--- title: "Does Airtable Have a DPA? Yes — Enterprise Only. GDPR Guide for Germany" description: "Yes — but only on Enterprise plans. German companies also need SCC checks, sub-processor review, and data-residency clarity before deploying Airtable." image: "https://compound.law/assets/images/og-image-en.webp" source: "https://compound.law/en-DE/tools/airtable-ai/" language: "en" --- ![Airtable GDPR compliance and data processing agreement for German companies](https://compound.law/assets/images/tools/tools_2.webp) tools # Does Airtable Have a DPA? Yes — Enterprise Only. GDPR Guide for Germany 5 April 2026 **Yes, Airtable does offer a Data Processing Agreement (DPA) — but it is only available on Airtable Enterprise plans, and the DPA alone does not make your deployment compliant.** German and DACH companies evaluating Airtable under GDPR also need to address data residency on US infrastructure, SCC coverage for EU-US transfers, AI feature data flows, sub-processors, and works council obligations before deployment. For comparison with other AI-enabled data and project platforms, see the [AI tools assessed by Compound Law](https://compound.law/en-DE/tools/). ## What is Airtable AI? Airtable is a cloud-based database and project management platform headquartered in the United States. It combines spreadsheet-style data management with relational database functionality, and has expanded its offering with **Airtable AI** — a suite of AI-powered features embedded directly into the platform. These include field-level AI actions such as text summarization, record classification, sentiment analysis, and data extraction from unstructured content. Because Airtable processes business and operational data — which often includes employee records, customer information, and project data — on behalf of its customers, it functions as a data processor under GDPR Article 28. A valid Data Processing Agreement is required before processing personal data through the platform in a professional context in Germany or the EU. ## Is Airtable GDPR-Compliant? Airtable can be used in a GDPR-compliant manner on Enterprise plans with the correct contractual and technical setup. Business and Pro plan users are not covered by a DPA and should not use Airtable for processing personal data in a professional context under GDPR. Key points for German companies: - **DPA availability:** Airtable provides a DPA for Enterprise customers. Lower-tier plans (Business, Pro, Free) do not include DPA coverage. - **AI training data:** Airtable states that customer data is not used to train Airtable’s AI models. Verify the current terms, as AI training policies can change with product updates. - **Data residency:** Airtable processes data on infrastructure in the United States. Enterprise customers may be able to negotiate specific data handling arrangements — verify with Airtable’s sales team. - **Sub-processors:** Airtable maintains a list of sub-processors, which includes infrastructure providers and third-party AI model APIs used for Airtable AI features. - **Standard Contractual Clauses:** Airtable includes SCCs in its DPA to cover data transfers from the EU/EEA to the United States. - **EU-US Data Privacy Framework:** Airtable participates in the EU-US Data Privacy Framework (DPF), providing an additional transfer mechanism for personal data flows to the US. ## Airtable DPA and SCCs Airtable’s Data Processing Agreement covers its processing of personal data on behalf of Enterprise customers, including data processed through Airtable AI features. For German companies, the DPA is necessary but not sufficient on its own. Before deploying Airtable in a context that involves personal data, you should also: 1. Confirm that Standard Contractual Clauses are in place for data transfers from the EU to Airtable’s US-based infrastructure and sub-processors. 2. Update your **Records of Processing Activities** (Verzeichnis von Verarbeitungstätigkeiten, Article 30 GDPR) to include Airtable and its sub-processors. 3. Conduct a **Data Protection Impact Assessment (DPIA)** if Airtable will be used to process special category data (Article 9 GDPR) or data relating to a large number of individuals. 