Welcome to MediBridgeX. These Terms of Service ("Terms") govern your access to and use of the MediBridgeX website, API, interoperability engine, and related services (collectively, the "Services"). By accessing or using the Services, you agree to be bound by these Terms.
1. Enterprise Agreements & BAA Primacy
If your organization has executed a separate Master Services Agreement (MSA) or a Business Associate Agreement (BAA) with MediBridgeX, the terms of those signed agreements will supersede these Terms in the event of a conflict. Specifically, the handling, processing, and safeguarding of all Protected Health Information (PHI) is governed exclusively by your BAA.
2. Not Medical Advice (Clinical Disclaimer)
MediBridgeX is purely a technological data transport and transformation layer. We are not a healthcare provider, medical professional, or clinical decision support system. The Services are designed to route and translate HL7, FHIR, and other healthcare data formats. MediBridgeX does not review the clinical accuracy of the data passing through our APIs. Healthcare providers, hospitals, and clinicians remain solely and completely responsible for all medical care, diagnoses, and clinical decisions made based on data routed through MediBridgeX.
3. Acceptable Use Policy (AUP)
By using MediBridgeX, you agree NOT to:
- Reverse-engineer, decompile, or attempt to extract the source code or proprietary data transformation algorithms of the Services.
- Conduct unauthorized vulnerability scanning, penetration testing, or DDoS attacks against our APIs.
- Use the Services to transmit malicious code, viruses, or intentionally malformed payloads designed to disrupt the platform.
- Use the Services in any manner that violates applicable federal, state, or local laws, including HIPAA.
4. Intellectual Property & Data Ownership
- MediBridgeX IP: MediBridgeX retains all rights, title, and interest in and to the platform, APIs, transformation engines, algorithms, and documentation.
- Customer Data: You (and your patients) retain all rights, title, and ownership of your Customer Data (including PHI). MediBridgeX claims no ownership over the medical records routed through our platform.
5. Service Level Agreement (SLA) & Availability
We strive to ensure the Services are highly available (target 99.9% uptime). However, the Services may occasionally be unavailable due to planned maintenance, emergency security patches, or events outside our reasonable control (e.g., severe cloud provider outages). MediBridgeX is not liable for data delivery delays caused by external network failures or destination server unreachability.
6. Limitation of Liability
To the maximum extent permitted by law, MediBridgeX shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including loss of profits, data, or goodwill, arising out of or in connection with your use of the services. In no event shall MediBridgeX's aggregate liability exceed the total amount paid by you to MediBridgeX in the twelve (12) months preceding the event giving rise to the claim.
7. Indemnification
You agree to defend, indemnify, and hold harmless MediBridgeX, its officers, and employees from any claims, damages, liabilities, and expenses (including attorney fees) arising from: (a) your violation of these Terms; (b) your violation of HIPAA or other privacy laws; or (c) any medical malpractice or clinical errors resulting from your use of the Services.
8. Termination and Data Extraction
Either party may terminate these Terms at any time for convenience or for cause. Upon termination or cancellation of your account:
- You will have a thirty (30) day window to extract your historical data and logs via our APIs.
- After 30 days, MediBridgeX will securely and permanently delete your Customer Data and PHI from our active servers in compliance with HIPAA and your BAA.
9. Contact Information
For legal inquiries or notices regarding these Terms, please contact our legal department at:
- Email: legal@medibridgex.io
- Address: [Your Company Address]