Airtable now provides our customers with options in regards to the hosting locations of your data. In addition to the United States (US), Airtable offers customers the ability to host their data within the European Union (EU).
Airtable is hosted within AWS. Airtable’s EU data center is located in Frankfurt, Germany. Customer data is backed up in different availability zones within the Frankfurt data center, and in a separate AWS data center in Ireland.
Please visit airtable.com/subprocessors for more information.
Base content including all record level data, attachments, and base history are stored in the EU.
Information that is collected by Airtable such as user and authentication data, metadata, and support data is stored in the US.
Additionally, the following base metadata is stored out of region:
Base and Interface names
Base descriptions + color and icon information
Base access request data
User and authentication data is stored in the US so we can continue to run a global Airtable offering. Airtable supports our customers’ privacy obligations by offering a Data Processing Addendum (DPA) that sets out the terms that apply when a customer's personal data is processed by Airtable, including the appropriate technical and organizational measures implemented to protect such personal data. Our DPA helps our customers ensure that Airtable’s processing of customer personal data is conducted in accordance with applicable privacy laws and respects the privacy rights of individuals.
The GDPR requires organizations to use appropriate security and legal mechanisms to transfer personal data from the European Union (EU) or United Kingdom (UK), to a country outside of the EU or UK, such as the US. To support our customers’ obligations with respect to data transfers, Airtable has incorporated the EU Standard Contractual Clauses (EU SCCs), and the UK Standard Contractual Clauses (UK SCCs) into our DPA. The EU SCCs and UK SCCs are pre-approved by the European Commission and the UK’s Information Commissioner’s Office to be used by organizations as appropriate data transfer mechanisms under the GDPR.
No. If you are interested in migrating your data to the EU, please reach out to your Airtable representative. Airtable will work with you on migration to ensure no data loss.
Airtable supports our customers’ privacy obligations by offering a Data Processing Addendum (DPA) that sets out the terms that apply when a customer’s personal data is processed by Airtable, including the appropriate technical and organizational measures implemented to protect such personal data. Our DPA helps our customers ensure that Airtable’s processing of customer personal data is conducted in accordance with applicable privacy laws and respects the privacy rights of individuals.
Airtable has established a privacy program to ensure that we are compliant with our customers' privacy needs. Our program is designed for compliance with privacy laws and regulations, including GDPR. Additionally, Airtable is ISO27701 certified, which is a privacy management compliance standard. This can be found on airtable.com/security.
Airtable completes annual SOC 2 Type 2, ISO 27001, and ISO 27701 audits. Additionally, Airtable ensures that all of your data is encrypted both at rest and within transit using industry standard encryption mechanisms.
Customers can choose whether to have data stored within our US infrastructure or our EU infrastructure.
Customers do not need to be based in Europe to enable European Data Residency.
When a customer enables European Data Residency for their enterprise all new audit log data will be stored in the EU. Previously existing audit log data will remain in the US (and is purged after 180 days).
Some functionality may be disabled for customers with European Data Residency enabled. Please refer to our support page for detailed information.
For more information on European Data Residency, please visit our support page or reach out to your Airtable representative. For more information on our approach to security and privacy, please visit airtable.com/security.