Is Airtable HIPAA compliant?

Airtable in healthcare

In a healthcare setting, Airtable can now handle more than it used to. Practices on standard plans can still use it for work that never touches Protected Health Information (PHI): managing schedules, tracking inventory, or organizing non-sensitive projects such as community outreach programs and wellness events. With the right plan and paperwork in place, though, the platform can also support PHI-bearing work, including appointment tracking, care team workflows, and relational databases that follow a patient's journey and trigger actions along the way. The dividing line is your subscription tier, and it's a hard one; which side you're on determines whether patient information can enter the platform at all.

Airtable and HIPAA compliance

Airtable now supports its customers' HIPAA compliance, a reversal of its earlier position that no Business Associate Agreement (BAA) was available at any price. Since April 2024, customers on the Enterprise Scale plan can sign Airtable's Health Information Exhibit, which contains a Business Associate Addendum, and then collect, store, and analyze PHI in their bases. The boundary is drawn tightly: PHI may only live in records within bases, it can't appear in automated emails or be shared with Airtable's support team, and Airtable AI sits outside the agreement entirely. The platform also can't serve as a patient portal or the technology behind one, and every connected integration must support HIPAA compliance in its own right. Airtable's terms prohibit storing ePHI on the Free, Team, and Business plans, so anyone below Enterprise Scale should keep treating the platform as a PHI-free zone. Detailed guidelines can be found on Airtable's HIPAA page and in its Health Information Datasheet.