant cloud infrastructure (like AWS or Google Cloud with signed BAAs).[[1]](https://www.accountablehq.com/post/is-google-sheets-hipaa-compliant) If you'd like, I can: - List **specific no-code platforms** that do sign BAAs for healthcare data. - Help you figure out **alternative workflows** for handling intake forms or patient data securely. Let me know how you'd like to proceed! Airtable is not HIPAA compliant by default, and they generally do not sign a Business Associate Agreement (BAA) for standard workspace plans. Airtable isn't inherently HIPAA compliant — but it can be configured to meet HIPAA standards. Airtable states it is not a HIPAA compliant service and does not sign BAAs. GDPR focused, SSO, audit logging, and full control ove... Lots of organizations in the healthcare field and medical industry use Airtable to manage business processes, workflows, research, According to Airtable's official documentation and security guidelines, you cannot use their standard or enterprise plans to store Protected Health Information (PHI) because they do not officially support HIPAA compliance or execute BAAs for regular accounts. For instance, its ( Airtable ) access controls and user roles are not granular enough to protect regulated healthcare data, and it... Ans: Generally, no, they do not support a BAA, do not offer strong encryption of PHI, and do not offer audit logging. Therefore, t... For Airtable to be HIPAA compliant, users must sign a Business Associate Addendum (BAA) with Airtable. This ensures that Airtable ... Airtable's HIPAA and FERPA compliance documentation covers the specifics. The key takeaway: a default Airtable account is not HIPA... Business Associate Agreement (BAA): Under HIPAA law, a cloud vendor holding PHI must sign a BAA. Airtable does not offer this for typical setups. Security Controls: While Airtable has enterprise-grade security features (like access controls and encryption at rest), lacking the signed BAA means using it for patient medical records violates HIPAA regulations. Alternatives: If you need a no-code database builder that is HIPAA compliant and will sign a BAA, you should look into platforms specifically built or configured for healthcare compliance, such as GoFormz or custom database solutions hosted on HIPAA-compliant cloud infrastructure (like AWS or Google Cloud with signed BAAs). - **Business Associate Agreement (BAA):** Under HIPAA law, a cloud vendor holding PHI must sign a BAA. Airtable does not offer this for typical setups.[[1]](https://www.accountablehq.com/post/hipaa-compliant-cloud-storage-solutions)[[2]](https://tadabase.io/blog/airtable-vs-caspio) - **Security Controls:** While Airtable has enterprise-grade security features (like access controls and encryption at rest), lacking the signed BAA means using it for patient medical records violates HIPAA regulations.[[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.smartsuite.com/blog/airtable-review)[[3]](https://nira.com/airtable-security/)[[4]](https://www.smartsuite.com/blog/airtable-pricing?338ea48f_page=8)[[5]](https://www.360training.com/blog/what-are-the-5-main-HIPAA-rules) - **Alternatives:** If you need a no-code database builder that *is* HIPAA compliant and will sign a BAA, you should look into platforms specifically built or configured for healthcare compliance, such as GoFormz or custom database solutions hosted on HIPAA-compliant cloud infrastructure (like AWS or Google Cloud with signed BAAs).[[1]](https://www.accountablehq.com/post/is-google-sheets-hipaa-compliant) Sign a Cloud Provider BAA: Always execute a cloud provider BAA (Business Associate Agreement) with any vendor that stores, transmi... Is Airtable HIPAA compliant? No, not by default. Only some features with enterprise plans. Available as an add-on for Enterprise Scale customers. For additional information on EKM, please see here. Data transmitted betwee... To access Airtable's advanced security measures, you'd need to be on their Business or Enterprise Scale plans. Airtable: Enterprise Scale Plan For enterprises, Airtable's enterprise-scale plan offers higher administration control, premium an... Healthcare providers are obligated to transmit patient information through authorized channels. Staff members are prohibited from ... Custom HIPAA-Compliant Databases: For organizations with unique needs, developing a custom database solution on platforms like Ama... If you'd like, I can: List specific no-code platforms that do sign BAAs for healthcare data. Help you figure out alternative workflows for handling intake forms or patient data securely. - List **specific no-code platforms** that do sign BAAs for healthcare data. - Help you figure out **alternative workflows** for handling intake forms or patient data securely. Let me know how you'd like to proceed!

Yes, Airtable is HIPAA compliant, but only for organizations on the **Enterprise Scale plan** that sign a Business Associate Agreement (BAA) via Airtable's Health Information Exhibit . It is strictly prohibited to store protected health information (PHI) on Free, Team, or Business plans.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Plan and Agreement Requirements - **Enterprise Scale Plan Only:** Lower-tier plans do not support HIPAA compliance or qualify for a BAA. - **Business Associate Agreement (BAA):** You must execute Airtable's Health Information Exhibit before inputting any electronic Protected Health Information (ePHI).[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.paubox.com/blog/airtable-hipaa-compliant) Usage Rules and Restrictions - **Data Location:** ePHI must only be stored inside standard record cells within bases or interfaces, not in metadata, comments, or unsupported features.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Airtable AI:** Do not enable or use Airtable AI in workspaces containing ePHI unless specific supplemental health terms are accepted.[](https://www.airtable.com/company/health-info-datasheet) - **No Patient Portals:** Airtable cannot be used as a public or patient-facing portal.[](https://www.airtable.com/company/health-info-datasheet) - **Integrations and Support:** Third-party integrations must independently support HIPAA compliance, and users must avoid putting PHI into support tickets or screenshots.[](https://www.airtable.com/company/health-info-datasheet) If you'd like, let me know: - What **plan** your organization currently uses - What **type of healthcare workflow** you plan to build I can help you review if your setup meets these requirements. Yes, Airtable is HIPAA compliant, but only for organizations on the Enterprise Scale plan that sign a Business Associate Agreement (BAA) via Airtable's Health Information Exhibit. It is strictly prohibited to store protected health information (PHI) on Free, Team, or Business plans. A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Enterprise Scale Plan Only: Lower-tier plans do not support HIPAA compliance or qualify for a BAA. Business Associate Agreement (BAA): You must execute Airtable's Health Information Exhibit before inputting any electronic Protected Health Information (ePHI). - **Enterprise Scale Plan Only:** Lower-tier plans do not support HIPAA compliance or qualify for a BAA. - **Business Associate Agreement (BAA):** You must execute Airtable's Health Information Exhibit before inputting any electronic Protected Health Information (ePHI).[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.paubox.com/blog/airtable-hipaa-compliant) What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are... Data Location: ePHI must only be stored inside standard record cells within bases or interfaces, not in metadata, comments, or unsupported features. Airtable AI: Do not enable or use Airtable AI in workspaces containing ePHI unless specific supplemental health terms are accepted. No Patient Portals: Airtable cannot be used as a public or patient-facing portal. Integrations and Support: Third-party integrations must independently support HIPAA compliance, and users must avoid putting PHI into support tickets or screenshots. - **Data Location:** ePHI must only be stored inside standard record cells within bases or interfaces, not in metadata, comments, or unsupported features.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Airtable AI:** Do not enable or use Airtable AI in workspaces containing ePHI unless specific supplemental health terms are accepted.[](https://www.airtable.com/company/health-info-datasheet) - **No Patient Portals:** Airtable cannot be used as a public or patient-facing portal.[](https://www.airtable.com/company/health-info-datasheet) - **Integrations and Support:** Third-party integrations must independently support HIPAA compliance, and users must avoid putting PHI into support tickets or screenshots.[](https://www.airtable.com/company/health-info-datasheet) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... If you'd like, let me know:What plan your organization currently uses What type of healthcare workflow you plan to build I can help you review if your setup meets these requirements. If you'd like, let me know: - What **plan** your organization currently uses - What **type of healthcare workflow** you plan to build I can help you review if your setup meets these requirements. Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Yes — **Airtable can be used for HIPAA-covered patient data, but only under specific conditions.** As of July 2026, Airtable says its HIPAA offering is available **only on the Enterprise Scale plan** and requires execution of its **Health Information Exhibit, which includes a Business Associate Addendum (BAA)**. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com)[www.hhs.gov](https://www.hhs.gov/hipaa/for-professionals/faq/2075/may-a-hipaa-covered-entity-or-business-associate-use-cloud-service-to-store-or-process-ephi/index.html?utm_source=chatgpt.com)[support.airtable.com](https://support.airtable.com/understanding-hipaa-at-airtable?utm_source=chatgpt.com) Key points: - **Enterprise Scale is required.** You should not put ePHI/patient data into a non-Enterprise-Scale Airtable environment. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com)[www.hhs.gov](https://www.hhs.gov/hipaa/for-professionals/faq/2075/may-a-hipaa-covered-entity-or-business-associate-use-cloud-service-to-store-or-process-ephi/index.html?utm_source=chatgpt.com) - **A BAA is required.** Airtable's Health Information Exhibit includes its BAA, and you need to execute it before storing ePHI. This is consistent with HHS guidance requiring a BAA when a cloud provider handles ePHI for a covered entity/business associate. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com)[www.hhs.gov](https://www.hhs.gov/hipaa/for-professionals/faq/2075/may-a-hipaa-covered-entity-or-business-associate-use-cloud-service-to-store-or-process-ephi/index.html?utm_source=chatgpt.com) - **Your configuration still matters.** HIPAA compliance isn't something Airtable can guarantee simply because the platform supports HIPAA. Your organization remains responsible for access controls, appropriate configuration, policies, user permissions, integrations, and other safeguards. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com)[www.hhs.gov](https://www.hhs.gov/hipaa/for-professionals/faq/2075/may-a-hipaa-covered-entity-or-business-associate-use-cloud-service-to-store-or-process-ephi/index.html?utm_source=chatgpt.com) - **Third-party integrations deserve particular attention.** Airtable specifically advises HIPAA customers to ensure integrations are intentionally permitted or disabled based on their HIPAA assessment. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com)[www.hhs.gov](https://www.hhs.gov/hipaa/for-professionals/faq/2075/may-a-hipaa-covered-entity-or-business-associate-use-cloud-service-to-store-or-process-ephi/index.html?utm_source=chatgpt.com)[support.airtable.com](https://support.airtable.com/understanding-hipaa-at-airtable?utm_source=chatgpt.com) - **There is an important limitation:** Airtable currently says **not to use Airtable as a patient portal**. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com)[www.hhs.gov](https://www.hhs.gov/hipaa/for-professionals/faq/2075/may-a-hipaa-covered-entity-or-business-associate-use-cloud-service-to-store-or-process-ephi/index.html?utm_source=chatgpt.com) - **Airtable AI has additional requirements.** AI can be used in HIPAA-enabled environments under Airtable's supplemental health-information terms, but there are restrictions and additional responsibilities. [www.airtable.com](https://www.airtable.com/company/ai-terms-health-information?utm_source=chatgpt.com) So, if you're asking **"Can I put identifiable patient records into Airtable?"**, the answer is **yes, potentially—but only with the HIPAA-enabled Enterprise Scale setup and executed Health Information Exhibit/BAA, and with an appropriately designed workflow.** If you tell me **what patient data/workflow you want to build in Airtable** (e.g., intake forms, patient tracking, scheduling, clinical notes, referral management), I can tell you which parts are likely appropriate for Airtable and where the HIPAA risks are.

**Yes, Airtable can be HIPAA compliant** , but only under very specific conditions, plan tiers, and strict configuration rules.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) 1. Plan Requirement: Enterprise Scale Only Airtable supports HIPAA compliance **only** for customers on the **Enterprise Scale plan**.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - If you are on a **Free, Team, or Business plan** , you are **not** permitted to store Electronic Protected Health Information (ePHI) under any circumstances.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) - To enable HIPAA compliance, Enterprise organizations must execute Airtable's **Health Information Exhibit** , which includes a formal **Business Associate Agreement (BAA)**.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.complysaas.com/compliance/airtable) 2. Strict Boundary Rules for PHI Even with an Enterprise Scale plan and a signed BAA, Airtable enforces rigid boundaries on where and how patient data can live within the platform:[[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) - **In-Scope:** ePHI and medical information may only be stored directly inside **Records within Airtable bases or interfaces**.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Out-of-Scope / Prohibited:** - **Airtable AI:** AI features are completely excluded from the BAA. You must ensure Airtable AI is disabled in any workspace handling PHI. - **Automations & Email:** Outgoing emails triggered by Airtable automations **cannot** contain PHI. - **Customer Support:** You must never include PHI in screenshots, support tickets, or chats with Airtable support. - **Patient Portals:** Airtable explicitly states the platform **cannot** be used as a patient portal.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) 3. Shared Responsibility and Integrations Achieving compliance is a shared-responsibility model. While Airtable provides the necessary technical safeguards (such as Enterprise Key Management, audit logs, SSO, and data loss prevention), **you** are responsible for proper configuration:[](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) [[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[2]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[3]](https://www.blaze.tech/post/is-airtable-hipaa-compliant)[[4]](https://community.airtable.com/announcements-6/airtable-is-now-hipaa-compliant-1542) - Enforcing role-based access controls and the "minimum necessary" standard. - Ensuring any third-party integrations connected to Airtable (like Zapier, Slack, or external APIs) are also HIPAA-compliant and covered under their own BAAs. - Restricting view links and collaborator permissions so unauthorized users cannot access sensitive records.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[2]](https://www.accountablehq.com/post/airtable-hipaa-compliance-baa-security-features-and-what-to-know-in-2026)[[3]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) If you'd like to share **your current Airtable plan** or **what kind of workflow or data** you are hoping to build, I can help you determine the right architectural approach or alternatives. Yes, Airtable can be HIPAA compliant, but only under very specific conditions, plan tiers, and strict configuration rules. Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Airtable is a customizable business management platform with automation capabilities that helps organizations better manage data b... Airtable supports HIPAA compliance only for customers on the Enterprise Scale plan. Airtable supports HIPAA compliance **only** for customers on the **Enterprise Scale plan**.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) If you are on a Free, Team, or Business plan, you are not permitted to store Electronic Protected Health Information (ePHI) under any circumstances. To enable HIPAA compliance, Enterprise organizations must execute Airtable's Health Information Exhibit, which includes a formal Business Associate Agreement (BAA). - If you are on a **Free, Team, or Business plan** , you are **not** permitted to store Electronic Protected Health Information (ePHI) under any circumstances.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) - To enable HIPAA compliance, Enterprise organizations must execute Airtable's **Health Information Exhibit** , which includes a formal **Business Associate Agreement (BAA)**.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.complysaas.com/compliance/airtable) Key takeaways * Airtable HIPAA support is available only on the Enterprise Scale plan. Free, Team, and Business plan customers can... HIPAA, BAA, and SOC 2 summary ... Airtable states that HIPAA support is available on Enterprise Scale and that customers intending... Even with an Enterprise Scale plan and a signed BAA, Airtable enforces rigid boundaries on where and how patient data can live within the platform: Even with an Enterprise Scale plan and a signed BAA, Airtable enforces rigid boundaries on where and how patient data can live within the platform:[[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... In-Scope: ePHI and medical information may only be stored directly inside Records within Airtable bases or interfaces. Out-of-Scope / Prohibited:Airtable AI: AI features are completely excluded from the BAA. You must ensure Airtable AI is disabled in any workspace handling PHI. Automations & Email: Outgoing emails triggered by Airtable automations cannot contain PHI. Customer Support: You must never include PHI in screenshots, support tickets, or chats with Airtable support. Patient Portals: Airtable explicitly states the platform cannot be used as a patient portal. Airtable AI: AI features are completely excluded from the BAA. You must ensure Airtable AI is disabled in any workspace handling PHI. Automations & Email: Outgoing emails triggered by Airtable automations cannot contain PHI. Customer Support: You must never include PHI in screenshots, support tickets, or chats with Airtable support. Patient Portals: Airtable explicitly states the platform cannot be used as a patient portal. - **In-Scope:** ePHI and medical information may only be stored directly inside **Records within Airtable bases or interfaces**.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Out-of-Scope / Prohibited:** - **Airtable AI:** AI features are completely excluded from the BAA. You must ensure Airtable AI is disabled in any workspace handling PHI. - **Automations & Email:** Outgoing emails triggered by Airtable automations **cannot** contain PHI. - **Customer Support:** You must never include PHI in screenshots, support tickets, or chats with Airtable support. - **Patient Portals:** Airtable explicitly states the platform **cannot** be used as a patient portal.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Achieving compliance is a shared-responsibility model. While Airtable provides the necessary technical safeguards (such as Enterprise Key Management, audit logs, SSO, and data loss prevention), you are responsible for proper configuration: Achieving compliance is a shared-responsibility model. While Airtable provides the necessary technical safeguards (such as Enterprise Key Management, audit logs, SSO, and data loss prevention), **you** are responsible for proper configuration:[](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) [[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[2]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[3]](https://www.blaze.tech/post/is-airtable-hipaa-compliant)[[4]](https://community.airtable.com/announcements-6/airtable-is-now-hipaa-compliant-1542) Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP... How to Ensure Airtable Complies with HIPAA Regulation. To make sure your use of Airtable aligns with HIPAA regulations, follow the... * 🩺📈 Exciting news for healthcare providers and organizations! Airtable is now HIPAA compliant and ready to support your critica... Enforcing role-based access controls and the "minimum necessary" standard. Ensuring any third-party integrations connected to Airtable (like Zapier, Slack, or external APIs) are also HIPAA-compliant and covered under their own BAAs. Restricting view links and collaborator permissions so unauthorized users cannot access sensitive records. - Enforcing role-based access controls and the "minimum necessary" standard. - Ensuring any third-party integrations connected to Airtable (like Zapier, Slack, or external APIs) are also HIPAA-compliant and covered under their own BAAs. - Restricting view links and collaborator permissions so unauthorized users cannot access sensitive records.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[2]](https://www.accountablehq.com/post/airtable-hipaa-compliance-baa-security-features-and-what-to-know-in-2026)[[3]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) Off-load the PHI, Keep Only “Breadcrumbs” in Airtable * Shape-shift PHI into opaque IDs. Store patient details in a hardened backe... HIPAA Compliance Requirements for ePHI * Risk analysis and risk management tailored to Airtable data flows and integrations. * Rol... Should You Trust Airtable With Sensitive Data? Our answer, after building hundreds of client Airtable systems: yes, with appropria... If you'd like to share your current Airtable plan or what kind of workflow or data you are hoping to build, I can help you determine the right architectural approach or alternatives. If you'd like to share **your current Airtable plan** or **what kind of workflow or data** you are hoping to build, I can help you determine the right architectural approach or alternatives.

Yes, Airtable is HIPAA compliant **only** for customers on its **Enterprise Scale plan** who sign an official [Airtable Health Information Exhibit](https://www.airtable.com/company/hipaa-airtable) , which includes a Business Associate Agreement (BAA). It is strictly **not** compliant or permitted for patient data (PHI) on Free, Team, or Business plans.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/)[[3]](https://www.paubox.com/blog/airtable-hipaa-compliant)Plan and Agreement Requirements - **Enterprise Scale Plan:** Required to unlock the environment and security controls needed for healthcare data. - **Executed BAA:** You must sign the Health Information Exhibit/BAA directly with Airtable before adding any protected health information (ePHI). - **Lower Tiers Prohibited:** Storing patient data on Free, Team, or Business plans violates terms of service.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) Scope and Restrictions of Airtable's BAA - **Allowed:** Storing ePHI strictly within standard records inside Airtable bases. - **Excluded:** Airtable AI features are completely excluded and cannot be used with patient data. - **Notifications:** Automated emails sent out by Airtable cannot contain PHI. - **Portals:** Airtable cannot be utilized to host a patient-facing portal. - **Integrations:** Third-party extensions, scripts, or integrations must also individually support HIPAA compliance.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) If you'd like, let me know: - What **tier of Airtable** your organization currently uses - What **type of workflow or data** you plan to build I can help you evaluate if Airtable fits your needs or if an alternative tool is better. Yes, Airtable is HIPAA compliant only for customers on its Enterprise Scale plan who sign an official Airtable Health Information Exhibit, which includes a Business Associate Agreement (BAA). It is strictly not compliant or permitted for patient data (PHI) on Free, Team, or Business plans. A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Key takeaways * Airtable HIPAA support is available only on the Enterprise Scale plan. Free, Team, and Business plan customers can... What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are... Enterprise Scale Plan: Required to unlock the environment and security controls needed for healthcare data. Executed BAA: You must sign the Health Information Exhibit/BAA directly with Airtable before adding any protected health information (ePHI). Lower Tiers Prohibited: Storing patient data on Free, Team, or Business plans violates terms of service. - **Enterprise Scale Plan:** Required to unlock the environment and security controls needed for healthcare data. - **Executed BAA:** You must sign the Health Information Exhibit/BAA directly with Airtable before adding any protected health information (ePHI). - **Lower Tiers Prohibited:** Storing patient data on Free, Team, or Business plans violates terms of service.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) Is Airtable Technically HIPAA-Compliant? * Enterprise-only paywall. HIPAA support didn't exist until April 2024 and is still gated... Allowed: Storing ePHI strictly within standard records inside Airtable bases. Excluded: Airtable AI features are completely excluded and cannot be used with patient data. Notifications: Automated emails sent out by Airtable cannot contain PHI. Portals: Airtable cannot be utilized to host a patient-facing portal. Integrations: Third-party extensions, scripts, or integrations must also individually support HIPAA compliance. - **Allowed:** Storing ePHI strictly within standard records inside Airtable bases. - **Excluded:** Airtable AI features are completely excluded and cannot be used with patient data. - **Notifications:** Automated emails sent out by Airtable cannot contain PHI. - **Portals:** Airtable cannot be utilized to host a patient-facing portal. - **Integrations:** Third-party extensions, scripts, or integrations must also individually support HIPAA compliance.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... If you'd like, let me know:What tier of Airtable your organization currently uses What type of workflow or data you plan to build I can help you evaluate if Airtable fits your needs or if an alternative tool is better. If you'd like, let me know: - What **tier of Airtable** your organization currently uses - What **type of workflow or data** you plan to build I can help you evaluate if Airtable fits your needs or if an alternative tool is better. Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Yes — **Airtable can be used for HIPAA-covered patient data, but only under specific conditions.** It is not HIPAA-compliant by default across all Airtable plans. As of Airtable's current documentation: - **You must be on Airtable's Enterprise Scale plan.** - You must execute Airtable's **Health Information Exhibit**, which includes a **Business Associate Agreement (BAA)**. - Your organization must have HIPAA enabled for the relevant Airtable account/workspace. - You are responsible for configuring access controls, integrations, security settings, and workflows appropriately. [www.airtable.com](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) - **Do not put ePHI into a non-Enterprise-Scale Airtable account without the executed agreement.** Airtable explicitly says customers aren't permitted to store ePHI or medical information under those circumstances. [www.airtable.com](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) - Airtable currently says **not to use Airtable as a patient portal**. [www.airtable.com](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) - Integrations require particular caution: once PHI leaves Airtable's environment, Airtable says it cannot ensure the security/privacy of that data. [www.airtable.com](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) - Airtable AI has additional restrictions. If you want to use AI with health information, you need the applicable health-information terms/agreements and must follow their specific requirements. [www.airtable.com](https://www.airtable.com/company/ai-terms-health-information?utm_source=chatgpt.com) ### So, can you store patient records in Airtable? **Potentially yes**, if you're using the properly configured Enterprise Scale environment with the BAA/Health Information Exhibit and your particular workflow satisfies HIPAA requirements. For example, a HIPAA-enabled Airtable could potentially be used for things like **patient tracking, scheduling/operations, referral management, case management, or internal clinical workflows**, provided the specific implementation is compliant. But simply having an Enterprise account **doesn't make your workflow HIPAA compliant**. HIPAA compliance is a shared responsibility between your organization and Airtable. [www.airtable.com](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) If you're considering Airtable for a **specific patient-data workflow**, tell me what information you want to store (e.g., name, DOB, diagnosis, insurance, notes, appointment history) and who needs access. I can tell you **whether that particular Airtable setup is likely HIPAA-safe and what you'd need to configure**. [Airtable's HIPAA documentation](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com) [Airtable's HIPAA documentation](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com)