4. Monitor Airtable’s sub-processor change notifications — Enterprise DPAs typically include notification rights when new sub-processors are added. For comparison, see how [Monday.com handles GDPR](https://compound.law/en-DE/tools/monday-ai/) — another project management tool with Enterprise-tier DPA coverage — and [Notion’s GDPR setup](https://compound.law/en-DE/tools/notion-ai/) for database-style tools. ## Airtable AI Features and GDPR Airtable’s AI features introduce data protection considerations beyond standard database operations: **AI field actions** (summarization, classification, extraction) process the content of records — which may include names, contact details, project descriptions, or other personal data — through Airtable’s AI infrastructure. For Enterprise accounts, Airtable confirms this content is not used for model training. **AI-generated content** based on user prompts may also involve third-party model APIs as sub-processors. Review Airtable’s current sub-processor list to identify which AI providers are involved when AI features are enabled. **Automated record processing:** Airtable allows AI actions to be triggered automatically through automations. If these automations process personal data without human review, assess whether this constitutes automated decision-making under GDPR Article 22 and whether any of the affected individuals are data subjects whose rights need to be addressed. Where Airtable AI is used to manage employee tasks or automate work scheduling, also review [AI employee monitoring compliance](https://compound.law/en-DE/compliance/ai-employee-monitoring/) and [AI scheduling optimization compliance](https://compound.law/en-DE/compliance/ai-scheduling-optimization/) requirements. For broader guidance on AI tool compliance, see our [AI writing assistants and GDPR guide](https://compound.law/en-DE/compliance/ai-writing-assistants/). ## Data Residency Options Airtable’s infrastructure is primarily US-based. Standard Contractual Clauses and DPF participation address the legal basis for EU-to-US data transfers, but do not change where data is physically stored or processed. German companies with strict data localisation requirements — for example, in regulated sectors such as financial services, healthcare, or public sector — should carefully assess whether Airtable’s infrastructure arrangements are compatible with their specific obligations. Enterprise customers may have options to discuss data handling arrangements directly with Airtable. ## Our Assessment For German operations and project teams, Airtable Enterprise is deployable with proper setup. A DPA is available, AI training data exclusions apply, and sub-processors are documented. The compliance steps are the same as for other US-based cloud tools with AI features: sign the DPA, confirm SCCs, review sub-processors, and consult your Betriebsrat if the tool will be used across teams. Airtable AI is widely adopted by [professional services companies](https://compound.law/en-DE/ai-act/professional-services/) and teams managing [HR and recruitment AI compliance](https://compound.law/en-DE/ai-act/recruitment-hr/) workflows where structured data and AI-driven automation intersect. We do not recommend using Airtable Business or lower-tier plans for any professional work involving personal data — there is no DPA, and the data handling terms are not appropriate for GDPR-regulated use. Compound Law can assist with DPA review, SCC implementation, DPIA preparation, and works council negotiations for Airtable deployments. *** ## Frequently Asked Questions ### Does Airtable have a DPA (Data Processing Agreement)? Yes, Airtable provides a Data Processing Agreement for Enterprise customers. Lower-tier plans — including Business, Pro, and Free — do not include DPA coverage, making them unsuitable for professional use involving personal data under GDPR. ### Is Airtable GDPR compliant for German companies? Airtable can be used in a GDPR-compliant manner on the Enterprise plan with a signed DPA, Standard Contractual Clauses for US data transfers, updated records of processing activities, and a DPIA where required. Lower-tier plans are not suitable for GDPR-regulated use. ### Does Airtable use customer data to train AI? Airtable states that customer data