complysaas.com/compliance/airtable

Yes, Airtable can be HIPAA compliant, but only for **Enterprise Scale** plan subscribers who sign a **Business Associate Agreement (BAA)** via Airtable 's Health Information Exhibit . It is not compliant on lower tiers (Free, Team, or Business), and storing protected health information (PHI) there violates their terms.[](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Requirements for Compliance - **Enterprise Scale Plan:** You must upgrade to Airtable 's highest organizational tier. - **Signed BAA:** You must formally execute the [Airtable Health Information Exhibit](https://www.airtable.com/company/hipaa-airtable) containing the BAA. - **Security Controls:** You must properly configure enterprise controls like SAML SSO, audit logs, and access permissions.[](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[3]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[4]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) Usage Restrictions - **Data Location:** ePHI must only be stored within records inside bases or interfaces. - **Exclusions:** Do not use Airtable AI or include PHI in customer support tickets. - **Integrations:** Third-party add-ons and automated outgoing emails must also maintain independent HIPAA compliance.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) If you'd like, let me know: - Your current **Airtable plan level** - What **type of patient data** you plan to track I can help you review your workflow constraints or alternative options. Yes, Airtable can be HIPAA compliant, but only for Enterprise Scale plan subscribers who sign a Business Associate Agreement (BAA) via Airtable 's Health Information Exhibit. It is not compliant on lower tiers (Free, Team, or Business), and storing protected health information (PHI) there violates their terms. A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Enterprise Scale Plan: You must upgrade to Airtable 's highest organizational tier. Signed BAA: You must formally execute the Airtable Health Information Exhibit containing the BAA. Security Controls: You must properly configure enterprise controls like SAML SSO, audit logs, and access permissions. - **Enterprise Scale Plan:** You must upgrade to Airtable 's highest organizational tier. - **Signed BAA:** You must formally execute the [Airtable Health Information Exhibit](https://www.airtable.com/company/hipaa-airtable) containing the BAA. - **Security Controls:** You must properly configure enterprise controls like SAML SSO, audit logs, and access permissions.[](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[3]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[4]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... Is Airtable Technically HIPAA-Compliant? * Enterprise-only paywall. HIPAA support didn't exist until April 2024 and is still gated... Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP... Data Location: ePHI must only be stored within records inside bases or interfaces. Exclusions: Do not use Airtable AI or include PHI in customer support tickets. Integrations: Third-party add-ons and automated outgoing emails must also maintain independent HIPAA compliance. - **Data Location:** ePHI must only be stored within records inside bases or interfaces. - **Exclusions:** Do not use Airtable AI or include PHI in customer support tickets. - **Integrations:** Third-party add-ons and automated outgoing emails must also maintain independent HIPAA compliance.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... In healthcare, Airtable has many potential uses. It could be used to keep track of appointments and consultant availability, strea... If you'd like, let me know:Your current Airtable plan level What type of patient data you plan to track I can help you review your workflow constraints or alternative options. If you'd like, let me know: - Your current **Airtable plan level** - What **type of patient data** you plan to track I can help you review your workflow constraints or alternative options. Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

**Yes, Airtable can be HIPAA compliant** , but only under specific, strict conditions . It is not compliant out-of-the-box on standard self-serve plans.[](https://www.accountablehq.com/post/airtable-hipaa-compliance-baa-security-features-and-what-to-know-in-2026) [[1]](https://www.accountablehq.com/post/airtable-hipaa-compliance-baa-security-features-and-what-to-know-in-2026)[[2]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) Key Requirements for HIPAA Compliance on Airtable 1. **Enterprise Scale Plan Required** : Airtable only supports HIPAA compliance for customers on its **Enterprise Scale plan** . If you are on the Free, Team, or Business plans, storing electronic Protected Health Information (ePHI) violates Airtable's terms.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) 2. **Execute a Business Associate Agreement (BAA)** : You must formally execute Airtable's **Health Information Exhibit** , which includes their BAA. Without a signed BAA in place, the platform is not considered compliant for medical or patient data.[](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) [[1]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[2]](https://www.complysaas.com/compliance/airtable)[[3]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) 3. **Strict Boundary and Configuration Rules** : Even with a BAA and the Enterprise plan, Airtable enforces rigid operational boundaries outlined in their Airtable Health Information Datasheet: - **Where PHI Lives** : ePHI must only be stored inside record cells within designated Airtable bases or interfaces. - **Airtable AI** : Do not store ePHI in workspaces where Airtable AI is enabled unless you have specifically agreed to the Supplemental AI Terms for Health Information. - **No Patient Portals** : Airtable explicitly states the platform should **not** be used as a patient portal. - **Automations & Emails** : Be cautious with automations that send outgoing emails, as transmitting ePHI improperly outside secure confines breaks compliance. - **Customer Support** : You must never include ePHI or medical information in support tickets or screenshots sent to Airtable support. - **Integrations** : Any third-party tool connected to Airtable (like Zapier, Slack, or custom APIs) must also be HIPAA-compliant and covered by its own BAA.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.accountablehq.com/post/common-low-level-hipaa-security-rule-violations-examples-risks-and-fixes) If you'd like to proceed, tell me: - What **tier of Airtable** your organization currently uses - Whether you plan to **integrate Airtable** with other external apps or tools I can help you evaluate your **workflow architecture** for patient data. Yes, Airtable can be HIPAA compliant, but only under specific, strict conditions. It is not compliant out-of-the-box on standard self-serve plans. Is HIPAA compliance available on all Airtable plans? No. HIPAA support requires an executed BAA and is generally available to ente... HIPAA: The Part Everyone Gets Wrong Every couple of weeks a client asks us, "Is Airtable HIPAA compliant?" The honest answer is "i... If you'd like to proceed, tell me: What tier of Airtable your organization currently uses Whether you plan to integrate Airtable with other external apps or tools - What **tier of Airtable** your organization currently uses - Whether you plan to **integrate Airtable** with other external apps or tools I can help you evaluate your workflow architecture for patient data. I can help you evaluate your **workflow architecture** for patient data. Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP... HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... HIPAA, BAA, and SOC 2 summary ... Airtable states that HIPAA support is available on Enterprise Scale and that customers intending...

