support.airtable.com/docs/understanding-hipaa-at-airtable
Every answer that reached for this page while answering Catalytics Automation's prompts. back to support.airtable.com
Answers it shaped
11
11 citations
Prompts
1
Avg. sloti
1.5
You namedi
0/11
Impact
0.7%
Answers (11)i
Google AIOAbsentIs Airtable HIPAA compliant for patient data?slot 2Aug 17, 03:34 PM
Yes, [Airtable](https://www.airtable.com/company/hipaa-airtable) is HIPAA compliant , but strictly for **Enterprise Scale** plan subscribers who have signed a Business Associate Agreement (BAA) via a Health Information Exhibit. It is not compliant on lower-tier plans (Free, Team, or Business).[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Requirements for Compliance
- **Enterprise Scale Plan:** You must be on Airtable's highest custom-priced enterprise tier.
- **Signed BAA:** You must execute Airtable’s Health Information Exhibit, which contains the official Business Associate Addendum.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)
Platform Restrictions & Rules
- **Where Data Lives:** Protected Health Information (PHI) must only be stored within records in Airtable bases or interfaces.
- **Exclusions:** Airtable AI, customer support interactions, and standard automated emails containing PHI are excluded or restricted.
- **Patient Portals:** You cannot use Airtable as a patient portal or the backend technology for one.
- **Integrations:** Any third-party tools or integrations connected to your bases must also independently support HIPAA compliance.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/)
If you'd like, let me know:
- What **tier** your organization is currently on
- What kind of **healthcare workflow or data tracking** you plan to build
I can help you determine the best architectural approach or look into alternative tools.
Yes, Airtable is HIPAA compliant, but strictly for Enterprise Scale plan subscribers who have signed a Business Associate Agreement (BAA) via a Health Information Exhibit. It is not compliant on lower-tier plans (Free, Team, or Business).
A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th...
Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu...
Enterprise Scale Plan: You must be on Airtable's highest custom-priced enterprise tier. Signed BAA: You must execute Airtable’s Health Information Exhibit, which contains the official Business Associate Addendum.
- **Enterprise Scale Plan:** You must be on Airtable's highest custom-priced enterprise tier.
- **Signed BAA:** You must execute Airtable’s Health Information Exhibit, which contains the official Business Associate Addendum.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)
Is Airtable Technically HIPAA-Compliant? * Enterprise-only paywall. HIPAA support didn't exist until April 2024 and is still gated...
Where Data Lives: Protected Health Information (PHI) must only be stored within records in Airtable bases or interfaces. Exclusions: Airtable AI, customer support interactions, and standard automated emails containing PHI are excluded or restricted. Patient Portals: You cannot use Airtable as a patient portal or the backend technology for one. Integrations: Any third-party tools or integrations connected to your bases must also independently support HIPAA compliance.
- **Where Data Lives:** Protected Health Information (PHI) must only be stored within records in Airtable bases or interfaces.
- **Exclusions:** Airtable AI, customer support interactions, and standard automated emails containing PHI are excluded or restricted.
- **Patient Portals:** You cannot use Airtable as a patient portal or the backend technology for one.
- **Integrations:** Any third-party tools or integrations connected to your bases must also independently support HIPAA compliance.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/)
Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out...
In healthcare, Airtable has many potential uses. It could be used to keep track of appointments and consultant availability, strea...
If you'd like, let me know:What tier your organization is currently on
What kind of healthcare workflow or data tracking you plan to build
I can help you determine the best architectural approach or look into alternative tools.
If you'd like, let me know:
- What **tier** your organization is currently on
- What kind of **healthcare workflow or data tracking** you plan to build
I can help you determine the best architectural approach or look into alternative tools.
Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...
Google AIOAbsentIs Airtable HIPAA compliant for patient data?slot 1Aug 16, 03:08 PM
Airtable is HIPAA compliant **only** for customers on the [Airtable Enterprise Scale Plan](https://support.airtable.com/docs/understanding-hipaa-at-airtable) who sign a Health Information Exhibit containing a Business Associate Agreement (BAA). Users on Free, Team, or Business plans are strictly prohibited from storing electronic Protected Health Information (ePHI).[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[3]](https://www.paubox.com/blog/airtable-hipaa-compliant)Plan and Agreement Requirements
- **Enterprise Scale Plan:** Required to access Airtable's HIPAA compliance program.
- **Business Associate Agreement (BAA):** Must be executed via Airtable's Health Information Exhibit.
- **Lower Tiers:** Free, Team, and Business plans do not offer a BAA and cannot legally hold patient data.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable)
Usage Rules and Restrictions
- **Storage Boundaries:** Patient health data (ePHI) must only live inside records within bases or interfaces.
- **No AI Features:** Airtable AI cannot be used or enabled in workspaces handling ePHI.
- **Support Limits:** You must never share or disclose ePHI with Airtable’s customer support team in tickets or screenshots.
- **Automations & Emails:** You cannot use automated email features to transmit raw ePHI out of the system.
- **External Integrations:** Any third-party tools or apps connected to your bases must also be HIPAA compliant and covered by their own BAAs.
