Security & Privacy
What BaseAudit accesses, stores, and never changes.
BaseAudit is designed for read-only Airtable health checks. It uses your token to inspect the base you choose, produce diagnostics in your browser, and keep the audit process transparent.
Browser-session token
Your Airtable Personal Access Token is kept only for the current browser session. It is not written to a BaseAudit database.
No base data stored
BaseAudit does not store your Airtable records, schema, views, automations, reports, or scan results on our servers.
Client-side checks
Scans run client-side where applicable, including score calculation, relationship analysis, naming checks, duplicate-field checks, and report generation.
Read-only by design
BaseAudit reads Airtable metadata and selected table data for diagnostics. It does not create, update, or delete records, fields, tables, views, or automations.
Airtable API calls BaseAudit makes
BaseAudit calls Airtable directly from your browser using the token you provide. Calls vary by scan type.
List accessible bases
GET /v0/meta/bases
Shows the bases your token can access so you can choose one to audit.
Read base schema
GET /v0/meta/bases/:baseId/tables
Loads table, field, view, relationship, lookup, rollup, and formula metadata for the selected base.
Scan field usage
GET /v0/:baseId/:tableId
Reads records from the table you choose to detect empty fields, populated percentages, and possible duplicate fields.
Authentication and billing
Account authentication is handled by Clerk. Payment, checkout, subscription status, and billing management are handled by Stripe. BaseAudit does not process card details directly.
Sign-in, profile, and account session.
Checkout, subscriptions, invoices, and billing portal.
How to revoke access
- Open Airtable and go to your developer hub or personal access token settings.
- Find the Personal Access Token you used with BaseAudit.
- Revoke or delete that token. BaseAudit will immediately lose access because every Airtable request depends on the token.
Ready to audit
Use a read-scoped Airtable token and only grant access to the bases you want BaseAudit to inspect.