Yes, Airtable is HIPAA compliant, but strictly **only for Enterprise Scale plan customers** who have signed a specialized Health Information Exhibit containing a Business Associate Agreement (BAA). It is not compliant or permitted for use with Protected Health Information (PHI) on Free, Team, or Business plans.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/)[[3]](https://www.blaze.tech/post/is-airtable-hipaa-compliant)[[4]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[5]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-plan-requirements-and-using-airtable-for-phi)Requirements for HIPAA Compliance - **Enterprise Scale Plan:** You must subscribe to Airtable’s highest enterprise tier. - **Executed BAA:** You must sign Airtable’s official Health Information Exhibit (which includes the BAA) via your account team. - **Proper Configuration:** Your organization must enforce internal controls like single sign-on (SSO), granular permissions, and audit logs.[](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[3]](https://www.reddit.com/r/Airtable/comments/1jw3ion/exploring_airtable_for_med_school/) Important Restrictions & Limitations Even under an Enterprise BAA, Airtable enforces strict boundary rules regarding where and how patient data can touch the platform: - **Storage Location:** Electronic Protected Health Information (ePHI) must only be stored within standard **Records** inside Airtable bases or interfaces.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **No Airtable AI:** You cannot store or process ePHI in workspaces where Airtable AI is enabled unless specific supplemental health terms apply and are configured safely.[](https://www.airtable.com/company/health-info-datasheet) - **No Automated Emails with PHI:** You cannot use automated Airtable functions or scripts to send emails containing PHI.[](https://www.airtable.com/company/health-info-datasheet) - **No Patient Portals:** Airtable cannot be used as or behind a public-facing patient portal.[](https://www.airtable.com/company/health-info-datasheet) - **Customer Support:** You must never share screenshots or tickets containing ePHI with Airtable’s standard customer support.[](https://www.airtable.com/company/health-info-datasheet) - **Third-Party Integrations:** Any connected tool or integration (such as Slack, Google Workspace, or custom webhooks) must also independently support and be configured for HIPAA compliance.[](https://www.airtable.com/company/health-info-datasheet) If you'd like, let me know: - What **tier or plan** your organization currently uses - What **kind of workflow or data tracking** you plan to build I can help you evaluate if Airtable fits your technical setup or if an alternative tool is better. Yes, Airtable is HIPAA compliant, but strictly only for Enterprise Scale plan customers who have signed a specialized Health Information Exhibit containing a Business Associate Agreement (BAA). It is not compliant or permitted for use with Protected Health Information (PHI) on Free, Team, or Business plans. Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... In healthcare, Airtable has many potential uses. It could be used to keep track of appointments and consultant availability, strea... If you're managing sensitive healthcare information, you might wonder if Airtable is HIPAA compliant. The answer is that Airtable ... Is Airtable Technically HIPAA-Compliant? * Enterprise-only paywall. HIPAA support didn't exist until April 2024 and is still gated... Does Airtable require a BAA for HIPAA compliance? Yes. You must have a fully executed Business Associate Agreement—often provided ... Enterprise Scale Plan: You must subscribe to Airtable’s highest enterprise tier. Executed BAA: You must sign Airtable’s official Health Information Exhibit (which includes the BAA) via your account team. Proper Configuration: Your organization must enforce internal controls like single sign-on (SSO), granular permissions, and audit logs. - **Enterprise Scale Plan:** You must subscribe to Airtable’s highest enterprise tier. - **Executed BAA:** You must sign Airtable’s official Health Information Exhibit (which includes the BAA) via your account team. - **Proper Configuration:** Your organization must enforce internal controls like single sign-on (SSO), granular permissions, and audit logs.[](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/articles/5742348809-understanding-hipaa-at-airtable)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[3]](https://www.reddit.com/r/Airtable/comments/1jw3ion/exploring_airtable_for_med_school/) A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... You need the top of the line Enterprise plan to get the HIPAA-compliant version of Airtable. Even under an Enterprise BAA, Airtable enforces strict boundary rules regarding where and how patient data can touch the platform: Storage Location: Electronic Protected Health Information (ePHI) must only be stored within standard Records inside Airtable bases or interfaces. No Airtable AI: You cannot store or process ePHI in workspaces where Airtable AI is enabled unless specific supplemental health terms apply and are configured safely. No Automated Emails with PHI: You cannot use automated Airtable functions or scripts to send emails containing PHI. No Patient Portals: Airtable cannot be used as or behind a public-facing patient portal. Customer Support: You must never share screenshots or tickets containing ePHI with Airtable’s standard customer support. Third-Party Integrations: Any connected tool or integration (such as Slack, Google Workspace, or custom webhooks) must also independently support and be configured for HIPAA compliance. - **Storage Location:** Electronic Protected Health Information (ePHI) must only be stored within standard **Records** inside Airtable bases or interfaces.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **No Airtable AI:** You cannot store or process ePHI in workspaces where Airtable AI is enabled unless specific supplemental health terms apply and are configured safely.[](https://www.airtable.com/company/health-info-datasheet) - **No Automated Emails with PHI:** You cannot use automated Airtable functions or scripts to send emails containing PHI.[](https://www.airtable.com/company/health-info-datasheet) - **No Patient Portals:** Airtable cannot be used as or behind a public-facing patient portal.[](https://www.airtable.com/company/health-info-datasheet) - **Customer Support:** You must never share screenshots or tickets containing ePHI with Airtable’s standard customer support.[](https://www.airtable.com/company/health-info-datasheet) - **Third-Party Integrations:** Any connected tool or integration (such as Slack, Google Workspace, or custom webhooks) must also independently support and be configured for HIPAA compliance.[](https://www.airtable.com/company/health-info-datasheet) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... If you'd like, let me know:What tier or plan your organization currently uses What kind of workflow or data tracking you plan to build I can help you evaluate if Airtable fits your technical setup or if an alternative tool is better. If you'd like, let me know: - What **tier or plan** your organization currently uses - What **kind of workflow or data tracking** you plan to build I can help you evaluate if Airtable fits your technical setup or if an alternative tool is better. Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Yes, [Airtable](https://www.airtable.com/company/hipaa-airtable) is HIPAA compliant , but strictly for **Enterprise Scale** plan subscribers who have signed a Business Associate Agreement (BAA) via a Health Information Exhibit. It is not compliant on lower-tier plans (Free, Team, or Business).[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Requirements for Compliance - **Enterprise Scale Plan:** You must be on Airtable's highest custom-priced enterprise tier. - **Signed BAA:** You must execute Airtable’s Health Information Exhibit, which contains the official Business Associate Addendum.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) Platform Restrictions & Rules - **Where Data Lives:** Protected Health Information (PHI) must only be stored within records in Airtable bases or interfaces. - **Exclusions:** Airtable AI, customer support interactions, and standard automated emails containing PHI are excluded or restricted. - **Patient Portals:** You cannot use Airtable as a patient portal or the backend technology for one. - **Integrations:** Any third-party tools or integrations connected to your bases must also independently support HIPAA compliance.