Protecting customer data is core to Airtable. We take privacy and security into consideration in all aspects of the platform and supporting infrastructure. Earning and keeping the trust of our users is our top priority, and we continually look for ways to expand and improve the security of Airtable as the product innovates.
At Airtable, we strive to create a secure environment that builds trust with our customers through the following guiding principles.
Continuous advancement of our security technologies and practices to get ahead of emerging threats.
Across the organization through regular security training which covers topics such as data privacy, information security, and password security.
Stay updated on industry regulations, standards, and best practices, enabling alignment with data protection and privacy requirements, reducing legal and reputational risks for the company.
Skilled security professionals who belong to one of four security teams:
Application Security
Detection & Response
Governance, Risk, Compliance & Privacy (GRCP)
Infrastructure Security
Customizable collaborator permissions in your workspace where you can control who you share a workspace with and whether they can modify content.
Access restriction to Airtable views through password-protected share links or email domain.
Record-level revision history that shows a visual activity feed of the changes made to each record.
Two-factor authentication (2FA) for your account if you’re using password-based authentication.
SAML-based Single Sign On (SSO) and additional administration features for teams on the Enterprise Plan.
Airtable provides a range of privacy and compliance measures to ensure the protection of your data.
Airtable has undergone a Service Organization Controls audit (SOC 2 Type 2). Please contact your account manager or sales@airtable.com to request Airtable's most recent report.
ISO/IEC 27001:2022 is a specification for an information security management system (ISMS), which is a framework for an organisation's information risk management processes.
Airtable’s privacy program is designed for compliance with global privacy laws and regulations, including Europe’s General Data Protection Regulation (GDPR) and the United Kingdom GDPR
Airtable’s privacy program is designed for compliance with global privacy laws and regulations, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).
We take our privacy obligations and the protection of your information seriously, and we comply with all applicable privacy laws and regulations.
You can learn more about Airtable’s privacy practices in our Privacy Policy, and learn more about Airtable’s commitment to compliance with the General Data Protection Regulation (“GDPR”) here.
Airtable places a strong emphasis on cookie compliance. Read more about how cookies are used, what types of cookies are employed, and how cookie preferences can be managed in Airtable’s Cookie Policy.
Airtable has completed the CAIQ. This is an industry-standard questionnaire that is developed and maintained by the Cloud Security Alliance. This can be shared under NDA, please reach out to your account representative for more information.
Report an issue
If you believe you’ve discovered a security-related issue, please report the issue on our HackerOne bug bounty program or contact us at security@airtable.com.