Does your organization use Airtable? One sensor, and Openwake watches it on its own: the documents re-read daily, every moved clause told.Start free
Trains on customer data
Training posture: unknown · the documents do not say
silence is not a no
Not stated in the documents we could read. An absence here is an unknown, not a no.
Opt-out mechanism
If you wish to stop receiving these communications or to opt out of use of your information for these purposes, please follow the opt-out instructions by clicking "Unsubscribe" (or similar opt-out language) in those communications.
“If you wish to stop receiving these communications or to opt out of use of your information for these purposes, please follow the opt-out instructions by clicking "Unsubscribe" (or similar opt-out language) in those communications.”
AI features
none stated
Not stated in the documents we could read. An absence here is an unknown, not a no.
Model providers named
Anthropic, OpenAI
“Anthropic, PBC AI model provider USA”
Retention
not stated
Not stated in the documents we could read. An absence here is an unknown, not a no.
Hosting regions
not stated
Not stated in the documents we could read. An absence here is an unknown, not a no.
Subprocessor notice
10 days
“Airtable will provide Customers with at least ten (10) days’ written notice of new sub-processors before authorizing such sub-processor(s) to Process Customer Personal Data in connection with the provision of the Services.”
Downstream
Who's behind Airtable, as listed in its own subprocessor documents. 10 subprocessors.
Model providers
- AnthropicUSA
- OpenAIUSA
Hyperscalers
- Amazon Web Servicesunstated
Other subprocessors
- Frontunstated
- GongUSA
- MailgunUSA
- SalesforceUSA
- TwilioUSA
- VercelUSA
- Zoomunstated
Reviewer notes
Extracted by deterministic rules (rules/v1), no language model. Coverage is limited to recognisable clauses and a gazetteer of common subprocessors; absent values mean 'not matched', not 'not present'. no training clause matched
Documents read
- privacy policy https://www.airtable.com/company/privacyHTTP 200 · 2026-10-15
- subprocessors https://www.airtable.com/company/subprocessorsHTTP 200 · 2026-09-05
- dpa https://airtable.com/dpaHTTP 200 · 2026-09-23
Document changes
- low 2026-10-15 · privacy policy +4 / −3 lines
show diff
+ Last Updated: October 14, 2026+ 11. DISCLOSURES TO RESIDENTS OF ALABAMA, CALIFORNIA, COLORADO, CONNECTICUT, DELAWARE, INDIANA, IOWA, KENTUCKY, LOUISIANA, MARYLAND, MINNESOTA, MONTANA, NEBRASKA, NEW HAMPSHIRE, NEW JERSEY, OKLAHOMA, OREGON, RHODE ISLAND, TENNESSEE, TEXAS, UTAH, AND VIRGINIA+ * Right to Appeal. You may appeal a refusal to take action on a request. Please note that this right does not apply to residents of Alabama, California or Utah.+ Authorized Agents. California residents may designate an authorized agent to make an access, correction, or deletion request. For consumers residing in Alabama, a guardian or conservator may exercise the consumer's rights on behalf of the consumer regarding the processing of personal data. We may ask for additional information from the consumer or the agent in order to process such requests.− Last Updated: July 15, 2026− 11. DISCLOSURES TO RESIDENTS OF CALIFORNIA, COLORADO, CONNECTICUT, DELAWARE, INDIANA, IOWA, KENTUCKY, MARYLAND, MINNESOTA, MONTANA, NEBRASKA, NEW HAMPSHIRE, NEW JERSEY, OREGON, RHODE ISLAND, TENNESSEE, TEXAS, UTAH, AND VIRGINIA− * Right to Appeal. You may appeal a refusal to take action on a request. Please note that this right does not apply to residents of California or Utah. - low 2026-09-23 · dpa +0 / −1 lines
show diff
− Data Processing Addendum | Airtable - low 2026-09-22 · dpa +1 / −0 lines
show diff
+ Data Processing Addendum | Airtable - high 2026-09-09 · dpa +37 / −16 lines
show diff
+ Last Updated: September 8, 2026+ 1.13. “UK SCCs” means the International Data Transfer Addendum to the EU Commission Standard Contractual Clauses, available as of the Effective Date at https://ico.org..pdf and completed as described in Section 9 (International Data Transfers).+ Airtable will allow for and contribute to audits, including inspections, conducted by Customer or another auditor mandated by Customer subject to the following conditions: so long as the Agreement remains in effect, Customer may request that Airtable provide it with Airtable’s most recent SOC II Type II, ISO 27001 and ISO 27701 reports (“Records”) no more than once annually relating to Airtable’s compliance with this DPA (an “Audit”). To the extent Customer uses a third-party representative at Customer’s sole expense to conduct the Audit, Customer will ensure that such third-party representative is bound by obligations of confidentiality no less protective than those contained in the Agreement. Customer will provide Airtable with ninety (90) business days prior written notice of its intention to conduct an Audit. Customer will conduct the Audit in a manner that will result in minimal disruption to Airtable’s business operations and such Audit will take no longer than two (2) business days. Further, Customer will not be entitled to receive data or information of other customers of Airtable or any other Confidential Information of Airtable that is not directly relevant for the authorized purposes of the Audit.+ A. LIST OF PARTIES+ MODULE TWO: Transfer Controller to Processor+ MODULE THREE: Transfer Processor to Processor+ Data exporter(s):+ Name: The exporter is the Customer specified in the Agreement.+ Address: specified in the Agreement.+ Contact person’s name, position and contact details: specified in the Agreement.+ Activities relevant to the data transferred under these Clauses: Obtaining the Services from data importer.+ Role (Controller/Processor): Controller+ Data importer(s):+ Name: Formagrid Inc dba Airtable+ Address: 1 Front Street, Fl 28, San Francisco, CA 94111+ Contact person’s name, position and contact details: Legal Department, legal@airtable.com+ Activities relevant to the data transferred under these Clauses: Providing the Services to data exporter.+ Role (Controller/Processor): Processor+ B. DESCRIPTION OF TRANSFER+ Categories of data subjects whose personal data is transferred+ Data subjects whose Personal Data is uploaded by data exporter to, or otherwise received directly or indirectly from data exporter (including from a Permitted User on data exporter’s behalf) by or through, the Services, or provided by data exporter to Airtable to input into the Services.