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) If you'd like, let me know: - What **tier** your organization is currently on - What kind of **healthcare workflow or data tracking** you plan to build I can help you determine the best architectural approach or look into alternative tools. Yes, Airtable is HIPAA compliant, but strictly for Enterprise Scale plan subscribers who have signed a Business Associate Agreement (BAA) via a Health Information Exhibit. It is not compliant on lower-tier plans (Free, Team, or Business). A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Enterprise Scale Plan: You must be on Airtable's highest custom-priced enterprise tier. Signed BAA: You must execute Airtable’s Health Information Exhibit, which contains the official Business Associate Addendum. - **Enterprise Scale Plan:** You must be on Airtable's highest custom-priced enterprise tier. - **Signed BAA:** You must execute Airtable’s Health Information Exhibit, which contains the official Business Associate Addendum.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant) Is Airtable Technically HIPAA-Compliant? * Enterprise-only paywall. HIPAA support didn't exist until April 2024 and is still gated... Where Data Lives: Protected Health Information (PHI) must only be stored within records in Airtable bases or interfaces. Exclusions: Airtable AI, customer support interactions, and standard automated emails containing PHI are excluded or restricted. Patient Portals: You cannot use Airtable as a patient portal or the backend technology for one. Integrations: Any third-party tools or integrations connected to your bases must also independently support HIPAA compliance. - **Where Data Lives:** Protected Health Information (PHI) must only be stored within records in Airtable bases or interfaces. - **Exclusions:** Airtable AI, customer support interactions, and standard automated emails containing PHI are excluded or restricted. - **Patient Portals:** You cannot use Airtable as a patient portal or the backend technology for one. - **Integrations:** Any third-party tools or integrations connected to your bases must also independently support HIPAA compliance.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... In healthcare, Airtable has many potential uses. It could be used to keep track of appointments and consultant availability, strea... If you'd like, let me know:What tier your organization is currently on What kind of healthcare workflow or data tracking you plan to build I can help you determine the best architectural approach or look into alternative tools. If you'd like, let me know: - What **tier** your organization is currently on - What kind of **healthcare workflow or data tracking** you plan to build I can help you determine the best architectural approach or look into alternative tools. Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Airtable is HIPAA compliant **only** for customers on the [Airtable Enterprise Scale Plan](https://support.airtable.com/docs/understanding-hipaa-at-airtable) who sign a Health Information Exhibit containing a Business Associate Agreement (BAA). Users on Free, Team, or Business plans are strictly prohibited from storing electronic Protected Health Information (ePHI).[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[3]](https://www.paubox.com/blog/airtable-hipaa-compliant)Plan and Agreement Requirements - **Enterprise Scale Plan:** Required to access Airtable's HIPAA compliance program. - **Business Associate Agreement (BAA):** Must be executed via Airtable's Health Information Exhibit. - **Lower Tiers:** Free, Team, and Business plans do not offer a BAA and cannot legally hold patient data.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) Usage Rules and Restrictions - **Storage Boundaries:** Patient health data (ePHI) must only live inside records within bases or interfaces. - **No AI Features:** Airtable AI cannot be used or enabled in workspaces handling ePHI. - **Support Limits:** You must never share or disclose ePHI with Airtable’s customer support team in tickets or screenshots. - **Automations & Emails:** You cannot use automated email features to transmit raw ePHI out of the system. - **External Integrations:** Any third-party tools or apps connected to your bases must also be HIPAA compliant and covered by their own BAAs. - **No Patient Portals:** Airtable cannot be used as a public or direct patient portal.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) If you'd like, let me know: - What **tier or plan** your organization currently uses - What **type of workflow or data** you plan to build I can help you evaluate if Airtable fits your project or suggest alternative ways to structure your data safely. Airtable is HIPAA compliant only for customers on the Airtable Enterprise Scale Plan who sign a Health Information Exhibit containing a Business Associate Agreement (BAA). Users on Free, Team, or Business plans are strictly prohibited from storing electronic Protected Health Information (ePHI). A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are... Enterprise Scale Plan: Required to access Airtable's HIPAA compliance program. Business Associate Agreement (BAA): Must be executed via Airtable's Health Information Exhibit. Lower Tiers: Free, Team, and Business plans do not offer a BAA and cannot legally hold patient data. - **Enterprise Scale Plan:** Required to access Airtable's HIPAA compliance program. - **Business Associate Agreement (BAA):** Must be executed via Airtable's Health Information Exhibit. - **Lower Tiers:** Free, Team, and Business plans do not offer a BAA and cannot legally hold patient data.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) Storage Boundaries: Patient health data (ePHI) must only live inside records within bases or interfaces. No AI Features: Airtable AI cannot be used or enabled in workspaces handling ePHI. Support Limits: You must never share or disclose ePHI with Airtable’s customer support team in tickets or screenshots. Automations & Emails: You cannot use automated email features to transmit raw ePHI out of the system. External Integrations: Any third-party tools or apps connected to your bases must also be HIPAA compliant and covered by their own BAAs. No Patient Portals: Airtable cannot be used as a public or direct patient portal. - **Storage Boundaries:** Patient health data (ePHI) must only live inside records within bases or interfaces. - **No AI Features:** Airtable AI cannot be used or enabled in workspaces handling ePHI. - **Support Limits:** You must never share or disclose ePHI with Airtable’s customer support team in tickets or screenshots. - **Automations & Emails:** You cannot use automated email features to transmit raw ePHI out of the system. - **External Integrations:** Any third-party tools or apps connected to your bases must also be HIPAA compliant and covered by their own BAAs. - **No Patient Portals:** Airtable cannot be used as a public or direct patient portal.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... In healthcare, Airtable has many potential uses. It could be used to keep track of appointments and consultant availability, strea... If you'd like, let me know:What tier or plan your organization currently uses What type of workflow or data you plan to build I can help you evaluate if Airtable fits your project or suggest alternative ways to structure your data safely. If you'd like, let me know: - What **tier or plan** your organization currently uses - What **type of workflow or data** you plan to build I can help you evaluate if Airtable fits your project or suggest alternative ways to structure your data safely. Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Airtable is HIPAA compliant **only** for users on the **Enterprise Scale plan** who sign a Business Associate Agreement (BAA) via Airtable's Health Information Exhibit . Users on Free, Team, or Business plans are **not** permitted to store protected health information (PHI) on the platform.