Airtable confines HIPAA compliance, a Health Information Exhibit plus a business associate agreement, to its Enterprise Scale tier, holding SOC 2 Type 2, ISO 27001, ISO 27701, HIPAA, and TX-RAMP Level 2 as its own certifications while FedRAMP, StateRAMP, and GovCloud stay absent. Notion instead opens its HIPAA business associate agreement at Enterprise with no extra charge, names US-West-2 in Oregon as a data region, and adds SOC 2 Type II plus four ISO standards of its own, though its physical security still belongs to AWS. Scope compared, criterion by criterion. Checked 7 September 2026.





Airtable confines HIPAA compliance — a Health Information Exhibit together with a business associate agreement — to its Enterprise Scale tier alone. Its own certifications include SOC 2 Type 2, ISO 27001, ISO 27701, HIPAA, and TX-RAMP Level 2; FedRAMP, StateRAMP, and GovCloud authorization are absent, and no US region is named for that top tier’s data.
Notion names US-West-2 in Oregon as a data region, though migrating into it is reserved for Enterprise customers. Its own certifications run to SOC 2 Type II plus ISO 27001, 27017, 27018, and 27701, and a BSI C5 audit besides, though physical security of the servers themselves still belongs to AWS; its HIPAA business associate agreement opens at Enterprise with no extra charge, while FedRAMP, StateRAMP, and GovCloud stay absent just as they do for Airtable.
Airtable’s only published tax clue is a single sentence stating it is “not collecting taxes for customers outside of the United States,” leaving every one of its nine billing articles silent on the domestic rate, state, or nexus. Notion charges sales tax in twenty-seven US jurisdictions — twenty-four states plus DC, Puerto Rico, and Chicago — based on the customer’s address, with exemption on a valid certificate but no nexus statement or per-state calculation published.
Airtable’s self-service path takes card only; a sales-sold Business or Enterprise Scale plan instead accepts a purchase order, ACH, wire, or check, with ACH also — apparently contradicting itself — listed among the self-service methods too, and no net-30 term or W-9 named either way. Notion takes card and Apple Pay in self-service, with no in-app payment on Android at all, and reserves invoicing for Enterprise customers above a hundred employees; below that, net-30, purchase orders, ACH, and a W-9 appear on no page.
Airtable publishes its AI credit allowances by tier: five hundred on Free, fifteen thousand on Team, twenty thousand on Business, twenty-five thousand on Enterprise Scale, all per user per month. Notion reserves its AI credits for Business and Enterprise, without publishing the size of the included allowance at either tier, and charges ten US dollars per thousand credits past it, thirteen on annual billing.
Airtable’s Team tier costs twenty US dollars per collaborator per month billed annually, twenty-four billed monthly, capped at fifty thousand records per base. Notion’s Plus tier costs ten dollars per member per month, with thirty days of page history, and AI plus third-party connectors force an upgrade to Business at twenty dollars — a price that still says nothing about whether a HIPAA agreement is even reachable at that tier.
Can't find what you're looking for ? Contact us here
jordan@bulldozer-collective.comGet access to playbooks and feedback from those who are shaping the next wave of marketing and AI.