Legal & policy framework

Acceptable Use Framework

Audience: Website visitors, application users, and approved integrators

PHX services must be used lawfully, for authorized purposes, with respect for patient privacy, institutional authority, and system security.

Pre-launch document

Final terms will identify the responsible legal entity, effective date, applicable country law, application release, and verified contact details before they become binding.

Prohibited conduct

Unauthorized access, impersonation, credential sharing, harmful automation, malicious code, data extraction outside approved purposes, re-identification, harassment, and attempts to bypass safeguards are prohibited.

Security research

Good-faith security research will be governed by a separate vulnerability disclosure policy and safe-harbour scope. Do not test production systems without written authorization.

← Back to legal centre Ask a question →