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Requirements and Plan Limits - **Plan Tier:** Restricted exclusively to [Airtable's Enterprise Scale plan](https://support.airtable.com/docs/understanding-hipaa-at-airtable). - **Legal Agreement:** Requires executing a formal BAA/Health Information Exhibit with Airtable. - **Lower Tiers:** Prohibited from holding electronic Protected Health Information (ePHI) on lower-tier subscription plans.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.paubox.com/blog/airtable-hipaa-compliant) Usage Restrictions & Rules - **Storage Boundaries:** ePHI must be stored strictly inside standard "Records" within bases or interfaces. - **Feature Exclusions:** Do not use Airtable AI or include PHI in support tickets or customer service chats. - **Integrations & Communication:** Automated emails from automations cannot contain raw PHI, and any connected third-party tool requires its own independent BAA. - **Prohibited Uses:** The platform cannot be utilized as a patient portal.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) If you want, let me know: - Your current **Airtable plan level** - What **type of patient data** you plan to track I can help you figure out if Airtable fits your workflow or if you need an alternative setup. Airtable is HIPAA compliant only for users on the Enterprise Scale plan who sign a Business Associate Agreement (BAA) via Airtable's Health Information Exhibit. Users on Free, Team, or Business plans are not permitted to store protected health information (PHI) on the platform. A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Plan Tier: Restricted exclusively to Airtable's Enterprise Scale plan. Legal Agreement: Requires executing a formal BAA/Health Information Exhibit with Airtable. Lower Tiers: Prohibited from holding electronic Protected Health Information (ePHI) on lower-tier subscription plans. - **Plan Tier:** Restricted exclusively to [Airtable's Enterprise Scale plan](https://support.airtable.com/docs/understanding-hipaa-at-airtable). - **Legal Agreement:** Requires executing a formal BAA/Health Information Exhibit with Airtable. - **Lower Tiers:** Prohibited from holding electronic Protected Health Information (ePHI) on lower-tier subscription plans.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.paubox.com/blog/airtable-hipaa-compliant) What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are... Storage Boundaries: ePHI must be stored strictly inside standard "Records" within bases or interfaces. Feature Exclusions: Do not use Airtable AI or include PHI in support tickets or customer service chats. Integrations & Communication: Automated emails from automations cannot contain raw PHI, and any connected third-party tool requires its own independent BAA. Prohibited Uses: The platform cannot be utilized as a patient portal. - **Storage Boundaries:** ePHI must be stored strictly inside standard "Records" within bases or interfaces. - **Feature Exclusions:** Do not use Airtable AI or include PHI in support tickets or customer service chats. - **Integrations & Communication:** Automated emails from automations cannot contain raw PHI, and any connected third-party tool requires its own independent BAA. - **Prohibited Uses:** The platform cannot be utilized as a patient portal.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP... If you want, let me know:Your current Airtable plan level What type of patient data you plan to track I can help you figure out if Airtable fits your workflow or if you need an alternative setup. If you want, let me know: - Your current **Airtable plan level** - What **type of patient data** you plan to track I can help you figure out if Airtable fits your workflow or if you need an alternative setup. Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

Yes, Airtable is HIPAA compliant, but only for organizations on the **Enterprise Scale plan** that sign a Business Associate Agreement (BAA) via Airtable's Health Information Exhibit . It is strictly prohibited to store protected health information (PHI) on Free, Team, or Business plans.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Plan and Agreement Requirements - **Enterprise Scale Plan Only:** Lower-tier plans do not support HIPAA compliance or qualify for a BAA. - **Business Associate Agreement (BAA):** You must execute Airtable's Health Information Exhibit before inputting any electronic Protected Health Information (ePHI).[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.paubox.com/blog/airtable-hipaa-compliant) Usage Rules and Restrictions - **Data Location:** ePHI must only be stored inside standard record cells within bases or interfaces, not in metadata, comments, or unsupported features.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Airtable AI:** Do not enable or use Airtable AI in workspaces containing ePHI unless specific supplemental health terms are accepted.[](https://www.airtable.com/company/health-info-datasheet) - **No Patient Portals:** Airtable cannot be used as a public or patient-facing portal.[](https://www.airtable.com/company/health-info-datasheet) - **Integrations and Support:** Third-party integrations must independently support HIPAA compliance, and users must avoid putting PHI into support tickets or screenshots.[](https://www.airtable.com/company/health-info-datasheet) If you'd like, let me know: - What **plan** your organization currently uses - What **type of healthcare workflow** you plan to build I can help you review if your setup meets these requirements. Yes, Airtable is HIPAA compliant, but only for organizations on the Enterprise Scale plan that sign a Business Associate Agreement (BAA) via Airtable's Health Information Exhibit. It is strictly prohibited to store protected health information (PHI) on Free, Team, or Business plans. A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th... Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Enterprise Scale Plan Only: Lower-tier plans do not support HIPAA compliance or qualify for a BAA. Business Associate Agreement (BAA): You must execute Airtable's Health Information Exhibit before inputting any electronic Protected Health Information (ePHI). - **Enterprise Scale Plan Only:** Lower-tier plans do not support HIPAA compliance or qualify for a BAA. - **Business Associate Agreement (BAA):** You must execute Airtable's Health Information Exhibit before inputting any electronic Protected Health Information (ePHI).[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.paubox.com/blog/airtable-hipaa-compliant) What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are... Data Location: ePHI must only be stored inside standard record cells within bases or interfaces, not in metadata, comments, or unsupported features. Airtable AI: Do not enable or use Airtable AI in workspaces containing ePHI unless specific supplemental health terms are accepted. No Patient Portals: Airtable cannot be used as a public or patient-facing portal. Integrations and Support: Third-party integrations must independently support HIPAA compliance, and users must avoid putting PHI into support tickets or screenshots. - **Data Location:** ePHI must only be stored inside standard record cells within bases or interfaces, not in metadata, comments, or unsupported features.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Airtable AI:** Do not enable or use Airtable AI in workspaces containing ePHI unless specific supplemental health terms are accepted.[](https://www.airtable.com/company/health-info-datasheet) - **No Patient Portals:** Airtable cannot be used as a public or patient-facing portal.[](https://www.airtable.com/company/health-info-datasheet) - **Integrations and Support:** Third-party integrations must independently support HIPAA compliance, and users must avoid putting PHI into support tickets or screenshots.[](https://www.airtable.com/company/health-info-datasheet) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... If you'd like, let me know:What plan your organization currently uses What type of healthcare workflow you plan to build I can help you review if your setup meets these requirements. If you'd like, let me know: - What **plan** your organization currently uses - What **type of healthcare workflow** you plan to build I can help you review if your setup meets these requirements. Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...

