Terms of Service

These Terms of Service ("Terms") are a legal agreement between the healthcare organization or practice ("Organization," "you," or "Customer") and Mediphant Corporation ("Mediphant," "we," "our," or "us") and govern your use of the Mediphant Guardian platform, including our website, web application, mobile applications, and all related services (collectively, the "Service" or "Platform").

Effective Date: For electronic acceptance, these Terms become effective on the date you click "I Agree," check the acceptance box, or first access the Service. For traditional signature execution, these Terms become effective on the date of the last signature. The effective date of your acceptance will be recorded and provided to you upon request.

By clicking "I Agree," "Accept," or similar button, by checking a box indicating acceptance, or by accessing or using the Service, you agree to these Terms, the accompanying Business Associate Agreement, and any applicable Commercial Agreement. If you are accepting on behalf of an Organization, you represent that you have authority to bind that Organization to those documents. If you are accepting as an invited Authorized User, you agree to comply with these Terms in your use of the Service. If you do not agree to these Terms, the BAA, and any applicable Commercial Agreement, do not use the Service.

1. Definitions

"Authorized User" means any individual authorized by the Organization to access and use the Service, including but not limited to healthcare providers, administrative staff, and other personnel.

"BAA" means the Business Associate Agreement available at https://guardian.mediphant.com/baa or otherwise executed between the parties.

"Commercial Agreement" means a separate written agreement between Mediphant and the Organization that identifies the Guardian services made available to the Organization and any related implementation or account terms.

"Connected Patient" means an individual patient who has granted the Organization access to their health data through the Service.

"Guardian Intelligence" means the AI-assisted features of the Service made available by Mediphant from time to time. Guardian Intelligence outputs are drafts and support tools only and are subject to Section 11.1.

"Guardian Platform" means the Mediphant Guardian software platform made available by Mediphant from time to time for patient collaboration, care coordination, practice workflows, and related administrative functions.

"PHI" means Protected Health Information as defined under the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations, as amended.

"Privacy Policy" means Mediphant's Data Security & Privacy Policy available at guardian.mediphant.com/privacy, as updated from time to time.

"Guardian Owned Profile" means a patient profile created and maintained by the Organization within the Service for an individual who does not have, or has not connected, their own Mediphant account.

2. Eligibility & Account Creation

2.1 Organization Requirements

To create or maintain an Organization account for the Service, the Organization must be:

• A licensed healthcare organization, medical practice, healthcare provider, or other organization authorized to provide or support healthcare services in the jurisdictions where you operate
• Capable of entering into legally binding contracts through an authorized representative
• In compliance with all applicable healthcare laws and regulations

2.2 Account Registration

When creating an Organization account, you agree to:

• Provide accurate, complete, and current information about your Organization
• Maintain and promptly update this information
• Maintain the security and confidentiality of your administrative account credentials
• Promptly notify us of any unauthorized access or security breaches
• Accept responsibility for all activities that occur under your Organization's account

2.3 Authorized Users

You are responsible for:

• Managing access credentials for all Authorized Users
• Ensuring that each Authorized User complies with these Terms
• All actions taken by Authorized Users under your Organization's account
• Promptly deactivating access for any individual who is no longer authorized to use the Service

3. About Mediphant Guardian

Mediphant Guardian is a platform that enables healthcare organizations to securely send, receive, organize, and manage patient health records shared by individuals using the Mediphant consumer application. The Service facilitates patient-provider data sharing, care coordination, and secure health information management. Mediphant Guardian does not provide medical advice, diagnosis, or treatment, and does not replace clinical judgment or professional medical services.

4. Scope of Service

4.1 Service Features

Subject to these Terms, Mediphant grants you a non-exclusive, non-transferable, revocable right to access and use the Service for your internal business purposes, which includes:

• Receiving and accessing health records shared by Connected Patients and your Organization
• Securely storing and organizing patient health information
• Facilitating communication with patients regarding their shared health data
• Generating insights and summaries to support clinical workflows

4.2 Service Modifications

We reserve the right to modify, update, or discontinue features of the Service at our discretion. We will provide reasonable notice for material changes that negatively impact functionality. Continued use of the Service after such changes constitutes acceptance of the modified Service.

