Airtable Forms is a form-building feature within Airtable, a cloud-based productivity platform that combines spreadsheet and database functionality.

With Airtable Forms, organizations can collect structured data directly into Airtable bases, automate workflows, and manage information collaboratively in real time. This helps businesses and teams streamline data collection and connect form responses to broader project and database management.

Is Airtable Forms HIPAA compliant? Yes, based on our research, Airtable can be HIPAA compliant.

 

Will Airtable sign a business associate agreement (BAA)?

Yes, Airtable will sign a business associate agreement, available exclusively to customers on the Enterprise Scale plan. Customers subject to HIPAA who intend to store ePHI in Airtable must execute Airtable's Health Information Exhibit, which includes the Business Associate Addendum. Organizations not on the Enterprise Scale plan are not permitted to store ePHI or medical information in Airtable and must contact Airtable's sales team to discuss upgrading.

 

What does the Airtable BAA cover?

The Airtable BAA covers the use and disclosure of protected health information (PHI) for customers acting as a covered entity or business associate under HIPAA. Their Health Information Datasheet confirms that Airtable "enables our customers to utilize our solution in compliance" with HIPAA requirements for Enterprise Scale customers who have executed the Health Information Exhibit.

Supporting security capabilities include:

  • Enterprise Key Management (EKM), giving customers control over encryption keys, rotation, and the ability to revoke access
  • Single Sign-On (SSO) for identity-driven access control
  • Data loss prevention (DLP) controls
  • Exportable audit logs for monitoring access to ePHI

 

What does the Airtable BAA exclude?

Not all Airtable services and integrations support HIPAA compliance, and the types of ePHI a customer chooses to input are governed by the usage restrictions in the Health Information Exhibit.

 

Conclusion

Airtable signs a BAA and is, therefore, HIPAA compliant for Enterprise customers.

Learn more: HIPAA Compliant Email: The Definitive Guide

 

FAQs

What is a business associate agreement?

A business associate agreement (BAA) is a legally binding contract establishing a relationship between a covered entity under the Health Insurance Portability and Accountability Act (HIPAA) and its business associates. The purpose of this agreement is to ensure the proper protection of personal health information (PHI) as required by HIPAA regulations.

 

What is HIPAA?

The Health Insurance Portability and Accountability Act (HIPAA) sets national standards for protecting the privacy and security of certain health information, known as protected health information (PHI).

HIPAA is designed to protect the privacy and security of individuals' health information and to ensure that healthcare providers and insurers can securely exchange electronic health information. Violations of HIPAA can result in fines and penalties for covered entities.

 

Who does HIPAA apply to?

HIPAA applies to covered entities, which include healthcare providers, health plans, and healthcare clearinghouses. It also applies to business associates of these covered entities. These are entities that perform certain functions or activities on behalf of the covered entity.