Terms of Use

Agreement and Acceptance

Binding agreement between Customer (facility/entity) and Qanavi Inc. d/b/a Autoset. By accessing the Platform you accept these Terms and the Privacy Policy. If accepting on behalf of an entity, you warrant authority to bind it. A separate Business Associate Agreement governs all PHI and controls in the event of conflict with these Terms.

License and Restrictions

Limited, non-exclusive, non-transferable, revocable right to use the Platform for internal clinical documentation. You will not: reverse engineer; create derivative works; resell or sublicense; scrape or data-mine; introduce malicious code; circumvent security controls; or use the Platform to access EHR data beyond the scope authorized by your EHR provider.

Authorized Users

Unique credentials per user; no sharing. Customer is responsible for all activity under its users' accounts and must designate an administrator to manage access. Notify Autoset immediately of credential compromise.

Service Description and Clinical Disclaimer

Autoset ingests unstructured inputs (including voice dictation) and EHR data to generate draft clinical documentation.

Autoset is an administrative productivity tool. It is not a licensed healthcare provider and does not provide medical advice, diagnosis, or treatment recommendations. AI-generated output may contain errors or omissions. A licensed clinician must review, verify, and sign off on all output before it is committed to a patient record or used for billing, coding, or reimbursement. Responsibility for clinical accuracy and patient care decisions rests solely with Customer and its clinical staff.

Third-Party EHR Terms:

Where the Platform integrates with third-party EHR:

1. Third-Party EHR is not a party to this Agreement and has no obligations or liability to Customer regarding the Platform.

2. Third-Party EHR disclaims all warranties, express or implied, and all liability for damages, interruptions, data loss, or compliance issues arising from the Platform.

3. Autoset, not the Third-Party EHR, is solely responsible for support, maintenance, audit responses, log production, and regulatory security assessments relating to the Platform.

4. Autoset is not liable for feature degradation caused by Third-Party EHR's modification, deprecation, or revocation of APIs, endpoints, or data access. Such events are not a breach of this Agreement.

5. PointClickCare (PCC) is an intended third-party beneficiary of this Section and may enforce it directly.

6. Customer represents it has all rights and authorizations required to permit Autoset to access its EHR data.

   
   

Customer Data and PHI

"Customer Data" means clinical inputs, dictations, and EHR-sourced patient data. Customer retains ownership of Customer Data and validated Output. Autoset retains ownership of the Platform and its models.

Autoset processes Customer Data to deliver the Platform. Autoset does not sell, rent, or trade Customer Data, and does not use PHI to train, fine-tune, or improve generalized AI models. 

Disclosure is limited to (i) subcontractors bound by written BAAs with protections no less restrictive than these Terms, and (ii) as required by law.

Security

Written information security program with administrative, technical, and physical safeguards meeting HIPAA and HITECH. AES-256 at rest, TLS 1.2+ in transit. Per-customer data isolation. Immutable audit logging of access, sync, generation, and edit events.

Breach Notification

Autoset will notify Customer's designated administrator in writing without unreasonable delay and no later than ten (10) days after discovery of a Breach of Unsecured PHI, and will provide the information required for Customer's reporting obligations under HIPAA/HITECH. The BAA controls if it specifies a shorter period.

Fees

Subscription-based, billed in advance, auto-renewing unless cancelled at least thirty (30) days before the end of the current term.

Term, Termination, and Data Return

Autoset may suspend or terminate for non-payment or material breach. On termination, upon written request within thirty (30) days, Autoset will export Customer Data in JSON or CSV. Thereafter Autoset will delete Customer Data from live systems in accordance with its retention schedule and the BAA.

Indemnification

Customer indemnifies Autoset against third-party claims arising from: (a) Customer's breach of these Terms; (b) Customer's failure to obtain required patient consents or authorizations; (c) clinical malpractice, diagnostic error, or documentation inaccuracy by Customer's staff.

Warranty Disclaimer and Limitation of Liability

Platform and Output provided "AS IS." All warranties disclaimed, including merchantability, fitness for a particular purpose, and non-infringement. No warranty of error-free output or uninterrupted availability. No liability for indirect, incidental, special, consequential, or punitive damages. Aggregate liability capped at the fees paid in the three (3) months preceding the claim. These limitations do not apply to Autoset's indemnification obligations under the BAA or its breach-notification obligations. 

Dispute Resolution

Binding arbitration under JAMS, single arbitrator, FAA governs. Class action waiver. Jury trial waiver. Small claims carve-out.

Governing Law

New York law. No assignment without consent. These Terms plus the BAA constitute the entire agreement.

Contact and Notices 

All notices, requests, demands, and other communications under these Terms must be in writing. Legal notices to Autoset must be sent via certified mail to our registered business address or via email to saic@autoset.dev with the subject line "LEGAL NOTICE". General inquiries may be directed to dev@autoset.dev.