**Airtable is HIPAA compliant only for customers on the Enterprise Scale plan who execute a signed Business Associate Agreement (BAA)** via Airtable's Health Information Exhibit . If you are on the Free, Team, or Business plans, Airtable is **not** HIPAA compliant, and you are strictly prohibited from storing electronic Protected Health Information (ePHI) on those tiers.[](https://google.com/goto?url=CAESXAHuR6pNfnq2MaoTOyivLPnmNMZBw-hQCStFohwyS3aKN2ZEaR6Vnmvi8GyyLj2zgG6HmXk7dHSeDP_3gQ9y2X4il9tIQN16aIV04TsFpCtzJgmza9FHztvcgk7D) [[1]](https://google.com/goto?url=CAESXAHuR6pNfnq2MaoTOyivLPnmNMZBw-hQCStFohwyS3aKN2ZEaR6Vnmvi8GyyLj2zgG6HmXk7dHSeDP_3gQ9y2X4il9tIQN16aIV04TsFpCtzJgmza9FHztvcgk7D) Plan & Setup Requirements - **Enterprise Scale Plan Only:** The option to enable HIPAA and sign a BAA is locked exclusively behind the [Airtable Enterprise Scale Plan](https://google.com/goto?url=CAESQwHuR6pN6-qeBS6bMkLVibZh8hA7L_hw3sN5ejIZdJhAlrkFboMenUcXh4TmFr7yHWX2rmvWI6r1YW6DRb4bjMeswPU=). - **Admin Activation:** Organization administrators must verify and enable HIPAA compliance through the Airtable Admin Panel under the security and compliance settings.[](https://google.com/goto?url=CAESZAHuR6pNI4T5IFgjYF5WkbWnbufpOqhV6dSqh_egQUr4yE3oWXhsoivZb23NqMvK5NapdpoC7r-zC4OxfWnSq7SAADromm91313OjABn1wVkkNzlFParymXLcAk-z5sxUn2DLKA=) [[1]](https://google.com/goto?url=CAESZAHuR6pNI4T5IFgjYF5WkbWnbufpOqhV6dSqh_egQUr4yE3oWXhsoivZb23NqMvK5NapdpoC7r-zC4OxfWnSq7SAADromm91313OjABn1wVkkNzlFParymXLcAk-z5sxUn2DLKA=) Operational Boundaries & Restrictions Even under an Enterprise BAA, Airtable enforces strict architectural limits detailed in their [Health Information Datasheet](https://google.com/goto?url=CAESWQHuR6pNyhHKJu3WocCUqSD33uFAPFphuJtnsKkVF1B6aVhLf-ODZBQ4rNuZZphfBpIdyq24WN3OQIQxFFSUJ26BQ6tsJ9Z8XX_frdsMIOusQ9vCdtqF3Am6):[[1]](https://google.com/goto?url=CAESWQHuR6pNyhHKJu3WocCUqSD33uFAPFphuJtnsKkVF1B6aVhLf-ODZBQ4rNuZZphfBpIdyq24WN3OQIQxFFSUJ26BQ6tsJ9Z8XX_frdsMIOusQ9vCdtqF3Am6)[[2]](https://google.com/goto?url=CAESXAHuR6pNfnq2MaoTOyivLPnmNMZBw-hQCStFohwyS3aKN2ZEaR6Vnmvi8GyyLj2zgG6HmXk7dHSeDP_3gQ9y2X4il9tIQN16aIV04TsFpCtzJgmza9FHztvcgk7D) - **Where PHI Lives:** ePHI and medical data may only reside within standard Records inside Airtable Bases or Interfaces.[](https://google.com/goto?url=CAESWQHuR6pNyhHKJu3WocCUqSD33uFAPFphuJtnsKkVF1B6aVhLf-ODZBQ4rNuZZphfBpIdyq24WN3OQIQxFFSUJ26BQ6tsJ9Z8XX_frdsMIOusQ9vCdtqF3Am6) - **Airtable AI Excluded:** Airtable AI features are completely excluded from the BAA and cannot be used with ePHI unless separate, specific supplemental health terms are satisfied.[](https://google.com/goto?url=CAESWQHuR6pNyhHKJu3WocCUqSD33uFAPFphuJtnsKkVF1B6aVhLf-ODZBQ4rNuZZphfBpIdyq24WN3OQIQxFFSUJ26BQ6tsJ9Z8XX_frdsMIOusQ9vCdtqF3Am6) - **No Patient Portals:** Airtable cannot be used as a patient portal or as the underlying technology for one.[](https://google.com/goto?url=CAESWQHuR6pNyhHKJu3WocCUqSD33uFAPFphuJtnsKkVF1B6aVhLf-ODZBQ4rNuZZphfBpIdyq24WN3OQIQxFFSUJ26BQ6tsJ9Z8XX_frdsMIOusQ9vCdtqF3Am6) - **Automations & Email:** Outgoing automated emails triggered by Airtable cannot contain ePHI.[](https://google.com/goto?url=CAESWQHuR6pNyhHKJu3WocCUqSD33uFAPFphuJtnsKkVF1B6aVhLf-ODZBQ4rNuZZphfBpIdyq24WN3OQIQxFFSUJ26BQ6tsJ9Z8XX_frdsMIOusQ9vCdtqF3Am6) [[1]](https://google.com/goto?url=CAESgAEB7keqTfKf9nvyt3-ZwHv_MzVXSkgB54j5xw1VdM6BhKXubqzQjqRne2yJyH4eiNw9_FpxPjWDY-n7qm47v2_whLSsH2aL3A7pS024UQ_31rwYKTaPolTJTtX9QUC7BAAaGo0izv-JEDo1TGiQQ8drlo_z5OP4yjSCG1zu7Wc-og==) - **Support Tickets:** You must never transmit ePHI in screenshots or messages sent to Airtable Customer Support.[](https://google.com/goto?url=CAESWQHuR6pNyhHKJu3WocCUqSD33uFAPFphuJtnsKkVF1B6aVhLf-ODZBQ4rNuZZphfBpIdyq24WN3OQIQxFFSUJ26BQ6tsJ9Z8XX_frdsMIOusQ9vCdtqF3Am6) - **Third-Party Integrations:** Any external tool or integration connected to your bases (such as Zapier, Slack, or custom APIs) must independently maintain its own HIPAA compliance and a signed BAA.[](https://google.com/goto?url=CAESWQHuR6pNyhHKJu3WocCUqSD33uFAPFphuJtnsKkVF1B6aVhLf-ODZBQ4rNuZZphfBpIdyq24WN3OQIQxFFSUJ26BQ6tsJ9Z8XX_frdsMIOusQ9vCdtqF3Am6) [[1]](https://google.com/goto?url=CAESWgHuR6pNLCVFOzGZUEeX0_-RbM_jKqGpoZqkKvp8rjgVLv3h91rajIWYtJuasUUFt4aMV2nWNDv6n7ke98y9nmUcHYhs7ZBXE5b4rQVxBYg_xYPstK0Ter01cg==) If you'd like, let me know: - What **tier or plan** your organization currently uses - What kind of **healthcare workflow or data** you plan to track I can help you evaluate whether Airtable fits your needs or if an alternative architecture makes more sense. Airtable is HIPAA compliant only for customers on the Enterprise Scale plan who execute a signed Business Associate Agreement (BAA) via Airtable's Health Information Exhibit. If you are on the Free, Team, or Business plans, Airtable is not HIPAA compliant, and you are strictly prohibited from storing electronic Protected Health Information (ePHI) on those tiers. Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Enterprise Scale Plan Only: The option to enable HIPAA and sign a BAA is locked exclusively behind the Airtable Enterprise Scale Plan. Admin Activation: Organization administrators must verify and enable HIPAA compliance through the Airtable Admin Panel under the security and compliance settings. - **Enterprise Scale Plan Only:** The option to enable HIPAA and sign a BAA is locked exclusively behind the [Airtable Enterprise Scale Plan](https://google.com/goto?url=CAESQwHuR6pN6-qeBS6bMkLVibZh8hA7L_hw3sN5ejIZdJhAlrkFboMenUcXh4TmFr7yHWX2rmvWI6r1YW6DRb4bjMeswPU=). - **Admin Activation:** Organization administrators must verify and enable HIPAA compliance through the Airtable Admin Panel under the security and compliance settings.[](https://google.com/goto?url=CAESZAHuR6pNI4T5IFgjYF5WkbWnbufpOqhV6dSqh_egQUr4yE3oWXhsoivZb23NqMvK5NapdpoC7r-zC4OxfWnSq7SAADromm91313OjABn1wVkkNzlFParymXLcAk-z5sxUn2DLKA=) [[1]](https://google.com/goto?url=CAESZAHuR6pNI4T5IFgjYF5WkbWnbufpOqhV6dSqh_egQUr4yE3oWXhsoivZb23NqMvK5NapdpoC7r-zC4OxfWnSq7SAADromm91313OjABn1wVkkNzlFParymXLcAk-z5sxUn2DLKA=) Identifying HIPAA compliance at your org * Navigate to admin panel (opens in new tab). * Click the Settings option on the left sid... Even under an Enterprise BAA, Airtable enforces strict architectural limits detailed in their Health Information Datasheet : Even under an Enterprise BAA, Airtable enforces strict architectural limits detailed in their [Health Information Datasheet](https://google.com/goto?url=CAESWQHuR6pNyhHKJu3WocCUqSD33uFAPFphuJtnsKkVF1B6aVhLf-ODZBQ4rNuZZphfBpIdyq24WN3OQIQxFFSUJ26BQ6tsJ9Z8XX_frdsMIOusQ9vCdtqF3Am6):[[1]](https://google.com/goto?url=CAESWQHuR6pNyhHKJu3WocCUqSD33uFAPFphuJtnsKkVF1B6aVhLf-ODZBQ4rNuZZphfBpIdyq24WN3OQIQxFFSUJ26BQ6tsJ9Z8XX_frdsMIOusQ9vCdtqF3Am6)[[2]](https://google.com/goto?url=CAESXAHuR6pNfnq2MaoTOyivLPnmNMZBw-hQCStFohwyS3aKN2ZEaR6Vnmvi8GyyLj2zgG6HmXk7dHSeDP_3gQ9y2X4il9tIQN16aIV04TsFpCtzJgmza9FHztvcgk7D) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Where PHI Lives: ePHI and medical data may only reside within standard Records inside Airtable Bases or Interfaces. Airtable AI Excluded: Airtable AI features are completely excluded from the BAA and cannot be used with ePHI unless separate, specific supplemental health terms are satisfied. No Patient Portals: Airtable cannot be used as a patient portal or as the underlying technology for one. Automations & Email: Outgoing automated emails triggered by Airtable cannot contain ePHI. Support Tickets: You must never transmit ePHI in screenshots or messages sent to Airtable Customer Support. Third-Party Integrations: Any external tool or integration connected to your bases (such as Zapier, Slack, or custom APIs) must independently maintain its own HIPAA compliance and a signed BAA. - **Where PHI Lives:** ePHI and medical data may only reside within standard Records inside Airtable Bases or Interfaces.[](https://google.com/goto?url=CAESWQHuR6pNyhHKJu3WocCUqSD33uFAPFphuJtnsKkVF1B6aVhLf-ODZBQ4rNuZZphfBpIdyq24WN3OQIQxFFSUJ26BQ6tsJ9Z8XX_frdsMIOusQ9vCdtqF3Am6) - **Airtable AI Excluded:** Airtable AI features are completely excluded from the BAA and cannot be used with ePHI unless separate, specific supplemental health terms are satisfied.[](https://google.com/goto?url=CAESWQHuR6pNyhHKJu3WocCUqSD33uFAPFphuJtnsKkVF1B6aVhLf-ODZBQ4rNuZZphfBpIdyq24WN3OQIQxFFSUJ26BQ6tsJ9Z8XX_frdsMIOusQ9vCdtqF3Am6) - **No Patient Portals:** Airtable cannot be used as a patient portal or as the underlying technology for one.[](https://google.com/goto?url=CAESWQHuR6pNyhHKJu3WocCUqSD33uFAPFphuJtnsKkVF1B6aVhLf-ODZBQ4rNuZZphfBpIdyq24WN3OQIQxFFSUJ26BQ6tsJ9Z8XX_frdsMIOusQ9vCdtqF3Am6) - **Automations & Email:** Outgoing automated emails triggered by Airtable cannot contain ePHI.[](https://google.com/goto?url=CAESWQHuR6pNyhHKJu3WocCUqSD33uFAPFphuJtnsKkVF1B6aVhLf-ODZBQ4rNuZZphfBpIdyq24WN3OQIQxFFSUJ26BQ6tsJ9Z8XX_frdsMIOusQ9vCdtqF3Am6) [[1]](https://google.com/goto?url=CAESgAEB7keqTfKf9nvyt3-ZwHv_MzVXSkgB54j5xw1VdM6BhKXubqzQjqRne2yJyH4eiNw9_FpxPjWDY-n7qm47v2_whLSsH2aL3A7pS024UQ_31rwYKTaPolTJTtX9QUC7BAAaGo0izv-JEDo1TGiQQ8drlo_z5OP4yjSCG1zu7Wc-og==) - **Support Tickets:** You must never transmit ePHI in screenshots or messages sent to Airtable Customer Support.[](https://google.com/goto?url=CAESWQHuR6pNyhHKJu3WocCUqSD33uFAPFphuJtnsKkVF1B6aVhLf-ODZBQ4rNuZZphfBpIdyq24WN3OQIQxFFSUJ26BQ6tsJ9Z8XX_frdsMIOusQ9vCdtqF3Am6) - **Third-Party Integrations:** Any external tool or integration connected to your bases (such as Zapier, Slack, or custom APIs) must independently maintain its own HIPAA compliance and a signed BAA.[](https://google.com/goto?url=CAESWQHuR6pNyhHKJu3WocCUqSD33uFAPFphuJtnsKkVF1B6aVhLf-ODZBQ4rNuZZphfBpIdyq24WN3OQIQxFFSUJ26BQ6tsJ9Z8XX_frdsMIOusQ9vCdtqF3Am6) [[1]](https://google.com/goto?url=CAESWgHuR6pNLCVFOzGZUEeX0_-RbM_jKqGpoZqkKvp8rjgVLv3h91rajIWYtJuasUUFt4aMV2nWNDv6n7ke98y9nmUcHYhs7ZBXE5b4rQVxBYg_xYPstK0Ter01cg==) Can PHI be emailed using Airtable? Do not send PHI via regular email or basic automation emails. If your workflow requires notific... Off-load the PHI, Keep Only “Breadcrumbs” in Airtable * Shape-shift PHI into opaque IDs. Store patient details in a hardened backe... If you'd like, let me know: What tier or plan your organization currently uses What kind of healthcare workflow or data you plan to track - What **tier or plan** your organization currently uses - What kind of **healthcare workflow or data** you plan to track I can help you evaluate whether Airtable fits your needs or if an alternative architecture makes more sense.

Airtable is HIPAA compliant **only** for customers on the custom-priced **Enterprise Scale plan** who sign an official **Health Information Exhibit** and Business Associate Agreement (BAA). Users on Free, Team, or Business plans are strictly prohibited from storing protected health information (PHI).[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[3]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Requirements and Limitations - **Plan Tier:** Restricted exclusively to [Airtable Enterprise Scale](https://www.airtable.com/company/hipaa-airtable) subscriptions. - **Storage Rules:** ePHI must only live inside records within approved bases or interfaces. - **Exclusions:** Airtable AI features and customer support tickets must not contain PHI. - **Usage Restrictions:** The platform cannot be used as a patient portal.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.paubox.com/blog/airtable-hipaa-compliant) If you'd like, let me know: - Your **current Airtable plan** - **What kind of patient data** you plan to track I can help you evaluate your compliance options. Airtable is HIPAA compliant only for customers on the custom-priced Enterprise Scale plan who sign an official Health Information Exhibit and Business Associate Agreement (BAA). Users on Free, Team, or Business plans are strictly prohibited from storing protected health information (PHI). A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Is Airtable Technically HIPAA-Compliant? * Enterprise-only paywall. HIPAA support didn't exist until April 2024 and is still gated... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Plan Tier: Restricted exclusively to Airtable Enterprise Scale subscriptions. Storage Rules: ePHI must only live inside records within approved bases or interfaces. Exclusions: Airtable AI features and customer support tickets must not contain PHI. Usage Restrictions: The platform cannot be used as a patient portal. - **Plan Tier:** Restricted exclusively to [Airtable Enterprise Scale](https://www.airtable.com/company/hipaa-airtable) subscriptions. - **Storage Rules:** ePHI must only live inside records within approved bases or interfaces. - **Exclusions:** Airtable AI features and customer support tickets must not contain PHI. - **Usage Restrictions:** The platform cannot be used as a patient portal.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.paubox.com/blog/airtable-hipaa-compliant) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are... If you'd like, let me know:Your current Airtable plan What kind of patient data you plan to track I can help you evaluate your compliance options. If you'd like, let me know: - Your **current Airtable plan** - **What kind of patient data** you plan to track I can help you evaluate your compliance options. Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Yes — **Airtable can be used for HIPAA-covered patient data, but only under specific conditions.** It is not simply “HIPAA compliant” for every Airtable account. As of July 2026, Airtable says: - **HIPAA use is available only on the Enterprise Scale plan.** [www.airtable.com](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com) - Your organization must execute Airtable’s **Health Information Exhibit**, which includes its **Business Associate Addendum (BAA)**. You should not put ePHI into Airtable until this is in place. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) - Your organization is still responsible for configuring Airtable appropriately and meeting its own HIPAA obligations. Airtable's compliance does not automatically make your particular workflow HIPAA compliant. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) - There are important restrictions. For example, Airtable currently says **not to use Airtable as a patient portal**, and integrations that move ePHI outside Airtable require you to ensure the other systems and data flows are compliant. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) - Airtable AI has additional requirements: ePHI should only be used with Airtable AI when the applicable health-information terms have been accepted. [www.airtable.com](https://www.airtable.com/company/ai-terms-health-information?utm_source=chatgpt.com) ### So, can you store patient data in Airtable? **Yes, potentially**, if you're on Enterprise Scale, have the Health Information Exhibit/BAA executed and HIPAA enabled, and design the database/workflow appropriately. For example, a HIPAA-enabled Airtable setup could potentially contain: > Patient ID → demographics → appointment/workflow status → clinical information → assigned staff But I'd be more cautious about using it as a **full electronic medical record (EMR/EHR)** or patient-facing portal. Airtable itself specifically says not to use it as a patient portal at this time. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) If you tell me **what patient data you want to store in Airtable and what you're using it for** (e.g., intake forms, patient tracking, clinical trial management, scheduling, case management), I can tell you whether that particular setup is likely to work under HIPAA and what you'd need to configure.