is not used to train its AI models. However, AI training policies can evolve — check Airtable’s current terms of service and DPA before deployment and after any major product updates. ### Is Airtable DSGVO-konform? Airtable kann auf dem Enterprise-Plan DSGVO-konform eingesetzt werden, wenn ein AVV abgeschlossen, Standardvertragsklauseln für US-Datentransfers vorliegen und das Verarbeitungsverzeichnis aktualisiert wurde. Günstigere Pläne ohne AVV sind für die berufliche Nutzung mit personenbezogenen Daten nicht geeignet. ### What are Airtable’s sub-processors for AI features? Airtable maintains a published sub-processor list that includes third-party AI model providers used when Airtable AI features are enabled. Review the current list on Airtable’s website, as sub-processors can change as AI features evolve. ## Related Tool Guides [![Canva DPA data processing addendum reviewed under Article 28 GDPR](https://compound.law/assets/images/tools/tools_3.webp)](https://compound.law/en-DE/tools/canva-dpa/) [tools](https://compound.law/en-DE/tools/canva-dpa/) ### [Does Canva Offer a DPA? Yes — Canva DPA Guide for Germany](https://compound.law/en-DE/tools/canva-dpa/) [Yes — Canva provides a Data Processing Addendum on paid plans. See what the Canva DPA covers clause by clause: SCCs, subprocessors, audits, German-law gaps.](https://compound.law/en-DE/tools/canva-dpa/) [![Cursor DPA data processing agreement Art. 28 GDPR review for Germany](https://compound.law/assets/images/tools/tools_1.webp)](https://compound.law/en-DE/tools/cursor-dpa/) [tools](https://compound.law/en-DE/tools/cursor-dpa/) ### [Cursor DPA: Yes — What the Anysphere Data Processing Agreement Covers](https://compound.law/en-DE/tools/cursor-dpa/) [Yes, Cursor offers a DPA at cursor.com/terms/dpa. What the Cursor data processing agreement covers under GDPR Art. 28 — and how German buyers should review it.](https://compound.law/en-DE/tools/cursor-dpa/) [![ElevenLabs DPA data processing addendum reviewed under Article 28 GDPR](https://compound.law/assets/images/tools/tools_4.webp)](https://compound.law/en-DE/tools/elevenlabs-dpa/) [tools](https://compound.law/en-DE/tools/elevenlabs-dpa/) ### [Does ElevenLabs Offer a DPA? Yes — ElevenLabs DPA Guide for Germany](https://compound.law/en-DE/tools/elevenlabs-dpa/) [Yes — ElevenLabs publishes a Data Processing Addendum at elevenlabs.io/dpa. What the ElevenLabs DPA covers clause by clause under Article 28 GDPR.](https://compound.law/en-DE/tools/elevenlabs-dpa/) [![Synthesia GDPR compliance facts: AI video training policy, DPA, and EU data storage](https://compound.law/assets/images/tools/tools_4.webp)](https://compound.law/en-DE/tools/synthesia/) [tools](https://compound.law/en-DE/tools/synthesia/) ### [Synthesia GDPR: Training, DPA & German Compliance Facts](https://compound.law/en-DE/tools/synthesia/) [No — Synthesia does not train on customer content. GDPR-usable for German firms: Art. 28 DPA and EU storage in Ireland. What to verify before rollout.](https://compound.law/en-DE/tools/synthesia/) [![Claude Pro GDPR compliance review — no DPA means Claude Pro is not suitable for business personal data](https://compound.law/assets/images/tools/tools_1.webp)](https://compound.law/en-DE/tools/claude-pro-privacy/) [tools](https://compound.law/en-DE/tools/claude-pro-privacy/) ### [Claude Pro GDPR Compliance: Not for Business, Team vs Enterprise](https://compound.law/en-DE/tools/claude-pro-privacy/) [Claude Pro is not the GDPR-compliant business tier. Claude Team adds the Article 28 DPA; Enterprise adds stronger controls and EU residency options.](https://compound.law/en-DE/tools/claude-pro-privacy/) [![Claude EU hosting options with AWS Bedrock Frankfurt and Google Vertex AI for GDPR compliance](https://compound.law/assets/images/tools/tools_1.webp)](https://compound.law/en-DE/tools/claude-eu-hosting/) [tools](https://compound.law/en-DE/tools/claude-eu-hosting/) ### [Where Is Claude Hosted? EU Hosting & Data Residency Facts (2026)](https://compound.law/en-DE/tools/claude-eu-hosting/) [Where is Claude hosted? No EU residency by default; EU path is Bedrock/Vertex AI](https://compound.law/en-DE/tools/claude-eu-hosting/) Tool Library ### Browse More AI Tools by Topic Compare more tools, privacy