Acceptable Use Policy

Effective September 17, 2026

Do not submit real claims, protected health information, patient records, membership or eligibility files, credentials, payment-card information, or other sensitive patient or member information. Healthdex's current Claims Comparison Demo uses fixed synthetic records and has no claims-upload feature.

Scope

This Acceptable Use Policy is incorporated into the Healthdex Terms of Use and applies to every user of the website, platform, demonstrations, APIs if offered, reports, and exports. A signed customer agreement may add stricter requirements and controls in the event of a direct conflict.

Authorized use

You may use Healthdex only for lawful internal evaluation, market research, professional investigation, and other purposes expressly authorized by Healthdex and your organization. You must follow applicable laws, source restrictions, confidentiality duties, your organization's policies, and the permissions assigned to your account.

Prohibited data

Unless Healthdex has expressly authorized a separately governed customer-data pilot in writing, you may not enter, upload, paste, transmit, or otherwise provide:

Claims, claim lines, remittance records, patient records, protected health information, or other regulated health data.
Membership or eligibility files, member rosters, direct or reversible identifiers, member addresses, or information reasonably capable of identifying an individual.
Passwords, setup or reset links, access tokens, encryption keys, secrets, payment-card information, or sensitive financial account data.
Legally privileged material or confidential information that you lack authority to provide.

Free-text fields, annotations, correction requests, support messages, and demonstrations are not authorized channels for sensitive data. Labeling information “de-identified” does not by itself authorize its submission.

Prohibited activity

You may not use Healthdex to:

Break the law, violate another person's rights, deceive others, or act beyond authority granted by your organization.
Identify or re-identify an individual, combine information for that purpose, or enrich one customer's results with another customer's information.
Access another user or tenant, bypass authentication or authorization, share credentials, evade usage controls, introduce malicious code, disrupt service, or test security without prior written authorization.
Scrape, crawl, bulk extract, or overload the service outside supported workflows or exports.
Reverse engineer, circumvent technical limits, remove notices, or create a competing dataset or service from Healthdex materials, except where a restriction is prohibited by law.
Resell, sublicense, publicly benchmark, publish, or commercially redistribute nonpublic functionality, reports, or exports without written permission.
Misrepresent synthetic data as real, omit material limitations, or present evidence as a guaranteed savings, proven overpayment, applicable contract term, adjudicated claim outcome, endorsement, or legal conclusion.
Use Healthdex as the sole basis for a clinical decision, payment denial, benefit or coverage decision, member outreach, individual steerage, reimbursement decision, network-adequacy conclusion, or another decision materially affecting an individual.
Infringe intellectual-property, privacy, confidentiality, contractual, or data-use rights, including restrictions imposed by an underlying public or licensed source.

Account and access security

Accounts are for named users. Protect your credentials and account-recovery links, use only the roles and tenant memberships assigned to you, and promptly report suspected compromise. Do not share an account, allow another person to act as you, or attempt to gain additional permissions.

Exports and reasonable use

You are responsible for securing downloaded information and observing all continuing restrictions. Do not attempt to defeat time limits, capacity limits, or source controls. Healthdex may apply reasonable technical and operational limits to protect availability, security, and equitable evaluation access.

Security research and reporting

Do not scan, probe, exploit, or test Healthdex systems without prior written authorization. If you believe you found a vulnerability or exposed information, stop testing, avoid accessing or changing data, preserve relevant details, and report the issue through the request form on our public website. This policy does not itself authorize security research or create a safe harbor.

Enforcement

Healthdex may investigate suspected violations and restrict, suspend, or terminate access when reasonably necessary to protect users, data, systems, third parties, or legal interests. Healthdex may preserve relevant records and cooperate with affected organizations, service providers, or authorities when appropriate and legally permitted. Enforcement under this policy does not limit other rights or remedies.

Changes and contact

Healthdex may update this policy as the service and risks change. The effective date identifies the current version. Questions or reports may be submitted through the request form on our public website. A dedicated abuse or security-reporting address will be added when established.