**Yes, Airtable can be HIPAA compliant** , but only under very specific conditions, plan tiers, and strict configuration rules.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/) 1. Plan Requirement: Enterprise Scale Only Airtable supports HIPAA compliance **only** for customers on the **Enterprise Scale plan**.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - If you are on a **Free, Team, or Business plan** , you are **not** permitted to store Electronic Protected Health Information (ePHI) under any circumstances.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) - To enable HIPAA compliance, Enterprise organizations must execute Airtable's **Health Information Exhibit** , which includes a formal **Business Associate Agreement (BAA)**.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.complysaas.com/compliance/airtable) 2. Strict Boundary Rules for PHI Even with an Enterprise Scale plan and a signed BAA, Airtable enforces rigid boundaries on where and how patient data can live within the platform:[[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) - **In-Scope:** ePHI and medical information may only be stored directly inside **Records within Airtable bases or interfaces**.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Out-of-Scope / Prohibited:** - **Airtable AI:** AI features are completely excluded from the BAA. You must ensure Airtable AI is disabled in any workspace handling PHI. - **Automations & Email:** Outgoing emails triggered by Airtable automations **cannot** contain PHI. - **Customer Support:** You must never include PHI in screenshots, support tickets, or chats with Airtable support. - **Patient Portals:** Airtable explicitly states the platform **cannot** be used as a patient portal.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) 3. Shared Responsibility and Integrations Achieving compliance is a shared-responsibility model. While Airtable provides the necessary technical safeguards (such as Enterprise Key Management, audit logs, SSO, and data loss prevention), **you** are responsible for proper configuration:[](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) [[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[2]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[3]](https://www.blaze.tech/post/is-airtable-hipaa-compliant)[[4]](https://community.airtable.com/announcements-6/airtable-is-now-hipaa-compliant-1542) - Enforcing role-based access controls and the "minimum necessary" standard. - Ensuring any third-party integrations connected to Airtable (like Zapier, Slack, or external APIs) are also HIPAA-compliant and covered under their own BAAs. - Restricting view links and collaborator permissions so unauthorized users cannot access sensitive records.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[2]](https://www.accountablehq.com/post/airtable-hipaa-compliance-baa-security-features-and-what-to-know-in-2026)[[3]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) If you'd like to share **your current Airtable plan** or **what kind of workflow or data** you are hoping to build, I can help you determine the right architectural approach or alternatives. Yes, Airtable can be HIPAA compliant, but only under very specific conditions, plan tiers, and strict configuration rules. Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Airtable is a customizable business management platform with automation capabilities that helps organizations better manage data b... Airtable supports HIPAA compliance only for customers on the Enterprise Scale plan. Airtable supports HIPAA compliance **only** for customers on the **Enterprise Scale plan**.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) If you are on a Free, Team, or Business plan, you are not permitted to store Electronic Protected Health Information (ePHI) under any circumstances. To enable HIPAA compliance, Enterprise organizations must execute Airtable's Health Information Exhibit, which includes a formal Business Associate Agreement (BAA). - If you are on a **Free, Team, or Business plan** , you are **not** permitted to store Electronic Protected Health Information (ePHI) under any circumstances.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) - To enable HIPAA compliance, Enterprise organizations must execute Airtable's **Health Information Exhibit** , which includes a formal **Business Associate Agreement (BAA)**.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.complysaas.com/compliance/airtable) Key takeaways * Airtable HIPAA support is available only on the Enterprise Scale plan. Free, Team, and Business plan customers can... HIPAA, BAA, and SOC 2 summary ... Airtable states that HIPAA support is available on Enterprise Scale and that customers intending... Even with an Enterprise Scale plan and a signed BAA, Airtable enforces rigid boundaries on where and how patient data can live within the platform: Even with an Enterprise Scale plan and a signed BAA, Airtable enforces rigid boundaries on where and how patient data can live within the platform:[[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained) HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... In-Scope: ePHI and medical information may only be stored directly inside Records within Airtable bases or interfaces. Out-of-Scope / Prohibited:Airtable AI: AI features are completely excluded from the BAA. You must ensure Airtable AI is disabled in any workspace handling PHI. Automations & Email: Outgoing emails triggered by Airtable automations cannot contain PHI. Customer Support: You must never include PHI in screenshots, support tickets, or chats with Airtable support. Patient Portals: Airtable explicitly states the platform cannot be used as a patient portal. Airtable AI: AI features are completely excluded from the BAA. You must ensure Airtable AI is disabled in any workspace handling PHI. Automations & Email: Outgoing emails triggered by Airtable automations cannot contain PHI. Customer Support: You must never include PHI in screenshots, support tickets, or chats with Airtable support. Patient Portals: Airtable explicitly states the platform cannot be used as a patient portal. - **In-Scope:** ePHI and medical information may only be stored directly inside **Records within Airtable bases or interfaces**.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Out-of-Scope / Prohibited:** - **Airtable AI:** AI features are completely excluded from the BAA. You must ensure Airtable AI is disabled in any workspace handling PHI. - **Automations & Email:** Outgoing emails triggered by Airtable automations **cannot** contain PHI. - **Customer Support:** You must never include PHI in screenshots, support tickets, or chats with Airtable support. - **Patient Portals:** Airtable explicitly states the platform **cannot** be used as a patient portal.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Achieving compliance is a shared-responsibility model. While Airtable provides the necessary technical safeguards (such as Enterprise Key Management, audit logs, SSO, and data loss prevention), you are responsible for proper configuration: Achieving compliance is a shared-responsibility model. While Airtable provides the necessary technical safeguards (such as Enterprise Key Management, audit logs, SSO, and data loss prevention), **you** are responsible for proper configuration:[](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) [[1]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[2]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[3]](https://www.blaze.tech/post/is-airtable-hipaa-compliant)[[4]](https://community.airtable.com/announcements-6/airtable-is-now-hipaa-compliant-1542) Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP... How to Ensure Airtable Complies with HIPAA Regulation. To make sure your use of Airtable aligns with HIPAA regulations, follow the... * 🩺📈 Exciting news for healthcare providers and organizations! Airtable is now HIPAA compliant and ready to support your critica... Enforcing role-based access controls and the "minimum necessary" standard. Ensuring any third-party integrations connected to Airtable (like Zapier, Slack, or external APIs) are also HIPAA-compliant and covered under their own BAAs. Restricting view links and collaborator permissions so unauthorized users cannot access sensitive records. - Enforcing role-based access controls and the "minimum necessary" standard. - Ensuring any third-party integrations connected to Airtable (like Zapier, Slack, or external APIs) are also HIPAA-compliant and covered under their own BAAs. - Restricting view links and collaborator permissions so unauthorized users cannot access sensitive records.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[2]](https://www.accountablehq.com/post/airtable-hipaa-compliance-baa-security-features-and-what-to-know-in-2026)[[3]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide) Off-load the PHI, Keep Only “Breadcrumbs” in Airtable * Shape-shift PHI into opaque IDs. Store patient details in a hardened backe... HIPAA Compliance Requirements for ePHI * Risk analysis and risk management tailored to Airtable data flows and integrations. * Rol... Should You Trust Airtable With Sensitive Data? Our answer, after building hundreds of client Airtable systems: yes, with appropria... If you'd like to share your current Airtable plan or what kind of workflow or data you are hoping to build, I can help you determine the right architectural approach or alternatives. If you'd like to share **your current Airtable plan** or **what kind of workflow or data** you are hoping to build, I can help you determine the right architectural approach or alternatives.