- **No Patient Portals:** Airtable cannot be used as a public or direct patient portal.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/)
If you'd like, let me know:
- What **tier or plan** your organization currently uses
- What **type of workflow or data** you plan to build
I can help you evaluate if Airtable fits your project or suggest alternative ways to structure your data safely.
Airtable is HIPAA compliant only for customers on the Airtable Enterprise Scale Plan who sign a Health Information Exhibit containing a Business Associate Agreement (BAA). Users on Free, Team, or Business plans are strictly prohibited from storing electronic Protected Health Information (ePHI).
A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th...
Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu...
What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are...
Enterprise Scale Plan: Required to access Airtable's HIPAA compliance program. Business Associate Agreement (BAA): Must be executed via Airtable's Health Information Exhibit. Lower Tiers: Free, Team, and Business plans do not offer a BAA and cannot legally hold patient data.
- **Enterprise Scale Plan:** Required to access Airtable's HIPAA compliance program.
- **Business Associate Agreement (BAA):** Must be executed via Airtable's Health Information Exhibit.
- **Lower Tiers:** Free, Team, and Business plans do not offer a BAA and cannot legally hold patient data.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable)
Storage Boundaries: Patient health data (ePHI) must only live inside records within bases or interfaces. No AI Features: Airtable AI cannot be used or enabled in workspaces handling ePHI. Support Limits: You must never share or disclose ePHI with Airtable’s customer support team in tickets or screenshots. Automations & Emails: You cannot use automated email features to transmit raw ePHI out of the system. External Integrations: Any third-party tools or apps connected to your bases must also be HIPAA compliant and covered by their own BAAs. No Patient Portals: Airtable cannot be used as a public or direct patient portal.
- **Storage Boundaries:** Patient health data (ePHI) must only live inside records within bases or interfaces.
- **No AI Features:** Airtable AI cannot be used or enabled in workspaces handling ePHI.
- **Support Limits:** You must never share or disclose ePHI with Airtable’s customer support team in tickets or screenshots.
- **Automations & Emails:** You cannot use automated email features to transmit raw ePHI out of the system.
- **External Integrations:** Any third-party tools or apps connected to your bases must also be HIPAA compliant and covered by their own BAAs.
- **No Patient Portals:** Airtable cannot be used as a public or direct patient portal.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.hipaajournal.com/is-airtable-hipaa-compliant/)
Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out...
In healthcare, Airtable has many potential uses. It could be used to keep track of appointments and consultant availability, strea...
If you'd like, let me know:What tier or plan your organization currently uses
What type of workflow or data you plan to build
I can help you evaluate if Airtable fits your project or suggest alternative ways to structure your data safely.
If you'd like, let me know:
- What **tier or plan** your organization currently uses
- What **type of workflow or data** you plan to build
I can help you evaluate if Airtable fits your project or suggest alternative ways to structure your data safely.
Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...
Google AIOAbsentIs Airtable HIPAA compliant for patient data?slot 1Aug 15, 09:11 PM
Airtable is HIPAA compliant **only** for users on the **Enterprise Scale plan** who sign a Business Associate Agreement (BAA) via Airtable's Health Information Exhibit . Users on Free, Team, or Business plans are **not** permitted to store protected health information (PHI) on the platform.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Requirements and Plan Limits
- **Plan Tier:** Restricted exclusively to [Airtable's Enterprise Scale plan](https://support.airtable.com/docs/understanding-hipaa-at-airtable).
- **Legal Agreement:** Requires executing a formal BAA/Health Information Exhibit with Airtable.
- **Lower Tiers:** Prohibited from holding electronic Protected Health Information (ePHI) on lower-tier subscription plans.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.paubox.com/blog/airtable-hipaa-compliant)
Usage Restrictions & Rules
- **Storage Boundaries:** ePHI must be stored strictly inside standard "Records" within bases or interfaces.
- **Feature Exclusions:** Do not use Airtable AI or include PHI in support tickets or customer service chats.
- **Integrations & Communication:** Automated emails from automations cannot contain raw PHI, and any connected third-party tool requires its own independent BAA.
- **Prohibited Uses:** The platform cannot be utilized as a patient portal.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)
If you want, let me know:
- Your current **Airtable plan level**
- What **type of patient data** you plan to track
I can help you figure out if Airtable fits your workflow or if you need an alternative setup.
Airtable is HIPAA compliant only for users on the Enterprise Scale plan who sign a Business Associate Agreement (BAA) via Airtable's Health Information Exhibit. Users on Free, Team, or Business plans are not permitted to store protected health information (PHI) on the platform.
A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th...
Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu...
Plan Tier: Restricted exclusively to Airtable's Enterprise Scale plan. Legal Agreement: Requires executing a formal BAA/Health Information Exhibit with Airtable. Lower Tiers: Prohibited from holding electronic Protected Health Information (ePHI) on lower-tier subscription plans.
- **Plan Tier:** Restricted exclusively to [Airtable's Enterprise Scale plan](https://support.airtable.com/docs/understanding-hipaa-at-airtable).
- **Legal Agreement:** Requires executing a formal BAA/Health Information Exhibit with Airtable.
- **Lower Tiers:** Prohibited from holding electronic Protected Health Information (ePHI) on lower-tier subscription plans.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.paubox.com/blog/airtable-hipaa-compliant)
What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are...