issues, and deployment scenarios in the full AI tool library. [View all AI tools](https://compound.law/en-DE/tools/) - [Claude ZDR: What It Covers, Who Qualifies, How to Get It tools](https://compound.law/en-DE/tools/claude-zdr/) - [Cursor DPA: Where to Find It and Which Plan German Teams Need tools](https://compound.law/en-DE/tools/cursor/) - [Is DeepSeek GDPR Compliant? What German Companies Need to Know tools](https://compound.law/en-DE/tools/deepseek/) - [Is Zapier GDPR Compliant? Germany Guide 2026 tools](https://compound.law/en-DE/tools/zapier/) - [Claude Code Data Privacy: GDPR, DPA & No Training Policy tools](https://compound.law/en-DE/tools/claude-code-gdpr/) - [HubSpot Privacy in Germany: GDPR, DPA, and Works Council Risks tools](https://compound.law/en-DE/tools/hubspot/) - [Claude GDPR: Which Claude Plans Work for Germany in 2026 tools](https://compound.law/en-DE/tools/claude-gdpr/) - [Anthropic SCCs: GDPR Data Transfer Guide for Module 2 and 3 tools](https://compound.law/en-DE/tools/anthropic-scc/) - [Zoom AI Companion GDPR Compliance for German Businesses tools](https://compound.law/en-DE/tools/zoom/) - [Claude Team vs Enterprise: Which Plan Is GDPR-Compliant for Your Team? tools](https://compound.law/en-DE/tools/claude-business/) - [Claude Team vs Enterprise: Plan Comparison for German Businesses tools](https://compound.law/en-DE/tools/claude-team-vs-enterprise/) - [Claude Enterprise for Law Firms and Legal Teams tools](https://compound.law/en-DE/tools/claude-enterprise-legal-teams/) - [Anthropic Data Processing Addendum: Where to Find the Official DPA tools](https://compound.law/en-DE/tools/anthropic-data-processing-addendum/) - [Anthropic DPA: GDPR Article 28 Guide for German Companies tools](https://compound.law/en-DE/tools/anthropic-dpa/) - [Claude Enterprise GDPR: DPA Yes, EU Residency No by Default tools](https://compound.law/en-DE/tools/claude-enterprise/) ## Frequently asked questions Yes, Airtable provides a Data Processing Agreement for Enterprise customers. Lower-tier plans — including Business, Pro, and Free — do not include DPA coverage, making them unsuitable for professional use involving personal data under GDPR. Airtable can be used in a GDPR-compliant manner on the Enterprise plan with a signed DPA, Standard Contractual Clauses for US data transfers, updated records of processing activities, and a DPIA where required. Lower-tier plans are not suitable for GDPR-regulated use. Airtable states that customer data is not used to train its AI models. However, AI training policies can evolve — check Airtable's current terms of service and DPA before deployment and after any major product updates. Airtable kann auf dem Enterprise-Plan DSGVO-konform eingesetzt werden, wenn ein AVV abgeschlossen, Standardvertragsklauseln für US-Datentransfers vorliegen und das Verarbeitungsverzeichnis aktualisiert wurde. Günstigere Pläne ohne AVV sind für die berufliche Nutzung mit personenbezogenen Daten nicht geeignet. Airtable maintains a published sub-processor list that includes third-party AI model providers used when Airtable AI features are enabled. Review the current list on Airtable's website, as sub-processors can change as AI features evolve. ## Structured data ```json [ { "@context": "https://schema.org", "@type": [ "Organization", "LegalService" ], "@id": "https://compound.law/#organization", "name": "Compound Law", "alternateName": "Compound Law — AI Law Firm", "url": "https://compound.law/", "logo": { "@type": "ImageObject", "url": "https://compound.law/press/logos/PNG/Compound_Law_Icon.png", "width": 1024, "height": 1024 }, "image": "https://compound.law/assets/images/og-image.webp", "description": "The AI-native law firm in Berlin for start-ups, mid-sized companies and corporates: commercial and contract law, data protection, the EU AI Act, trademarks, corporate law, and restructuring and insolvency. A lawyer reviews every result, billed at a flat fee.", "foundingDate": "2026", "founder": [ { "@type": "Person", "name": "Marko Bradic", "jobTitle": "CEO", "url": "https://compound.law/en-DE/tech-team/marko-bradic/", "sameAs": [ "https://www.linkedin.com/in/markobradic/" ], "knowsAbout": [ "Product strategy and development", "Scaling technology companies", "FinTech