+ Categories of personal data transferred+ The data exporter may transfer Personal Data to Airtable, the extent of which is determined and controlled by the data exporter in its sole discretion. Such Personal Data may include any category of Personal Data the data exporter or its Permitted Users may enter into the Services.+ Sensitive data transferred (if applicable) and applied restrictions or safeguards that fully take into consideration the nature of the data and the risks involved, such as for instance strict purpose limitation, access restrictions (including access only for staff having followed specialized training), keeping a record of access to the data, restrictions for onward transfers or additional security measures.+ None anticipated.+ The frequency of the transfer (e.g. whether the data is transferred on a one-off or continuous basis).+ Continuously, for the length of the Agreement between the Parties.+ Nature of the processing+ Customer Personal Data transferred will be processed to (i) provide the Services to the data exporter and fulfill the data importer’s obligations under the Agreement; and (ii) comply with applicable law.+ Purpose(s) of the data transfer and further processing− Last Updated: December 5, 2025− 1.13. “UK SCCs” means the International Data Transfer Addendum to the EU Commission Standard Contractual Clauses, available as of the Effective Date at https://ico.org./ and completed as described in Section 9 (International Data Transfers).− Airtable will allow for and contribute to audits, including inspections, conducted by Customer or another auditor mandated by Customer subject to the following conditions: so long as the Agreement remains in effect, Customer may request that Airtable provide it with Airtable’s most recent SOC II Type II and ISO 27001 reports (“Records”) no more than once annually relating to Airtable’s compliance with this DPA (an “Audit”). To the extent Customer uses a third-party representative at Customer’s sole expense to conduct the Audit, Customer will ensure that such third-party representative is bound by obligations of confidentiality no less protective than those contained in the Agreement. Customer will provide Airtable with ninety (90) business days prior written notice of its intention to conduct an Audit. Customer will conduct the Audit in a manner that will result in minimal disruption to Airtable’s business operations and such Audit will take no longer than two (2) business days. Further, Customer will not be entitled to receive data or information of other customers of Airtable or any other Confidential Information of Airtable that is not directly relevant for the authorized purposes of the Audit.− 1. List of Parties− * Name: The exporter is the Customer specified in the Agreement.− * Address: specified in the Agreement.− * Contact person’s name, position and contact details: specified in the Agreement.− * Activities relevant to the data transferred under these Clauses: Obtaining the Services from data importer.− * Role (Controller/Processor): Controller− * Name: Formagrid Inc, dba Airtable− * Address: 1 Front Street, Floor 28, San Francisco, CA 94111− * Contact person’s name, position and contact details: Legal Department, legal@airtable.com− * Activities relevant to the data transferred under these Clauses: Providing the Services to data exporter.− * Role (Controller/Processor): Processor− 2. Description of Transfer - high 2026-09-06 · dpa +3 / −3 lines
show diff
+ 1.13. “UK SCCs” means the International Data Transfer Addendum to the EU Commission Standard Contractual Clauses, available as of the Effective Date at https://ico.org./ and completed as described in Section 9 (International Data Transfers).+ 6.1. Security. Airtable will provide reasonable assistance to Customer regarding Customer’s compliance with its security obligations under Applicable Law relevant to Airtable’s role in Processing Customer Personal Data, taking into account the nature of Processing and the information available to Airtable, by implementing the technical and organizational measures set forth at https://www.airtable., without prejudice to Airtable’s right to make future replacements or updates to the measures that do not materially lower the level of protection of Customer Personal Data. Airtable will ensure that the persons Airtable authorizes to Process the Customer Personal Data are subject to written confidentiality agreements or are under an appropriate statutory obligation of confidentiality no less protective than the confidentiality obligations set forth in the Agreement.+ Please see https://www.airtable., which describes the technical and organizational measures implemented by Airtable.− 1.13. “UK SCCs” means the International Data Transfer Addendum to the EU Commission Standard Contractual Clauses, available as of the Effective Date at https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/international-data-transfer-agreement-and-guidance/ and completed as described in Section 9 (International Data Transfers).− 6.1. Security. Airtable will provide reasonable assistance to Customer regarding Customer’s compliance with its security obligations under Applicable Law relevant to Airtable’s role in Processing Customer Personal Data, taking into account the nature of Processing and the information available to Airtable, by implementing the technical and organizational measures set forth at https://www.airtable.com/company/information-security-standards, without prejudice to Airtable’s right to make future replacements or updates to the measures that do not materially lower the level of protection of Customer Personal Data. Airtable will ensure that the persons Airtable authorizes to Process the Customer Personal Data are subject to written confidentiality agreements or are under an appropriate statutory obligation of confidentiality no less protective than the confidentiality obligations set forth in the Agreement.− Please see https://www.airtable.com/company/information-security-standards, which describes the technical and organizational measures implemented by Airtable.
Fact changes
- medium 2026-09-05 · 0 field change(s), +1/−0 subprocessors, +0 model providers
Corrections
No correction requests. Anyone may dispute a fact with a source; requests and resolutions are public and ledger-entered.
Facts are as stated in Airtable's public documents on the date read. This is a record, not legal advice. Work for Airtable? Claim this profile · Something wrong? Request a correction.