Storage Boundaries: ePHI must be stored strictly inside standard "Records" within bases or interfaces. Feature Exclusions: Do not use Airtable AI or include PHI in support tickets or customer service chats. Integrations & Communication: Automated emails from automations cannot contain raw PHI, and any connected third-party tool requires its own independent BAA. Prohibited Uses: The platform cannot be utilized as a patient portal.
- **Storage Boundaries:** ePHI must be stored strictly inside standard "Records" within bases or interfaces.
- **Feature Exclusions:** Do not use Airtable AI or include PHI in support tickets or customer service chats.
- **Integrations & Communication:** Automated emails from automations cannot contain raw PHI, and any connected third-party tool requires its own independent BAA.
- **Prohibited Uses:** The platform cannot be utilized as a patient portal.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)
Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out...
Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP...
If you want, let me know:Your current Airtable plan level
What type of patient data you plan to track
I can help you figure out if Airtable fits your workflow or if you need an alternative setup.
If you want, let me know:
- Your current **Airtable plan level**
- What **type of patient data** you plan to track
I can help you figure out if Airtable fits your workflow or if you need an alternative setup.
Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...
Google AIOAbsentIs Airtable HIPAA compliant for patient data?slot 1Aug 14, 12:45 PM
Yes, Airtable is HIPAA compliant, but only for organizations on the **Enterprise Scale plan** that sign a Business Associate Agreement (BAA) via Airtable's Health Information Exhibit . It is strictly prohibited to store protected health information (PHI) on Free, Team, or Business plans.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Plan and Agreement Requirements
- **Enterprise Scale Plan Only:** Lower-tier plans do not support HIPAA compliance or qualify for a BAA.
- **Business Associate Agreement (BAA):** You must execute Airtable's Health Information Exhibit before inputting any electronic Protected Health Information (ePHI).[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.paubox.com/blog/airtable-hipaa-compliant)
Usage Rules and Restrictions
- **Data Location:** ePHI must only be stored inside standard record cells within bases or interfaces, not in metadata, comments, or unsupported features.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)
- **Airtable AI:** Do not enable or use Airtable AI in workspaces containing ePHI unless specific supplemental health terms are accepted.[](https://www.airtable.com/company/health-info-datasheet)
- **No Patient Portals:** Airtable cannot be used as a public or patient-facing portal.[](https://www.airtable.com/company/health-info-datasheet)
- **Integrations and Support:** Third-party integrations must independently support HIPAA compliance, and users must avoid putting PHI into support tickets or screenshots.[](https://www.airtable.com/company/health-info-datasheet)
If you'd like, let me know:
- What **plan** your organization currently uses
- What **type of healthcare workflow** you plan to build
I can help you review if your setup meets these requirements.
Yes, Airtable is HIPAA compliant, but only for organizations on the Enterprise Scale plan that sign a Business Associate Agreement (BAA) via Airtable's Health Information Exhibit. It is strictly prohibited to store protected health information (PHI) on Free, Team, or Business plans.
A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th...
Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu...
Enterprise Scale Plan Only: Lower-tier plans do not support HIPAA compliance or qualify for a BAA. Business Associate Agreement (BAA): You must execute Airtable's Health Information Exhibit before inputting any electronic Protected Health Information (ePHI).
- **Enterprise Scale Plan Only:** Lower-tier plans do not support HIPAA compliance or qualify for a BAA.
- **Business Associate Agreement (BAA):** You must execute Airtable's Health Information Exhibit before inputting any electronic Protected Health Information (ePHI).[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.paubox.com/blog/airtable-hipaa-compliant)
What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are...
Data Location: ePHI must only be stored inside standard record cells within bases or interfaces, not in metadata, comments, or unsupported features. Airtable AI: Do not enable or use Airtable AI in workspaces containing ePHI unless specific supplemental health terms are accepted. No Patient Portals: Airtable cannot be used as a public or patient-facing portal. Integrations and Support: Third-party integrations must independently support HIPAA compliance, and users must avoid putting PHI into support tickets or screenshots.
- **Data Location:** ePHI must only be stored inside standard record cells within bases or interfaces, not in metadata, comments, or unsupported features.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)
- **Airtable AI:** Do not enable or use Airtable AI in workspaces containing ePHI unless specific supplemental health terms are accepted.[](https://www.airtable.com/company/health-info-datasheet)
- **No Patient Portals:** Airtable cannot be used as a public or patient-facing portal.[](https://www.airtable.com/company/health-info-datasheet)
- **Integrations and Support:** Third-party integrations must independently support HIPAA compliance, and users must avoid putting PHI into support tickets or screenshots.[](https://www.airtable.com/company/health-info-datasheet)
Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out...
If you'd like, let me know:What plan your organization currently uses
What type of healthcare workflow you plan to build
I can help you review if your setup meets these requirements.
If you'd like, let me know:
- What **plan** your organization currently uses
- What **type of healthcare workflow** you plan to build
I can help you review if your setup meets these requirements.
Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...
