Welcome to Zuredex. These Terms of Service ('Terms') govern your access to and use of the Zuredex operational intelligence platform, applications, and APIs (collectively, the 'Service'). By executing an order form, clicking 'I Agree', or accessing the Service, you agree to be bound by these Terms on behalf of yourself and the organization you represent.
Zuredex grants Authorized Users a non-exclusive, non-transferable right to access and use the Service solely for legitimate internal business operations, including surgical case sheet reconciliation, purchase order matching, and sales commission calculations. You shall not (a) license, sublicense, sell, or reverse-engineer the Service; (b) attempt to bypass tenant-isolation boundaries; or (c) use the Service to transmit malicious code or unauthorized payloads.
To the extent the Service processes Protected Health Information ('PHI') subject to HIPAA/HITECH, such processing is governed by the Business Associate Agreement ('BAA') executed between Zuredex and your organization. Users acknowledge that Zuredex minimizes PHI exposure by reconciling data via procedural and commercial attributes rather than patient identity. Users agree to adhere to the Minimum Necessary standard and refrain from manually entering unneeded PHI into unstructured text fields or downstream third-party integrations.
Access to the Service requires multi-factor authentication ('MFA'). Authorized Users are responsible for maintaining the confidentiality of their credentials and registered MFA devices. You agree to notify Zuredex immediately upon discovering any unauthorized access, compromised credentials, or anomalous session activity.
Customer retains all right, title, and interest in and to all customer raw data and uploaded documents. Zuredex maintains administrative, physical, and technical safeguards designed to align with the HIPAA Security Rule, including encryption in transit (TLS 1.2+) and at rest (AES-256) via Google Cloud Platform, fail-closed tenant query routing, and document access audit logging.
Zuredex reserves the right to immediately suspend access to any user or tenant in the event of a suspected security breach, unauthorized credential sharing, or material violation of these Terms. Upon termination, Zuredex will retain or securely dispose of Customer data in accordance with the applicable Business Associate Agreement (BAA), order form agreement, and relevant data retention laws.
The Service utilizes automated document processing, optical character recognition (OCR), and artificial intelligence (including Google Vertex AI and Document AI) to parse surgical case sheets. Output from these tools is assistive and provided 'as-is.' Authorized Users remain solely responsible for reviewing, verifying, and approving all extracted data prior to reconciliation, purchase order submission, or commission calculation. Zuredex does not use Customer PHI or proprietary case data to train public or third-party AI models.
Customer acknowledges and agrees that Zuredex utilizes third-party infrastructure and cloud service providers, specifically Google Cloud Platform (GCP) and Firebase, as sub-processors to host, store, and process Customer Data. Zuredex maintains executed Business Associate Agreements and data processing addenda with all infrastructure sub-processors handling PHI.
Customer agrees not to upload or transmit cardholder data (PCI-DSS), Social Security Numbers, or unencrypted credentials into free-text fields or document uploads where such data is unrelated to surgical case reconciliation. Users shall adhere to data minimization principles when submitting source documentation.
Zuredex retains all right, title, and interest in and to the Service, including software, algorithms, and workflows. Zuredex may collect and process de-identified, aggregated operational metrics and system performance data in compliance with HIPAA de-identification standards (45 CFR § 164.514) to maintain, improve, and secure the platform.
To the maximum extent permitted by law, Zuredex's aggregate liability arising out of or related to the Service shall not exceed the fees paid by Customer in the twelve (12) months preceding the event giving rise to liability. Zuredex does not warrant uninterrupted or error-free operation, and service availability is subject to planned maintenance and underlying cloud provider service level agreements.
Questions about these Terms? Contact us at analytics@zuredex.com.