New to Airtable, I work in Local Government in the UK and whilst I think the product would work well for some projects I need to understand where data is hosted.
Under our Government rules any data I store in the cloud has to be on UK based servers. Most cloud providers we work with offer some kind of location specific hosting of data. I cannot find any information about whether Airtable is able to offer this?
Thanks in advance
Hi Mat and welcome to the community.
I cannot speak for Airtable, but I do a fair bit of work (in Airtable) with UK companies that fall under strict security compliance involving healthcare and children at risk, so I believe this security requirement is wholly addressed by Airtable. I defer to @Jason to officially clarify.
Airtable is located in the US and is hosted using US-based AWS servers. We don’t have plans to have any servers outside the US at this time. If you’d like a deeper understanding of how Airtable approaches security, you can read more here.
Also, we are GDPR compliant and you can read more about the specifics of our compliance and what is available to you as an Airtable user using this support article: GDPR at Airtable.
Thanks Bill. I was thinking of using it for some Covid related local track n trace work. From Jason’s comments below, I’m not sure I’ll be able to.
That’s unfortunate. If actual server location is a requirement, you’ll be looking for the right tools for perhaps a long time.
We live in a world of microservices. These are PaaS (platform as a service) foundations that allow underlying services to distribute compute load and provide fast and reliable web services. For example, if you use a machine-learning feature in G-Suite - despite the fact that the servers themselves are in the UK, the underlying GPU computation may be computed in Ireland, Germany, or the US.
Other aspects of modern platforms also use CDNs to render images. For example, a picture stored on a UK server may actually be rendered by a server in the US depending on your Internet connection and the load presently on the route between you the image itself.
Data storage has little to do with data serving, rendering, and computational processing.
The world’s computational and server topography no longer equates to actual geographies and geo-political boundaries. If your government is asserting it does, they have woefully misunderstood the machinery of modern applications.
Bill, there is nothing in your statement I disagree with, especially the last line! Airtable is such a perfect fit for a number of use cases I have…
Thanks! It took me a few passes to get those words to line up.
I think you should attempt to open a dialog between Airtable security experts and your government’s security experts. I believe there is wiggle room given Airtable’s adherence to GDPR and the realization that server location has little to do with security or where computation processes actually occur.
Airtable is the benchmark in terms of usability and features, absolutely. There are a few European alternatives though that may cause less of a regulatory headache.
I came across Zenkit on a project recently and played around with SeaTable a bit. SeaTable actually looks quite like Airtable. But are Germany-based. A Swedish contender is Favro. I don’t know where they store the data.
You might also want to look into Ninox database app. They are located in Germany.
It’s a pretty good app.
I hope you find an app that will work for your purposes.
Didn’t know Ninox. Looks interesting. Thanks for the hint.
I forgot to mention in my previous post: SeaTable offers a self-hosting option. May be relevant for you if …
… is essential.
Sadly there is absolutly no wriggle rom at the moment and Airtable are not GDPR compliant anymore by definition.
Are there no way you could consider extending the service to Hosting in Europe?
Yes indeed, at this moment, any data transferred to or stored in the US, is by definition not GDPR compliant. As far as i know, what would be the ‘best’ solution is an both a watertight DPA and EU only hosted servers/data.
I don’t think it’s that simple. I believe at least two of my clients have achieved GDPR compliance in the UK with Airtable. Has your “definition” factored in all of the possible exceptions and processing policies offered under the GDPR?
This is something that would be absolutely necessary to be able to use Airtable in big european companies. Please consider it seriously!