**Yes, but with strict limitations and requirements** **.** [](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.complysaas.com/compliance/airtable) Airtable Go to product viewer dialog for this item. supports HIPAA compliance for patient data (ePHI/PHI), but it is **not** universally compliant out-of-the-box for all users.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) Key Conditions for HIPAA Compliance on Airtable: - **Plan Requirement:** HIPAA support is available **exclusively on the Enterprise Scale plan** . If you are on the Free, Team, or Business plans, storing Protected Health Information (PHI) is strictly prohibited by Airtable's terms.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) - **Business Associate Agreement (BAA):** Enterprise Scale customers must formally execute Airtable's Health Information Exhibit, which includes their [Business Associate Addendum](https://www.airtable.com/company/health-info-datasheet). - **Strict Boundary Rules:** Even with a signed BAA, Airtable enforces rigid boundaries on where patient data can live and how it can be used: - **Where PHI can go:** ePHI and medical information must live *only* inside records within Airtable bases or interfaces. - **Airtable AI:** AI features are completely excluded from the BAA and **cannot** be enabled in workspaces containing PHI unless specific health information AI terms are met and configured. - **Automations & Emails:** Outgoing automated emails triggered by Airtable **cannot** contain raw PHI. - **Customer Support:** You must never include PHI in screenshots or support tickets when talking to Airtable support. - **Not a Patient Portal:** Airtable explicitly prohibits using its platform to serve as a patient portal. - **Integrations:** Any third-party tools or integrations (like Zapier, Slack, or custom APIs) connected to your base must also be HIPAA-compliant and covered under separate BAAs.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[2]](https://www.airtable.com/company/health-info-datasheet)[[3]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) If you'd like to proceed, tell me: - What **tier of Airtable** your organization is currently on - **What kind of patient data or workflow** you are trying to build (e.g., internal tracking, intake form, clinical trial) I can help you evaluate whether Airtable fits your needs or if a dedicated backend/alternative is safer. Yes, but with strict limitations and requirements. Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... Home Compliance Airtable Independent vendor compliance review Is Airtable HIPAA compliant? Airtable may support some HIPAA-regulat... Airtable Go to product viewer dialog for this item. supports HIPAA compliance for patient data (ePHI/PHI), but it is not universally compliant out-of-the-box for all users. Airtable Go to product viewer dialog for this item. supports HIPAA compliance for patient data (ePHI/PHI), but it is **not** universally compliant out-of-the-box for all users.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) Plan Requirement: HIPAA support is available exclusively on the Enterprise Scale plan. If you are on the Free, Team, or Business plans, storing Protected Health Information (PHI) is strictly prohibited by Airtable's terms. Business Associate Agreement (BAA): Enterprise Scale customers must formally execute Airtable's Health Information Exhibit, which includes their Business Associate Addendum. Strict Boundary Rules: Even with a signed BAA, Airtable enforces rigid boundaries on where patient data can live and how it can be used:Where PHI can go: ePHI and medical information must live only inside records within Airtable bases or interfaces. Airtable AI: AI features are completely excluded from the BAA and cannot be enabled in workspaces containing PHI unless specific health information AI terms are met and configured. Automations & Emails: Outgoing automated emails triggered by Airtable cannot contain raw PHI. Customer Support: You must never include PHI in screenshots or support tickets when talking to Airtable support. Not a Patient Portal: Airtable explicitly prohibits using its platform to serve as a patient portal. Integrations: Any third-party tools or integrations (like Zapier, Slack, or custom APIs) connected to your base must also be HIPAA-compliant and covered under separate BAAs. Where PHI can go: ePHI and medical information must live only inside records within Airtable bases or interfaces. Airtable AI: AI features are completely excluded from the BAA and cannot be enabled in workspaces containing PHI unless specific health information AI terms are met and configured. Automations & Emails: Outgoing automated emails triggered by Airtable cannot contain raw PHI. Customer Support: You must never include PHI in screenshots or support tickets when talking to Airtable support. Not a Patient Portal: Airtable explicitly prohibits using its platform to serve as a patient portal. Integrations: Any third-party tools or integrations (like Zapier, Slack, or custom APIs) connected to your base must also be HIPAA-compliant and covered under separate BAAs. - **Plan Requirement:** HIPAA support is available **exclusively on the Enterprise Scale plan** . If you are on the Free, Team, or Business plans, storing Protected Health Information (PHI) is strictly prohibited by Airtable's terms.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) - **Business Associate Agreement (BAA):** Enterprise Scale customers must formally execute Airtable's Health Information Exhibit, which includes their [Business Associate Addendum](https://www.airtable.com/company/health-info-datasheet). - **Strict Boundary Rules:** Even with a signed BAA, Airtable enforces rigid boundaries on where patient data can live and how it can be used: - **Where PHI can go:** ePHI and medical information must live *only* inside records within Airtable bases or interfaces. - **Airtable AI:** AI features are completely excluded from the BAA and **cannot** be enabled in workspaces containing PHI unless specific health information AI terms are met and configured. - **Automations & Emails:** Outgoing automated emails triggered by Airtable **cannot** contain raw PHI. - **Customer Support:** You must never include PHI in screenshots or support tickets when talking to Airtable support. - **Not a Patient Portal:** Airtable explicitly prohibits using its platform to serve as a patient portal. - **Integrations:** Any third-party tools or integrations (like Zapier, Slack, or custom APIs) connected to your base must also be HIPAA-compliant and covered under separate BAAs.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[2]](https://www.airtable.com/company/health-info-datasheet)[[3]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) Key takeaways * Airtable HIPAA support is available only on the Enterprise Scale plan. Free, Team, and Business plan customers can... Off-load the PHI, Keep Only “Breadcrumbs” in Airtable * Shape-shift PHI into opaque IDs. Store patient details in a hardened backe... Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Business Associate Agreement (BA... If you'd like to proceed, tell me: What tier of Airtable your organization is currently on What kind of patient data or workflow you are trying to build (e.g., internal tracking, intake form, clinical trial) - What **tier of Airtable** your organization is currently on - **What kind of patient data or workflow** you are trying to build (e.g., internal tracking, intake form, clinical trial) I can help you evaluate whether Airtable fits your needs or if a dedicated backend/alternative is safer.