**Yes, Airtable can be HIPAA compliant** , but only under strict, specific conditions . It is not compliant out of the box for standard or lower-tier plans.[](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/)[[2]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) The Core Requirements for HIPAA on Airtable 1. **Enterprise Scale Plan Required:** HIPAA compliance support and the ability to sign a Business Associate Agreement (BAA) are restricted exclusively to customers on Airtable's **Enterprise Scale** plan. If you are on the Free, Team, or Business plans, storing Protected Health Information (PHI) violates Airtable's terms.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) 2. **Execute a BAA:** You must work with an Airtable account executive to sign their Health Information Exhibit, which contains the formal **Business Associate Addendum (BAA)**.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) 3. **Admin Panel Activation:** Once contracted, an administrator must explicitly enable HIPAA compliance for the organization or specific organizational units via the [Airtable Admin Panel](https://support.airtable.com/docs/understanding-hipaa-at-airtable).[[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://support.airtable.com/docs/understanding-hipaa-at-airtable) Critical Restrictions & Boundaries Even with an active BAA and an Enterprise plan, Airtable enforces strict boundary rules outlined in their [Airtable Health Information Datasheet](https://www.airtable.com/company/health-info-datasheet):[[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Where PHI can live:** Electronic Protected Health Information (ePHI) may **only** be stored within records inside Airtable bases or interfaces. - **Airtable AI:** AI features are completely excluded from the BAA coverage. You must not store ePHI in workspaces where Airtable AI is active (unless under specific supplemental health terms, though it is generally restricted). - **Automations & Emails:** Automated outgoing emails sent directly through Airtable automations **cannot** contain PHI. - **Customer Support:** You must never include ePHI or medical details in screenshots, support tickets, or chats when communicating with Airtable support. - **No Patient Portals:** Airtable cannot be used as a patient-facing portal or direct medical interface for patients. - **Third-Party Integrations:** Any tool you connect to Airtable (such as Zapier, Slack, or custom APIs) must also be HIPAA-compliant and covered by its own separate BAA.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) If you're planning a setup, tell me: - What **tier of Airtable** your organization currently uses - What **kind of patient data** or workflow you are trying to build I can help you evaluate whether Airtable fits your project or if a specialized backend is a safer choice. Yes, Airtable can be HIPAA compliant, but only under strict, specific conditions. It is not compliant out of the box for standard or lower-tier plans. Key takeaways * Airtable HIPAA support is available only on the Enterprise Scale plan. Free, Team, and Business plan customers can... Every couple of weeks a client asks us, "Is Airtable HIPAA compliant?" The honest answer is "it depends on the configuration, and ... The Core Requirements for HIPAA on Airtable Even with an active BAA and an Enterprise plan, Airtable enforces strict boundary rules outlined in their Airtable Health Information Datasheet : Even with an active BAA and an Enterprise plan, Airtable enforces strict boundary rules outlined in their [Airtable Health Information Datasheet](https://www.airtable.com/company/health-info-datasheet):[[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Airtable's terms prohibit storing ePHI on the Free, Team, and Business plans, so anyone below Enterprise Scale should keep treatin... Where PHI can live: Electronic Protected Health Information (ePHI) may only be stored within records inside Airtable bases or interfaces. Airtable AI: AI features are completely excluded from the BAA coverage. You must not store ePHI in workspaces where Airtable AI is active (unless under specific supplemental health terms, though it is generally restricted). Automations & Emails: Automated outgoing emails sent directly through Airtable automations cannot contain PHI. Customer Support: You must never include ePHI or medical details in screenshots, support tickets, or chats when communicating with Airtable support. No Patient Portals: Airtable cannot be used as a patient-facing portal or direct medical interface for patients. Third-Party Integrations: Any tool you connect to Airtable (such as Zapier, Slack, or custom APIs) must also be HIPAA-compliant and covered by its own separate BAA. - **Where PHI can live:** Electronic Protected Health Information (ePHI) may **only** be stored within records inside Airtable bases or interfaces. - **Airtable AI:** AI features are completely excluded from the BAA coverage. You must not store ePHI in workspaces where Airtable AI is active (unless under specific supplemental health terms, though it is generally restricted). - **Automations & Emails:** Automated outgoing emails sent directly through Airtable automations **cannot** contain PHI. - **Customer Support:** You must never include ePHI or medical details in screenshots, support tickets, or chats when communicating with Airtable support. - **No Patient Portals:** Airtable cannot be used as a patient-facing portal or direct medical interface for patients. - **Third-Party Integrations:** Any tool you connect to Airtable (such as Zapier, Slack, or custom APIs) must also be HIPAA-compliant and covered by its own separate BAA.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) If you're planning a setup, tell me: What tier of Airtable your organization currently uses What kind of patient data or workflow you are trying to build - What **tier of Airtable** your organization currently uses - What **kind of patient data** or workflow you are trying to build I can help you evaluate whether Airtable fits your project or if a specialized backend is a safer choice. Identifying HIPAA compliance at your org * Navigate to admin panel (opens in new tab). * Click the Settings option on the left sid... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu...

Airtable is HIPAA compliant **only** for customers on the **Enterprise Scale plan** who sign a Business Associate Agreement (BAA) via Airtable's Health Information Exhibit . Users on Free, Team, or Business plans are strictly prohibited from storing protected health information (PHI) on the platform.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/)[[3]](https://www.paubox.com/blog/airtable-hipaa-compliant)Plan and Agreement Requirements - Available exclusively on the **Enterprise Scale plan**. - Requires a signed **Health Information Exhibit** (which includes a BAA). - Lower-tier plans (Free, Team, Business) **cannot** be made compliant and do not support BAAs.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.hipaatizer.com/integrations/airtable-hipaa-compliant/) Usage Restrictions and Rules - **Where data lives:** ePHI and medical details must only be stored within records inside bases or interfaces. - **Exclusions:** Airtable AI features and general customer support interactions are excluded from the BAA scope. - **Communications:** You cannot use Airtable as a patient portal, and automated emails generated by the platform must not contain PHI. - **Integrations:** Any third-party tools or external systems connected to your bases must also independently meet HIPAA standards.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) If you would like to proceed, let me know: - **What tier of Airtable** your organization currently uses - **What type of data or workflow** you plan to build I can help you evaluate whether an enterprise upgrade fits your setup or suggest alternative options. Airtable is HIPAA compliant only for customers on the Enterprise Scale plan who sign a Business Associate Agreement (BAA) via Airtable's Health Information Exhibit. Users on Free, Team, or Business plans are strictly prohibited from storing protected health information (PHI) on the platform. A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Key takeaways * Airtable HIPAA support is available only on the Enterprise Scale plan. Free, Team, and Business plan customers can... What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are... Available exclusively on the Enterprise Scale plan. Requires a signed Health Information Exhibit (which includes a BAA). Lower-tier plans (Free, Team, Business) cannot be made compliant and do not support BAAs. - Available exclusively on the **Enterprise Scale plan**. - Requires a signed **Health Information Exhibit** (which includes a BAA). - Lower-tier plans (Free, Team, Business) **cannot** be made compliant and do not support BAAs.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.hipaatizer.com/integrations/airtable-hipaa-compliant/) Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Airtable is HIPAA Compliant only on its Enterprise plan. With HIPAAtizer, keep PHI secure and send form data to Airtable on any pl... Where data lives: ePHI and medical details must only be stored within records inside bases or interfaces. Exclusions: Airtable AI features and general customer support interactions are excluded from the BAA scope. Communications: You cannot use Airtable as a patient portal, and automated emails generated by the platform must not contain PHI. Integrations: Any third-party tools or external systems connected to your bases must also independently meet HIPAA standards. - **Where data lives:** ePHI and medical details must only be stored within records inside bases or interfaces. - **Exclusions:** Airtable AI features and general customer support interactions are excluded from the BAA scope. - **Communications:** You cannot use Airtable as a patient portal, and automated emails generated by the platform must not contain PHI. - **Integrations:** Any third-party tools or external systems connected to your bases must also independently meet HIPAA standards.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Yes — **Airtable can be used for HIPAA-covered patient data, but only under specific conditions.** As of July 2026, Airtable says HIPAA use is supported on its **Enterprise Scale** plan when your organization executes Airtable’s **Health Information Exhibit**, which includes its Business Associate Addendum (BAA). [www.airtable.com](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) ### What that means in practice - **Enterprise Scale is required.** You should not put ePHI into a regular Airtable plan. [www.airtable.com](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) - **You need the HIPAA agreement executed.** Airtable currently calls this the *Health Information Exhibit*; it includes the BAA. [www.airtable.com](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) - **HIPAA compliance is shared responsibility.** Airtable provides security/compliance capabilities, but your organization still has to configure and operate Airtable appropriately. [www.airtable.com](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) - **Integrations matter.** If patient data leaves Airtable through an integration/API, you are responsible for ensuring that the receiving service is also appropriate for HIPAA and covered by the necessary agreements. [www.airtable.com](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) - **There are use restrictions.** For example, Airtable currently says not to use Airtable as a **patient portal**, and its HIPAA requirements prohibit using the “send record” functionality when the record contains ePHI. [www.airtable.com](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) - **Airtable AI requires special attention.** HIPAA-enabled AI use is possible under Airtable's supplemental health-information terms, but there are additional restrictions. [www.airtable.com](https://www.airtable.com/company/ai-terms-health-information?utm_source=chatgpt.com) So if you're asking **“Can I build a patient database in Airtable with names, diagnoses, appointment information, etc.?”** the answer is **potentially yes, but only in a HIPAA-enabled Enterprise Scale environment with the appropriate agreement and configuration.** [Airtable's current HIPAA documentation](https://www.airtable.com/company/hipaa-airtable) If you tell me **what kind of patient data/workflow you want to put in Airtable**, I can also tell you whether I'd consider that particular setup HIPAA-safe and what I'd configure. [Airtable's current HIPAA documentation](https://www.airtable.com/company/hipaa-airtable)

**Yes, but with strict limitations and requirements** **.** [](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.complysaas.com/compliance/airtable) Airtable Go to product viewer dialog for this item. supports HIPAA compliance for patient data (ePHI/PHI), but it is **not** universally compliant out-of-the-box for all users.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) Key Conditions for HIPAA Compliance on Airtable: - **Plan Requirement:** HIPAA support is available **exclusively on the Enterprise Scale plan** . If you are on the Free, Team, or Business plans, storing Protected Health Information (PHI) is strictly prohibited by Airtable's terms.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) - **Business Associate Agreement (BAA):** Enterprise Scale customers must formally execute Airtable's Health Information Exhibit, which includes their [Business Associate Addendum](https://www.airtable.com/company/health-info-datasheet). - **Strict Boundary Rules:** Even with a signed BAA, Airtable enforces rigid boundaries on where patient data can live and how it can be used: - **Where PHI can go:** ePHI and medical information must live *only* inside records within Airtable bases or interfaces. - **Airtable AI:** AI features are completely excluded from the BAA and **cannot** be enabled in workspaces containing PHI unless specific health information AI terms are met and configured. - **Automations & Emails:** Outgoing automated emails triggered by Airtable **cannot** contain raw PHI. - **Customer Support:** You must never include PHI in screenshots or support tickets when talking to Airtable support. - **Not a Patient Portal:** Airtable explicitly prohibits using its platform to serve as a patient portal. - **Integrations:** Any third-party tools or integrations (like Zapier, Slack, or custom APIs) connected to your base must also be HIPAA-compliant and covered under separate BAAs.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[2]](https://www.airtable.com/company/health-info-datasheet)[[3]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) If you'd like to proceed, tell me: - What **tier of Airtable** your organization is currently on - **What kind of patient data or workflow** you are trying to build (e.g., internal tracking, intake form, clinical trial) I can help you evaluate whether Airtable fits your needs or if a dedicated backend/alternative is safer. Yes, but with strict limitations and requirements. Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Home Compliance Airtable Independent vendor compliance review Is Airtable HIPAA compliant? Airtable may support some HIPAA-regulat... Airtable Go to product viewer dialog for this item. supports HIPAA compliance for patient data (ePHI/PHI), but it is not universally compliant out-of-the-box for all users. Airtable Go to product viewer dialog for this item. supports HIPAA compliance for patient data (ePHI/PHI), but it is **not** universally compliant out-of-the-box for all users.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) Plan Requirement: HIPAA support is available exclusively on the Enterprise Scale plan. If you are on the Free, Team, or Business plans, storing Protected Health Information (PHI) is strictly prohibited by Airtable's terms. Business Associate Agreement (BAA): Enterprise Scale customers must formally execute Airtable's Health Information Exhibit, which includes their Business Associate Addendum. Strict Boundary Rules: Even with a signed BAA, Airtable enforces rigid boundaries on where patient data can live and how it can be used:Where PHI can go: ePHI and medical information must live only inside records within Airtable bases or interfaces. Airtable AI: AI features are completely excluded from the BAA and cannot be enabled in workspaces containing PHI unless specific health information AI terms are met and configured. Automations & Emails: Outgoing automated emails triggered by Airtable cannot contain raw PHI. Customer Support: You must never include PHI in screenshots or support tickets when talking to Airtable support. Not a Patient Portal: Airtable explicitly prohibits using its platform to serve as a patient portal. Integrations: Any third-party tools or integrations (like Zapier, Slack, or custom APIs) connected to your base must also be HIPAA-compliant and covered under separate BAAs. Where PHI can go: ePHI and medical information must live only inside records within Airtable bases or interfaces. Airtable AI: AI features are completely excluded from the BAA and cannot be enabled in workspaces containing PHI unless specific health information AI terms are met and configured. Automations & Emails: Outgoing automated emails triggered by Airtable cannot contain raw PHI. Customer Support: You must never include PHI in screenshots or support tickets when talking to Airtable support. Not a Patient Portal: Airtable explicitly prohibits using its platform to serve as a patient portal. Integrations: Any third-party tools or integrations (like Zapier, Slack, or custom APIs) connected to your base must also be HIPAA-compliant and covered under separate BAAs. - **Plan Requirement:** HIPAA support is available **exclusively on the Enterprise Scale plan** . If you are on the Free, Team, or Business plans, storing Protected Health Information (PHI) is strictly prohibited by Airtable's terms.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) - **Business Associate Agreement (BAA):** Enterprise Scale customers must formally execute Airtable's Health Information Exhibit, which includes their [Business Associate Addendum](https://www.airtable.com/company/health-info-datasheet). - **Strict Boundary Rules:** Even with a signed BAA, Airtable enforces rigid boundaries on where patient data can live and how it can be used: - **Where PHI can go:** ePHI and medical information must live *only* inside records within Airtable bases or interfaces. - **Airtable AI:** AI features are completely excluded from the BAA and **cannot** be enabled in workspaces containing PHI unless specific health information AI terms are met and configured. - **Automations & Emails:** Outgoing automated emails triggered by Airtable **cannot** contain raw PHI. - **Customer Support:** You must never include PHI in screenshots or support tickets when talking to Airtable support. - **Not a Patient Portal:** Airtable explicitly prohibits using its platform to serve as a patient portal. - **Integrations:** Any third-party tools or integrations (like Zapier, Slack, or custom APIs) connected to your base must also be HIPAA-compliant and covered under separate BAAs.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[2]](https://www.airtable.com/company/health-info-datasheet)[[3]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) Key takeaways * Airtable HIPAA support is available only on the Enterprise Scale plan. Free, Team, and Business plan customers can... Off-load the PHI, Keep Only “Breadcrumbs” in Airtable * Shape-shift PHI into opaque IDs. Store patient details in a hardened backe... Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Business Associate Agreement (BA... If you'd like to proceed, tell me: What tier of Airtable your organization is currently on What kind of patient data or workflow you are trying to build (e.g., internal tracking, intake form, clinical trial) - What **tier of Airtable** your organization is currently on - **What kind of patient data or workflow** you are trying to build (e.g., internal tracking, intake form, clinical trial) I can help you evaluate whether Airtable fits your needs or if a dedicated backend/alternative is safer.

Yes, Airtable can be HIPAA compliant, but only for **Enterprise Scale** plan subscribers who execute a formal **Health Information Exhibit (BAA)** with the company . It is strictly prohibited to store protected health information (PHI) on Free, Team, or Business tier plans.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Plan and Agreement Requirements - Subscribe to the Airtable Enterprise Scale Plan. - Sign Airtable's Health Information Exhibit, which includes a Business Associate Agreement (BAA). - Enforce security controls like Single Sign-On (SSO) and audit logs.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) Scope and Restrictions - **Data location:** PHI may only reside within records inside bases. - **Excluded features:** Airtable AI and automated email notifications cannot contain or process PHI. - **Usage boundaries:** Airtable cannot be used as a patient portal. - **Integrations:** Third-party extensions or integrations must independently support HIPAA compliance.[](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) If you want, let me know: - Your **current Airtable plan** - What **type of patient data** you plan to track I can help you evaluate if Airtable fits your workflow or if another tool works better. Yes, Airtable can be HIPAA compliant, but only for Enterprise Scale plan subscribers who execute a formal Health Information Exhibit (BAA) with the company. It is strictly prohibited to store protected health information (PHI) on Free, Team, or Business tier plans. A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Subscribe to the Airtable Enterprise Scale Plan. Sign Airtable's Health Information Exhibit, which includes a Business Associate Agreement (BAA). Enforce security controls like Single Sign-On (SSO) and audit logs. - Subscribe to the Airtable Enterprise Scale Plan. - Sign Airtable's Health Information Exhibit, which includes a Business Associate Agreement (BAA). - Enforce security controls like Single Sign-On (SSO) and audit logs.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP... HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... Data location: PHI may only reside within records inside bases. Excluded features: Airtable AI and automated email notifications cannot contain or process PHI. Usage boundaries: Airtable cannot be used as a patient portal. Integrations: Third-party extensions or integrations must independently support HIPAA compliance. - **Data location:** PHI may only reside within records inside bases. - **Excluded features:** Airtable AI and automated email notifications cannot contain or process PHI. - **Usage boundaries:** Airtable cannot be used as a patient portal. - **Integrations:** Third-party extensions or integrations must independently support HIPAA compliance.[](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) Key takeaways * Airtable HIPAA support is available only on the Enterprise Scale plan. Free, Team, and Business plan customers can... Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Yes—but **only under specific conditions**. As of July 2026, Airtable supports HIPAA-compliant use of patient/ePHI data, but **a normal Airtable account is not automatically HIPAA compliant**. Key requirements: - **Enterprise Scale plan:** HIPAA support is currently limited to Airtable's Enterprise Scale customers. [www.airtable.com](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com)[support.airtable.com](https://support.airtable.com/understanding-hipaa-at-airtable?utm_source=chatgpt.com) - **Health Information Exhibit/BAA:** Your organization must execute Airtable's Health Information Exhibit, which includes its Business Associate Addendum (BAA). [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) - **HIPAA must be enabled:** Airtable activates HIPAA for the applicable organization/org units after the agreement is executed. [www.airtable.com](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com)[support.airtable.com](https://support.airtable.com/understanding-hipaa-at-airtable?utm_source=chatgpt.com) - **Your configuration matters:** HIPAA compliance is a shared responsibility. You need appropriate access controls, security settings, user management, etc. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) - **Integrations need scrutiny:** If ePHI leaves Airtable through an integration, you're responsible for ensuring the receiving system and integration are HIPAA compliant. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) - **There are specific restrictions:** For example, Airtable currently says **not to use Airtable as a patient portal**, and there are restrictions around sending records containing ePHI and using Airtable AI with health information. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) So, if you're asking **"Can I put identifiable patient information into Airtable?"**, the answer is **yes, potentially—but only on Enterprise Scale with the required HIPAA agreement enabled and with a compliant configuration/workflow.** You should not put PHI into a regular Team/Business Airtable workspace. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) urlAirtable's official HIPAA documentationturn0search2 If you tell me **what patient data/workflow you want to put in Airtable** (e.g., patient intake, scheduling, clinical notes, referrals, CRM), I can tell you whether that particular setup is likely appropriate and what HIPAA pitfalls to watch for.

**Airtable is HIPAA compliant only for customers on the Enterprise Scale plan** who formally execute Airtable’s [Health Information Exhibit](https://www.airtable.com/company/health-info-datasheet) , which includes a Business Associate Addendum (BAA). Storage or processing of Protected Health Information (PHI) or electronic Protected Health Information (ePHI) is strictly prohibited on Free, Team, and Business plans, as no BAA is available for those tiers.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/#:~:text=Airtable%27s%20terms,PHI-free%20zone.) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/#:~:text=Airtable%20now%20supports,available%20at%20any%20price.)[[2]](https://www.complysaas.com/compliance/airtable#:~:text=HIPAA%20support%20is,HIPAA%20customers.)[[3]](https://www.hipaatizer.com/integrations/airtable-hipaa-compliant/#:~:text=Airtable%20is%20HIPAA,webhooks.) Key Compliance Requirements and Boundaries Even on the Enterprise Scale plan with an active BAA, Airtable enforces rigid structural boundaries on how patient data can be handled:[[1]](https://www.optimizeis.com/blogs/airtable-for-healthcare-simplifying-patient-and-operation-management) - **Storage Location** : ePHI and medical records must live exclusively inside standard records within Airtable bases or interfaces.[](https://www.airtable.com/company/health-info-datasheet#:~:text=ePHI%20and%20medical,time.) [[1]](https://www.airtable.com/company/health-info-datasheet#:~:text=ePHI%20and%20medical,time.) - **Airtable AI** : You must not store or process ePHI in workspaces where **Airtable AI** is active, unless you have specifically agreed to specialized healthcare AI supplemental terms.[](https://www.airtable.com/company/health-info-datasheet#:~:text=Do%20not%20store%20ePHI,Terms%2C%20including%20the) - **Exclusions** : Airtable cannot currently be used as a patient-facing portal.[](https://www.airtable.com/company/health-info-datasheet#:~:text=Do%20not%20store%20ePHI,time.) - **Support & Communications** : You must never include ePHI or medical details in screenshots, attachments, or support tickets sent to Airtable Customer Support.[](https://www.airtable.com/company/health-info-datasheet#:~:text=When%20contacting%20Airtable%2C,or%20support%20tickets.) - **Integrations** : Any third-party tools, automations, or middleware connected to your bases must independently support and maintain HIPAA compliance.[](https://www.airtable.com/company/health-info-datasheet#:~:text=Requirements%20for%20HIPAA,bases%20or%20interfaces.) If you're planning a healthcare workflow, let me know: - What **specific data or use case** you plan to track (e.g., internal trial logs vs. staff scheduling) - Whether you already have an **Enterprise Scale agreement** or need alternative tools I can help you evaluate whether Airtable fits your setup or suggest other secure options. Airtable is HIPAA compliant only for customers on the Enterprise Scale plan who formally execute Airtable’s Health Information Exhibit, which includes a Business Associate Addendum (BAA). Storage or processing of Protected Health Information (PHI) or electronic Protected Health Information (ePHI) is strictly prohibited on Free, Team, and Business plans, as no BAA is available for those tiers. Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Business Associate Agreement (BA... HIPAA support is available on Enterprise Scale and that customers intending to store ePHI must execute the Health Information Exhi... Airtable is HIPAA Compliant only on its Enterprise plan. With HIPAAtizer, keep PHI secure and send form data to Airtable on any pl... Even on the Enterprise Scale plan with an active BAA, Airtable enforces rigid structural boundaries on how patient data can be handled: Even on the Enterprise Scale plan with an active BAA, Airtable enforces rigid structural boundaries on how patient data can be handled:[[1]](https://www.optimizeis.com/blogs/airtable-for-healthcare-simplifying-patient-and-operation-management) Why This Platform is a Game-Changer for Healthcare What makes Airtable work in this high-stakes environment? It offers the familia... Storage Location : ePHI and medical records must live exclusively inside standard records within Airtable bases or interfaces. Airtable AI : You must not store or process ePHI in workspaces where Airtable AI is active, unless you have specifically agreed to specialized healthcare AI supplemental terms. Exclusions : Airtable cannot currently be used as a patient-facing portal. Support & Communications : You must never include ePHI or medical details in screenshots, attachments, or support tickets sent to Airtable Customer Support. Integrations : Any third-party tools, automations, or middleware connected to your bases must independently support and maintain HIPAA compliance. - **Storage Location** : ePHI and medical records must live exclusively inside standard records within Airtable bases or interfaces.[](https://www.airtable.com/company/health-info-datasheet#:~:text=ePHI%20and%20medical,time.) [[1]](https://www.airtable.com/company/health-info-datasheet#:~:text=ePHI%20and%20medical,time.) - **Airtable AI** : You must not store or process ePHI in workspaces where **Airtable AI** is active, unless you have specifically agreed to specialized healthcare AI supplemental terms.[](https://www.airtable.com/company/health-info-datasheet#:~:text=Do%20not%20store%20ePHI,Terms%2C%20including%20the) - **Exclusions** : Airtable cannot currently be used as a patient-facing portal.[](https://www.airtable.com/company/health-info-datasheet#:~:text=Do%20not%20store%20ePHI,time.) - **Support & Communications** : You must never include ePHI or medical details in screenshots, attachments, or support tickets sent to Airtable Customer Support.[](https://www.airtable.com/company/health-info-datasheet#:~:text=When%20contacting%20Airtable%2C,or%20support%20tickets.) - **Integrations** : Any third-party tools, automations, or middleware connected to your bases must independently support and maintain HIPAA compliance.[](https://www.airtable.com/company/health-info-datasheet#:~:text=Requirements%20for%20HIPAA,bases%20or%20interfaces.) ePHI and medical information must only be stored in records within Airtable bases or interfaces. Do not use Airtable as a patient ... If you're planning a healthcare workflow, let me know: What specific data or use case you plan to track (e.g., internal trial logs vs. staff scheduling) Whether you already have an Enterprise Scale agreement or need alternative tools - What **specific data or use case** you plan to track (e.g., internal trial logs vs. staff scheduling) - Whether you already have an **Enterprise Scale agreement** or need alternative tools I can help you evaluate whether Airtable fits your setup or suggest other secure options. Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ... Requirements for HIPAA and/or CMIA Customers. Airtable automations allow users to automate workflows, including outgoing email. .. PHI may only live in records within bases, it can't appear in automated emails or be shared with Airtable's support team, and Airt...