Google AIOAbsentIs Airtable HIPAA compliant for patient data?slot 2Aug 13, 12:48 PM
Yes, Airtable is HIPAA compliant **only** for customers on its **Enterprise Scale plan** who sign an official [Airtable Health Information Exhibit](https://www.airtable.com/company/hipaa-airtable) , which includes a Business Associate Agreement (BAA). It is strictly **not** compliant or permitted for patient data (PHI) on Free, Team, or Business plans.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/)[[3]](https://www.paubox.com/blog/airtable-hipaa-compliant)Plan and Agreement Requirements
- **Enterprise Scale Plan:** Required to unlock the environment and security controls needed for healthcare data.
- **Executed BAA:** You must sign the Health Information Exhibit/BAA directly with Airtable before adding any protected health information (ePHI).
- **Lower Tiers Prohibited:** Storing patient data on Free, Team, or Business plans violates terms of service.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)
Scope and Restrictions of Airtable's BAA
- **Allowed:** Storing ePHI strictly within standard records inside Airtable bases.
- **Excluded:** Airtable AI features are completely excluded and cannot be used with patient data.
- **Notifications:** Automated emails sent out by Airtable cannot contain PHI.
- **Portals:** Airtable cannot be utilized to host a patient-facing portal.
- **Integrations:** Third-party extensions, scripts, or integrations must also individually support HIPAA compliance.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)
If you'd like, let me know:
- What **tier of Airtable** your organization currently uses
- What **type of workflow or data** you plan to build
I can help you evaluate if Airtable fits your needs or if an alternative tool is better.
Yes, Airtable is HIPAA compliant only for customers on its Enterprise Scale plan who sign an official Airtable Health Information Exhibit, which includes a Business Associate Agreement (BAA). It is strictly not compliant or permitted for patient data (PHI) on Free, Team, or Business plans.
A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th...
Key takeaways * Airtable HIPAA support is available only on the Enterprise Scale plan. Free, Team, and Business plan customers can...
What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are...
Enterprise Scale Plan: Required to unlock the environment and security controls needed for healthcare data. Executed BAA: You must sign the Health Information Exhibit/BAA directly with Airtable before adding any protected health information (ePHI). Lower Tiers Prohibited: Storing patient data on Free, Team, or Business plans violates terms of service.
- **Enterprise Scale Plan:** Required to unlock the environment and security controls needed for healthcare data.
- **Executed BAA:** You must sign the Health Information Exhibit/BAA directly with Airtable before adding any protected health information (ePHI).
- **Lower Tiers Prohibited:** Storing patient data on Free, Team, or Business plans violates terms of service.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)
Is Airtable Technically HIPAA-Compliant? * Enterprise-only paywall. HIPAA support didn't exist until April 2024 and is still gated...
Allowed: Storing ePHI strictly within standard records inside Airtable bases. Excluded: Airtable AI features are completely excluded and cannot be used with patient data. Notifications: Automated emails sent out by Airtable cannot contain PHI. Portals: Airtable cannot be utilized to host a patient-facing portal. Integrations: Third-party extensions, scripts, or integrations must also individually support HIPAA compliance.
- **Allowed:** Storing ePHI strictly within standard records inside Airtable bases.
- **Excluded:** Airtable AI features are completely excluded and cannot be used with patient data.
- **Notifications:** Automated emails sent out by Airtable cannot contain PHI.
- **Portals:** Airtable cannot be utilized to host a patient-facing portal.
- **Integrations:** Third-party extensions, scripts, or integrations must also individually support HIPAA compliance.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)
Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu...
If you'd like, let me know:What tier of Airtable your organization currently uses
What type of workflow or data you plan to build
I can help you evaluate if Airtable fits your needs or if an alternative tool is better.
If you'd like, let me know:
- What **tier of Airtable** your organization currently uses
- What **type of workflow or data** you plan to build
I can help you evaluate if Airtable fits your needs or if an alternative tool is better.
Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...
Google AIOAbsentIs Airtable HIPAA compliant for patient data?slot 1Aug 12, 12:53 PM
Airtable is HIPAA compliant **only** for customers on the custom-priced **Enterprise Scale plan** who sign an official **Health Information Exhibit** and Business Associate Agreement (BAA). Users on Free, Team, or Business plans are strictly prohibited from storing protected health information (PHI).[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://www.specode.ai/blog/is-airtable-hipaa-compliant)[[3]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Requirements and Limitations
- **Plan Tier:** Restricted exclusively to [Airtable Enterprise Scale](https://www.airtable.com/company/hipaa-airtable) subscriptions.
- **Storage Rules:** ePHI must only live inside records within approved bases or interfaces.
- **Exclusions:** Airtable AI features and customer support tickets must not contain PHI.
- **Usage Restrictions:** The platform cannot be used as a patient portal.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.paubox.com/blog/airtable-hipaa-compliant)
If you'd like, let me know:
- Your **current Airtable plan**
- **What kind of patient data** you plan to track
I can help you evaluate your compliance options.
Airtable is HIPAA compliant only for customers on the custom-priced Enterprise Scale plan who sign an official Health Information Exhibit and Business Associate Agreement (BAA). Users on Free, Team, or Business plans are strictly prohibited from storing protected health information (PHI).
A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th...
Is Airtable Technically HIPAA-Compliant? * Enterprise-only paywall. HIPAA support didn't exist until April 2024 and is still gated...
Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu...
Plan Tier: Restricted exclusively to Airtable Enterprise Scale subscriptions. Storage Rules: ePHI must only live inside records within approved bases or interfaces. Exclusions: Airtable AI features and customer support tickets must not contain PHI. Usage Restrictions: The platform cannot be used as a patient portal.
- **Plan Tier:** Restricted exclusively to [Airtable Enterprise Scale](https://www.airtable.com/company/hipaa-airtable) subscriptions.
- **Storage Rules:** ePHI must only live inside records within approved bases or interfaces.
- **Exclusions:** Airtable AI features and customer support tickets must not contain PHI.
- **Usage Restrictions:** The platform cannot be used as a patient portal.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.paubox.com/blog/airtable-hipaa-compliant)
Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out...
What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are...
If you'd like, let me know:Your current Airtable plan
What kind of patient data you plan to track
I can help you evaluate your compliance options.
If you'd like, let me know:
- Your **current Airtable plan**
- **What kind of patient data** you plan to track
I can help you evaluate your compliance options.
Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...
Google AI ModeAbsentIs Airtable HIPAA compliant for patient data?slot 5Aug 11, 12:49 PM
**Yes, Airtable can be HIPAA compliant** , but only under strict, specific conditions . It is not compliant out of the box for standard or lower-tier plans.[](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/)[[2]](https://www.business-automated.com/tutorials/is-airtable-safe-security-guide)
The Core Requirements for HIPAA on Airtable
1. **Enterprise Scale Plan Required:** HIPAA compliance support and the ability to sign a Business Associate Agreement (BAA) are restricted exclusively to customers on Airtable's **Enterprise Scale** plan. If you are on the Free, Team, or Business plans, storing Protected Health Information (PHI) violates Airtable's terms.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)
2. **Execute a BAA:** You must work with an Airtable account executive to sign their Health Information Exhibit, which contains the formal **Business Associate Addendum (BAA)**.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)
3. **Admin Panel Activation:** Once contracted, an administrator must explicitly enable HIPAA compliance for the organization or specific organizational units via the [Airtable Admin Panel](https://support.airtable.com/docs/understanding-hipaa-at-airtable).[[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)
Critical Restrictions & Boundaries
Even with an active BAA and an Enterprise plan, Airtable enforces strict boundary rules outlined in their [Airtable Health Information Datasheet](https://www.airtable.com/company/health-info-datasheet):[[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)
- **Where PHI can live:** Electronic Protected Health Information (ePHI) may **only** be stored within records inside Airtable bases or interfaces.
- **Airtable AI:** AI features are completely excluded from the BAA coverage. You must not store ePHI in workspaces where Airtable AI is active (unless under specific supplemental health terms, though it is generally restricted).
- **Automations & Emails:** Automated outgoing emails sent directly through Airtable automations **cannot** contain PHI.
- **Customer Support:** You must never include ePHI or medical details in screenshots, support tickets, or chats when communicating with Airtable support.
- **No Patient Portals:** Airtable cannot be used as a patient-facing portal or direct medical interface for patients.
- **Third-Party Integrations:** Any tool you connect to Airtable (such as Zapier, Slack, or custom APIs) must also be HIPAA-compliant and covered by its own separate BAA.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)
If you're planning a setup, tell me:
- What **tier of Airtable** your organization currently uses
- What **kind of patient data** or workflow you are trying to build
I can help you evaluate whether Airtable fits your project or if a specialized backend is a safer choice.
Yes, Airtable can be HIPAA compliant, but only under strict, specific conditions. It is not compliant out of the box for standard or lower-tier plans.
Key takeaways * Airtable HIPAA support is available only on the Enterprise Scale plan. Free, Team, and Business plan customers can...
Every couple of weeks a client asks us, "Is Airtable HIPAA compliant?" The honest answer is "it depends on the configuration, and ...
The Core Requirements for HIPAA on Airtable
Even with an active BAA and an Enterprise plan, Airtable enforces strict boundary rules outlined in their Airtable Health Information Datasheet :
Even with an active BAA and an Enterprise plan, Airtable enforces strict boundary rules outlined in their [Airtable Health Information Datasheet](https://www.airtable.com/company/health-info-datasheet):[[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)
Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out...
Airtable's terms prohibit storing ePHI on the Free, Team, and Business plans, so anyone below Enterprise Scale should keep treatin...
Where PHI can live: Electronic Protected Health Information (ePHI) may only be stored within records inside Airtable bases or interfaces. Airtable AI: AI features are completely excluded from the BAA coverage. You must not store ePHI in workspaces where Airtable AI is active (unless under specific supplemental health terms, though it is generally restricted). Automations & Emails: Automated outgoing emails sent directly through Airtable automations cannot contain PHI. Customer Support: You must never include ePHI or medical details in screenshots, support tickets, or chats when communicating with Airtable support. No Patient Portals: Airtable cannot be used as a patient-facing portal or direct medical interface for patients. Third-Party Integrations: Any tool you connect to Airtable (such as Zapier, Slack, or custom APIs) must also be HIPAA-compliant and covered by its own separate BAA.
- **Where PHI can live:** Electronic Protected Health Information (ePHI) may **only** be stored within records inside Airtable bases or interfaces.