and financial services", "AI-powered product innovation", "Business operations and growth", "Digital transformation" ] }, { "@type": "Person", "name": "Mohit Tilwani", "jobTitle": "CTO", "url": "https://compound.law/en-DE/tech-team/mohit-tilwani/", "sameAs": [ "https://www.linkedin.com/in/mohit-tilwani/" ], "knowsAbout": [ "Engineering leadership and architecture", "Scaling high-traffic systems", "AI and machine learning infrastructure", "FinTech platform development", "Cloud infrastructure and DevOps", "Product engineering" ] }, { "@type": "Person", "name": "Julian Jantze", "jobTitle": "Rechtsanwalt", "url": "https://compound.law/en-DE/lawyers/julian-jantze/", "sameAs": [ "https://www.linkedin.com/in/julian-jantze-957b95158/" ], "knowsAbout": [ "Corporate law and corporate governance for technology companies", "Employment law and HR compliance", "EU AI Act compliance and AI governance", "Employee participation models (VSOP/ESOP)", "Regulatory compliance for tech companies", "Legal operations and Legal Tech implementation" ] } ], "employee": [ { "@type": "Person", "name": "Marko Bradic", "jobTitle": "CEO", "url": "https://compound.law/en-DE/tech-team/marko-bradic/", "sameAs": [ "https://www.linkedin.com/in/markobradic/" ], "knowsAbout": [ "Product strategy and development", "Scaling technology companies", "FinTech and financial services", "AI-powered product innovation", "Business operations and growth", "Digital transformation" ] }, { "@type": "Person", "name": "Mohit Tilwani", "jobTitle": "CTO", "url": "https://compound.law/en-DE/tech-team/mohit-tilwani/", "sameAs": [ "https://www.linkedin.com/in/mohit-tilwani/" ], "knowsAbout": [ "Engineering leadership and architecture", "Scaling high-traffic systems", "AI and machine learning infrastructure", "FinTech platform development", "Cloud infrastructure and DevOps", "Product engineering" ] }, { "@type": "Person", "name": "Julian Jantze", "jobTitle": "Rechtsanwalt", "url": "https://compound.law/en-DE/lawyers/julian-jantze/", "sameAs": [ "https://www.linkedin.com/in/julian-jantze-957b95158/" ], "knowsAbout": [ "Corporate law and corporate governance for technology companies", "Employment law and HR compliance", "EU AI Act compliance and AI governance", "Employee participation models (VSOP/ESOP)", "Regulatory compliance for tech companies", "Legal operations and Legal Tech implementation" ] }, { "@type": "Person", "name": "Marc Schuba", "jobTitle": "Founding Partner, Rechtsanwalt (German attorney)", "url": "https://compound.law/en-DE/lawyers/marc-schuba/", "sameAs": [ "https://www.linkedin.com/in/marcschuba/" ], "knowsAbout": [ "IP and IT law", "SaaS and IT contracts, IT outsourcing", "Software and open-source licensing", "Data protection law (GDPR)", "AI law and the EU AI Act" ] }, { "@type": "Person", "name": "Dr. Markus Dreißigacker", "jobTitle": "Rechtsanwalt", "url": "https://compound.law/en-DE/lawyers/markus-dreissigacker/", "sameAs": [ "https://www.linkedin.com/in/markusdreissigacker" ], "knowsAbout": [ "M&A (Due diligence, post-merger integration, IPO readiness)", "Corporate Law (Governance, board work, restructuring)", "Commercial Law (Customer contracts, supplier agreements, NDAs)", "IP (Trademark management, IP transfer agreements)", "Compliance & ESG (Global compliance programs, human rights, sustainability)", "Data Protection (GDPR strategy, DPO experience, privacy programs)" ] }, { "@type": "Person", "name": "Philipp Brandt", "jobTitle": "Partner, Rechtsanwalt (German attorney), Specialist Lawyer for Intellectual Property Law", "url": "https://compound.law/en-DE/lawyers/philipp-brandt/", "sameAs": [ "https://www.linkedin.com/in/philipp-brandt-81b446a/" ], "knowsAbout": [ "Restructuring and insolvency law (crisis advice for management, protective shield and insolvency plan proceedings, insolvency administration)", "Intellectual property (trademarks, unfair competition, copyright, trade secrets, licence agreements)", "Data protection law (data breaches, regulatory fine proceedings, access and damages claims)", "Distribution and commercial law (distribution agreements, acquisition and sale of industrial plants)" ] } ], "address": { "@type": "PostalAddress", "addressLocality": "Berlin", "addressCountry": "DE" }, "areaServed": [ "Germany", "Austria", "Switzerland", "European Union", "United Kingdom", "United States", "Singapore" ], "availableLanguage": [ "de", "en" ], "serviceType": [ "AI law firm", "AI-native legal services", "legal counsel for start-ups and growth companies", "legal counsel for mid-sized companies and corporates", "Commercial Law", "Corporate Law", "Employment Law", "Regulatory & Compliance", "Intellectual Property", "Insolvency & Restructuring" ], "hasOfferCatalog": { "@type": "OfferCatalog", "name": "Compound Law services", "itemListElement": [ { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Commercial Contracts", "description": "Battle-tested contracts for your sales process", "serviceType": [ "enterprise contracts", "MSA", "DPA", "sales contracts" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "International Employment", "description": "Compliant hiring across borders", "serviceType": [ "international employment", "hiring abroad", "employment contracts" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "VSOP/ESOP Setup", "description": "Employee participation that actually works", "serviceType": [ "VSOP", "ESOP", "employee stock options", "equity incentives" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Funding Round Support", "description": "Clean legal for your next raise", "serviceType": [ "funding round", "term sheet", "SHA", "due diligence", "cap table" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Corporate Housekeeping", "description": "Get your legal house in order", "serviceType": [ "corporate governance", "board resolutions", "shareholder register" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Data Protection & Privacy", "description": "GDPR compliance that doesn't slow you down", "serviceType": [ "GDPR", "data protection", "privacy", "DPA", "cookies", "data breach response", "GDPR fines", "Art. 82 GDPR" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "AI Act Compliance", "description": "Navigate EU AI regulation", "serviceType": [ "AI Act", "AI compliance", "AI governance", "EU AI regulation" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "IP & Competition", "description": "Protect and enforce what you've built", "serviceType": [ "IP protection", "intellectual property", "trademarks", "trademark enforcement", "warning letters", "preliminary injunctions", "unfair competition", "software licensing", "open source compliance" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Fractional General Counsel", "description": "In-house legal without the full-time cost", "serviceType": [ "fractional GC", "fractional general counsel", "outsourced legal", "legal retainer" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "FinTech Compliance", "description": "Navigate financial regulation", "serviceType": [ "fintech compliance", "BaFin", "banking regulation", "AML", "KYC" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Legal Retainer", "description": "Predictable legal support when you need it", "serviceType": [ "legal retainer", "legal subscription", "ongoing legal support" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "M&A Preparation", "description": "Get ready for acquisition interest", "serviceType": [ "M&A preparation", "acquisition", "due diligence", "exit" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Restructuring & Insolvency", "description": "From the first liquidity check to the restructuring itself", "serviceType": [ "restructuring", "insolvency", "StaRUG", "self-administration", "insolvency plan", "director liability" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } } ] }, "contactPoint": { "@type": "ContactPoint", "contactType": "sales", "email": "contact@compound.law", "availableLanguage": [ "English", "German" ], "areaServed": [ "DE", "AT", "CH", "EU", "GB", "US", "SG" ] }, "email": "contact@compound.law", "sameAs": [ "https://www.linkedin.com/company/compoundlawfirm", "https://x.com/CompoundLawFirm" ], "knowsAbout": [ "Commercial Contracts", "enterprise contracts", "MSA", "DPA", "sales contracts", "International Employment", "international employment", "hiring abroad", "employment contracts", "VSOP/ESOP Setup", "VSOP", "ESOP", "employee stock options", "equity incentives", "Funding Round Support", "funding