**Airtable is HIPAA compliant only for customers on the Enterprise Scale plan** who formally execute Airtable’s [Health Information Exhibit](https://www.airtable.com/company/health-info-datasheet) , which includes a Business Associate Addendum (BAA). Storage or processing of Protected Health Information (PHI) or electronic Protected Health Information (ePHI) is strictly prohibited on Free, Team, and Business plans, as no BAA is available for those tiers.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/#:~:text=Airtable%27s%20terms,PHI-free%20zone.) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/#:~:text=Airtable%20now%20supports,available%20at%20any%20price.)[[2]](https://www.complysaas.com/compliance/airtable#:~:text=HIPAA%20support%20is,HIPAA%20customers.)[[3]](https://www.hipaatizer.com/integrations/airtable-hipaa-compliant/#:~:text=Airtable%20is%20HIPAA,webhooks.) Key Compliance Requirements and Boundaries Even on the Enterprise Scale plan with an active BAA, Airtable enforces rigid structural boundaries on how patient data can be handled:[[1]](https://www.optimizeis.com/blogs/airtable-for-healthcare-simplifying-patient-and-operation-management) - **Storage Location** : ePHI and medical records must live exclusively inside standard records within Airtable bases or interfaces.[](https://www.airtable.com/company/health-info-datasheet#:~:text=ePHI%20and%20medical,time.) [[1]](https://www.airtable.com/company/health-info-datasheet#:~:text=ePHI%20and%20medical,time.) - **Airtable AI** : You must not store or process ePHI in workspaces where **Airtable AI** is active, unless you have specifically agreed to specialized healthcare AI supplemental terms.[](https://www.airtable.com/company/health-info-datasheet#:~:text=Do%20not%20store%20ePHI,Terms%2C%20including%20the) - **Exclusions** : Airtable cannot currently be used as a patient-facing portal.[](https://www.airtable.com/company/health-info-datasheet#:~:text=Do%20not%20store%20ePHI,time.) - **Support & Communications** : You must never include ePHI or medical details in screenshots, attachments, or support tickets sent to Airtable Customer Support.[](https://www.airtable.com/company/health-info-datasheet#:~:text=When%20contacting%20Airtable%2C,or%20support%20tickets.) - **Integrations** : Any third-party tools, automations, or middleware connected to your bases must independently support and maintain HIPAA compliance.[](https://www.airtable.com/company/health-info-datasheet#:~:text=Requirements%20for%20HIPAA,bases%20or%20interfaces.) If you're planning a healthcare workflow, let me know: - What **specific data or use case** you plan to track (e.g., internal trial logs vs. staff scheduling) - Whether you already have an **Enterprise Scale agreement** or need alternative tools I can help you evaluate whether Airtable fits your setup or suggest other secure options. Airtable is HIPAA compliant only for customers on the Enterprise Scale plan who formally execute Airtable’s Health Information Exhibit, which includes a Business Associate Addendum (BAA). Storage or processing of Protected Health Information (PHI) or electronic Protected Health Information (ePHI) is strictly prohibited on Free, Team, and Business plans, as no BAA is available for those tiers. Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Business Associate Agreement (BA... HIPAA support is available on Enterprise Scale and that customers intending to store ePHI must execute the Health Information Exhi... Airtable is HIPAA Compliant only on its Enterprise plan. With HIPAAtizer, keep PHI secure and send form data to Airtable on any pl... Even on the Enterprise Scale plan with an active BAA, Airtable enforces rigid structural boundaries on how patient data can be handled: Even on the Enterprise Scale plan with an active BAA, Airtable enforces rigid structural boundaries on how patient data can be handled:[[1]](https://www.optimizeis.com/blogs/airtable-for-healthcare-simplifying-patient-and-operation-management) Why This Platform is a Game-Changer for Healthcare What makes Airtable work in this high-stakes environment? It offers the familia... Storage Location : ePHI and medical records must live exclusively inside standard records within Airtable bases or interfaces. Airtable AI : You must not store or process ePHI in workspaces where Airtable AI is active, unless you have specifically agreed to specialized healthcare AI supplemental terms. Exclusions : Airtable cannot currently be used as a patient-facing portal. Support & Communications : You must never include ePHI or medical details in screenshots, attachments, or support tickets sent to Airtable Customer Support. Integrations : Any third-party tools, automations, or middleware connected to your bases must independently support and maintain HIPAA compliance. - **Storage Location** : ePHI and medical records must live exclusively inside standard records within Airtable bases or interfaces.[](https://www.airtable.com/company/health-info-datasheet#:~:text=ePHI%20and%20medical,time.) [[1]](https://www.airtable.com/company/health-info-datasheet#:~:text=ePHI%20and%20medical,time.) - **Airtable AI** : You must not store or process ePHI in workspaces where **Airtable AI** is active, unless you have specifically agreed to specialized healthcare AI supplemental terms.[](https://www.airtable.com/company/health-info-datasheet#:~:text=Do%20not%20store%20ePHI,Terms%2C%20including%20the) - **Exclusions** : Airtable cannot currently be used as a patient-facing portal.[](https://www.airtable.com/company/health-info-datasheet#:~:text=Do%20not%20store%20ePHI,time.) - **Support & Communications** : You must never include ePHI or medical details in screenshots, attachments, or support tickets sent to Airtable Customer Support.[](https://www.airtable.com/company/health-info-datasheet#:~:text=When%20contacting%20Airtable%2C,or%20support%20tickets.) - **Integrations** : Any third-party tools, automations, or middleware connected to your bases must independently support and maintain HIPAA compliance.[](https://www.airtable.com/company/health-info-datasheet#:~:text=Requirements%20for%20HIPAA,bases%20or%20interfaces.) ePHI and medical information must only be stored in records within Airtable bases or interfaces. Do not use Airtable as a patient ... If you're planning a healthcare workflow, let me know: What specific data or use case you plan to track (e.g., internal trial logs vs. staff scheduling) Whether you already have an Enterprise Scale agreement or need alternative tools - What **specific data or use case** you plan to track (e.g., internal trial logs vs. staff scheduling) - Whether you already have an **Enterprise Scale agreement** or need alternative tools I can help you evaluate whether Airtable fits your setup or suggest other secure options. Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ... Requirements for HIPAA and/or CMIA Customers. Airtable automations allow users to automate workflows, including outgoing email. .. PHI may only live in records within bases, it can't appear in automated emails or be shared with Airtable's support team, and Airt...