4.3 Product-Specific Workflow Responsibilities

The Service supports healthcare workflows but does not replace your professional, operational, or compliance responsibilities. You and your Authorized Users are responsible for:

• Messaging: Reviewing message recipients, content, attachments, and urgency before sending or relying on messages through the Service, and using appropriate alternative channels for emergencies or time-sensitive clinical matters
• Uploads and shared files: Ensuring that documents, images, notes, and other uploaded materials are accurate, appropriate for the intended patient or workflow, and do not include data you are not authorized to upload or share
• Patient connections: Confirming that each Connected Patient relationship is appropriate, monitoring connection status, and honoring any patient revocation, expiration, or limitation of access reflected in the Service
• Audit logs: Understanding that the Service may maintain audit logs and access records for compliance, security, fraud prevention, and dispute resolution, and that Authorized User actions may be attributable to your Organization
• Emergency access: Maintaining your own emergency, downtime, and backup procedures because the Service is not intended to be the sole system of record or the sole method for accessing time-critical health information
• User roles: Assigning appropriate roles and permissions, reviewing access regularly, and promptly removing access for personnel who no longer need the Service

4.4 Fees

The Service, including Guardian Platform and Guardian Intelligence, are subject to fees as described in your Commercial Agreement. All fees, billing, payment, credit card authorization, and applicable taxes are governed by your Commercial Agreement. In the event of a conflict between these Terms and your Commercial Agreement regarding fees or other commercial terms, the Commercial Agreement controls.

5. Acceptable Use & Restrictions

5.1 Permitted Use

You may use the Service only for lawful purposes and in accordance with these Terms. You agree to use the Service in compliance with all applicable laws and regulations in the jurisdictions where you operate, including healthcare, privacy, security, and medical-device laws where applicable.

5.2 Prohibited Activities

You and your Authorized Users agree not to:

• Use the Service for any unlawful purpose or in violation of any applicable laws or regulations
• Access or attempt to access accounts, data, or systems not intended for you
• Interfere with or disrupt the integrity or performance of the Service
• Reverse engineer, decompile, disassemble, or otherwise attempt to discover the source code of the Service
• Remove, modify, or obscure any proprietary notices on the Service
• Use the Service to transmit viruses, malware, or other malicious code
• Share access credentials or allow unauthorized individuals to use the Service
• Use the Service to harass, abuse, threaten, or violate the rights of others
• Use the Service to send spam, bulk unsolicited messages, duplicative messages, or non-care-related promotional communications to Connected Patients or other users
• Use patient messaging, connection requests, uploads, notifications, or other Platform features in a harassing, coercive, deceptive, excessive, or abusive manner
• Solicit, pressure, or repeatedly contact patients except as reasonably related to legitimate healthcare, administrative, billing, or care coordination purposes
• Scrape, spider, or use automated means to access the Service except through authorized APIs
• Resell, sublicense, or otherwise make access to the Service available to third parties without our written consent
• Use the Service in a manner that violates any patient's privacy rights or consent limitations
• Circumvent or attempt to circumvent usage limits, rate limits, security controls, patient consent settings, access controls, or other technical limitations of the Service

5.3 Consequences of Violation

We reserve the right to investigate violations of these Terms and take appropriate action, including limiting or disabling specific features, throttling usage, removing or restricting content, disabling patient messaging or connection functionality, or suspending or terminating access to the Service. We may take immediate action without prior notice when we reasonably believe continued access creates a security, privacy, legal, patient safety, or platform integrity risk.

6. Data Ownership, Use & Protection

6.1 Organization Data Ownership

You retain all ownership rights to PHI and other data provided to or generated through your use of the Service ("Organization Data"). By using the Service, you grant Mediphant a limited, non-exclusive license to process Organization Data solely to:

• Provide, maintain, and improve the Service
• Comply with legal obligations
• Enforce these Terms
• Perform other functions as reasonably necessary to deliver the Service

6.2 Data Use Restrictions

Mediphant will not:

• Sell Organization Data or PHI to third parties
• Use PHI to train general-purpose AI models
• Access or use Organization Data except as necessary to provide the Service, ensure security, or comply with legal obligations
• Retain Organization Data longer than necessary for the purposes outlined in these Terms and our Privacy Policy, except as required by law

6.3 De-identified Data

We may de-identify Organization Data in accordance with applicable legal standards and use such de-identified data for research, analytics, product improvement, and other lawful business purposes. De-identified data cannot reasonably be used to identify any individual or Organization.