Airtable is HIPAA compliant **only** for customers on the highest-tier **Enterprise Scale** plan who sign a Business Associate Agreement (BAA) through Airtable's Health Information Exhibit . Users on Free, Team, or Business plans are strictly prohibited from storing electronic Protected Health Information (ePHI).[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://www.paubox.com/blog/airtable-hipaa-compliant)[[3]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Requirements and Plan Restrictions - **Enterprise Scale Plan:** Must be actively subscribed to Airtable's Enterprise Scale tier. - **Executed BAA:** Must sign the official Health Information Exhibit containing the Business Associate Addendum. - **Lower Tiers:** Not available or compliant on standard or self-serve paid tiers.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) Platform and Feature Restrictions - **Data Location:** ePHI must only reside inside record fields within specific Airtable bases or interfaces. - **Airtable AI:** Do not use or enable Airtable AI in workspaces holding ePHI unless specific supplemental health terms are accepted. - **Support Tickets:** Never include patient data or ePHI in screenshots sent to customer support. - **Patient Portals:** Airtable cannot be used as a direct patient portal. - **Integrations & Automations:** External integrations and automated emails must independently meet HIPAA security standards.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) If you'd like, let me know: - What **tier of Airtable** your organization currently uses - What **kind of data or workflow** you plan to build I can help you determine if the Enterprise tier fits your needs or suggest alternative paths. Airtable is HIPAA compliant only for customers on the highest-tier Enterprise Scale plan who sign a Business Associate Agreement (BAA) through Airtable's Health Information Exhibit. Users on Free, Team, or Business plans are strictly prohibited from storing electronic Protected Health Information (ePHI). A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Enterprise Scale Plan: Must be actively subscribed to Airtable's Enterprise Scale tier. Executed BAA: Must sign the official Health Information Exhibit containing the Business Associate Addendum. Lower Tiers: Not available or compliant on standard or self-serve paid tiers. - **Enterprise Scale Plan:** Must be actively subscribed to Airtable's Enterprise Scale tier. - **Executed BAA:** Must sign the official Health Information Exhibit containing the Business Associate Addendum. - **Lower Tiers:** Not available or compliant on standard or self-serve paid tiers.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP... Data Location: ePHI must only reside inside record fields within specific Airtable bases or interfaces. Airtable AI: Do not use or enable Airtable AI in workspaces holding ePHI unless specific supplemental health terms are accepted. Support Tickets: Never include patient data or ePHI in screenshots sent to customer support. Patient Portals: Airtable cannot be used as a direct patient portal. Integrations & Automations: External integrations and automated emails must independently meet HIPAA security standards. - **Data Location:** ePHI must only reside inside record fields within specific Airtable bases or interfaces. - **Airtable AI:** Do not use or enable Airtable AI in workspaces holding ePHI unless specific supplemental health terms are accepted. - **Support Tickets:** Never include patient data or ePHI in screenshots sent to customer support. - **Patient Portals:** Airtable cannot be used as a direct patient portal. - **Integrations & Automations:** External integrations and automated emails must independently meet HIPAA security standards.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Yes—but **only under specific conditions**. As of July 2026, Airtable supports HIPAA-compliant use for patient/ePHI data, but **the standard Airtable plans are not sufficient**. [www.airtable.com](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) ### What you need - **Enterprise Scale plan:** HIPAA support is only available on Enterprise Scale. [support.airtable.com](https://support.airtable.com/understanding-hipaa-at-airtable?utm_source=chatgpt.com) - **Signed Health Information Exhibit:** This includes Airtable's **Business Associate Addendum (BAA)**. You must execute it before storing ePHI in Airtable. [www.airtable.com](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) - **HIPAA must be enabled for your organization/org units:** Airtable enables it through its account team after the agreement is executed. [support.airtable.com](https://support.airtable.com/understanding-hipaa-at-airtable?utm_source=chatgpt.com) - **Your configuration and workflows still matter:** HIPAA compliance is a shared responsibility. Airtable provides safeguards, but your organization has to configure access, permissions, integrations, retention, etc. appropriately. [www.airtable.com](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) ### Important limitations Airtable specifically says HIPAA customers **should not use Airtable as a patient portal** at this time. It also says you shouldn't use its **Send record** functionality when the record contains ePHI. [www.airtable.com](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) Third-party integrations deserve particular attention: once ePHI leaves Airtable through an integration, **Airtable cannot ensure the security or privacy of that data**. Each downstream vendor needs to be assessed separately, including whether you need a BAA with that vendor. [www.airtable.com](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) Airtable AI has additional requirements. If you're going to put ePHI into AI-enabled workspaces, you need the applicable **Airtable AI Terms and Supplemental AI Terms for Health Information** in addition to the HIPAA agreement. [www.airtable.com](https://www.airtable.com/company/ai-terms-health-information?utm_source=chatgpt.com) **Bottom line:** If you're considering Airtable for something like **patient intake, patient tracking, clinical operations, or a lightweight patient database**, it can be used for HIPAA-covered workflows—but I would not put real patient data into an ordinary Airtable workspace. You'd want the **Enterprise Scale + Health Information Exhibit/BAA + HIPAA-enabled environment** in place first. urlAirtable's current HIPAA guidanceturn0search0 · urlAirtable Health Information Datasheetturn0search2 If you tell me **what patient-data workflow you're planning to build in Airtable**, I can also assess whether that particular setup is likely to be HIPAA-safe and point out the risky pieces.

**Yes, Airtable can be HIPAA compliant** , but only under very strict operational and contractual conditions . It is not compliant out-of-the-box on standard plans.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[3]](https://www.complysaas.com/compliance/airtable) The critical requirements and boundaries for using Airtable with Protected Health Information (PHI) include: - **Enterprise Scale Plan Required:** HIPAA support and the execution of a formal Business Associate Agreement (BAA)—via Airtable’s Health Information Exhibit—are restricted exclusively to customers on the **Enterprise Scale** plan. Free, Team, and Business plans are strictly non-compliant and prohibited from storing electronic Protected Health Information (ePHI).[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Signed Business Associate Agreement (BAA):** You must formally execute Airtable's Health Information Exhibit/BAA before introducing any patient data to your workspace.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Strict Data Boundaries:** Per Airtable's [Health Information Datasheet](https://www.airtable.com/company/health-info-datasheet) , ePHI must only be stored inside **records within bases or interfaces**.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Feature Restrictions & Exclusions:** - **Airtable AI** is entirely excluded from the BAA and cannot be enabled in workspaces containing ePHI unless specific supplemental terms are managed—though general guidance advises keeping AI completely off patient data. - **Automations & Emails:** Outgoing emails triggered via Airtable automations cannot contain PHI. - **Customer Support:** You must never include ePHI in screenshots, attachments, or tickets submitted to Airtable support. - **Patient Portals:** Airtable cannot be used to serve as a patient portal.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) - **Integrations & Shared Responsibility:** Any third-party integrations connected to your bases (like Zapier, Slack, or custom APIs) must also be HIPAA-compliant and covered under separate BAAs; a single unsecure bridge breaks the compliance chain.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/)[[3]](https://intuitionlabs.ai/articles/hipaa-compliant-api-guide)[[4]](https://www.hakunamatatatech.com/our-resources/blog/hipaa-compliant-llm)[[5]](https://www.accountablehq.com/post/cerner-patient-portal-and-hipaa-compliance-what-you-need-to-know) If you're planning a healthcare workflow, tell me: - **What specific type of patient data** you plan to track - **Which integrations or automations** you need to connect to Airtable I can help you evaluate whether Airtable fits your architecture or if a dedicated backend is safer. Yes, Airtable can be HIPAA compliant, but only under very strict operational and contractual conditions. It is not compliant out-of-the-box on standard plans. Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... Independent vendor compliance review Is Airtable HIPAA compliant? Airtable may support some HIPAA-regulated workflows only for Ent... The critical requirements and boundaries for using Airtable with Protected Health Information (PHI) include: Enterprise Scale Plan Required: HIPAA support and the execution of a formal Business Associate Agreement (BAA)—via Airtable’s Health Information Exhibit—are restricted exclusively to customers on the Enterprise Scale plan. Free, Team, and Business plans are strictly non-compliant and prohibited from storing electronic Protected Health Information (ePHI). Signed Business Associate Agreement (BAA): You must formally execute Airtable's Health Information Exhibit/BAA before introducing any patient data to your workspace. Strict Data Boundaries: Per Airtable's Health Information Datasheet, ePHI must only be stored inside records within bases or interfaces. Feature Restrictions & Exclusions:Airtable AI is entirely excluded from the BAA and cannot be enabled in workspaces containing ePHI unless specific supplemental terms are managed—though general guidance advises keeping AI completely off patient data. Automations & Emails: Outgoing emails triggered via Airtable automations cannot contain PHI. Customer Support: You must never include ePHI in screenshots, attachments, or tickets submitted to Airtable support. Patient Portals: Airtable cannot be used to serve as a patient portal. Airtable AI is entirely excluded from the BAA and cannot be enabled in workspaces containing ePHI unless specific supplemental terms are managed—though general guidance advises keeping AI completely off patient data. Automations & Emails: Outgoing emails triggered via Airtable automations cannot contain PHI. Customer Support: You must never include ePHI in screenshots, attachments, or tickets submitted to Airtable support. Patient Portals: Airtable cannot be used to serve as a patient portal. Integrations & Shared Responsibility: Any third-party integrations connected to your bases (like Zapier, Slack, or custom APIs) must also be HIPAA-compliant and covered under separate BAAs; a single unsecure bridge breaks the compliance chain. - **Enterprise Scale Plan Required:** HIPAA support and the execution of a formal Business Associate Agreement (BAA)—via Airtable’s Health Information Exhibit—are restricted exclusively to customers on the **Enterprise Scale** plan. Free, Team, and Business plans are strictly non-compliant and prohibited from storing electronic Protected Health Information (ePHI).[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Signed Business Associate Agreement (BAA):** You must formally execute Airtable's Health Information Exhibit/BAA before introducing any patient data to your workspace.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Strict Data Boundaries:** Per Airtable's [Health Information Datasheet](https://www.airtable.com/company/health-info-datasheet) , ePHI must only be stored inside **records within bases or interfaces**.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Feature Restrictions & Exclusions:** - **Airtable AI** is entirely excluded from the BAA and cannot be enabled in workspaces containing ePHI unless specific supplemental terms are managed—though general guidance advises keeping AI completely off patient data. - **Automations & Emails:** Outgoing emails triggered via Airtable automations cannot contain PHI. - **Customer Support:** You must never include ePHI in screenshots, attachments, or tickets submitted to Airtable support. - **Patient Portals:** Airtable cannot be used to serve as a patient portal.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) - **Integrations & Shared Responsibility:** Any third-party integrations connected to your bases (like Zapier, Slack, or custom APIs) must also be HIPAA-compliant and covered under separate BAAs; a single unsecure bridge breaks the compliance chain.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/)[[3]](https://intuitionlabs.ai/articles/hipaa-compliant-api-guide)[[4]](https://www.hakunamatatatech.com/our-resources/blog/hipaa-compliant-llm)[[5]](https://www.accountablehq.com/post/cerner-patient-portal-and-hipaa-compliance-what-you-need-to-know) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Key takeaways * Airtable HIPAA support is available only on the Enterprise Scale plan. Free, Team, and Business plan customers can... Off-load the PHI, Keep Only “Breadcrumbs” in Airtable * Shape-shift PHI into opaque IDs. Store patient details in a hardened backe... Airtable is a customizable business management platform with automation capabilities that helps organizations better manage data b... Likewise, if your API then sends PHI to another third-party (say, a mapping service to show clinic locations with patient info), t... Secure Your Integrations: Every third-party service that touches PHI in your pipeline, whether it's a database, email service, or ... How do third-party integrations maintain HIPAA standards? Each integration must be vetted, covered by a BAA if it handles PHI, and... If you're planning a healthcare workflow, tell me: What specific type of patient data you plan to track Which integrations or automations you need to connect to Airtable - **What specific type of patient data** you plan to track - **Which integrations or automations** you need to connect to Airtable I can help you evaluate whether Airtable fits your architecture or if a dedicated backend is safer.

Yes, Airtable is HIPAA compliant **only** for customers on the **Enterprise Scale plan** who sign Airtable's Health Information Exhibit , which includes a Business Associate Agreement (BAA). It is **not** HIPAA compliant on Free, Team, or Business plans.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Plan and Agreement Requirements - **Enterprise Scale Plan:** Required to unlock and use Airtable's HIPAA compliance capabilities. - **Business Associate Agreement (BAA):** Must be executed via Airtable's Health Information Exhibit. - **Strict Prohibition:** Storing protected health information (PHI) or electronic protected health information (ePHI) on non-Enterprise plans violates terms.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.paubox.com/blog/airtable-hipaa-compliant) Key Usage Restrictions and Rules - **Data Location:** ePHI must be stored strictly within standard records inside Airtable bases or interfaces. - **Airtable AI:** AI features are excluded from HIPAA coverage and must not be used in workspaces containing PHI unless specific supplemental terms are accepted and supported. - **Support & Communications:** Do not send screenshots or tickets containing medical information or ePHI to customer support. - **Use Cases:** Airtable cannot currently be used to build or function as a patient portal. - **Integrations:** Third-party integrations must be disabled or independently verified as HIPAA-compliant by your organization.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.knack.com/blog/hipaa-compliance-checklist-no-code/) If you'd like, let me know: - What **tier of Airtable** your organization currently uses - What kind of **healthcare workflow or data** you plan to manage I can help you evaluate whether Airtable fits your operational setup or if alternative tools are a better match. Yes, Airtable is HIPAA compliant only for customers on the Enterprise Scale plan who sign Airtable's Health Information Exhibit, which includes a Business Associate Agreement (BAA). It is not HIPAA compliant on Free, Team, or Business plans. Table_title: Understanding HIPAA at Airtable Table_content: | Plan availability | | --- | | Enterprise Scale plans only | ... A bu... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Enterprise Scale Plan: Required to unlock and use Airtable's HIPAA compliance capabilities. Business Associate Agreement (BAA): Must be executed via Airtable's Health Information Exhibit. Strict Prohibition: Storing protected health information (PHI) or electronic protected health information (ePHI) on non-Enterprise plans violates terms. - **Enterprise Scale Plan:** Required to unlock and use Airtable's HIPAA compliance capabilities. - **Business Associate Agreement (BAA):** Must be executed via Airtable's Health Information Exhibit. - **Strict Prohibition:** Storing protected health information (PHI) or electronic protected health information (ePHI) on non-Enterprise plans violates terms.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.paubox.com/blog/airtable-hipaa-compliant) What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are... Data Location: ePHI must be stored strictly within standard records inside Airtable bases or interfaces. Airtable AI: AI features are excluded from HIPAA coverage and must not be used in workspaces containing PHI unless specific supplemental terms are accepted and supported. Support & Communications: Do not send screenshots or tickets containing medical information or ePHI to customer support. Use Cases: Airtable cannot currently be used to build or function as a patient portal. Integrations: Third-party integrations must be disabled or independently verified as HIPAA-compliant by your organization. - **Data Location:** ePHI must be stored strictly within standard records inside Airtable bases or interfaces. - **Airtable AI:** AI features are excluded from HIPAA coverage and must not be used in workspaces containing PHI unless specific supplemental terms are accepted and supported. - **Support & Communications:** Do not send screenshots or tickets containing medical information or ePHI to customer support. - **Use Cases:** Airtable cannot currently be used to build or function as a patient portal. - **Integrations:** Third-party integrations must be disabled or independently verified as HIPAA-compliant by your organization.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.knack.com/blog/hipaa-compliance-checklist-no-code/) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Do AI features in no-code platforms need to be HIPAA-compliant separately? Yes, and importantly, this is one of the most commonly ... Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Yes — **Airtable can be used for HIPAA-covered patient data, but only under specific conditions.** It is not simply “HIPAA compliant” on every Airtable plan. As of July 2026, Airtable states that organizations storing ePHI must: - Be on the **Enterprise Scale** plan. - Execute Airtable’s **Health Information Exhibit**, which includes its **Business Associate Addendum (BAA)**. - Properly configure access controls, security, retention, auditing, etc. - Ensure third-party integrations are themselves HIPAA-compliant; Airtable says it cannot ensure the security of ePHI once it leaves Airtable. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) - **Not use Airtable as a patient portal** at this time. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) Airtable also provides relevant enterprise controls such as SSO/SCIM, audit capabilities, encryption, retention controls, and optional Enterprise Key Management. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) ### The important distinction **Airtable supports HIPAA-compliant use; Airtable itself doesn't make your workflow automatically HIPAA compliant.** For example, if you're building a patient-management system, you'd need to consider: | Use | Airtable suitability | |---|---| | Patient names + appointment/admin information | ✅ Potentially | | Patient records containing ePHI | ✅ **Enterprise Scale + Health Information Exhibit/BAA required** | | Internal clinical workflow | ✅ Potentially, with proper configuration | | Sharing ePHI through Airtable's “send record” feature | ❌ Airtable specifically prohibits this for covered data | | Patient-facing portal | ❌ Not currently supported | | Connecting to another app via API | ⚠️ The other system/integration must also satisfy your HIPAA obligations | | Airtable AI with ePHI | ⚠️ Requires the applicable health-information terms/agreement and has additional restrictions | [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) So if you're considering Airtable for **actual patient data**, I would treat **Enterprise Scale + signed Health Information Exhibit/BAA as a hard prerequisite**, rather than putting PHI into a regular Airtable workspace. urlAirtable's HIPAA informationturn0search0 · urlAirtable Health Information Datasheet (July 2026)turn0search1 If you tell me **what patient data/workflow you want to build in Airtable**, I can assess whether that particular setup is likely HIPAA-safe and point out the risky pieces. | Use | Airtable suitability | |---|---| | Patient names + appointment/admin information | ✅ Potentially | | Patient records containing ePHI | ✅ **Enterprise Scale + Health Information Exhibit/BAA required** | | Internal clinical workflow | ✅ Potentially, with proper configuration | | Sharing ePHI through Airtable's “send record” feature | ❌ Airtable specifically prohibits this for covered data | | Patient-facing portal | ❌ Not currently supported | | Connecting to another app via API | ⚠️ The other system/integration must also satisfy your HIPAA obligations | | Airtable AI with ePHI | ⚠️ Requires the applicable health-information terms/agreement and has additional restrictions | [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) So if you're considering Airtable for **actual patient data**, I would treat **Enterprise Scale + signed Health Information Exhibit/BAA as a hard prerequisite**, rather than putting PHI into a regular Airtable workspace. urlAirtable's HIPAA informationturn0search0 · urlAirtable Health Information Datasheet (July 2026)turn0search1 If you tell me **what patient data/workflow you want to build in Airtable**, I can assess whether that particular setup is likely HIPAA-safe and point out the risky pieces.