- **Airtable AI:** AI features are completely excluded from the BAA coverage. You must not store ePHI in workspaces where Airtable AI is active (unless under specific supplemental health terms, though it is generally restricted).
- **Automations & Emails:** Automated outgoing emails sent directly through Airtable automations **cannot** contain PHI.
- **Customer Support:** You must never include ePHI or medical details in screenshots, support tickets, or chats when communicating with Airtable support.
- **No Patient Portals:** Airtable cannot be used as a patient-facing portal or direct medical interface for patients.
- **Third-Party Integrations:** Any tool you connect to Airtable (such as Zapier, Slack, or custom APIs) must also be HIPAA-compliant and covered by its own separate BAA.[](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)
If you're planning a setup, tell me:
What tier of Airtable your organization currently uses What kind of patient data or workflow you are trying to build
- What **tier of Airtable** your organization currently uses
- What **kind of patient data** or workflow you are trying to build
I can help you evaluate whether Airtable fits your project or if a specialized backend is a safer choice.
Identifying HIPAA compliance at your org * Navigate to admin panel (opens in new tab). * Click the Settings option on the left sid...
Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu...
Google AIOAbsentIs Airtable HIPAA compliant for patient data?slot 1Aug 11, 12:49 PM
Airtable is HIPAA compliant **only** for customers on the **Enterprise Scale plan** who sign a Business Associate Agreement (BAA) via Airtable's Health Information Exhibit . Users on Free, Team, or Business plans are strictly prohibited from storing protected health information (PHI) on the platform.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/)[[3]](https://www.paubox.com/blog/airtable-hipaa-compliant)Plan and Agreement Requirements
- Available exclusively on the **Enterprise Scale plan**.
- Requires a signed **Health Information Exhibit** (which includes a BAA).
- Lower-tier plans (Free, Team, Business) **cannot** be made compliant and do not support BAAs.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.hipaatizer.com/integrations/airtable-hipaa-compliant/)
Usage Restrictions and Rules
- **Where data lives:** ePHI and medical details must only be stored within records inside bases or interfaces.
- **Exclusions:** Airtable AI features and general customer support interactions are excluded from the BAA scope.
- **Communications:** You cannot use Airtable as a patient portal, and automated emails generated by the platform must not contain PHI.
- **Integrations:** Any third-party tools or external systems connected to your bases must also independently meet HIPAA standards.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)
If you would like to proceed, let me know:
- **What tier of Airtable** your organization currently uses
- **What type of data or workflow** you plan to build
I can help you evaluate whether an enterprise upgrade fits your setup or suggest alternative options.
Airtable is HIPAA compliant only for customers on the Enterprise Scale plan who sign a Business Associate Agreement (BAA) via Airtable's Health Information Exhibit. Users on Free, Team, or Business plans are strictly prohibited from storing protected health information (PHI) on the platform.
A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th...
Key takeaways * Airtable HIPAA support is available only on the Enterprise Scale plan. Free, Team, and Business plan customers can...
What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are...
Available exclusively on the Enterprise Scale plan. Requires a signed Health Information Exhibit (which includes a BAA). Lower-tier plans (Free, Team, Business) cannot be made compliant and do not support BAAs.
- Available exclusively on the **Enterprise Scale plan**.
- Requires a signed **Health Information Exhibit** (which includes a BAA).
- Lower-tier plans (Free, Team, Business) **cannot** be made compliant and do not support BAAs.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)[[2]](https://www.hipaatizer.com/integrations/airtable-hipaa-compliant/)
Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu...
Airtable is HIPAA Compliant only on its Enterprise plan. With HIPAAtizer, keep PHI secure and send form data to Airtable on any pl...
Where data lives: ePHI and medical details must only be stored within records inside bases or interfaces. Exclusions: Airtable AI features and general customer support interactions are excluded from the BAA scope. Communications: You cannot use Airtable as a patient portal, and automated emails generated by the platform must not contain PHI. Integrations: Any third-party tools or external systems connected to your bases must also independently meet HIPAA standards.
- **Where data lives:** ePHI and medical details must only be stored within records inside bases or interfaces.
- **Exclusions:** Airtable AI features and general customer support interactions are excluded from the BAA scope.
- **Communications:** You cannot use Airtable as a patient portal, and automated emails generated by the platform must not contain PHI.
- **Integrations:** Any third-party tools or external systems connected to your bases must also independently meet HIPAA standards.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)
Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out...
Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...
Google AIOAbsentIs Airtable HIPAA compliant for patient data?slot 1Aug 10, 01:49 PM
Yes, Airtable can be HIPAA compliant, but only for **Enterprise Scale** plan subscribers who execute a formal **Health Information Exhibit (BAA)** with the company . It is strictly prohibited to store protected health information (PHI) on Free, Team, or Business tier plans.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Plan and Agreement Requirements
- Subscribe to the Airtable Enterprise Scale Plan.
- Sign Airtable's Health Information Exhibit, which includes a Business Associate Agreement (BAA).
- Enforce security controls like Single Sign-On (SSO) and audit logs.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)
Scope and Restrictions
- **Data location:** PHI may only reside within records inside bases.
