Legal drafts
These are product statements for counsel to turn into signed terms. They are not a contract, a BAA or a DPA.
Terms, in plain language
You get a workspace for a flat monthly or annual fee. You can cancel a monthly plan at any time. Annual billing is two months free, not a lock-in. You own your compliance: anti-kickback, Stark, HIPAA, UK GDPR, PIPEDA and provincial health privacy are yours to meet, with the controls the product gives you. You will not upload real patient data to a staging host. You will not use the product to pay, reward or meter anyone for a referral.
Privacy
Account data (name, email, workspace, region) is separate from referral notes. Referral notes are encrypted. We do not sell personal information. Access, export and deletion requests go to the contact on this site until a formal privacy desk is named per region. Marketing mail requires the consent record the product already enforces for sequences.
DPA and BAA
A UK or Canadian workspace needs a data processing addendum before production PHI or health information is stored. A US workspace that stores PHI needs a business associate agreement with the customer and with each sub-processor that can see it. Neither document is executed by using this staging site.