GDPR at Airtable

Privacy and security have always been core to Airtable's approach to product development and customer service, and we continuously evaluate all of our practices to ensure your information is kept safe and secure. In that vein, we're glad to comply with Europe’s General Data Protection Regulation (GDPR) and to help Airtable customers do the same.
For more information regarding Airtable’s treatment of customer data, please review our current privacy policy at https://airtable.com/privacy.

What is GDPR?

The General Data Protection Regulation (GDPR) came into effect on May 25, 2018. The GDPR expands the data privacy rights of European individuals and gives them more power to control their personal data. The GDPR requires that companies that process this personal data comply with various rules and regulations. Additional information about the GDPR is available on the European Commission’s website.

Data Processing Agreements

Airtable enters into Data Processing Agreements (DPAs) with customers upon request. Airtable’s DPA includes standard contractual clauses ("Model Clauses") that are the mechanism for GDPR-compliant data transfer. Click here to learn how to view and sign our DPA.

Please note that our DPA has been tailored to the way Airtable provides its service, and as a result, changes to DPA language are only available for qualified enterprise accounts.

Server location

By default, Airtable servers are located in the US and hosted using US-based AWS servers (US-East-1). Customers on the Enterprise Scale plan can choose to enable European Data Residency to store some customer data at rest in European-based AWS servers (EU-Central-1). If you’d like a deeper understanding of how Airtable approaches security, you can read more here, or contact your account team for more details.

Questions?

If you have further questions, please reach out to privacy@airtable.com.