6.4 Organization Responsibilities

You are responsible for:

• Ensuring you and your Authorized Users have appropriate legal authority, organizational approval, and patient consent or authorization to collect, upload, use, and share data through the Service
• The accuracy, quality, legality, and appropriateness of Organization Data, including documents, images, notes, messages, and other materials uploaded to the Service
• Ensuring your use of the Service complies with all applicable laws and regulations
• Implementing appropriate administrative, physical, and technical safeguards within your own organization
• Training Authorized Users on proper data handling and privacy practices
• Reporting any suspected security incidents or privacy breaches to Mediphant promptly

7. HIPAA Compliance & Business Associate Agreement

7.1 Business Associate Relationship

To the extent Organization is a Covered Entity or Business Associate under HIPAA, the parties acknowledge that Mediphant is a Business Associate of the Organization. The parties shall execute a separate Business Associate Agreement (the "BAA") that governs the creation, receipt, maintenance, transmission, and disclosure of PHI by Mediphant on behalf of the Organization.

7.2 Organization's HIPAA Obligations

You represent and warrant that:

• If HIPAA applies to you, you are a Covered Entity or Business Associate subject to HIPAA
• You will comply with all HIPAA requirements applicable to you
• You have obtained all necessary patient authorizations and consents
• You will use and disclose PHI only as permitted by HIPAA, where applicable, and other applicable laws

7.3 Breach Notification

Each party will notify the other promptly upon discovery of any breach of unsecured PHI, and in any event no later than required by applicable law. Mediphant will cooperate with you to investigate and remediate any such breach.

8. Termination

8.1 Termination for Cause

Either party may terminate these Terms for cause if the other party materially breaches these Terms and fails to cure such breach within 30 days of written notice.

8.2 Termination for Convenience

Either party may terminate these Terms for convenience by providing thirty (30) days' written notice, subject to any cancellation timing, billing-period, renewal, and accrued-fee provisions in the applicable Commercial Agreement.

8.3 Data Retrieval & Deletion

Following termination:

• Immediate Disconnection: All Connected Patient connections are immediately terminated and access to the Service is disabled
• Organization Data Export: You may submit a written request to compliance@mediphant.com within 30 days of termination to request an export of your user-generated content
• Patient-Controlled Source Records: Patient health records made available through Connected Patient relationships are controlled by patients through their Mediphant accounts and connection settings. Those patient-controlled source records are not returned to the Organization, destroyed, or included in an Organization account export merely because the Organization account terminates. Termination ends the Organization's access to those records, unless otherwise required by applicable law, the BAA, or a written agreement. You should download, export, or incorporate any records you need for your own designated record set or legal medical record while the connection is active.
• Data Deletion: After 30 days, user-generated content files maintained by Mediphant on behalf of the Organization will be destroyed or permanently deleted where feasible. Account records, audit logs, legal records, billing records, security records, and other compliance data may be retained in accordance with our Privacy Policy, the BAA, and applicable law.

9. Intellectual Property Rights

Mediphant retains all right, title, and interest in and to the Service, including all software, technology, content, branding, trademarks, and other intellectual property rights. These Terms do not grant you any ownership rights in the Service.

10. Confidentiality

10.1 Definition

"Confidential Information" means non-public information disclosed by one party to the other, whether orally, visually, electronically, or in writing, that is designated as confidential or that should reasonably be understood to be confidential given the nature of the information or the circumstances of disclosure. Confidential Information includes business, technical, security, product, customer, operational, and compliance information, as well as non-public documentation, product plans, audit materials, security reports, and credentials.

10.2 Exclusions

Confidential Information does not include information that the receiving party can demonstrate: (a) is or becomes publicly available without breach of these Terms; (b) was lawfully known to the receiving party before disclosure; (c) is lawfully received from a third party without confidentiality obligations; or (d) is independently developed without use of or reference to the disclosing party's Confidential Information.

10.3 Protection and Use

Each party will protect the other party's Confidential Information using at least reasonable care and no less than the care it uses to protect its own similar information. The receiving party may use Confidential Information only to perform under these Terms and may disclose it only to its personnel, contractors, professional advisors, and service providers who have a need to know and are bound by confidentiality obligations at least as protective as those in these Terms.