**Yes, Airtable can be HIPAA compliant** , but only under very strict operational and contractual conditions . It is not compliant out-of-the-box on standard plans.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)[[3]](https://www.complysaas.com/compliance/airtable) The critical requirements and boundaries for using Airtable with Protected Health Information (PHI) include: - **Enterprise Scale Plan Required:** HIPAA support and the execution of a formal Business Associate Agreement (BAA)—via Airtable’s Health Information Exhibit—are restricted exclusively to customers on the **Enterprise Scale** plan. Free, Team, and Business plans are strictly non-compliant and prohibited from storing electronic Protected Health Information (ePHI).[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Signed Business Associate Agreement (BAA):** You must formally execute Airtable's Health Information Exhibit/BAA before introducing any patient data to your workspace.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Strict Data Boundaries:** Per Airtable's [Health Information Datasheet](https://www.airtable.com/company/health-info-datasheet) , ePHI must only be stored inside **records within bases or interfaces**.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Feature Restrictions & Exclusions:** - **Airtable AI** is entirely excluded from the BAA and cannot be enabled in workspaces containing ePHI unless specific supplemental terms are managed—though general guidance advises keeping AI completely off patient data. - **Automations & Emails:** Outgoing emails triggered via Airtable automations cannot contain PHI. - **Customer Support:** You must never include ePHI in screenshots, attachments, or tickets submitted to Airtable support. - **Patient Portals:** Airtable cannot be used to serve as a patient portal.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) - **Integrations & Shared Responsibility:** Any third-party integrations connected to your bases (like Zapier, Slack, or custom APIs) must also be HIPAA-compliant and covered under separate BAAs; a single unsecure bridge breaks the compliance chain.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/)[[3]](https://intuitionlabs.ai/articles/hipaa-compliant-api-guide)[[4]](https://www.hakunamatatatech.com/our-resources/blog/hipaa-compliant-llm)[[5]](https://www.accountablehq.com/post/cerner-patient-portal-and-hipaa-compliance-what-you-need-to-know) If you're planning a healthcare workflow, tell me: - **What specific type of patient data** you plan to track - **Which integrations or automations** you need to connect to Airtable I can help you evaluate whether Airtable fits your architecture or if a dedicated backend is safer. Yes, Airtable can be HIPAA compliant, but only under very strict operational and contractual conditions. It is not compliant out-of-the-box on standard plans. Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu... HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin... Independent vendor compliance review Is Airtable HIPAA compliant? Airtable may support some HIPAA-regulated workflows only for Ent... The critical requirements and boundaries for using Airtable with Protected Health Information (PHI) include: Enterprise Scale Plan Required: HIPAA support and the execution of a formal Business Associate Agreement (BAA)—via Airtable’s Health Information Exhibit—are restricted exclusively to customers on the Enterprise Scale plan. Free, Team, and Business plans are strictly non-compliant and prohibited from storing electronic Protected Health Information (ePHI). Signed Business Associate Agreement (BAA): You must formally execute Airtable's Health Information Exhibit/BAA before introducing any patient data to your workspace. Strict Data Boundaries: Per Airtable's Health Information Datasheet, ePHI must only be stored inside records within bases or interfaces. Feature Restrictions & Exclusions:Airtable AI is entirely excluded from the BAA and cannot be enabled in workspaces containing ePHI unless specific supplemental terms are managed—though general guidance advises keeping AI completely off patient data. Automations & Emails: Outgoing emails triggered via Airtable automations cannot contain PHI. Customer Support: You must never include ePHI in screenshots, attachments, or tickets submitted to Airtable support. Patient Portals: Airtable cannot be used to serve as a patient portal. Airtable AI is entirely excluded from the BAA and cannot be enabled in workspaces containing ePHI unless specific supplemental terms are managed—though general guidance advises keeping AI completely off patient data. Automations & Emails: Outgoing emails triggered via Airtable automations cannot contain PHI. Customer Support: You must never include ePHI in screenshots, attachments, or tickets submitted to Airtable support. Patient Portals: Airtable cannot be used to serve as a patient portal. Integrations & Shared Responsibility: Any third-party integrations connected to your bases (like Zapier, Slack, or custom APIs) must also be HIPAA-compliant and covered under separate BAAs; a single unsecure bridge breaks the compliance chain. - **Enterprise Scale Plan Required:** HIPAA support and the execution of a formal Business Associate Agreement (BAA)—via Airtable’s Health Information Exhibit—are restricted exclusively to customers on the **Enterprise Scale** plan. Free, Team, and Business plans are strictly non-compliant and prohibited from storing electronic Protected Health Information (ePHI).[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Signed Business Associate Agreement (BAA):** You must formally execute Airtable's Health Information Exhibit/BAA before introducing any patient data to your workspace.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) - **Strict Data Boundaries:** Per Airtable's [Health Information Datasheet](https://www.airtable.com/company/health-info-datasheet) , ePHI must only be stored inside **records within bases or interfaces**.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet) - **Feature Restrictions & Exclusions:** - **Airtable AI** is entirely excluded from the BAA and cannot be enabled in workspaces containing ePHI unless specific supplemental terms are managed—though general guidance advises keeping AI completely off patient data. - **Automations & Emails:** Outgoing emails triggered via Airtable automations cannot contain PHI. - **Customer Support:** You must never include ePHI in screenshots, attachments, or tickets submitted to Airtable support. - **Patient Portals:** Airtable cannot be used to serve as a patient portal.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) - **Integrations & Shared Responsibility:** Any third-party integrations connected to your bases (like Zapier, Slack, or custom APIs) must also be HIPAA-compliant and covered under separate BAAs; a single unsecure bridge breaks the compliance chain.[](https://www.specode.ai/blog/is-airtable-hipaa-compliant) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/)[[3]](https://intuitionlabs.ai/articles/hipaa-compliant-api-guide)[[4]](https://www.hakunamatatatech.com/our-resources/blog/hipaa-compliant-llm)[[5]](https://www.accountablehq.com/post/cerner-patient-portal-and-hipaa-compliance-what-you-need-to-know) Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out... Key takeaways * Airtable HIPAA support is available only on the Enterprise Scale plan. Free, Team, and Business plan customers can... Off-load the PHI, Keep Only “Breadcrumbs” in Airtable * Shape-shift PHI into opaque IDs. Store patient details in a hardened backe... Airtable is a customizable business management platform with automation capabilities that helps organizations better manage data b... Likewise, if your API then sends PHI to another third-party (say, a mapping service to show clinic locations with patient info), t... Secure Your Integrations: Every third-party service that touches PHI in your pipeline, whether it's a database, email service, or ... How do third-party integrations maintain HIPAA standards? Each integration must be vetted, covered by a BAA if it handles PHI, and... If you're planning a healthcare workflow, tell me: What specific type of patient data you plan to track Which integrations or automations you need to connect to Airtable - **What specific type of patient data** you plan to track - **Which integrations or automations** you need to connect to Airtable I can help you evaluate whether Airtable fits your architecture or if a dedicated backend is safer.