Airtable is a cloud-based productivity platform that combines the functionality of spreadsheets and relational databases in a single collaborative workspace. It allows organizations to create, organize, and share information with automation, reporting, and workflow management features.

With Airtable, teams can build custom databases that retain the familiar look and feel of a spreadsheet.

Is Airtable HIPAA compliant? Yes, based on our research, Airtable can be HIPAA compliant.

 

What changed this year?

As of June 2026, our review did not identify any publicly disclosed changes to Airtable's HIPAA-related policies or business associate agreement (BAA) terms. Airtable continues to offer HIPAA support through its Enterprise Scale plan and Health Information Exhibit.

 

Will Airtable sign a business associate agreement (BAA)?

Yes, Airtable will sign a business associate agreement (BAA), which can be reviewed as part of its Health Information Exhibit.

 

What does the Airtable BAA cover?

The Airtable BAA is part of the Health Information Exhibit, which supports HIPAA compliance for Enterprise Scale customers. Airtable states, "Airtable enables our customers to utilize our solution in compliance with the Health Insurance Portability and Accountability Act (HIPAA)."

The Airtable BAA covers:

  • Protection of protected health information (PHI)
  • Compliance with the HIPAA Privacy Rule
  • Compliance with the HIPAA Security Rule
  • Compliance with the HIPAA Breach Notification Rule
  • Enterprise Key Management (EKM) for encryption
  • Data Loss Prevention (DLP) integration
  • Enterprise Single Sign-On (SSO)
  • Enterprise Audit Logs

 

What does the Airtable BAA exclude?

Airtable limits HIPAA eligibility to customers on its Enterprise Scale plan who have executed a Health Information Exhibit.

The terms state, "Customers are not permitted to store [electronic] PHI or medical information in their Airtable environment if they are not on the Enterprise Scale plan and have not executed a Health Information Exhibit."

As a result, Airtable's lower-tier plans cannot store electronic protected health information (ePHI) in Airtable and should not rely on those plans for HIPAA-regulated use cases.

 

Conclusion

Airtable signs a BAA and is therefore HIPAA compliant.

Learn more: HIPAA Compliant Email: The Definitive Guide

 

FAQs

What is a business associate agreement?

A business associate agreement (BAA) is a legally binding contract establishing a relationship between a covered entity under the Health Insurance Portability and Accountability Act (HIPAA) and its business associates. The purpose of this agreement is to ensure the proper protection of personal health information (PHI) as required by HIPAA regulations.

 

What is HIPAA?

The Health Insurance Portability and Accountability Act (HIPAA) sets national standards for protecting the privacy and security of certain health information, known as protected health information (PHI).

HIPAA is designed to protect the privacy and security of individuals’ health information and to ensure that healthcare providers and insurers can securely exchange electronic health information. Violations of HIPAA can result in significant fines and penalties for covered entities.

 

Who does HIPAA apply to?

HIPAA applies to covered entities, which include healthcare providers, health plans, and healthcare clearinghouses. It also applies to business associates of these covered entities. These are entities that perform certain functions or activities on behalf of the covered entity.