10.4 Compelled Disclosure

If the receiving party is required by law, subpoena, court order, or governmental process to disclose Confidential Information, it will provide prompt notice to the disclosing party to the extent legally permitted and will disclose only the portion legally required.

10.5 Survival

Confidentiality obligations survive for five (5) years after termination of these Terms, except that obligations relating to trade secrets, PHI, security credentials, and information required by law to remain confidential survive for as long as such information remains protected under applicable law.

11. Representations, Warranties & Disclaimers

EXCEPT AS EXPRESSLY SET FORTH IN THESE TERMS, THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND. TO THE MAXIMUM EXTENT PERMITTED BY LAW, MEDIPHANT DISCLAIMS ALL WARRANTIES, EXPRESS, IMPLIED, OR STATUTORY, INCLUDING ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT, AND ANY WARRANTY THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR SECURE.

THE SERVICE IS FOR ADMINISTRATIVE AND COORDINATION PURPOSES ONLY. MEDIPHANT DOES NOT PROVIDE MEDICAL ADVICE, DIAGNOSIS, OR TREATMENT, IS NOT A MEDICAL DEVICE, AND IS NOT INTENDED FOR USE IN DIAGNOSING, TREATING, CURING, OR PREVENTING ANY DISEASE OR CONDITION. YOU AND YOUR AUTHORIZED USERS ARE SOLELY RESPONSIBLE FOR ALL CLINICAL AND PROFESSIONAL DECISIONS AND FOR EXERCISING INDEPENDENT PROFESSIONAL JUDGMENT.

11.1 AI-Generated Content

The Service may use artificial intelligence, machine learning, and other automated tools to generate summaries, drafts, insights, suggestions, and other content ("AI Output"). AI Output is probabilistic and may be incomplete, inaccurate, outdated, or otherwise unsuitable for a particular purpose, and is provided to support — not replace — professional judgment. You are solely responsible for reviewing, verifying, and editing all AI Output before relying on it or using it for any clinical, administrative, coding, documentation, or communication purpose. AI Output does not constitute medical advice, diagnosis, or treatment. AI Output should not be placed into a medical record, sent to a patient, or used to make a clinical decision unless it has first been reviewed and approved by an appropriately qualified Authorized User. To the maximum extent permitted by law, Mediphant disclaims all liability arising out of or relating to your use of, or reliance on, AI Output.

11.2 AI Vendor and Data Use Commitments

When Mediphant uses third-party AI, model, inference, hosting, or infrastructure providers to process PHI or Organization Data, Mediphant will require such providers to process the data only to provide the Service, maintain security, troubleshoot service issues, comply with law, or perform other functions permitted by these Terms, the BAA, and applicable law. Mediphant will not permit third-party AI providers to use PHI to train general-purpose AI models. Mediphant will require providers that process PHI to maintain appropriate contractual protections, including a Business Associate Agreement or subcontractor business associate agreement where required by HIPAA.

Mediphant does not permit human review of PHI except where necessary for support, security, abuse monitoring, legal compliance, or incident response and only under appropriate confidentiality and access controls. Mediphant will configure retention settings, where available, to limit retention of prompts, inputs, outputs, and logs containing PHI to the minimum period reasonably necessary to provide the Service, maintain security, troubleshoot issues, or comply with law.

12. Limitation of Liability

12.1 Exclusion of Indirect Damages

TO THE MAXIMUM EXTENT PERMITTED BY LAW, NEITHER PARTY WILL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, GOODWILL, BUSINESS, OR DATA, ARISING OUT OF OR RELATING TO THESE TERMS OR THE BAA, WHETHER IN CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY, OR ANY OTHER THEORY, EVEN IF A PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

12.2 Liability Cap

TO THE MAXIMUM EXTENT PERMITTED BY LAW, MEDIPHANT'S TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THESE TERMS, THE BAA, AND THE SERVICE, WHETHER IN CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY, OR ANY OTHER THEORY, AND INCLUDING ANY CLAIM RELATING TO THE ACCESS, USE, DISCLOSURE, OR SECURITY OF PHI OR A BREACH OF UNSECURED PHI, WILL NOT EXCEED THE GREATER OF (A) THE TOTAL FEES PAID BY YOU TO MEDIPHANT DURING THE TWELVE (12) MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO LIABILITY OR (B) US $50,000.