**Yes, but only under strict conditions.** Airtable can support HIPAA compliance for electronic Protected Health Information (ePHI), but it is **not** HIPAA compliant by default on standard accounts.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.facebook.com/KnackHQ/posts/airtable-is-great-until-it-is-patient-dataon-standard-plans-there-is-no-baa-the-/1661739832624383/)[[3]](https://community.airtable.com/announcements-6/airtable-is-now-hipaa-compliant-1542)[[4]](https://www.reddit.com/r/Airtable/comments/d9btne/was_about_to_use_airtable_but_no_hipaa_compliant/)[[5]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) The critical requirements and boundaries for using Airtable with patient data include: - **Enterprise Scale Plan Required:** HIPAA support and the option to execute a Business Associate Agreement (BAA) are restricted exclusively to Airtable’s highest-tier **Enterprise Scale** plan. Free, Team, and Business plans are strictly non-compliant and prohibited for storing PHI.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Signed Business Associate Agreement (BAA):** You must formally execute Airtable’s **Health Information Exhibit** , which incorporates their BAA, via your Airtable account representative before any patient data enters the platform.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Strict Where-Data-Lives Boundaries:** Under Airtable's compliance rules, ePHI and medical data **must only live inside record cells** within designated bases or interfaces.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Feature Exclusions:** - **Airtable AI:** Cannot be used or enabled in workspaces containing ePHI unless specific health supplemental terms are met (and generally restricted from touching raw PHI). - **Automations & Email:** You cannot expose ePHI in unencrypted or non-compliant automated notification emails. - **Customer Support:** You must never include patient data or screenshots containing PHI in support tickets. - **Patient Portals:** Airtable explicitly prohibits using its native features as a direct patient-facing portal.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Third-Party Integrations:** Any connected tool (like Zapier, Slack, or custom APIs) must also be HIPAA-compliant and covered by its own BAA; a single unencrypted link breaks the chain of custody.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[2]](https://curogram.com/blog/mental-health/hipaa-compliant-texting-for-behavioral-health)[[3]](https://www.mindbowser.com/hipaa-compliant-app-with-flutter/)[[4]](https://www.slicktext.com/hipaa-compliant-texting) Review details on the [Airtable HIPAA Compliance Overview](https://www.airtable.com/company/hipaa-airtable) or check their explicit rules in the [Airtable Health Information Datasheet](https://www.airtable.com/company/health-info-datasheet).[[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://www.nudgesecurity.com/security-profile/airtable-com)[[3]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) If you're planning a setup, tell me: - What **tier/plan** your organization currently uses - Whether you plan to connect **external integrations or APIs** I can help you evaluate if Airtable fits your workflow or if a dedicated backend is safer. Yes, but only under strict conditions. Airtable can support HIPAA compliance for electronic Protected Health Information (ePHI), but it is not HIPAA compliant by default on standard accounts. Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Airtable is great, until it is patient data. On standard plans there is no BAA. The HIPAA add-on is enterprise-only, and even then... Airtable is now HIPAA compliant for its Enterprise Scale customers. Airtable's platform is designed to help healthcare providers a... Not sure why they're so slack on this. Smartsheet is HIPAA compliant, but there's some hoops you have to jump through and it's not... HIPAA: The Part Everyone Gets Wrong Every couple of weeks a client asks us, "Is Airtable HIPAA compliant?" The honest answer is "i... The critical requirements and boundaries for using Airtable with patient data include: Enterprise Scale Plan Required: HIPAA support and the option to execute a Business Associate Agreement (BAA) are restricted exclusively to Airtable’s highest-tier Enterprise Scale plan. Free, Team, and Business plans are strictly non-compliant and prohibited for storing PHI. Signed Business Associate Agreement (BAA): You must formally execute Airtable’s Health Information Exhibit, which incorporates their BAA, via your Airtable account representative before any patient data enters the platform. Strict Where-Data-Lives Boundaries: Under Airtable's compliance rules, ePHI and medical data must only live inside record cells within designated bases or interfaces. Feature Exclusions:Airtable AI: Cannot be used or enabled in workspaces containing ePHI unless specific health supplemental terms are met (and generally restricted from touching raw PHI). Automations & Email: You cannot expose ePHI in unencrypted or non-compliant automated notification emails. Customer Support: You must never include patient data or screenshots containing PHI in support tickets. Patient Portals: Airtable explicitly prohibits using its native features as a direct patient-facing portal. Airtable AI: Cannot be used or enabled in workspaces containing ePHI unless specific health supplemental terms are met (and generally restricted from touching raw PHI). Automations & Email: You cannot expose ePHI in unencrypted or non-compliant automated notification emails. Customer Support: You must never include patient data or screenshots containing PHI in support tickets. Patient Portals: Airtable explicitly prohibits using its native features as a direct patient-facing portal. Third-Party Integrations: Any connected tool (like Zapier, Slack, or custom APIs) must also be HIPAA-compliant and covered by its own BAA; a single unencrypted link breaks the chain of custody. - **Enterprise Scale Plan Required:** HIPAA support and the option to execute a Business Associate Agreement (BAA) are restricted exclusively to Airtable’s highest-tier **Enterprise Scale** plan. Free, Team, and Business plans are strictly non-compliant and prohibited for storing PHI.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Signed Business Associate Agreement (BAA):** You must formally execute Airtable’s **Health Information Exhibit** , which incorporates their BAA, via your Airtable account representative before any patient data enters the platform.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Strict Where-Data-Lives Boundaries:** Under Airtable's compliance rules, ePHI and medical data **must only live inside record cells** within designated bases or interfaces.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Feature Exclusions:** - **Airtable AI:** Cannot be used or enabled in workspaces containing ePHI unless specific health supplemental terms are met (and generally restricted from touching raw PHI). - **Automations & Email:** You cannot expose ePHI in unencrypted or non-compliant automated notification emails. - **Customer Support:** You must never include patient data or screenshots containing PHI in support tickets. - **Patient Portals:** Airtable explicitly prohibits using its native features as a direct patient-facing portal.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Third-Party Integrations:** Any connected tool (like Zapier, Slack, or custom APIs) must also be HIPAA-compliant and covered by its own BAA; a single unencrypted link breaks the chain of custody.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[2]](https://curogram.com/blog/mental-health/hipaa-compliant-texting-for-behavioral-health)[[3]](https://www.mindbowser.com/hipaa-compliant-app-with-flutter/)[[4]](https://www.slicktext.com/hipaa-compliant-texting) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Off-load the PHI, Keep Only “Breadcrumbs” in Airtable * Shape-shift PHI into opaque IDs. Store patient details in a hardened backe... Each tool that handles PHI on your behalf needs its own BAA. This includes your texting platform, even if it integrates with your ... 4⃣ HIPAA ( Health Insurance Portability and Accountability Act ) -Compliant APIs Ensure that any third-party APIs you integrate ar... Yes, our API enables secure, HIPAA compliant messaging for your organization. When connecting with third-party services like Zapie... Review details on the Airtable HIPAA Compliance Overview or check their explicit rules in the Airtable Health Information Datasheet. Review details on the [Airtable HIPAA Compliance Overview](https://www.airtable.com/company/hipaa-airtable) or check their explicit rules in the [Airtable Health Information Datasheet](https://www.airtable.com/company/health-info-datasheet).[[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://www.nudgesecurity.com/security-profile/airtable-com)[[3]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) Your organization's use of Airtable must comply with the requirements listed in the Health Information Datasheet (opens in new tab... Review the complete security profile for Airtable, including supply chain details, privacy policy, terms of service, GDPR complian... Airtable's terms prohibit storing ePHI on the Free, Team, and Business plans, so anyone below Enterprise Scale should keep treatin... If you're planning a setup, tell me: What tier/plan your organization currently uses Whether you plan to connect external integrations or APIs - What **tier/plan** your organization currently uses - Whether you plan to connect **external integrations or APIs** I can help you evaluate if Airtable fits your workflow or if a dedicated backend is safer.

Yes, Airtable can be HIPAA compliant, but only for **Enterprise Scale** customers who execute a specific Business Associate Agreement (BAA) through the platform's Health Information Exhibit . Free, Team, and Business plans do not support HIPAA compliance or the signing of a BAA.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/)[[3]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Even on an Enterprise plan, strict usage rules apply to Protected Health Information (PHI):[](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) [[1]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) - **Where data lives:** PHI can only be stored in standard "Records" within "Bases". - **Exclusions:** Airtable AI cannot process PHI. - **Communications:** You cannot use Airtable as a patient portal, and automated emails cannot contain PHI.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) Organizations must also ensure any third-party tools or integrations used with their workspace meet HIPAA standards. You can review the full platform specifications on the [Airtable Health Information Datasheet](https://www.airtable.com/company/health-info-datasheet).If you're evaluating Airtable for your healthcare organization, could you tell me: - What **specific plan** (e.g., Enterprise Scale) is your organization considering? - Are you looking to build **internal workflows** or connect Airtable to other **electronic health record (EHR) systems**? Yes, Airtable can be HIPAA compliant, but only for Enterprise Scale customers who execute a specific Business Associate Agreement (BAA) through the platform's Health Information Exhibit. Free, Team, and Business plans do not support HIPAA compliance or the signing of a BAA. A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Key takeaways * Airtable HIPAA support is available only on the Enterprise Scale plan. Free, Team, and Business plan customers can... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Even on an Enterprise plan, strict usage rules apply to Protected Health Information (PHI): Even on an Enterprise plan, strict usage rules apply to Protected Health Information (PHI):[](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) [[1]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) In healthcare, Airtable has many potential uses. It could be used to keep track of appointments and consultant availability, strea... Where data lives: PHI can only be stored in standard "Records" within "Bases". Exclusions: Airtable AI cannot process PHI. Communications: You cannot use Airtable as a patient portal, and automated emails cannot contain PHI. - **Where data lives:** PHI can only be stored in standard "Records" within "Bases". - **Exclusions:** Airtable AI cannot process PHI. - **Communications:** You cannot use Airtable as a patient portal, and automated emails cannot contain PHI.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Organizations must also ensure any third-party tools or integrations used with their workspace meet HIPAA standards. You can review the full platform specifications on the Airtable Health Information Datasheet. Organizations must also ensure any third-party tools or integrations used with their workspace meet HIPAA standards. You can review the full platform specifications on the [Airtable Health Information Datasheet](https://www.airtable.com/company/health-info-datasheet). Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Yes—but only under specific conditions. Airtable can be used for HIPAA-regulated patient data **only if** you are on its **Enterprise Scale** plan, execute Airtable's **Business Associate Agreement (BAA)** (now included in its Health Information Exhibit), and configure and use the platform according to Airtable's HIPAA requirements. It is **not** appropriate to store PHI/ePHI on Free, Team, or Business plans. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com) Key points: - **Enterprise Scale required.** HIPAA support is only available on the Enterprise Scale plan. [support.airtable.com](https://support.airtable.com/v1/docs/understanding-hipaa-at-airtable?utm_source=chatgpt.com) - **You must sign a BAA.** HIPAA requires a Business Associate Agreement between covered entities/business associates and vendors handling ePHI. Airtable provides this as part of its Health Information Exhibit. [support.airtable.com](https://support.airtable.com/v1/docs/understanding-hipaa-at-airtable?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) - **HIPAA compliance is shared responsibility.** Airtable provides security features (such as audit logs, SSO, enterprise key management, and DLP integrations), but your organization is still responsible for access controls, user permissions, policies, workforce training, and compliant workflows. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com) - **Do not upload patient data before HIPAA is enabled.** Airtable states that customers should not store ePHI unless they are on the Enterprise Scale plan and have executed the required agreement. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com) If your use case is something like: - patient intake - appointment tracking - care coordination - clinical operations - research participant management (when HIPAA applies) Airtable can be a reasonable operational database **if** you have the proper Enterprise configuration and BAA. It is generally **not** intended to replace a certified electronic health record (EHR) system for clinical documentation. If you tell me: - who will use it (clinic, private practice, startup, research, etc.), - what patient data you plan to store (names, diagnoses, medical records, scheduling, billing, etc.), I can help determine whether Airtable is an appropriate choice or suggest a more suitable HIPAA-compliant architecture.

**Yes, Airtable can be HIPAA compliant** , but only under very specific conditions, plan tiers, and strict boundary rules.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) Key Requirements for HIPAA Compliance on Airtable - Plan Requirement: Airtable supports HIPAA compliance **only** for customers on the **Enterprise Scale** plan. Storing electronic Protected Health Information (ePHI) on Free, Team, or Business plans violates Airtable’s terms and is not compliant.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - Business Associate Agreement (BAA): Eligible organizations must sign Airtable’s **Health Information Exhibit** , which contains a formal Business Associate Addendum (BAA).[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) Critical Boundaries and Restrictions Even with an Enterprise Scale plan and a signed BAA, Airtable enforces strict data handling rules outlined in their [Health Information Datasheet](https://www.airtable.com/company/health-info-datasheet):[[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[2]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[3]](https://www.techrepublic.com/article/airtable-alternatives/) - **Where PHI Lives:** ePHI and medical data may only be stored inside **records within Airtable bases or interfaces**.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Excluded Features:** You **cannot** put ePHI in comments, metadata, or automated outgoing emails (unless rigorously controlled).[](https://www.airtable.com/company/health-info-datasheet) - **Customer Support:** You must never include ePHI in screenshots or support tickets when talking to Airtable customer support.[](https://www.airtable.com/company/health-info-datasheet) - **Airtable AI:** AI features sit entirely outside the compliance boundary. You cannot enable or use Airtable AI in workspaces containing ePHI unless specific supplemental terms are met.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Not a Patient Portal:** Airtable explicitly states the platform cannot be used as a patient portal or the direct front-end tech for one.[](https://www.airtable.com/company/health-info-datasheet) - **Integrations:** Any third-party integration (like Zapier, Slack, or external APIs) connected to your HIPAA-enabled base must also support and maintain its own separate HIPAA compliance and separate BAA.[](https://www.airtable.com/company/health-info-datasheet) If you're planning a specific healthcare workflow, let me know: - What **type of data or records** you plan to store - Whether you are already on an **Enterprise Scale plan** I can help you evaluate if Airtable fits your architecture or if a dedicated backend is safer. Yes, Airtable can be HIPAA compliant, but only under very specific conditions, plan tiers, and strict boundary rules. Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Plan Requirement: Airtable supports HIPAA compliance only for customers on the Enterprise Scale plan. Storing electronic Protected Health Information (ePHI) on Free, Team, or Business plans violates Airtable’s terms and is not compliant. Business Associate Agreement (BAA): Eligible organizations must sign Airtable’s Health Information Exhibit, which contains a formal Business Associate Addendum (BAA). - Plan Requirement: Airtable supports HIPAA compliance **only** for customers on the **Enterprise Scale** plan. Storing electronic Protected Health Information (ePHI) on Free, Team, or Business plans violates Airtable’s terms and is not compliant.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - Business Associate Agreement (BAA): Eligible organizations must sign Airtable’s **Health Information Exhibit** , which contains a formal Business Associate Addendum (BAA).[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) Even with an Enterprise Scale plan and a signed BAA, Airtable enforces strict data handling rules outlined in their Health Information Datasheet : Even with an Enterprise Scale plan and a signed BAA, Airtable enforces strict data handling rules outlined in their [Health Information Datasheet](https://www.airtable.com/company/health-info-datasheet):[[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[2]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[3]](https://www.techrepublic.com/article/airtable-alternatives/) HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP... Airtable can be HIPAA compliant, but this is only available under its Enterprise Scale plan. For Airtable to be HIPAA compliant, u... Where PHI Lives: ePHI and medical data may only be stored inside records within Airtable bases or interfaces. Excluded Features: You cannot put ePHI in comments, metadata, or automated outgoing emails (unless rigorously controlled). Customer Support: You must never include ePHI in screenshots or support tickets when talking to Airtable customer support. Airtable AI: AI features sit entirely outside the compliance boundary. You cannot enable or use Airtable AI in workspaces containing ePHI unless specific supplemental terms are met. Not a Patient Portal: Airtable explicitly states the platform cannot be used as a patient portal or the direct front-end tech for one. Integrations: Any third-party integration (like Zapier, Slack, or external APIs) connected to your HIPAA-enabled base must also support and maintain its own separate HIPAA compliance and separate BAA. - **Where PHI Lives:** ePHI and medical data may only be stored inside **records within Airtable bases or interfaces**.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Excluded Features:** You **cannot** put ePHI in comments, metadata, or automated outgoing emails (unless rigorously controlled).[](https://www.airtable.com/company/health-info-datasheet) - **Customer Support:** You must never include ePHI in screenshots or support tickets when talking to Airtable customer support.[](https://www.airtable.com/company/health-info-datasheet) - **Airtable AI:** AI features sit entirely outside the compliance boundary. You cannot enable or use Airtable AI in workspaces containing ePHI unless specific supplemental terms are met.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Not a Patient Portal:** Airtable explicitly states the platform cannot be used as a patient portal or the direct front-end tech for one.[](https://www.airtable.com/company/health-info-datasheet) - **Integrations:** Any third-party integration (like Zapier, Slack, or external APIs) connected to your HIPAA-enabled base must also support and maintain its own separate HIPAA compliance and separate BAA.[](https://www.airtable.com/company/health-info-datasheet) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... The boundary is drawn tightly: PHI may only live in records within bases, it can't appear in automated emails or be shared with Ai... If you're planning a specific healthcare workflow, let me know: What type of data or records you plan to store Whether you are already on an Enterprise Scale plan - What **type of data or records** you plan to store - Whether you are already on an **Enterprise Scale plan** I can help you evaluate if Airtable fits your architecture or if a dedicated backend is safer.

Yes, Airtable can be HIPAA compliant, but only for **Enterprise Scale** plan subscribers who execute a formal [Business Associate Agreement (BAA)](https://www.airtable.com/company/hipaa-airtable) via Airtable's Health Information Exhibit . It is strictly prohibited to store protected health information (PHI) on Free, Team, or Business plans.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Key Requirements & Restrictions - **Plan Tier:** Must be on the Enterprise Scale plan with an active BAA. - **Storage Boundaries:** ePHI must only be stored within standard records inside bases or interfaces. - **Exclusions:** You cannot use Airtable AI with PHI (unless specific supplemental terms are signed), send PHI through automated outgoing emails, share PHI with customer support, or use Airtable as a patient portal. - **Integrations:** Any connected third-party tools or integrations must independently be HIPAA compliant.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/)[[3]](https://www.paubox.com/blog/airtable-hipaa-compliant)[[4]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-plan-requirements-and-using-airtable-for-phi) If you'd like, let me know: - What **tier of Airtable** your organization currently uses - What **type of patient data** you plan to track I can help you evaluate your workflow restrictions or alternative setups. Yes, Airtable can be HIPAA compliant, but only for Enterprise Scale plan subscribers who execute a formal Business Associate Agreement (BAA) via Airtable's Health Information Exhibit. It is strictly prohibited to store protected health information (PHI) on Free, Team, or Business plans. A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Plan Tier: Must be on the Enterprise Scale plan with an active BAA. Storage Boundaries: ePHI must only be stored within standard records inside bases or interfaces. Exclusions: You cannot use Airtable AI with PHI (unless specific supplemental terms are signed), send PHI through automated outgoing emails, share PHI with customer support, or use Airtable as a patient portal. Integrations: Any connected third-party tools or integrations must independently be HIPAA compliant. - **Plan Tier:** Must be on the Enterprise Scale plan with an active BAA. - **Storage Boundaries:** ePHI must only be stored within standard records inside bases or interfaces. - **Exclusions:** You cannot use Airtable AI with PHI (unless specific supplemental terms are signed), send PHI through automated outgoing emails, share PHI with customer support, or use Airtable as a patient portal. - **Integrations:** Any connected third-party tools or integrations must independently be HIPAA compliant.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/)[[3]](https://www.paubox.com/blog/airtable-hipaa-compliant)[[4]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-plan-requirements-and-using-airtable-for-phi) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... In healthcare, Airtable has many potential uses. It could be used to keep track of appointments and consultant availability, strea... What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are... Does Airtable require a BAA for HIPAA compliance? Yes. You must have a fully executed Business Associate Agreement—often provided ... Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

fast|Airtable HIPAA BAA HIPAA support

**Yes, Airtable can be HIPAA compliant** , but only under strict, specific conditions . Airtable supports HIPAA compliance for eligible customers through its [HIPAA at Airtable](https://www.airtable.com/company/hipaa-airtable) program, but it is not compliant out-of-the-box on standard lower-tier plans.[](https://www.airtable.com/company/hipaa-airtable) [[1]](https://www.airtable.com/company/hipaa-airtable)[[2]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide)[[3]](https://www.paubox.com/blog/airtable-hipaa-compliant)[[4]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) Key requirements and restrictions to maintain HIPAA compliance on the platform include: - **Plan Requirement:** HIPAA support is restricted exclusively to the **Enterprise Scale plan** . It is completely prohibited and unsupported to store electronic Protected Health Information (ePHI) on Free, Team, or Business plans.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Business Associate Agreement (BAA):** Organizations must formally execute Airtable's Health Information Exhibit, which contains their [Business Associate Addendum](https://www.airtable.com/company/health-info-datasheet) , before introducing any patient data to the platform.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Storage Boundaries:** ePHI and medical information must **only** be stored inside standard "Records" within Airtable bases or interfaces.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Feature Restrictions:** Certain Airtable features cannot be used with patient data. For instance, you **cannot** use Airtable AI in workspaces handling PHI, you cannot use automated features to email records containing PHI, and Airtable cannot be used as a patient portal.[[1]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) - **Customer Support:** You are strictly prohibited from sharing screenshots or text containing ePHI when interacting with Airtable’s customer support or technical teams.[](https://www.airtable.com/company/health-info-datasheet) - **Integrations:** Any third-party tools or integrations connected to your Airtable bases (such as Zapier, Slack, or external APIs) must also independently support HIPAA compliance and be covered under a respective BAA.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) If you'd like to proceed, tell me: - What **tier of Airtable** your organization currently uses - What **type of workflow or data** you are planning to build I can help you evaluate whether Airtable fits your architecture or if a different solution is safer. Yes, Airtable can be HIPAA compliant, but only under strict, specific conditions. Airtable supports HIPAA compliance for eligible customers through its HIPAA at Airtable program, but it is not compliant out-of-the-box on standard lower-tier plans. Airtable's HIPAA program is designed to help customers use their product in compliance with the Health Insurance Portability and A... HIPAA: The Part Everyone Gets Wrong Every couple of weeks a client asks us, "Is Airtable HIPAA compliant?" The honest answer is "i... Lusanda Molefe March 13, 2019 Airtable is a cloud-based productivity tool that directly competes with Microsoft Excel and Google S... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Key requirements and restrictions to maintain HIPAA compliance on the platform include: Plan Requirement: HIPAA support is restricted exclusively to the Enterprise Scale plan. It is completely prohibited and unsupported to store electronic Protected Health Information (ePHI) on Free, Team, or Business plans. Business Associate Agreement (BAA): Organizations must formally execute Airtable's Health Information Exhibit, which contains their Business Associate Addendum, before introducing any patient data to the platform. Storage Boundaries: ePHI and medical information must only be stored inside standard "Records" within Airtable bases or interfaces. Feature Restrictions: Certain Airtable features cannot be used with patient data. For instance, you cannot use Airtable AI in workspaces handling PHI, you cannot use automated features to email records containing PHI, and Airtable cannot be used as a patient portal. Customer Support: You are strictly prohibited from sharing screenshots or text containing ePHI when interacting with Airtable’s customer support or technical teams. Integrations: Any third-party tools or integrations connected to your Airtable bases (such as Zapier, Slack, or external APIs) must also independently support HIPAA compliance and be covered under a respective BAA. - **Plan Requirement:** HIPAA support is restricted exclusively to the **Enterprise Scale plan** . It is completely prohibited and unsupported to store electronic Protected Health Information (ePHI) on Free, Team, or Business plans.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Business Associate Agreement (BAA):** Organizations must formally execute Airtable's Health Information Exhibit, which contains their [Business Associate Addendum](https://www.airtable.com/company/health-info-datasheet) , before introducing any patient data to the platform.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Storage Boundaries:** ePHI and medical information must **only** be stored inside standard "Records" within Airtable bases or interfaces.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Feature Restrictions:** Certain Airtable features cannot be used with patient data. For instance, you **cannot** use Airtable AI in workspaces handling PHI, you cannot use automated features to email records containing PHI, and Airtable cannot be used as a patient portal.[[1]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) - **Customer Support:** You are strictly prohibited from sharing screenshots or text containing ePHI when interacting with Airtable’s customer support or technical teams.[](https://www.airtable.com/company/health-info-datasheet) - **Integrations:** Any third-party tools or integrations connected to your Airtable bases (such as Zapier, Slack, or external APIs) must also independently support HIPAA compliance and be covered under a respective BAA.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... In healthcare, Airtable has many potential uses. It could be used to keep track of appointments and consultant availability, strea... Off-load the PHI, Keep Only “Breadcrumbs” in Airtable * Shape-shift PHI into opaque IDs. Store patient details in a hardened backe... If you'd like to proceed, tell me: What tier of Airtable your organization currently uses What type of workflow or data you are planning to build - What **tier of Airtable** your organization currently uses - What **type of workflow or data** you are planning to build I can help you evaluate whether Airtable fits your architecture or if a different solution is safer.

