Tools and automation
GDPR Airtable
In an indie stack, Airtable is used for Shared bases and tables. Entity cited: Formagrid Inc. The sections repeat what the vendor publishes, without filling a gap. Last update of the facts: October 4, 2026. Verified on October 4, 2026.
Translation of the French sheet. The facts do not change. The date is the date the official pages were read.
DPA Airtable
Yes. Public DPA.
Stated role
For Customer Personal Data, the customer is controller and Airtable is processor and service provider. Airtable and the customer are independent controllers of Business Contact Data. Airtable is also controller of the personal data it holds on use of the services, according to the EEA, Switzerland, and United Kingdom section of the policy.
Personal data
Content entered or uploaded, account information, IP addresses, browser types, systems, ISPs, platform and device types, mobile device identifiers, cookies and similar trackers, support exchanges, information from promotions, surveys, and events.
Sub-processors of Airtable
Public list.
Transfers outside the EU
Hosting / location
Amazon Web Services is listed for cloud infrastructure in the United States, and in Germany, Ireland, or Australia only for customers who use European or Australian residency.
EU–United States Data Privacy Framework
Official search for “Airtable”, “Airtable Inc”, and “Formagrid”: no participant. Not registered.
Cookies
Airtable uses cookies, web beacons, pixels, session-replay scripts, and similar technologies. A Cookie Policy and a preference center are referred to by the policy.
Typical use, written by StackLégal and not by the vendor: Shared bases and tables.
History
Last update: October 4, 2026.
First publication. The facts come from the official pages cited in the sources. Anything not stated there remains "not disclosed".
Clause to paste
Place it in the sub-processor section of your privacy policy. Review it: a “not disclosed” field must be completed before publication.
Sub-processor clause
Sources
Verified on October 4, 2026.
Frequently asked questions
Is Airtable a processor within the meaning of the GDPR?
For Customer Personal Data, the customer is controller and Airtable is processor and service provider. Airtable and the customer are independent controllers of Business Contact Data. Airtable is also controller of the personal data it holds on use of the services, according to the EEA, Switzerland, and United Kingdom section of the policy.
What DPA does Airtable publish?
Yes. Public DPA. https://www.airtable.com/company/dpa
Which further sub-processors does Airtable publish?
Public list. https://www.airtable.com/company/subprocessors
Where does Airtable state that it processes data, including outside the EU?
Amazon Web Services is listed for cloud infrastructure in the United States, and in Germany, Ireland, or Australia only for customers who use European or Australian residency.
Is Airtable registered under the EU–United States Data Privacy Framework?
Official search for “Airtable”, “Airtable Inc”, and “Formagrid”: no participant. Not registered.
Which personal data does Airtable mention?
Content entered or uploaded, account information, IP addresses, browser types, systems, ISPs, platform and device types, mobile device identifiers, cookies and similar trackers, support exchanges, information from promotions, surveys, and events.
Often in the same stack
These sheets come up in searches for a Next.js SaaS. Next.js itself is not a processor: GDPR Next.js.
Related tools
Full pack, from 39 € incl. VAT
The clause above covers only one tool. StackLégal generates the legal notices, terms of use, terms of sale, privacy policy, Article 28 DPA, and the public list, naming only the boxes that are checked. One-time payment via Gumroad. This is not legal advice.