round", "term sheet", "SHA", "due diligence", "cap table", "Corporate Housekeeping", "corporate governance", "board resolutions", "shareholder register", "Data Protection & Privacy", "GDPR", "data protection", "privacy", "cookies", "data breach response", "GDPR fines", "Art. 82 GDPR", "AI Act Compliance", "AI Act", "AI compliance", "AI governance", "EU AI regulation", "IP & Competition", "IP protection", "intellectual property", "trademarks", "trademark enforcement", "warning letters", "preliminary injunctions", "unfair competition", "software licensing", "open source compliance", "Fractional General Counsel", "fractional GC", "fractional general counsel", "outsourced legal", "legal retainer", "FinTech Compliance", "fintech compliance", "BaFin", "banking regulation", "AML", "KYC", "Legal Retainer", "legal subscription", "ongoing legal support", "M&A Preparation", "M&A preparation", "acquisition", "exit", "Restructuring & Insolvency", "restructuring", "insolvency", "StaRUG", "self-administration", "insolvency plan", "director liability" ] }, { "@context": "https://schema.org", "@type": "Article", "headline": "Does Airtable Have a DPA? Yes — Enterprise Only. GDPR Guide for Germany", "description": "Yes — but only on Enterprise plans. German companies also need SCC checks, sub-processor review, and data-residency clarity before deploying Airtable.", "image": "https://compound.law/assets/images/tools/tools_2.webp", "datePublished": "2026-04-05T00:00:00.000Z", "dateModified": "2026-04-05T00:00:00.000Z", "author": { "@type": "Person", "name": "Dr. Markus Dreißigacker", "image": "https://compound.law/assets/images/team/markusdreissigacker.webp" }, "publisher": { "@type": "Organization", "@id": "https://compound.law/#organization", "name": "Compound Law" }, "mainEntityOfPage": { "@type": "WebPage", "@id": "https://compound.law/en-DE/tools/airtable-ai/" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://compound.law/en-DE/" }, { "@type": "ListItem", "position": 2, "name": "AI Tools", "item": "https://compound.law/en-DE/tools/" }, { "@type": "ListItem", "position": 3, "name": "Does Airtable Have a DPA? Yes — Enterprise Only. GDPR Guide for Germany", "item": "https://compound.law/en-DE/tools/airtable-ai/" } ] }, { "@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [ { "@type": "Question", "name": "Does Airtable have a DPA (Data Processing Agreement)?", "acceptedAnswer": { "@type": "Answer", "text": "Yes, Airtable provides a Data Processing Agreement for Enterprise customers. Lower-tier plans — including Business, Pro, and Free — do not include DPA coverage, making them unsuitable for professional use involving personal data under GDPR." } }, { "@type": "Question", "name": "Is Airtable GDPR compliant for German companies?", "acceptedAnswer": { "@type": "Answer", "text": "Airtable can be used in a GDPR-compliant manner on the Enterprise plan with a signed DPA, Standard Contractual Clauses for US data transfers, updated records of processing activities, and a DPIA where required. Lower-tier plans are not suitable for GDPR-regulated use." } }, { "@type": "Question", "name": "Does Airtable use customer data to train AI?", "acceptedAnswer": { "@type": "Answer", "text": "Airtable states that customer data is not used to train its AI models. However, AI training policies can evolve — check Airtable's current terms of service and DPA before deployment and after any major product updates." } }, { "@type": "Question", "name": "Is Airtable DSGVO-konform?", "acceptedAnswer": { "@type": "Answer", "text": "Airtable kann auf dem Enterprise-Plan DSGVO-konform eingesetzt werden, wenn ein AVV abgeschlossen, Standardvertragsklauseln für US-Datentransfers vorliegen und das Verarbeitungsverzeichnis aktualisiert wurde. Günstigere Pläne ohne AVV sind für die berufliche Nutzung mit personenbezogenen Daten nicht geeignet." } }, { "@type": "Question", "name": "What are Airtable's sub-processors for AI features?", "acceptedAnswer": { "@type": "Answer", "text": "Airtable maintains a published sub-processor list that includes third-party AI model providers used when Airtable AI features are enabled. Review the current list on Airtable's website, as sub-processors can change as AI features evolve." } } ] } ] ```