- **Excluded features:** Airtable AI and automated email notifications cannot contain or process PHI.
- **Usage boundaries:** Airtable cannot be used as a patient portal.
- **Integrations:** Third-party extensions or integrations must independently support HIPAA compliance.[](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/)
If you want, let me know:
- Your **current Airtable plan**
- What **type of patient data** you plan to track
I can help you evaluate if Airtable fits your workflow or if another tool works better.
Yes, Airtable can be HIPAA compliant, but only for Enterprise Scale plan subscribers who execute a formal Health Information Exhibit (BAA) with the company. It is strictly prohibited to store protected health information (PHI) on Free, Team, or Business tier plans.
A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th...
Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu...
Subscribe to the Airtable Enterprise Scale Plan. Sign Airtable's Health Information Exhibit, which includes a Business Associate Agreement (BAA). Enforce security controls like Single Sign-On (SSO) and audit logs.
- Subscribe to the Airtable Enterprise Scale Plan.
- Sign Airtable's Health Information Exhibit, which includes a Business Associate Agreement (BAA).
- Enforce security controls like Single Sign-On (SSO) and audit logs.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)[[2]](https://www.accountablehq.com/post/is-airtable-hipaa-compliant-baa-phi-and-security-explained)
Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP...
HIPAA Compliance at Airtable Whether Airtable is “HIPAA compliant” for your organization depends on two things: (1) a signed Busin...
Data location: PHI may only reside within records inside bases. Excluded features: Airtable AI and automated email notifications cannot contain or process PHI. Usage boundaries: Airtable cannot be used as a patient portal. Integrations: Third-party extensions or integrations must independently support HIPAA compliance.
- **Data location:** PHI may only reside within records inside bases.
- **Excluded features:** Airtable AI and automated email notifications cannot contain or process PHI.
- **Usage boundaries:** Airtable cannot be used as a patient portal.
- **Integrations:** Third-party extensions or integrations must independently support HIPAA compliance.[](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/) [[1]](https://www.knack.com/blog/knack-health-vs-airtable-hipaa/)
Key takeaways * Airtable HIPAA support is available only on the Enterprise Scale plan. Free, Team, and Business plan customers can...
Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...
Google AIOAbsentIs Airtable HIPAA compliant for patient data?slot 1Aug 9, 02:43 PM
Airtable is HIPAA compliant **only** for customers on the highest-tier **Enterprise Scale** plan who sign a Business Associate Agreement (BAA) through Airtable's Health Information Exhibit . Users on Free, Team, or Business plans are strictly prohibited from storing electronic Protected Health Information (ePHI).[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://www.paubox.com/blog/airtable-hipaa-compliant)[[3]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Requirements and Plan Restrictions
- **Enterprise Scale Plan:** Must be actively subscribed to Airtable's Enterprise Scale tier.
- **Executed BAA:** Must sign the official Health Information Exhibit containing the Business Associate Addendum.
- **Lower Tiers:** Not available or compliant on standard or self-serve paid tiers.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)
Platform and Feature Restrictions
- **Data Location:** ePHI must only reside inside record fields within specific Airtable bases or interfaces.
- **Airtable AI:** Do not use or enable Airtable AI in workspaces holding ePHI unless specific supplemental health terms are accepted.
- **Support Tickets:** Never include patient data or ePHI in screenshots sent to customer support.
- **Patient Portals:** Airtable cannot be used as a direct patient portal.
- **Integrations & Automations:** External integrations and automated emails must independently meet HIPAA security standards.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)
If you'd like, let me know:
- What **tier of Airtable** your organization currently uses
- What **kind of data or workflow** you plan to build
I can help you determine if the Enterprise tier fits your needs or suggest alternative paths.
Airtable is HIPAA compliant only for customers on the highest-tier Enterprise Scale plan who sign a Business Associate Agreement (BAA) through Airtable's Health Information Exhibit. Users on Free, Team, or Business plans are strictly prohibited from storing electronic Protected Health Information (ePHI).
A business associate, in the context of HIPAA, refers to any individual or entity that performs certain functions or activities th...
What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are...
Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu...
Enterprise Scale Plan: Must be actively subscribed to Airtable's Enterprise Scale tier. Executed BAA: Must sign the official Health Information Exhibit containing the Business Associate Addendum. Lower Tiers: Not available or compliant on standard or self-serve paid tiers.
- **Enterprise Scale Plan:** Must be actively subscribed to Airtable's Enterprise Scale tier.
- **Executed BAA:** Must sign the official Health Information Exhibit containing the Business Associate Addendum.
- **Lower Tiers:** Not available or compliant on standard or self-serve paid tiers.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.jotform.com/hipaa/is-hipaa-compliant/airtable/)
Airtable is transparent when it comes to HIPAA compliance. Its website states that Airtable is designed to adhere to the three HIP...
Data Location: ePHI must only reside inside record fields within specific Airtable bases or interfaces. Airtable AI: Do not use or enable Airtable AI in workspaces holding ePHI unless specific supplemental health terms are accepted. Support Tickets: Never include patient data or ePHI in screenshots sent to customer support. Patient Portals: Airtable cannot be used as a direct patient portal. Integrations & Automations: External integrations and automated emails must independently meet HIPAA security standards.
