complysaas.com/compliance/airtable#:~:text=HIPAA%20support%20is,HIPAA%20customers.

**Airtable is HIPAA compliant only for customers on the Enterprise Scale plan** who formally execute Airtable’s [Health Information Exhibit](https://www.airtable.com/company/health-info-datasheet) , which includes a Business Associate Addendum (BAA). Storage or processing of Protected Health Information (PHI) or electronic Protected Health Information (ePHI) is strictly prohibited on Free, Team, and Business plans, as no BAA is available for those tiers.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/#:~:text=Airtable%27s%20terms,PHI-free%20zone.) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/#:~:text=Airtable%20now%20supports,available%20at%20any%20price.)[[2]](https://www.complysaas.com/compliance/airtable#:~:text=HIPAA%20support%20is,HIPAA%20customers.)[[3]](https://www.hipaatizer.com/integrations/airtable-hipaa-compliant/#:~:text=Airtable%20is%20HIPAA,webhooks.) Key Compliance Requirements and Boundaries Even on the Enterprise Scale plan with an active BAA, Airtable enforces rigid structural boundaries on how patient data can be handled:[[1]](https://www.optimizeis.com/blogs/airtable-for-healthcare-simplifying-patient-and-operation-management) - **Storage Location** : ePHI and medical records must live exclusively inside standard records within Airtable bases or interfaces.[](https://www.airtable.com/company/health-info-datasheet#:~:text=ePHI%20and%20medical,time.) [[1]](https://www.airtable.com/company/health-info-datasheet#:~:text=ePHI%20and%20medical,time.) - **Airtable AI** : You must not store or process ePHI in workspaces where **Airtable AI** is active, unless you have specifically agreed to specialized healthcare AI supplemental terms.[](https://www.airtable.com/company/health-info-datasheet#:~:text=Do%20not%20store%20ePHI,Terms%2C%20including%20the) - **Exclusions** : Airtable cannot currently be used as a patient-facing portal.[](https://www.airtable.com/company/health-info-datasheet#:~:text=Do%20not%20store%20ePHI,time.) - **Support & Communications** : You must never include ePHI or medical details in screenshots, attachments, or support tickets sent to Airtable Customer Support.[](https://www.airtable.com/company/health-info-datasheet#:~:text=When%20contacting%20Airtable%2C,or%20support%20tickets.) - **Integrations** : Any third-party tools, automations, or middleware connected to your bases must independently support and maintain HIPAA compliance.[](https://www.airtable.com/company/health-info-datasheet#:~:text=Requirements%20for%20HIPAA,bases%20or%20interfaces.) If you're planning a healthcare workflow, let me know: - What **specific data or use case** you plan to track (e.g., internal trial logs vs. staff scheduling) - Whether you already have an **Enterprise Scale agreement** or need alternative tools I can help you evaluate whether Airtable fits your setup or suggest other secure options. Airtable is HIPAA compliant only for customers on the Enterprise Scale plan who formally execute Airtable’s Health Information Exhibit, which includes a Business Associate Addendum (BAA). Storage or processing of Protected Health Information (PHI) or electronic Protected Health Information (ePHI) is strictly prohibited on Free, Team, and Business plans, as no BAA is available for those tiers. Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Business Associate Agreement (BA... HIPAA support is available on Enterprise Scale and that customers intending to store ePHI must execute the Health Information Exhi... Airtable is HIPAA Compliant only on its Enterprise plan. With HIPAAtizer, keep PHI secure and send form data to Airtable on any pl... Even on the Enterprise Scale plan with an active BAA, Airtable enforces rigid structural boundaries on how patient data can be handled: Even on the Enterprise Scale plan with an active BAA, Airtable enforces rigid structural boundaries on how patient data can be handled:[[1]](https://www.optimizeis.com/blogs/airtable-for-healthcare-simplifying-patient-and-operation-management) Why This Platform is a Game-Changer for Healthcare What makes Airtable work in this high-stakes environment? It offers the familia... Storage Location : ePHI and medical records must live exclusively inside standard records within Airtable bases or interfaces. Airtable AI : You must not store or process ePHI in workspaces where Airtable AI is active, unless you have specifically agreed to specialized healthcare AI supplemental terms. Exclusions : Airtable cannot currently be used as a patient-facing portal. Support & Communications : You must never include ePHI or medical details in screenshots, attachments, or support tickets sent to Airtable Customer Support. Integrations : Any third-party tools, automations, or middleware connected to your bases must independently support and maintain HIPAA compliance. - **Storage Location** : ePHI and medical records must live exclusively inside standard records within Airtable bases or interfaces.[](https://www.airtable.com/company/health-info-datasheet#:~:text=ePHI%20and%20medical,time.) [[1]](https://www.airtable.com/company/health-info-datasheet#:~:text=ePHI%20and%20medical,time.) - **Airtable AI** : You must not store or process ePHI in workspaces where **Airtable AI** is active, unless you have specifically agreed to specialized healthcare AI supplemental terms.[](https://www.airtable.com/company/health-info-datasheet#:~:text=Do%20not%20store%20ePHI,Terms%2C%20including%20the) - **Exclusions** : Airtable cannot currently be used as a patient-facing portal.[](https://www.airtable.com/company/health-info-datasheet#:~:text=Do%20not%20store%20ePHI,time.) - **Support & Communications** : You must never include ePHI or medical details in screenshots, attachments, or support tickets sent to Airtable Customer Support.[](https://www.airtable.com/company/health-info-datasheet#:~:text=When%20contacting%20Airtable%2C,or%20support%20tickets.) - **Integrations** : Any third-party tools, automations, or middleware connected to your bases must independently support and maintain HIPAA compliance.[](https://www.airtable.com/company/health-info-datasheet#:~:text=Requirements%20for%20HIPAA,bases%20or%20interfaces.) ePHI and medical information must only be stored in records within Airtable bases or interfaces. Do not use Airtable as a patient ... If you're planning a healthcare workflow, let me know: What specific data or use case you plan to track (e.g., internal trial logs vs. staff scheduling) Whether you already have an Enterprise Scale agreement or need alternative tools - What **specific data or use case** you plan to track (e.g., internal trial logs vs. staff scheduling) - Whether you already have an **Enterprise Scale agreement** or need alternative tools I can help you evaluate whether Airtable fits your setup or suggest other secure options. Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ... Requirements for HIPAA and/or CMIA Customers. Airtable automations allow users to automate workflows, including outgoing email. .. PHI may only live in records within bases, it can't appear in automated emails or be shared with Airtable's support team, and Airt...