12.3 Application

The exclusions and limitations in this Section 12 apply to all claims arising out of or relating to these Terms and the BAA, including any claim relating to the access, use, disclosure, or security of PHI or a breach of unsecured PHI, except for your indemnification obligations under Section 13, which are not subject to these limitations. These limitations are an essential basis of the bargain between the parties, allocate risk between the parties, and apply even if any limited remedy fails of its essential purpose. Some jurisdictions do not allow certain limitations, so portions of this Section may not apply to you.

13. Indemnification

13.1 Indemnification by You

You will defend, indemnify, and hold harmless Mediphant, its affiliates, and their respective officers, directors, employees, and agents from and against any third-party claims, and any resulting damages, liabilities, losses, costs, and expenses (including reasonable legal expenses), arising out of or relating to:

• Organization Data, including any claim that Organization Data infringes, misappropriates, or violates the rights of any third party;
• Your or your Authorized Users' use of the Service in violation of these Terms, the BAA, or applicable law;
• Your failure to obtain or maintain any patient consent, authorization, or other legal basis required for the collection, use, or disclosure of data through the Service;
• Any clinical or professional decision made by you or your Authorized Users, or your provision of healthcare services;
• Your breach of your representations, warranties, or obligations under these Terms or the BAA; and
• Any dispute between you and a patient or other third party.

13.2 Indemnification by Mediphant

Mediphant will defend, indemnify, and hold harmless you from and against any third-party claim alleging that the Service, as provided by Mediphant and used in accordance with these Terms, infringes a United States patent, copyright, or trademark of a third party. This Section 13.2 states your sole and exclusive remedy, and Mediphant's entire liability, for any claim of intellectual property infringement. Mediphant has no obligation under this Section to the extent a claim arises from Organization Data, your modifications to the Service, or your use of the Service in combination with items not provided by Mediphant or in violation of these Terms.

13.3 Procedure

The party seeking indemnification will promptly notify the indemnifying party of the claim, give the indemnifying party sole control of the defense and settlement (provided that no settlement may impose any liability, obligation, or admission of fault on the indemnified party without its prior written consent), and provide reasonable cooperation at the indemnifying party's expense. Mediphant's indemnification obligations under Section 13.2 are subject to the limitations of liability in Section 12.

14. Dispute Resolution; Binding Arbitration

14.1 Informal Resolution

Before filing a claim, each party agrees to provide written notice of the dispute and to attempt in good faith to resolve it informally for at least thirty (30) days, unless immediate injunctive or equitable relief is needed to protect Confidential Information, intellectual property, security, or PHI.

14.2 Binding Arbitration

Except for claims that may be brought in small claims court and claims seeking injunctive or equitable relief, any dispute, claim, or controversy arising out of or relating to these Terms, the BAA, or the Service will be resolved by binding arbitration administered by the American Arbitration Association under its Commercial Arbitration Rules. The arbitration will be conducted by a single arbitrator in Delaware, unless the parties agree otherwise. The arbitrator may award any relief available in court on an individual basis, subject to the limitations and exclusions in these Terms.

14.3 Class Action Waiver

EACH PARTY AGREES THAT DISPUTES WILL BE RESOLVED ONLY ON AN INDIVIDUAL BASIS. NEITHER PARTY MAY BRING OR PARTICIPATE IN A CLASS, COLLECTIVE, CONSOLIDATED, PRIVATE ATTORNEY GENERAL, OR REPRESENTATIVE ACTION OR ARBITRATION.

14.4 Opt-Out

You may opt out of arbitration within thirty (30) days after first accepting these Terms by sending written notice to guardian@mediphant.com with your Organization name, the name and email address of the person accepting these Terms, and a clear statement that you opt out of arbitration. Opting out of arbitration does not affect any other provision of these Terms.

14.5 Injunctive Relief

Either party may seek temporary, preliminary, or permanent injunctive or equitable relief in a court of competent jurisdiction to protect its Confidential Information, intellectual property rights, security, or PHI without first completing informal resolution or arbitration.