- **Data Location:** ePHI must only reside inside record fields within specific Airtable bases or interfaces.
- **Airtable AI:** Do not use or enable Airtable AI in workspaces holding ePHI unless specific supplemental health terms are accepted.
- **Support Tickets:** Never include patient data or ePHI in screenshots sent to customer support.
- **Patient Portals:** Airtable cannot be used as a direct patient portal.
- **Integrations & Automations:** External integrations and automated emails must independently meet HIPAA security standards.[](https://www.airtable.com/company/health-info-datasheet) [[1]](https://www.airtable.com/company/health-info-datasheet)
Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out...
Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...
Google AIOAbsentIs Airtable HIPAA compliant for patient data?slot 1Aug 8, 01:04 PM
Yes, Airtable is HIPAA compliant **only** for customers on the **Enterprise Scale plan** who sign Airtable's Health Information Exhibit , which includes a Business Associate Agreement (BAA). It is **not** HIPAA compliant on Free, Team, or Business plans.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://support.airtable.com/docs/understanding-hipaa-at-airtable)[[2]](https://teachmehipaa.com/hipaa-baa/productivity/airtable/)Plan and Agreement Requirements
- **Enterprise Scale Plan:** Required to unlock and use Airtable's HIPAA compliance capabilities.
- **Business Associate Agreement (BAA):** Must be executed via Airtable's Health Information Exhibit.
- **Strict Prohibition:** Storing protected health information (PHI) or electronic protected health information (ePHI) on non-Enterprise plans violates terms.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.paubox.com/blog/airtable-hipaa-compliant)
Key Usage Restrictions and Rules
- **Data Location:** ePHI must be stored strictly within standard records inside Airtable bases or interfaces.
- **Airtable AI:** AI features are excluded from HIPAA coverage and must not be used in workspaces containing PHI unless specific supplemental terms are accepted and supported.
- **Support & Communications:** Do not send screenshots or tickets containing medical information or ePHI to customer support.
- **Use Cases:** Airtable cannot currently be used to build or function as a patient portal.
- **Integrations:** Third-party integrations must be disabled or independently verified as HIPAA-compliant by your organization.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.knack.com/blog/hipaa-compliance-checklist-no-code/)
If you'd like, let me know:
- What **tier of Airtable** your organization currently uses
- What kind of **healthcare workflow or data** you plan to manage
I can help you evaluate whether Airtable fits your operational setup or if alternative tools are a better match.
Yes, Airtable is HIPAA compliant only for customers on the Enterprise Scale plan who sign Airtable's Health Information Exhibit, which includes a Business Associate Agreement (BAA). It is not HIPAA compliant on Free, Team, or Business plans.
Table_title: Understanding HIPAA at Airtable Table_content: | Plan availability | | --- | | Enterprise Scale plans only | ... A bu...
Airtable and HIPAA compliance Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Bu...
Enterprise Scale Plan: Required to unlock and use Airtable's HIPAA compliance capabilities. Business Associate Agreement (BAA): Must be executed via Airtable's Health Information Exhibit. Strict Prohibition: Storing protected health information (PHI) or electronic protected health information (ePHI) on non-Enterprise plans violates terms.
- **Enterprise Scale Plan:** Required to unlock and use Airtable's HIPAA compliance capabilities.
- **Business Associate Agreement (BAA):** Must be executed via Airtable's Health Information Exhibit.
- **Strict Prohibition:** Storing protected health information (PHI) or electronic protected health information (ePHI) on non-Enterprise plans violates terms.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.paubox.com/blog/airtable-hipaa-compliant)
What does the Airtable BAA exclude? Airtable's BAA is available only to Enterprise Scale customers. Customers not on this plan are...
Data Location: ePHI must be stored strictly within standard records inside Airtable bases or interfaces. Airtable AI: AI features are excluded from HIPAA coverage and must not be used in workspaces containing PHI unless specific supplemental terms are accepted and supported. Support & Communications: Do not send screenshots or tickets containing medical information or ePHI to customer support. Use Cases: Airtable cannot currently be used to build or function as a patient portal. Integrations: Third-party integrations must be disabled or independently verified as HIPAA-compliant by your organization.
- **Data Location:** ePHI must be stored strictly within standard records inside Airtable bases or interfaces.
- **Airtable AI:** AI features are excluded from HIPAA coverage and must not be used in workspaces containing PHI unless specific supplemental terms are accepted and supported.
- **Support & Communications:** Do not send screenshots or tickets containing medical information or ePHI to customer support.
- **Use Cases:** Airtable cannot currently be used to build or function as a patient portal.
- **Integrations:** Third-party integrations must be disabled or independently verified as HIPAA-compliant by your organization.[](https://support.airtable.com/docs/understanding-hipaa-at-airtable) [[1]](https://www.airtable.com/company/health-info-datasheet)[[2]](https://www.knack.com/blog/hipaa-compliance-checklist-no-code/)
Requirements for HIPAA and/or CMIA Customers * Automations | Airtable automations allow users to automate workflows, including out...
Do AI features in no-code platforms need to be HIPAA-compliant separately? Yes, and importantly, this is one of the most commonly ...
Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act ...
First cited Aug 8, most recently Aug 17.