Airtable is HIPAA compliant **only** for Enterprise Scale plan customers who execute a formal Business Associate Agreement (BAA) via Airtable's Health Information Exhibit . Users on Free, Team, or Business plans are strictly prohibited from storing protected health information (ePHI).[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[3]](https://www.paubox.com/blog/airtable-hipaa-compliant)Plan and Agreement Requirements - **Enterprise Scale Plan:** Required to access and enable HIPAA-compliant features. - **Business Associate Agreement (BAA):** Must be signed through Airtable's Health Information Exhibit. - **Lower Tiers:** Not eligible for a BAA or ePHI storage. You can review [HIPAA at Airtable](https://www.airtable.com/company/hipaa-airtable) to see an overview of their security program.[](https://www.airtable.com/company/hipaa-airtable) [[1]](https://www.airtable.com/company/hipaa-airtable)[[2]](https://www.accountablehq.com/post/airtable-hipaa-compliance-baa-security-features-and-what-to-know-in-2026)[[3]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) Platform Usage Restrictions - **Data Location:** ePHI must be stored exclusively inside records within Airtable bases or interfaces. - **Support Boundaries:** Do not share ePHI or medical details in screenshots, support tickets, or interactions with Airtable customer support. - **Airtable AI:** Cannot be used or enabled where ePHI is stored unless explicit supplemental AI terms for health info are accepted. - **Automations & Portals:** Cannot use automated emails containing PHI or use Airtable as a patient portal. - **Integrations:** Any connected third-party tools or integrations must independently support and maintain HIPAA compliance. - Read the official setup guidelines on [Understanding HIPAA at Airtable](https://support.airtable.com/docs/understanding-hipaa-at-airtable). - Learn more from the announcement on the [Airtable Community](https://community.airtable.com/announcements-6/airtable-is-now-hipaa-compliant-1542).[[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/)[[3]](https://community.airtable.com/announcements-6/airtable-is-now-hipaa-compliant-1542) If you'd like, let me know: - Your **current Airtable plan** - **What type of healthcare data** you plan to store I can help you determine the next steps for your workflow. Airtable is HIPAA compliant only for Enterprise Scale plan customers who execute a formal Business Associate Agreement (BAA) via Airtable's Health Information Exhibit. Users on Free, Team, or Business plans are strictly prohibited from storing protected health information (ePHI). A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are... Enterprise Scale Plan: Required to access and enable HIPAA-compliant features. Business Associate Agreement (BAA): Must be signed through Airtable's Health Information Exhibit. Lower Tiers: Not eligible for a BAA or ePHI storage. You can review HIPAA at Airtable to see an overview of their security program. - **Enterprise Scale Plan:** Required to access and enable HIPAA-compliant features. - **Business Associate Agreement (BAA):** Must be signed through Airtable's Health Information Exhibit. - **Lower Tiers:** Not eligible for a BAA or ePHI storage. You can review [HIPAA at Airtable](https://www.airtable.com/company/hipaa-airtable) to see an overview of their security program.[](https://www.airtable.com/company/hipaa-airtable) [[1]](https://www.airtable.com/company/hipaa-airtable)[[2]](https://www.accountablehq.com/post/airtable-hipaa-compliance-baa-security-features-and-what-to-know-in-2026)[[3]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) Airtable's HIPAA program is designed to help customers use their product in compliance with the Health Insurance Portability and A... Is HIPAA compliance available on all Airtable plans? No. HIPAA support requires an executed BAA and is generally available to ente... Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP... Data Location: ePHI must be stored exclusively inside records within Airtable bases or interfaces. Support Boundaries: Do not share ePHI or medical details in screenshots, support tickets, or interactions with Airtable customer support. Airtable AI: Cannot be used or enabled where ePHI is stored unless explicit supplemental AI terms for health info are accepted. Automations & Portals: Cannot use automated emails containing PHI or use Airtable as a patient portal. Integrations: Any connected third-party tools or integrations must independently support and maintain HIPAA compliance. Read the official setup guidelines on Understanding HIPAA at Airtable. Learn more from the announcement on the Airtable Community. - **Data Location:** ePHI must be stored exclusively inside records within Airtable bases or interfaces. - **Support Boundaries:** Do not share ePHI or medical details in screenshots, support tickets, or interactions with Airtable customer support. - **Airtable AI:** Cannot be used or enabled where ePHI is stored unless explicit supplemental AI terms for health info are accepted. - **Automations & Portals:** Cannot use automated emails containing PHI or use Airtable as a patient portal. - **Integrations:** Any connected third-party tools or integrations must independently support and maintain HIPAA compliance. - Read the official setup guidelines on [Understanding HIPAA at Airtable](https://support.airtable.com/docs/understanding-hipaa-at-airtable). - Learn more from the announcement on the [Airtable Community](https://community.airtable.com/announcements-6/airtable-is-now-hipaa-compliant-1542).[[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/)[[3]](https://community.airtable.com/announcements-6/airtable-is-now-hipaa-compliant-1542) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... In healthcare, Airtable has many potential uses. It could be used to keep track of appointments and consultant availability, strea... Airtable is now HIPAA compliant for its Enterprise Scale customers. Airtable's platform is designed to help healthcare providers a...

fast|Airtable HIPAA BAA HIPAA compliance

**Yes, Airtable can be HIPAA compliant** , but only under a strict set of conditions . Airtable supports HIPAA compliance for eligible customers by signing a Business Associate Agreement (BAA) via its **Health Information Exhibit** , but it requires a specific high-tier enterprise plan and careful environment configuration.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide)[[3]](https://www.complysaas.com/compliance/airtable) Key Requirements for HIPAA Compliance on Airtable: - **Enterprise Scale Plan Required:** Airtable's HIPAA support and BAA execution are exclusively available to customers on the **Enterprise Scale** plan. Storing ePHI (electronic Protected Health Information) on Free, Team, or Business plans is strictly prohibited by Airtable terms.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) - **Signed Health Information Exhibit/BAA:** You must officially execute Airtable's Health Information Exhibit, which contains the required Business Associate Addendum terms, through your Airtable account team.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Strict Usage Boundaries:** Even with a signed BAA, Airtable enforces boundaries on where and how patient data can be handled: - ePHI and medical data must only live inside **records within bases or interfaces**. - **Airtable AI** is excluded from the HIPAA agreement and must not be enabled or used in workspaces containing ePHI. - You **cannot** use Airtable as a patient portal. - You must not include ePHI in support tickets, community posts, or unencrypted outgoing emails generated via automations.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) - **Customer-Side Security Configuration:** Your organization is responsible for configuring the platform properly. This includes enforcing Enterprise Single Sign-On (SSO), Multi-Factor Authentication (MFA), role-based access controls (RBAC), Enterprise Audit Logs, and Enterprise Key Management (EKM) for custom encryption keys.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) - **Third-Party Integrations:** Any connected integrations (like Zapier, Slack, or custom APIs) must independently support HIPAA compliance and have their own BAAs; otherwise, the data chain of custody is broken.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.blaze.tech/post/is-airtable-hipaa-compliant)[[2]](https://www.campaigncreators.com/blog/hubspot-hipaa-compliant) If you are planning a healthcare workflow, tell me: - What **tier of Airtable** your organization currently uses - Whether you need **third-party integrations** (like a form builder or CRM) connected to it I can help you evaluate your setup or suggest alternative architectures. Yes, Airtable can be HIPAA compliant, but only under a strict set of conditions. Airtable supports HIPAA compliance for eligible customers by signing a Business Associate Agreement (BAA) via its Health Information Exhibit, but it requires a specific high-tier enterprise plan and careful environment configuration. Airtable and HIPAA compliance. Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no B... HIPAA: The Part Everyone Gets Wrong Every couple of weeks a client asks us, "Is Airtable HIPAA compliant?" The honest answer is "i... Search query answers * Is Airtable HIPAA compliant in 2026? Airtable may support some HIPAA-regulated workflows only for Enterpris... Enterprise Scale Plan Required: Airtable's HIPAA support and BAA execution are exclusively available to customers on the Enterprise Scale plan. Storing ePHI (electronic Protected Health Information) on Free, Team, or Business plans is strictly prohibited by Airtable terms. Signed Health Information Exhibit/BAA: You must officially execute Airtable's Health Information Exhibit, which contains the required Business Associate Addendum terms, through your Airtable account team. Strict Usage Boundaries: Even with a signed BAA, Airtable enforces boundaries on where and how patient data can be handled:ePHI and medical data must only live inside records within bases or interfaces. Airtable AI is excluded from the HIPAA agreement and must not be enabled or used in workspaces containing ePHI. You cannot use Airtable as a patient portal. You must not include ePHI in support tickets, community posts, or unencrypted outgoing emails generated via automations. ePHI and medical data must only live inside records within bases or interfaces. Airtable AI is excluded from the HIPAA agreement and must not be enabled or used in workspaces containing ePHI. You cannot use Airtable as a patient portal. You must not include ePHI in support tickets, community posts, or unencrypted outgoing emails generated via automations. Customer-Side Security Configuration: Your organization is responsible for configuring the platform properly. This includes enforcing Enterprise Single Sign-On (SSO), Multi-Factor Authentication (MFA), role-based access controls (RBAC), Enterprise Audit Logs, and Enterprise Key Management (EKM) for custom encryption keys. Third-Party Integrations: Any connected integrations (like Zapier, Slack, or custom APIs) must independently support HIPAA compliance and have their own BAAs; otherwise, the data chain of custody is broken. - **Enterprise Scale Plan Required:** Airtable's HIPAA support and BAA execution are exclusively available to customers on the **Enterprise Scale** plan. Storing ePHI (electronic Protected Health Information) on Free, Team, or Business plans is strictly prohibited by Airtable terms.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) - **Signed Health Information Exhibit/BAA:** You must officially execute Airtable's Health Information Exhibit, which contains the required Business Associate Addendum terms, through your Airtable account team.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Strict Usage Boundaries:** Even with a signed BAA, Airtable enforces boundaries on where and how patient data can be handled: - ePHI and medical data must only live inside **records within bases or interfaces**. - **Airtable AI** is excluded from the HIPAA agreement and must not be enabled or used in workspaces containing ePHI. - You **cannot** use Airtable as a patient portal. - You must not include ePHI in support tickets, community posts, or unencrypted outgoing emails generated via automations.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) - **Customer-Side Security Configuration:** Your organization is responsible for configuring the platform properly. This includes enforcing Enterprise Single Sign-On (SSO), Multi-Factor Authentication (MFA), role-based access controls (RBAC), Enterprise Audit Logs, and Enterprise Key Management (EKM) for custom encryption keys.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) - **Third-Party Integrations:** Any connected integrations (like Zapier, Slack, or custom APIs) must independently support HIPAA compliance and have their own BAAs; otherwise, the data chain of custody is broken.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.blaze.tech/post/is-airtable-hipaa-compliant)[[2]](https://www.campaigncreators.com/blog/hubspot-hipaa-compliant) Is Airtable Technically HIPAA-Compliant? Short answer: only if you buy the Enterprise Scale plan, sign Airtable's BAA, and run you... To begin the Health Information Exhibit execution process or request additional information, please contact a member of your accou... HIPAA Compliance at Airtable. Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busi... Sign a Business Associate Agreement (BAA): You must enter into a formal contract with Airtable to ensure that any protected health... Every third-party integration, such as Shopify, WhatsApp, or standard SMS tools, must independently be HIPAA-compliant and have it... If you are planning a healthcare workflow, tell me: What tier of Airtable your organization currently uses Whether you need third-party integrations (like a form builder or CRM) connected to it - What **tier of Airtable** your organization currently uses - Whether you need **third-party integrations** (like a form builder or CRM) connected to it I can help you evaluate your setup or suggest alternative architectures. Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin...

Airtable is HIPAA compliant **only** for Enterprise Scale plan users who sign a formal Business Associate Agreement (BAA) via Airtable's Health Information Exhibit . It is strictly prohibited to store patient data or protected health information (PHI) on Free, Team, or Business plans.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Requirements and Plan Rules - **Enterprise Scale Plan:** Required to unlock and support HIPAA-compliant workflows. - **Business Associate Agreement (BAA):** Must be executed directly with Airtable through their Health Information Exhibit. - **Lower Tiers:** Free, Team, and Business tier accounts do not support or allow ePHI storage.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) Usage Boundaries and Limitations - **Where PHI Lives:** Patient data must be kept strictly within compliant record fields inside your bases. - **Excluded Features:** Airtable AI, automated external emails, and standard customer support channels are excluded from the BAA scope and cannot process PHI. - **Integrations:** Any third-party tools or automations connected to your bases must also independently meet HIPAA standards.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) If you want to proceed, tell me: - What **tier** of Airtable is your team currently using? - What **kind of patient data** do you plan to track? I can help you review your setup or look at alternative tools. Airtable is HIPAA compliant only for Enterprise Scale plan users who sign a formal Business Associate Agreement (BAA) via Airtable's Health Information Exhibit. It is strictly prohibited to store patient data or protected health information (PHI) on Free, Team, or Business plans. HIPAA, or the Health Insurance Portability and Accountability Act of 1996, is a regulation issued by the U.S. Department of Health... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Enterprise Scale Plan: Required to unlock and support HIPAA-compliant workflows. Business Associate Agreement (BAA): Must be executed directly with Airtable through their Health Information Exhibit. Lower Tiers: Free, Team, and Business tier accounts do not support or allow ePHI storage. - **Enterprise Scale Plan:** Required to unlock and support HIPAA-compliant workflows. - **Business Associate Agreement (BAA):** Must be executed directly with Airtable through their Health Information Exhibit. - **Lower Tiers:** Free, Team, and Business tier accounts do not support or allow ePHI storage.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) Where PHI Lives: Patient data must be kept strictly within compliant record fields inside your bases. Excluded Features: Airtable AI, automated external emails, and standard customer support channels are excluded from the BAA scope and cannot process PHI. Integrations: Any third-party tools or automations connected to your bases must also independently meet HIPAA standards. - **Where PHI Lives:** Patient data must be kept strictly within compliant record fields inside your bases. - **Excluded Features:** Airtable AI, automated external emails, and standard customer support channels are excluded from the BAA scope and cannot process PHI. - **Integrations:** Any third-party tools or automations connected to your bases must also independently meet HIPAA standards.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Yes—but only under specific conditions. Airtable supports HIPAA-compliant use **only for customers on its Enterprise Scale plan** who have executed Airtable's **Business Associate Agreement (BAA)** (now part of its Health Information Exhibit). Airtable explicitly states that organizations **must not store electronic protected health information (ePHI)** unless they are on the Enterprise Scale plan and have the required agreement in place. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com)[support.airtable.com](https://support.airtable.com/docs/hipaa-and-ferpa-compliance?utm_source=chatgpt.com) Key points: - ✅ **Enterprise Scale only.** HIPAA support is not available on Free, Team, or Business plans. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com)[support.airtable.com](https://support.airtable.com/docs/hipaa-and-ferpa-compliance?utm_source=chatgpt.com) - ✅ **BAA required.** If you're a HIPAA-covered entity or business associate, you need a signed BAA with Airtable before storing patient data. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com)[support.airtable.com](https://support.airtable.com/docs/hipaa-and-ferpa-compliance?utm_source=chatgpt.com) - ✅ **Administrative configuration matters.** HIPAA compliance depends not just on Airtable's infrastructure, but also on how your organization configures permissions, access controls, audit logging, and workflows. HIPAA is a shared responsibility. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com)[support.airtable.com](https://support.airtable.com/docs/hipaa-and-ferpa-compliance?utm_source=chatgpt.com) - ⚠️ **AI features have additional requirements.** If you plan to use Airtable AI with ePHI, there are separate terms and eligibility requirements beyond the standard BAA. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/ai-terms-health-information?utm_source=chatgpt.com) If you're building something like: - a patient CRM, - scheduling system, - intake database, - care coordination tracker, or - clinical workflow, Airtable **can** be appropriate **if** you're on Enterprise Scale with a BAA and you implement HIPAA-compliant administrative and technical safeguards. If you're using a standard Airtable plan (including Business), you should **not** store identifiable patient information or other ePHI there. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com)[support.airtable.com](https://support.airtable.com/docs/hipaa-and-ferpa-compliance?utm_source=chatgpt.com) If you tell me your use case (e.g., patient intake, appointment tracking, research registry, billing, or case management), I can help determine whether Airtable is a good fit or suggest alternatives if needed.

Airtable can be configured to be HIPAA compliant, but it is not inherently compliant by default. This compliance is primarily available for "Enterprise Scale" customers and requires specific steps and considerations. Here's a breakdown of what's needed for Airtable to be HIPAA compliant for patient data: * **Enterprise Scale Plan** You must be on Airtable's Enterprise Scale plan to achieve HIPAA compliance. Lower-tier plans (Free, Team, Business) are not permitted to store electronic Protected Health Information (ePHI). * **Business Associate Agreement (BAA)** A BAA is a legally binding contract between a covered entity (like a healthcare provider) and a business associate (like Airtable) that outlines how ePHI will be protected. Airtable will sign a BAA, which is part of their Health Information Exhibit, for Enterprise Scale customers. You should not use Airtable for PHI without a fully executed BAA. * **Specific Configurations and Safeguards** Even with a BAA and the Enterprise Scale plan, you need to configure Airtable and your workflows to meet HIPAA standards. This includes: * Enabling various security features like encryption, access controls, and audit logs. * Disabling any Airtable features or third-party integrations that do not meet HIPAA requirements. * Ensuring that PHI is only stored in "Records" within "Bases" and not in automated emails. * Not using Airtable as a patient portal or the technology behind one. * Exercising caution with Airtable AI, as it may not be covered by the BAA and conservative advice suggests disabling it for any base containing ePHI. * It is the customer's responsibility to ensure compliance with the BAA and Health Information Exhibit, including how data is stored and used. Airtable's product is designed to adhere to the three HIPAA Rules: Privacy, Security, and Breach Notification. They provide offerings to support HIPAA compliance for their Enterprise Scale customers, including their Business Associate Addendum. If you are considering using Airtable for patient data, it is crucial to speak directly with Airtable to understand their current offerings and ensure your specific use case can be made compliant. This compliance is primarily available for "Enterprise Scale" customers and requires specific steps and considerations Lower-tier plans (Free, Team, Business) are not permitted to store electronic Protected Health Information (ePHI) Airtable will sign a BAA, which is part of their Health Information Exhibit, for Enterprise Scale customers You should not use Airtable for PHI without a fully executed BAA This includes: * Enabling various security features like encryption, access controls, and audit logs * Disabling any Airtable features or third-party integrations that do not meet HIPAA requirements * Ensuring that PHI is only stored in "Records" within "Bases" and not in automated emails * Not using Airtable as a patient portal or the technology behind one * Exercising caution with Airtable AI, as it may not be covered by the BAA and conservative advice suggests disabling it for any base containing ePHI * It is the customer's responsibility to ensure compliance with the BAA and Health Information Exhibit, including how data is stored and used Airtable's product is designed to adhere to the three HIPAA Rules: Privacy, Security, and Breach Notification They provide offerings to support HIPAA compliance for their Enterprise Scale customers, including their Business Associate Addendum If you are considering using Airtable for patient data, it is crucial to speak directly with Airtable to understand their current offerings and ensure your specific use case can be made compliant

I'll search for information about Airtable's HIPAA compliance. Based on recent updates, Airtable's HIPAA compliance status depends on your subscription plan: ## HIPAA Compliance Available (with conditions) Since April 2024, customers on the Enterprise Scale plan can sign Airtable's Health Information Exhibit, which contains a Business Associate Addendum, and then collect, store, and analyze PHI (Protected Health Information) in their bases. ## Important Limitations However, there are significant restrictions on how you can use Airtable with patient data: - PHI may only live in records within bases, it can't appear in automated emails or be shared with Airtable's support team, and Airtable AI sits outside the agreement entirely. - The platform also can't serve as a patient portal or the technology behind one, and every connected integration must support HIPAA compliance in its own right. ## Lower-Tier Plans Airtable's terms prohibit storing ePHI on the Free, Team, and Business plans, so anyone below Enterprise Scale should keep treating the platform as a PHI-free zone. In summary, Airtable can be HIPAA compliant for patient data, but only if you're on the Enterprise Scale plan with a signed Business Associate Agreement, and you must follow specific usage restrictions.