14.6 Governing Law and Venue

These Terms are governed by the laws of the State of Delaware, without regard to conflict-of-law rules. Subject to the arbitration provisions above, the state and federal courts located in Delaware will have exclusive jurisdiction and venue for any permitted court proceeding, and each party consents to personal jurisdiction in those courts.

15. General Provisions

15.1 Order of Precedence

If there is a conflict among documents, the following order controls: (1) the BAA with respect to PHI; (2) any applicable Commercial Agreement with respect to commercial terms; (3) these Terms; and (4) any policies, documentation, or online materials referenced by these Terms. No purchase order or similar document provided by you will modify these Terms unless expressly signed by Mediphant.

15.2 Changes to Terms

Mediphant may update these Terms from time to time. For material changes that materially reduce your rights or materially increase your obligations, Mediphant will provide reasonable notice, such as by email, in-product notice, or posting through the Service. Unless a different effective date is stated, updated Terms become effective when posted for new users and thirty (30) days after notice for existing Organizations. Continued use of the Service after the effective date constitutes acceptance of the updated Terms.

15.3 Assignment

You may not assign or transfer these Terms without Mediphant's prior written consent, except to a successor in connection with a merger, acquisition, corporate reorganization, or sale of substantially all assets, provided the successor assumes all obligations under these Terms and the BAA. Mediphant may assign these Terms in connection with a merger, acquisition, corporate reorganization, financing, or sale of substantially all assets. Any attempted assignment in violation of this Section is void.

15.4 Force Majeure

Neither party will be liable for delay or failure to perform caused by events beyond its reasonable control, including acts of God, natural disasters, labor disputes, acts of war or terrorism, civil unrest, governmental actions, internet or telecommunications failures, failures of third-party hosting or utility providers, and other events of force majeure.

15.5 Notices

Legal notices to Mediphant must be sent to Mediphant Corporation, 539 W Commerce St. #7718, Dallas, TX 75208, with a copy to guardian@mediphant.com. Notices to you may be sent to the email address associated with your administrative account, through the Service, or to the address listed in your account registration. Notices are deemed given when delivered personally, when confirmed by email or courier, or three (3) business days after mailing by certified or registered mail.

15.6 Severability; Waiver

If any provision of these Terms is found unenforceable, the remaining provisions will remain in effect and the unenforceable provision will be modified to the minimum extent necessary to make it enforceable. A party's failure to enforce a provision is not a waiver of its right to do so later.

15.7 Entire Agreement

These Terms, together with the BAA, any applicable Commercial Agreement, and documents incorporated by reference, constitute the entire agreement between the parties regarding the Service and supersede all prior or contemporaneous agreements, proposals, and understandings regarding the Service.

15.8 Electronic Acceptance & Signatures

Pursuant to the ESIGN Act and UETA, electronic signatures and records have the same legal force and effect as handwritten signatures and paper records. Your electronic acceptance creates a legally binding agreement.

We will maintain records of your electronic acceptance, including:

• The Effective Date (date and time of acceptance)
• The identity of the person accepting (name and email)
• The version of these Terms accepted
• The IP address from which acceptance occurred
• The Organization name

16. Contact Information

Mediphant Corporation
539 W Commerce St. #7718
Dallas, TX 75208
Email: guardian@mediphant.com
Website: https://mediphant.com
Guardian: https://guardian.mediphant.com

Version History

• Version 2.1 (June 19, 2026): Added acceptable-use restrictions for platform abuse, spam, bulk unsolicited patient communications, abusive patient outreach, and circumvention of usage limits or access controls; expanded enforcement remedies for Terms violations; and clarified patient-controlled source record handling in Organization account exports.
• Version 2.0 (June 11, 2026): Updated Mediphant contact information and Guardian domain references; moved fees, billing, and subscription terms to the Commercial Agreement and added a Fees provision (Section 4.4); added Commercial Agreement recognition in the order of precedence (Section 15.1); restored a limitation-of-liability cap (Section 12.2); strengthened warranty disclaimers, limitation of liability, indemnification, confidentiality, dispute resolution, and general legal provisions; added product-specific workflow responsibilities, AI-generated content terms, and AI vendor commitments; and added support for invited Authorized User acceptance.
• Version 1.0 (October 20, 2025): Initial release.