All tools / Workspace and projects
A
On some plansIs Airtable HIPAA compliant?
Checked 6 Nov 2026 from 3 vendor sources
Airtable offers a BAA inside its Health Information Exhibit only to Enterprise Scale customers acting as covered entities or business associates. So the answer depends on your plan. Check yours below before any patient data goes in.
| Plan or product | BAA |
|---|---|
| Plans other than Enterprise Scale (downgrading ends coverage and ePHI must be removed) | Not covered |
| Enterprise Scale | Covered |
What the BAA leaves out
- Use as a patient portal
- Automated emails with PHI in body or subject
- Send-record feature for records with PHI
- PHI in support tickets, base names, descriptions, access requests or interface and workspace names
- Airtable AI unless the AI terms and health supplement are accepted
- Data leaving Airtable through integrations
How to get the BAA
Contact your Airtable account executive, who guides signing; Airtable then turns the feature on internally.
What the vendor says to do
- Contact your account executive to begin the BAA process
- With Enterprise Hub, collect the Account IDs of org units needing HIPAA
- Sign the BAA
- Verify in admin panel under Settings, Security & compliance, Compliance, HIPAA
- Enable SSO, review access regularly, and allow integrations only after a HIPAA assessment
Proof from the vendor
- Understanding HIPAA at AirtableEnterprise Scale only, BAA in Health Information Exhibit, setup, org unit scope
- Health Information DatasheetExclusions, AI terms requirement, patient portal limit, downgrade effect
- HIPAA and FERPA compliance at AirtableHIPAA limited to Enterprise Scale
This isn’t legal advice. A BAA is one requirement. Your clinic still has to set the tool up correctly and control who has access. Vendors change their terms, so confirm with the vendor before you sign. PHI means protected health information, which includes patient data.