**Yes, but only under very specific, enterprise-level conditions** **.** [](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) Airtable supports HIPAA compliance for protected health information (PHI), but it is subject to a strict paywall and precise operational rules.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) The Requirements for HIPAA Compliance on Airtable 1. **Enterprise Scale Plan:** HIPAA support and the ability to sign a Business Associate Agreement (BAA) are exclusively available on Airtable’s highest-tier custom pricing plan (**Enterprise Scale** ). If you are on the Free, Team, or Business plans, storing electronic Protected Health Information (ePHI) is a violation of Airtable's terms.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) 2. **Executed Health Information Exhibit (BAA):** You must formally execute Airtable's Health Information Exhibit, which contains their Business Associate Addendum.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.complysaas.com/compliance/airtable) 3. **Strict Configuration & Boundaries:** Signing the BAA doesn't automatically protect everything. You must adhere to Airtable’s [Health Information Datasheet](https://www.airtable.com/company/health-info-datasheet) , which dictates strict usage limitations: - **Where PHI lives:** ePHI and medical information must only reside within designated records inside Airtable bases or interfaces. - **Airtable AI:** You **cannot** use or enable Airtable AI in any workspace where ePHI is stored. - **Customer Support:** You must never include patient health data or screenshots containing PHI in support tickets. - **No Patient Portals:** Airtable explicitly prohibits using the platform as a patient portal. - **Integrations & Automations:** Any third-party integrations (like Zapier, Slack, or email automations) connected to your ePHI data must independently meet HIPAA standards and have their own BAA in place.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://www.airtable.com/company/health-info-datasheet)[[3]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[4]](https://www.aptible.com/hipaa/hosting-requirements) Are you currently on an **Enterprise Scale plan** , or are you looking to find out what **specific healthcare workflow** you need to build? Yes, but only under very specific, enterprise-level conditions. **Yes, but only under very specific, enterprise-level conditions** **.** [](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) Is Airtable Technically HIPAA-Compliant? Short answer: only if you buy the Enterprise Scale plan, sign Airtable's BAA, and run you... Airtable supports HIPAA compliance for protected health information (PHI), but it is subject to a strict paywall and precise operational rules. Airtable supports HIPAA compliance for protected health information (PHI), but it is subject to a strict paywall and precise operational rules.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) Airtable and HIPAA compliance. Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no B... Are you currently on an Enterprise Scale plan, or are you looking to find out what specific healthcare workflow you need to build? Are you currently on an **Enterprise Scale plan** , or are you looking to find out what **specific healthcare workflow** you need to build? Your organization's use of Airtable must comply with the requirements listed in the Health Information Datasheet (opens in new tab... Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... HIPAA, BAA, and SOC 2 summary ... Airtable states that HIPAA support is available on Enterprise Scale and that customers intending...

Yes, Airtable can be HIPAA compliant, but strictly for **Enterprise Scale** plan customers who sign a formal **Business Associate Agreement (BAA)** via Airtable's Health Information Exhibit . Storing protected health information (PHI) on Free, Team, or Business plans is strictly prohibited by Airtable terms.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Requirements and Setup - **Plan Tier:** Must be on the [Airtable Enterprise Scale Plan](https://www.airtable.com/company/health-info-datasheet). - **Executed BAA:** Must complete and sign Airtable’s Health Information Exhibit containing the BAA. - **Shared Responsibility:** You must properly configure administrative controls like Single Sign-On (SSO), audit logs, and access permissions.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[2]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) Restrictions and Limitations - **Feature Boundaries:** PHI may only reside within secure base records. - **Excluded Tools:** Airtable AI, standard automated emails, and unsupported third-party integrations are excluded from the BAA coverage and cannot process PHI. - **Support Limits:** Regular customer support channels cannot be used to transmit or troubleshoot raw PHI data.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) Yes, Airtable can be HIPAA compliant, but strictly for Enterprise Scale plan customers who sign a formal Business Associate Agreement (BAA) via Airtable's Health Information Exhibit. Storing protected health information (PHI) on Free, Team, or Business plans is strictly prohibited by Airtable terms. HIPAA, or the Health Insurance Portability and Accountability Act of 1996, is a regulation issued by the U.S. Department of Health... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Plan Tier: Must be on the Airtable Enterprise Scale Plan. Executed BAA: Must complete and sign Airtable’s Health Information Exhibit containing the BAA. Shared Responsibility: You must properly configure administrative controls like Single Sign-On (SSO), audit logs, and access permissions. - **Plan Tier:** Must be on the [Airtable Enterprise Scale Plan](https://www.airtable.com/company/health-info-datasheet). - **Executed BAA:** Must complete and sign Airtable’s Health Information Exhibit containing the BAA. - **Shared Responsibility:** You must properly configure administrative controls like Single Sign-On (SSO), audit logs, and access permissions.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[2]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... Is Airtable Technically HIPAA-Compliant? * Enterprise-only paywall. HIPAA support didn't exist until April 2024 and is still gated... Feature Boundaries: PHI may only reside within secure base records. Excluded Tools: Airtable AI, standard automated emails, and unsupported third-party integrations are excluded from the BAA coverage and cannot process PHI. Support Limits: Regular customer support channels cannot be used to transmit or troubleshoot raw PHI data. - **Feature Boundaries:** PHI may only reside within secure base records. - **Excluded Tools:** Airtable AI, standard automated emails, and unsupported third-party integrations are excluded from the BAA coverage and cannot process PHI. - **Support Limits:** Regular customer support channels cannot be used to transmit or troubleshoot raw PHI data.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Yes—but only under specific conditions. Airtable can be used in a way that supports HIPAA compliance, but **it is not appropriate to store protected health information (PHI) on standard Free, Team, or Business plans**. According to Airtable: - HIPAA support is available **only on the Enterprise Scale plan**. - You must execute Airtable's **Business Associate Agreement (BAA)** (now included as part of its Health Information Exhibit). - Your organization must configure and use Airtable in a HIPAA-compliant manner; HIPAA compliance depends on both the platform and your administrative, technical, and physical safeguards. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com) If you're storing patient data, here's the practical guidance: | Scenario | Appropriate? | |---------|--------------| | Patient names, diagnoses, medical record numbers, or other PHI on Free/Team/Business plans | ❌ No | | PHI on Enterprise Scale with a signed BAA and proper security controls | ✅ Potentially yes | | De-identified or non-PHI operational data | ✅ Generally acceptable, assuming it truly isn't PHI | For organizations using Airtable with PHI, important capabilities include: - Role-based access controls - Audit logs - Single sign-on (SSO) - Enterprise key management (optional) - Data loss prevention integrations - Signed BAA/Health Information Exhibit [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com) One important point: **using a HIPAA-enabled platform does not automatically make your workflow HIPAA compliant.** Your organization is still responsible for user access, policies, employee training, breach response, minimum necessary access, and other HIPAA Security Rule requirements. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com) If you tell me **what kind of patient data** you're planning to store (e.g., scheduling, intake forms, clinical notes, lab results, billing, or just patient names and contact information), I can help determine whether Airtable is an appropriate choice for that specific use case. | Scenario | Appropriate? | |---------|--------------| | Patient names, diagnoses, medical record numbers, or other PHI on Free/Team/Business plans | ❌ No | | PHI on Enterprise Scale with a signed BAA and proper security controls | ✅ Potentially yes | | De-identified or non-PHI operational data | ✅ Generally acceptable, assuming it truly isn't PHI | For organizations using Airtable with PHI, important capabilities include: - Role-based access controls - Audit logs - Single sign-on (SSO) - Enterprise key management (optional) - Data loss prevention integrations - Signed BAA/Health Information Exhibit [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com) One important point: **using a HIPAA-enabled platform does not automatically make your workflow HIPAA compliant.** Your organization is still responsible for user access, policies, employee training, breach response, minimum necessary access, and other HIPAA Security Rule requirements. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com) If you tell me **what kind of patient data** you're planning to store (e.g., scheduling, intake forms, clinical notes, lab results, billing, or just patient names and contact information), I can help determine whether Airtable is an appropriate choice for that specific use case.

