Acceptable Use Policy

Effective [EFFECTIVE DATE]

This Acceptable Use Policy ("AUP") describes what you may and may not do with ProviderPulse (the "Service"). It is part of our Terms of Service. By using the Service, you agree to this AUP.

1. Prohibited content

You must not upload, store, or transmit:

• Protected health information (PHI) or patient-identifying data of any kind, including patient names, medical record numbers, and encounter identifiers tied to an individual. Upload only de-identified, provider-level compensation and productivity data. See our HIPAA & Business Associate Statement.
• Content you do not have the right to provide, or that infringes someone else's intellectual property or privacy rights.
• Unlawful, fraudulent, defamatory, or harmful content.
• Malware, or any code intended to disrupt or damage software, hardware, or data.

2. Prohibited conduct

You must not:

• Attempt to gain unauthorized access to the Service, other organizations' data, or our systems.
• Probe, scan, or test the vulnerability of the Service, or breach or circumvent any security or authentication measure, except under a written authorization from us.
• Interfere with or disrupt the Service, for example by overloading it or by automated bulk requests that degrade performance for others.
• Reverse engineer the Service, except to the extent that restriction is prohibited by law.
• Use the Service to build a competing product, or resell or sublicense access without our permission.

3. Your responsibilities

• Remove patient identifiers from any file before you upload it.
• Limit access within your organization to people who need it, and assign roles appropriately.
• Keep your login credentials secure and promptly remove access for people who no longer need it.

4. Enforcement

We may investigate suspected violations of this AUP. We may remove or disable content that violates it, and we may suspend or terminate access, with or without notice, to protect the Service, our users, or third parties. Where practical, we will tell the organization's administrator what happened.

5. Reporting

To report a violation or a security concern, contact us at [CONTACT EMAIL].