**Yes, Airtable is HIPAA compliant, but strictly under specific conditions and plan tiers.** You can use Airtable for Electronic Protected Health Information (ePHI) if your organization is on their **Enterprise Scale plan** and you have formally executed their [Health Information Datasheet](https://google.com/goto?url=CAESWQHuR6pNAu908ab_xBMIpERD74LWnLnxHp_U4H-aGb1HOgf7N9O1zBsE4Fhod3Z_oXwdRpHVsyYGkOPkYsVWL74bbDlzMPq4qRB7oHtKh8koTfHs7vqy5tw3).[[1]](https://google.com/goto?url=CAESdgHuR6pNNr8iKUnLIULXWR6ypgILVYrx7fvwpbaewHtTm24zr4DpafQm0LYk63ym-HuCE0Tx8KKG8Idd3dyAWOrXEkopEUSqsyevrCwHzDQawFLsN_zfd1XeK8thHrNUfGhx5p08QdkSoawUFm1ljRCSwiKSPk0=)[[2]](https://google.com/goto?url=CAESWQHuR6pNAu908ab_xBMIpERD74LWnLnxHp_U4H-aGb1HOgf7N9O1zBsE4Fhod3Z_oXwdRpHVsyYGkOPkYsVWL74bbDlzMPq4qRB7oHtKh8koTfHs7vqy5tw3)[[3]](https://google.com/goto?url=CAESZAHuR6pNPi76_TQA9S3NTYe3SYPSQxKzDBN4QMrOAVYPvj26t1xhHDPvRPaIUPwa1u05_HCMOZn7qnG6cDXW9zHDAnhZ-J6WHGwgGtkll-BFO3HbZI7XLPEbUYfOS5xBrnDKMwY=) Because handling patient data requires shared responsibility between the software vendor and your organization, you must adhere to several strict requirements to maintain compliance.[](https://google.com/goto?url=CAESgAEB7keqTW8NiKcUUZMdJG5dpirqpjlaQfJoHbFCSdKBve5nc4PvHmvaQMNcddxdodd_JUpXnRZixdoUkRbqXhdU8YtUnyQP8ggedypzg9CzpTfn-Avz-z5YcgwHwBoXKUQR35wsmCm_qdeZuyxnF-DZW7SfqSRIiEUcvhwqOpAEsA==) [[1]](https://google.com/goto?url=CAESgAEB7keqTW8NiKcUUZMdJG5dpirqpjlaQfJoHbFCSdKBve5nc4PvHmvaQMNcddxdodd_JUpXnRZixdoUkRbqXhdU8YtUnyQP8ggedypzg9CzpTfn-Avz-z5YcgwHwBoXKUQR35wsmCm_qdeZuyxnF-DZW7SfqSRIiEUcvhwqOpAEsA==) 1. Requirements for HIPAA Compliance - **Enterprise Scale Plan:** You must be on Airtable's highest tier; HIPAA features and the BAA are not available on the Free, Team, or Business plans.[](https://google.com/goto?url=CAESZAHuR6pNPi76_TQA9S3NTYe3SYPSQxKzDBN4QMrOAVYPvj26t1xhHDPvRPaIUPwa1u05_HCMOZn7qnG6cDXW9zHDAnhZ-J6WHGwgGtkll-BFO3HbZI7XLPEbUYfOS5xBrnDKMwY=) [[1]](https://google.com/goto?url=CAESYQHuR6pNVJuW463D-dw3r98E8awW7ITRGwZxgE4mcobvQCf2hns4fEdj7z_x6DC0Toc3WHErnJbuf0aHFBjh-VkehjBx3EBib225Tc27oKI6V5IhJTaei4wqX6c6J5dh7U4=)[[2]](https://google.com/goto?url=CAESXAHuR6pNpf-DHv5A6YuOvyjXF_vgsNz1Wn6gVhIg2dfvuVteWtRQ_xKR6-h3C5EAWn_EMiLnRJeTpJjMW0ZJN6M_dDi8UbJU6kO_4_ej7SL7QHFTh8SVr20UcOAl) - **Business Associate Agreement (BAA):** You must execute a formal Business Associate Addendum.[](https://google.com/goto?url=CAESWQHuR6pNAu908ab_xBMIpERD74LWnLnxHp_U4H-aGb1HOgf7N9O1zBsE4Fhod3Z_oXwdRpHVsyYGkOPkYsVWL74bbDlzMPq4qRB7oHtKh8koTfHs7vqy5tw3) [[1]](https://google.com/goto?url=CAESVwHuR6pNxzwY-dlM5UkH7byoVKG-7mj_-iShtox0WogpPBuPaoPdvwGwXCv6z1HNiGg_grYrdhryFyEx6V_JyicgyKvm7SP_w0IssmXoj2GO04xxJB5Bgg==) - **User Policies:** Your organization must enforce strict access controls, such as enabling Single Sign-On (SSO), managing [Audit Logs](https://google.com/goto?url=CAESUgHuR6pNZVydmOExGd9Kh71_yx6jIb15_fls8PWgexfFHyKlnvhddWlZLdWkRUZUX8jT8kmoXwoeNMdqP0cysfrK8lKhFClvj98Noa8nGZIXRmM=) , and strictly applying the minimum-necessary data rule.[](https://google.com/goto?url=CAESZAHuR6pNPi76_TQA9S3NTYe3SYPSQxKzDBN4QMrOAVYPvj26t1xhHDPvRPaIUPwa1u05_HCMOZn7qnG6cDXW9zHDAnhZ-J6WHGwgGtkll-BFO3HbZI7XLPEbUYfOS5xBrnDKMwY=) [[1]](https://google.com/goto?url=CAESWgHuR6pNqKuYoYhWd3LWtzB81qGk2C1aX0bIf4HkcSTJDigZl1rBUTgHuyBYyF0v4kj5xHkhhQRjMVuId6MnLRNOKSfikMqdIR80gxV8ehAso0MTafHeeYFxew==)[[2]](https://google.com/goto?url=CAESjgEB7keqTVms-_AwHFwnEbTLeYe9GVNK1Sb65BgPAiCZGOd1EsoRjSi1xtlleBbLMEAr6k6oR50Wlt7AvH29zyulZeDhVtbLc0at8zJcdaoMmUBg2Osuebw7-K9II0Z4zd0esEoFP_7gMUnsM8nmSkZUqJ8co9igatHJLJT8LyzYk6oJoHxMIDkCG9IshE_e)[[3]](https://google.com/goto?url=CAESXQHuR6pNIRonloGIJicW-FRKXVRJ4NkiSG6bEvFg-unHAUFBHyDSzdftGdLb5VZiMveEocbxwqe0S7ndKv6x3G31r9_DzeT4m6tpGOCjDP7BKLdAqBNL6keQ1xQDIw==) 2. Supported Use Cases Once your BAA is in place, you can securely utilize Airtable for:[[1]](https://google.com/goto?url=CAESgAEB7keqTW8NiKcUUZMdJG5dpirqpjlaQfJoHbFCSdKBve5nc4PvHmvaQMNcddxdodd_JUpXnRZixdoUkRbqXhdU8YtUnyQP8ggedypzg9CzpTfn-Avz-z5YcgwHwBoXKUQR35wsmCm_qdeZuyxnF-DZW7SfqSRIiEUcvhwqOpAEsA==)[[2]](https://google.com/goto?url=CAESXgHuR6pNTsn7vy_NslpHLCb8SC_6p3gmH1KkXfh4WWI8V8KzK8jd-vvdHueRnUT3f9_Jfd1rEvj7G-YZNazLT0M_tI_m-PqUrFwFlpki-PTkNLi9gyxqxe4EY77Bp5E=) - Managing patient records and clinical trials - Tracking care coordination and internal healthcare team workflows - Securely managing sensitive health information inside structured records[](https://google.com/goto?url=CAESdgHuR6pNNr8iKUnLIULXWR6ypgILVYrx7fvwpbaewHtTm24zr4DpafQm0LYk63ym-HuCE0Tx8KKG8Idd3dyAWOrXEkopEUSqsyevrCwHzDQawFLsN_zfd1XeK8thHrNUfGhx5p08QdkSoawUFm1ljRCSwiKSPk0=) [[1]](https://google.com/goto?url=CAESXAHuR6pNpf-DHv5A6YuOvyjXF_vgsNz1Wn6gVhIg2dfvuVteWtRQ_xKR6-h3C5EAWn_EMiLnRJeTpJjMW0ZJN6M_dDi8UbJU6kO_4_ej7SL7QHFTh8SVr20UcOAl)[[2]](https://google.com/goto?url=CAESawHuR6pNyG4P80VHCkX2F11K2VqULJJXEXzRi04tSZnXp4YRD7z-X5Z2X4s7J7gnv3JC6vxB7Bjna1CNJFZuDl1t2-ZcAV9nsdoFdPEV_qqPSxV1EIjfnJONa-no_Y9ui3Ym4ZbE8OcVk6f1)[[3]](https://google.com/goto?url=CAESZQHuR6pNUnDod9-BCQCWf5drGEeuhfBYtHulzjXZ1I4HwOb1MmukQyRmxDqjdhlBMaASCQOPAo9JdEA2PP3TC2wCH17BTwvi0SlGlkASStMEDQ5-8LI9XrnYySVA5z6d-MUx_S00)[[4]](https://google.com/goto?url=CAESnAEB7keqTZgl48N1PBd579a6bJxZvtGkuA85NufgyFmLtEyYCNUusw4Kj7fWr3YjtydKUR4xDeuM9TmdL7v-AZurRYoX6v5u0GmJ4FJzgw9YsmWC4P46GLNATBOAjfpW2HNcepjRAjGwNukcVTvyh4kVUPbrxEBUDzpFoebBhw-GirIV39JYsjh_u1KNMU6yfKnrzy5YiHwFe-B4Gik=) 3. Usage Boundaries & Restrictions Even with the BAA in place, there are strict rules regarding what you can and cannot do to avoid a HIPAA violation:[](https://google.com/goto?url=CAESXAHuR6pNpf-DHv5A6YuOvyjXF_vgsNz1Wn6gVhIg2dfvuVteWtRQ_xKR6-h3C5EAWn_EMiLnRJeTpJjMW0ZJN6M_dDi8UbJU6kO_4_ej7SL7QHFTh8SVr20UcOAl) [[1]](https://google.com/goto?url=CAESXAHuR6pNjfW2eYB4UBdn4wYLEDK_X_gfCDTMBtTYLFA3_lcpkiItyuh1OQPpIdFE65INdn5cDZCFhl7DBEAzbGSkMnW5Om2cNCvAJ_zerbJSpDwwkJZIiCjSKYWK)[[2]](https://google.com/goto?url=CAESfQHuR6pNRlk_v1Bnklskq_sGYR6v5y4VFB4OEWCur4N0lIBcTGGxoKRLDURa7Rf5dLaCeYUkpsTiFcH8w6kwGOUiZM2ULwZKDK8RclceszOB1p4UdDpX3l6JwsAEdBPdcg1qTn9K9kBCbUyrpcS_kcIsZJr4zefUPceTTFNF) - **Exclude AI Features:** Airtable AI is excluded from the BAA coverage and cannot process ePHI. - **Support Tickets:** You cannot send PHI directly to Airtable's general Support Team. - **Integrations & Notifications:** Not all connected third-party tools (like external emails or messaging apps connected via Zapier or Make) are covered by the BAA. You must ensure any integrated services also meet HIPAA regulations. - **No Patient Portals:** Airtable cannot be used directly as a public-facing patient portal.[](https://google.com/goto?url=CAESXAHuR6pNpf-DHv5A6YuOvyjXF_vgsNz1Wn6gVhIg2dfvuVteWtRQ_xKR6-h3C5EAWn_EMiLnRJeTpJjMW0ZJN6M_dDi8UbJU6kO_4_ej7SL7QHFTh8SVr20UcOAl) [[1]](https://google.com/goto?url=CAESkgEB7keqTXKY7Q9YpwSN2x86s-3-TSSga6ixhSsUhMxUv-0xDdSLbkCZQVCDcP4kWj-HwdCySO6xAs872BgB6CnklO4rftcfJDmmr66P_vR7m-qw67K7TYSvWOpqZ1GBZxyQPoCehqDmjCR4ozI6tLOnfPuSgkKtBB1GiOgqlF7gepD9BfpZYjMVhOFfMSi5iCPQXw==)[[2]](https://google.com/goto?url=CAESWgHuR6pNZ_mQjHuaDJxKbXGSF5xksOQxr60gPqzRCVIT14iG94APAK7WaRy1ynYA8PKACoenj2ge6mOfiEsYmCN3bCfJHh7dg0J0UQqd6aLsG6ye2FWhbgJrrA==) If your organization uses a lower-tier plan, you must avoid storing ePHI in your Airtable bases completely.[](https://google.com/goto?url=CAESXAHuR6pNpf-DHv5A6YuOvyjXF_vgsNz1Wn6gVhIg2dfvuVteWtRQ_xKR6-h3C5EAWn_EMiLnRJeTpJjMW0ZJN6M_dDi8UbJU6kO_4_ej7SL7QHFTh8SVr20UcOAl) If you want to move forward, tell me: - What **specific plan** is your organization currently on? - Are you planning to use **third-party forms or APIs** to send data into Airtable? I can help you outline the exact steps needed to configure your workspace securely. Yes, Airtable is HIPAA compliant, but strictly under specific conditions and plan tiers. You can use Airtable for Electronic Protected Health Information (ePHI) if your organization is on their Enterprise Scale plan and you have formally executed their Health Information Datasheet. Airtable is now HIPAA compliant for its Enterprise Scale customers. Airtable's platform is designed to help healthcare providers a... To begin the Health Information Exhibit execution process or request additional information, please contact a member of your accou... If you haven't already done so, enable SSO login processes for your organization's Airtable instance. Your organization's use of A... Because handling patient data requires shared responsibility between the software vendor and your organization, you must adhere to several strict requirements to maintain compliance. Because handling patient data requires shared responsibility between the software vendor and your organization, you must adhere to several strict requirements to maintain compliance.[](https://google.com/goto?url=CAESgAEB7keqTW8NiKcUUZMdJG5dpirqpjlaQfJoHbFCSdKBve5nc4PvHmvaQMNcddxdodd_JUpXnRZixdoUkRbqXhdU8YtUnyQP8ggedypzg9CzpTfn-Avz-z5YcgwHwBoXKUQR35wsmCm_qdeZuyxnF-DZW7SfqSRIiEUcvhwqOpAEsA==) [[1]](https://google.com/goto?url=CAESgAEB7keqTW8NiKcUUZMdJG5dpirqpjlaQfJoHbFCSdKBve5nc4PvHmvaQMNcddxdodd_JUpXnRZixdoUkRbqXhdU8YtUnyQP8ggedypzg9CzpTfn-Avz-z5YcgwHwBoXKUQR35wsmCm_qdeZuyxnF-DZW7SfqSRIiEUcvhwqOpAEsA==) HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... Enterprise Scale Plan: You must be on Airtable's highest tier; HIPAA features and the BAA are not available on the Free, Team, or Business plans. Business Associate Agreement (BAA): You must execute a formal Business Associate Addendum. User Policies: Your organization must enforce strict access controls, such as enabling Single Sign-On (SSO), managing Audit Logs, and strictly applying the minimum-necessary data rule. - **Enterprise Scale Plan:** You must be on Airtable's highest tier; HIPAA features and the BAA are not available on the Free, Team, or Business plans.[](https://google.com/goto?url=CAESZAHuR6pNPi76_TQA9S3NTYe3SYPSQxKzDBN4QMrOAVYPvj26t1xhHDPvRPaIUPwa1u05_HCMOZn7qnG6cDXW9zHDAnhZ-J6WHGwgGtkll-BFO3HbZI7XLPEbUYfOS5xBrnDKMwY=) [[1]](https://google.com/goto?url=CAESYQHuR6pNVJuW463D-dw3r98E8awW7ITRGwZxgE4mcobvQCf2hns4fEdj7z_x6DC0Toc3WHErnJbuf0aHFBjh-VkehjBx3EBib225Tc27oKI6V5IhJTaei4wqX6c6J5dh7U4=)[[2]](https://google.com/goto?url=CAESXAHuR6pNpf-DHv5A6YuOvyjXF_vgsNz1Wn6gVhIg2dfvuVteWtRQ_xKR6-h3C5EAWn_EMiLnRJeTpJjMW0ZJN6M_dDi8UbJU6kO_4_ej7SL7QHFTh8SVr20UcOAl) - **Business Associate Agreement (BAA):** You must execute a formal Business Associate Addendum.[](https://google.com/goto?url=CAESWQHuR6pNAu908ab_xBMIpERD74LWnLnxHp_U4H-aGb1HOgf7N9O1zBsE4Fhod3Z_oXwdRpHVsyYGkOPkYsVWL74bbDlzMPq4qRB7oHtKh8koTfHs7vqy5tw3) [[1]](https://google.com/goto?url=CAESVwHuR6pNxzwY-dlM5UkH7byoVKG-7mj_-iShtox0WogpPBuPaoPdvwGwXCv6z1HNiGg_grYrdhryFyEx6V_JyicgyKvm7SP_w0IssmXoj2GO04xxJB5Bgg==) - **User Policies:** Your organization must enforce strict access controls, such as enabling Single Sign-On (SSO), managing [Audit Logs](https://google.com/goto?url=CAESUgHuR6pNZVydmOExGd9Kh71_yx6jIb15_fls8PWgexfFHyKlnvhddWlZLdWkRUZUX8jT8kmoXwoeNMdqP0cysfrK8lKhFClvj98Noa8nGZIXRmM=) , and strictly applying the minimum-necessary data rule.[](https://google.com/goto?url=CAESZAHuR6pNPi76_TQA9S3NTYe3SYPSQxKzDBN4QMrOAVYPvj26t1xhHDPvRPaIUPwa1u05_HCMOZn7qnG6cDXW9zHDAnhZ-J6WHGwgGtkll-BFO3HbZI7XLPEbUYfOS5xBrnDKMwY=) [[1]](https://google.com/goto?url=CAESWgHuR6pNqKuYoYhWd3LWtzB81qGk2C1aX0bIf4HkcSTJDigZl1rBUTgHuyBYyF0v4kj5xHkhhQRjMVuId6MnLRNOKSfikMqdIR80gxV8ehAso0MTafHeeYFxew==)[[2]](https://google.com/goto?url=CAESjgEB7keqTVms-_AwHFwnEbTLeYe9GVNK1Sb65BgPAiCZGOd1EsoRjSi1xtlleBbLMEAr6k6oR50Wlt7AvH29zyulZeDhVtbLc0at8zJcdaoMmUBg2Osuebw7-K9II0Z4zd0esEoFP_7gMUnsM8nmSkZUqJ8co9igatHJLJT8LyzYk6oJoHxMIDkCG9IshE_e)[[3]](https://google.com/goto?url=CAESXQHuR6pNIRonloGIJicW-FRKXVRJ4NkiSG6bEvFg-unHAUFBHyDSzdftGdLb5VZiMveEocbxwqe0S7ndKv6x3G31r9_DzeT4m6tpGOCjDP7BKLdAqBNL6keQ1xQDIw==) Airtable is now HIPAA-compliant and ready to support healthcare organizations 🩺 HIPAA compliance has been a long-requested featur... Airtable's terms prohibit storing ePHI on the Free, Team, and Business plans, so anyone below Enterprise Scale should keep treatin... What does the Airtable BAA cover? The Airtable BAA is part of the Health Information Exhibit, which supports HIPAA compliance for ... Sign a Business Associate Agreement (BAA): You must enter into a formal contract with Airtable to ensure that any protected health... HIPAA Compliance Requirements for ePHI * Risk analysis and risk management tailored to Airtable data flows and integrations. * Rol... Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP... Once your BAA is in place, you can securely utilize Airtable for: Once your BAA is in place, you can securely utilize Airtable for:[[1]](https://google.com/goto?url=CAESgAEB7keqTW8NiKcUUZMdJG5dpirqpjlaQfJoHbFCSdKBve5nc4PvHmvaQMNcddxdodd_JUpXnRZixdoUkRbqXhdU8YtUnyQP8ggedypzg9CzpTfn-Avz-z5YcgwHwBoXKUQR35wsmCm_qdeZuyxnF-DZW7SfqSRIiEUcvhwqOpAEsA==)[[2]](https://google.com/goto?url=CAESXgHuR6pNTsn7vy_NslpHLCb8SC_6p3gmH1KkXfh4WWI8V8KzK8jd-vvdHueRnUT3f9_Jfd1rEvj7G-YZNazLT0M_tI_m-PqUrFwFlpki-PTkNLi9gyxqxe4EY77Bp5E=) How does Airtable protect electronic PHI? When HIPAA-eligible features are enabled for an account covered by a BAA, protection gen... Airtable can be HIPAA compliant, but this is only available under its Enterprise Scale plan. For Airtable to be HIPAA compliant, u... Managing patient records and clinical trials Tracking care coordination and internal healthcare team workflows Securely managing sensitive health information inside structured records - Managing patient records and clinical trials - Tracking care coordination and internal healthcare team workflows - Securely managing sensitive health information inside structured records[](https://google.com/goto?url=CAESdgHuR6pNNr8iKUnLIULXWR6ypgILVYrx7fvwpbaewHtTm24zr4DpafQm0LYk63ym-HuCE0Tx8KKG8Idd3dyAWOrXEkopEUSqsyevrCwHzDQawFLsN_zfd1XeK8thHrNUfGhx5p08QdkSoawUFm1ljRCSwiKSPk0=) [[1]](https://google.com/goto?url=CAESXAHuR6pNpf-DHv5A6YuOvyjXF_vgsNz1Wn6gVhIg2dfvuVteWtRQ_xKR6-h3C5EAWn_EMiLnRJeTpJjMW0ZJN6M_dDi8UbJU6kO_4_ej7SL7QHFTh8SVr20UcOAl)[[2]](https://google.com/goto?url=CAESawHuR6pNyG4P80VHCkX2F11K2VqULJJXEXzRi04tSZnXp4YRD7z-X5Z2X4s7J7gnv3JC6vxB7Bjna1CNJFZuDl1t2-ZcAV9nsdoFdPEV_qqPSxV1EIjfnJONa-no_Y9ui3Ym4ZbE8OcVk6f1)[[3]](https://google.com/goto?url=CAESZQHuR6pNUnDod9-BCQCWf5drGEeuhfBYtHulzjXZ1I4HwOb1MmukQyRmxDqjdhlBMaASCQOPAo9JdEA2PP3TC2wCH17BTwvi0SlGlkASStMEDQ5-8LI9XrnYySVA5z6d-MUx_S00)[[4]](https://google.com/goto?url=CAESnAEB7keqTZgl48N1PBd579a6bJxZvtGkuA85NufgyFmLtEyYCNUusw4Kj7fWr3YjtydKUR4xDeuM9TmdL7v-AZurRYoX6v5u0GmJ4FJzgw9YsmWC4P46GLNATBOAjfpW2HNcepjRAjGwNukcVTvyh4kVUPbrxEBUDzpFoebBhw-GirIV39JYsjh_u1KNMU6yfKnrzy5YiHwFe-B4Gik=) Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... 9. Hypercare — Best For Care Coordination And Clinical Escalation Workflows BAA: Available. Audit log export: Detailed, with escal... Where Airtable Falls Short for HIPAA Compliance. While Airtable is a versatile platform for basic workflow and productivity needs, View organization page for Airtable. Airtable. 191,948 followers. 2y. Report this post; Close menu. Exciting news for healthcare p... Even with the BAA in place, there are strict rules regarding what you can and cannot do to avoid a HIPAA violation: Even with the BAA in place, there are strict rules regarding what you can and cannot do to avoid a HIPAA violation:[](https://google.com/goto?url=CAESXAHuR6pNpf-DHv5A6YuOvyjXF_vgsNz1Wn6gVhIg2dfvuVteWtRQ_xKR6-h3C5EAWn_EMiLnRJeTpJjMW0ZJN6M_dDi8UbJU6kO_4_ej7SL7QHFTh8SVr20UcOAl) [[1]](https://google.com/goto?url=CAESXAHuR6pNjfW2eYB4UBdn4wYLEDK_X_gfCDTMBtTYLFA3_lcpkiItyuh1OQPpIdFE65INdn5cDZCFhl7DBEAzbGSkMnW5Om2cNCvAJ_zerbJSpDwwkJZIiCjSKYWK)[[2]](https://google.com/goto?url=CAESfQHuR6pNRlk_v1Bnklskq_sGYR6v5y4VFB4OEWCur4N0lIBcTGGxoKRLDURa7Rf5dLaCeYUkpsTiFcH8w6kwGOUiZM2ULwZKDK8RclceszOB1p4UdDpX3l6JwsAEdBPdcg1qTn9K9kBCbUyrpcS_kcIsZJr4zefUPceTTFNF) Adhering to HIPAA rules also entails following all mandated safeguards. You cannot achieve compliance just by using HIPAA-complian... HIPAA BAA Requirements and Limits HIPAA requires BAAs to impose strict rules on how PHI is used and protected. These agreements ou... Exclude AI Features: Airtable AI is excluded from the BAA coverage and cannot process ePHI. Support Tickets: You cannot send PHI directly to Airtable's general Support Team. Integrations & Notifications: Not all connected third-party tools (like external emails or messaging apps connected via Zapier or Make) are covered by the BAA. You must ensure any integrated services also meet HIPAA regulations. No Patient Portals: Airtable cannot be used directly as a public-facing patient portal. - **Exclude AI Features:** Airtable AI is excluded from the BAA coverage and cannot process ePHI. - **Support Tickets:** You cannot send PHI directly to Airtable's general Support Team. - **Integrations & Notifications:** Not all connected third-party tools (like external emails or messaging apps connected via Zapier or Make) are covered by the BAA. You must ensure any integrated services also meet HIPAA regulations. - **No Patient Portals:** Airtable cannot be used directly as a public-facing patient portal.[](https://google.com/goto?url=CAESXAHuR6pNpf-DHv5A6YuOvyjXF_vgsNz1Wn6gVhIg2dfvuVteWtRQ_xKR6-h3C5EAWn_EMiLnRJeTpJjMW0ZJN6M_dDi8UbJU6kO_4_ej7SL7QHFTh8SVr20UcOAl) [[1]](https://google.com/goto?url=CAESkgEB7keqTXKY7Q9YpwSN2x86s-3-TSSga6ixhSsUhMxUv-0xDdSLbkCZQVCDcP4kWj-HwdCySO6xAs872BgB6CnklO4rftcfJDmmr66P_vR7m-qw67K7TYSvWOpqZ1GBZxyQPoCehqDmjCR4ozI6tLOnfPuSgkKtBB1GiOgqlF7gepD9BfpZYjMVhOFfMSi5iCPQXw==)[[2]](https://google.com/goto?url=CAESWgHuR6pNZ_mQjHuaDJxKbXGSF5xksOQxr60gPqzRCVIT14iG94APAK7WaRy1ynYA8PKACoenj2ge6mOfiEsYmCN3bCfJHh7dg0J0UQqd6aLsG6ye2FWhbgJrrA==) Business Associate Agreement Requirements * Permitted uses and disclosures: How Airtable (and its subprocessors) handle PHI, inclu... Off-load the PHI, Keep Only “Breadcrumbs” in Airtable * Shape-shift PHI into opaque IDs. Store patient details in a hardened backe... If your organization uses a lower-tier plan, you must avoid storing ePHI in your Airtable bases completely. If your organization uses a lower-tier plan, you must avoid storing ePHI in your Airtable bases completely.[](https://google.com/goto?url=CAESXAHuR6pNpf-DHv5A6YuOvyjXF_vgsNz1Wn6gVhIg2dfvuVteWtRQ_xKR6-h3C5EAWn_EMiLnRJeTpJjMW0ZJN6M_dDi8UbJU6kO_4_ej7SL7QHFTh8SVr20UcOAl) If you want to move forward, tell me: What specific plan is your organization currently on? Are you planning to use third-party forms or APIs to send data into Airtable? - What **specific plan** is your organization currently on? - Are you planning to use **third-party forms or APIs** to send data into Airtable? I can help you outline the exact steps needed to configure your workspace securely. Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Yes, Airtable is HIPAA compliant **only** for customers on the **Enterprise Scale plan** who sign a formal **Business Associate Agreement (BAA)** via Airtable's Health Information Exhibit . Storing protected health information (PHI) on Free, Team, or Business plans is strictly prohibited by Airtable terms.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://www.airtable.com/company/health-info-datasheet)[[3]](https://www.paubox.com/blog/airtable-hipaa-compliant)[[4]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Requirements for HIPAA Compliance on Airtable - **Enterprise Scale Plan:** You must upgrade to Airtable's highest organizational tier. - **Executed BAA:** You must sign Airtable’s official Health Information Exhibit containing the Business Associate Addendum. - **Proper Configuration:** Admins must enforce security controls such as Enterprise Key Management (EKM), SAML SSO, and audit logs.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[2]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) Restrictions and Limitations - **Disable AI Features:** Airtable AI features must be turned off in any workspaces handling electronic protected health information (ePHI). - **Third-Party Integrations:** All connected extensions, webhooks, or external integrations must also be fully HIPAA compliant. - **Support Boundaries:** ePHI cannot be shared with Airtable support during troubleshooting interactions.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.blaze.tech/post/is-airtable-hipaa-compliant) If you'd like, let me know: - What **tier** your organization is currently using - What **type of patient data** you plan to track I can help you review your setup requirements or explore alternative tools. Yes, Airtable is HIPAA compliant only for customers on the Enterprise Scale plan who sign a formal Business Associate Agreement (BAA) via Airtable's Health Information Exhibit. Storing protected health information (PHI) on Free, Team, or Business plans is strictly prohibited by Airtable terms. HIPAA, or the Health Insurance Portability and Accountability Act of 1996, is a regulation issued by the U.S. Department of Health... To begin the Health Information Exhibit execution process or request additional information, please contact a member of your accou... What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Enterprise Scale Plan: You must upgrade to Airtable's highest organizational tier. Executed BAA: You must sign Airtable’s official Health Information Exhibit containing the Business Associate Addendum. Proper Configuration: Admins must enforce security controls such as Enterprise Key Management (EKM), SAML SSO, and audit logs. - **Enterprise Scale Plan:** You must upgrade to Airtable's highest organizational tier. - **Executed BAA:** You must sign Airtable’s official Health Information Exhibit containing the Business Associate Addendum. - **Proper Configuration:** Admins must enforce security controls such as Enterprise Key Management (EKM), SAML SSO, and audit logs.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[2]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP... Is Airtable Technically HIPAA-Compliant? * Enterprise-only paywall. HIPAA support didn't exist until April 2024 and is still gated... Disable AI Features: Airtable AI features must be turned off in any workspaces handling electronic protected health information (ePHI). Third-Party Integrations: All connected extensions, webhooks, or external integrations must also be fully HIPAA compliant. Support Boundaries: ePHI cannot be shared with Airtable support during troubleshooting interactions. - **Disable AI Features:** Airtable AI features must be turned off in any workspaces handling electronic protected health information (ePHI). - **Third-Party Integrations:** All connected extensions, webhooks, or external integrations must also be fully HIPAA compliant. - **Support Boundaries:** ePHI cannot be shared with Airtable support during troubleshooting interactions.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.blaze.tech/post/is-airtable-hipaa-compliant) Sign a Business Associate Agreement (BAA): You must enter into a formal contract with Airtable to ensure that any protected health... Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Yes—but only under specific conditions. Airtable supports HIPAA-compliant use **only on its Enterprise Scale plan**, and only if your organization signs Airtable's **Business Associate Agreement (BAA)** (now included in its Health Information Exhibit). Airtable states that customers storing electronic protected health information (ePHI) **must** be on Enterprise Scale and have that agreement in place. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com) If you're considering Airtable for patient data: - ✅ **Allowed:** Enterprise Scale plan + signed BAA/Health Information Exhibit + appropriate security configuration and administrative controls. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) - ❌ **Not allowed:** Free, Team, or Business plans for storing ePHI. Airtable explicitly says customers on those plans should not store ePHI. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) Airtable also notes a few important limitations and responsibilities: - HIPAA compliance is a **shared responsibility**. Airtable provides technical safeguards, but your organization must configure permissions, access controls, policies, and workflows appropriately. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com) - Airtable specifically advises **not to use it as a patient portal**. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com) - Features such as audit logs, SSO, enterprise key management, and DLP integrations are available to support compliant deployments on Enterprise Scale. [www.airtable.com](https://www.airtable.com/company/health-info-datasheet?utm_source=chatgpt.com)[www.airtable.com](https://www.airtable.com/company/hipaa-airtable?utm_source=chatgpt.com) So if your use case involves patient records, appointment notes, diagnoses, lab results, or other PHI: - **Enterprise Scale + BAA:** Potentially appropriate, assuming your implementation also meets HIPAA requirements. - **Any lower-tier Airtable plan:** Not appropriate for storing PHI. If you tell me what kind of patient data you're planning to store (e.g., scheduling, intake forms, CRM, clinical notes, billing, or care management), I can help determine whether Airtable is a good fit or suggest alternatives that may be better suited.

Yes, Airtable can be HIPAA compliant, but **only for Enterprise Scale customers** who enter into a specific agreement with them . It is not HIPAA compliant by default on lower-tier plans (Free, Team, or Business).[](https://community.airtable.com/announcements-6/airtable-is-now-hipaa-compliant-1542) [[1]](https://community.airtable.com/announcements-6/airtable-is-now-hipaa-compliant-1542)[[2]](https://www.airtable.com/company/health-info-datasheet)[[3]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) Here are the key details regarding HIPAA compliance in Airtable as of 2026: - **Requirement: Enterprise Scale Plan & BAA:** To use Airtable for Protected Health Information (PHI), you must be on the **Enterprise Scale plan** and execute a **Health Information Exhibit** , which includes a Business Associate Addendum (BAA).[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.complysaas.com/compliance/airtable) - **Restricted Usage:** Even with a BAA, PHI must only be stored within specifically configured Airtable bases. It should not be used in non-compliant features like certain automations, AI features, or third-party integrations that are not covered.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Security Controls:** Airtable provides specialized security features for HIPAA compliance, such as Enterprise Key Management (EKM), audit logs, and Enterprise Single Sign-On (SSO).[](https://www.paubox.com/blog/airtable-hipaa-compliant) [[1]](https://www.paubox.com/blog/airtable-hipaa-compliant)[[2]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) - **Shared Responsibility:** You are responsible for ensuring your team configures Airtable correctly, enforces [least-privilege access](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) , and properly manages integrations.[](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) [[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) If you are not on an Enterprise Scale plan, you cannot legally use Airtable to store patient data, as stated in their Health Information Datasheet.[](https://www.airtable.com/company/health-info-datasheet) Are you currently on an **Enterprise Scale plan** , or are you evaluating plans to find the best fit for managing **patient data**? Yes, Airtable can be HIPAA compliant, but only for Enterprise Scale customers who enter into a specific agreement with them. It is not HIPAA compliant by default on lower-tier plans (Free, Team, or Business). Airtable is now HIPAA compliant for its Enterprise Scale customers. Airtable's platform is designed to help healthcare providers a... To begin the Health Information Exhibit execution process or request additional information, please contact a member of your accou... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Here are the key details regarding HIPAA compliance in Airtable as of 2026: Requirement: Enterprise Scale Plan & BAA: To use Airtable for Protected Health Information (PHI), you must be on the Enterprise Scale plan and execute a Health Information Exhibit, which includes a Business Associate Addendum (BAA). Restricted Usage: Even with a BAA, PHI must only be stored within specifically configured Airtable bases. It should not be used in non-compliant features like certain automations, AI features, or third-party integrations that are not covered. Security Controls: Airtable provides specialized security features for HIPAA compliance, such as Enterprise Key Management (EKM), audit logs, and Enterprise Single Sign-On (SSO). Shared Responsibility: You are responsible for ensuring your team configures Airtable correctly, enforces least-privilege access, and properly manages integrations. - **Requirement: Enterprise Scale Plan & BAA:** To use Airtable for Protected Health Information (PHI), you must be on the **Enterprise Scale plan** and execute a **Health Information Exhibit** , which includes a Business Associate Addendum (BAA).[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.complysaas.com/compliance/airtable) - **Restricted Usage:** Even with a BAA, PHI must only be stored within specifically configured Airtable bases. It should not be used in non-compliant features like certain automations, AI features, or third-party integrations that are not covered.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Security Controls:** Airtable provides specialized security features for HIPAA compliance, such as Enterprise Key Management (EKM), audit logs, and Enterprise Single Sign-On (SSO).[](https://www.paubox.com/blog/airtable-hipaa-compliant) [[1]](https://www.paubox.com/blog/airtable-hipaa-compliant)[[2]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) - **Shared Responsibility:** You are responsible for ensuring your team configures Airtable correctly, enforces [least-privilege access](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) , and properly manages integrations.[](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) [[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) HIPAA, BAA, and SOC 2 summary ... Airtable states that HIPAA support is available on Enterprise Scale and that customers intending... What does the Airtable BAA cover? The Airtable BAA is part of the Health Information Exhibit, which supports HIPAA compliance for ... Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP... HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... If you are not on an Enterprise Scale plan, you cannot legally use Airtable to store patient data, as stated in their Health Information Datasheet. If you are not on an Enterprise Scale plan, you cannot legally use Airtable to store patient data, as stated in their Health Information Datasheet.[](https://www.airtable.com/company/health-info-datasheet) Are you currently on an Enterprise Scale plan, or are you evaluating plans to find the best fit for managing patient data ? Are you currently on an **Enterprise Scale plan** , or are you evaluating plans to find the best fit for managing **patient data**? Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...