Terms of Service

1. Nature of Services — What InPursuit Health Is

InPursuit Health is a veteran-owned health data orchestration company. We build infrastructure — the TETRA™ platform — that unifies, protects, and puts health data to work for the people and organizations that generate it.

We are not a generic software-as-a-service company. We are healthcare data infrastructure. That distinction matters and it shapes every provision in these Terms:

• Your data is never our product. Our revenue comes from infrastructure access and outcome-based arrangements, not from monetizing what flows through our systems.
• We are a Business Associate, not a data controller. For covered entities, we handle PHI under a BAA — not under a standard cloud service agreement.
• Security is the foundation. TETRA was built to DoD and VA standards before entering the commercial market. Security is not a feature layer — it is the architecture.
• Our commitments are unconditional. The Data Oath is not marketing. Every promise made on that page is a legally binding obligation incorporated into these Terms.

2. Acceptance of Terms

These Terms of Service ("Terms") govern your access to and use of the Services provided by InPursuit Health, Inc. ("InPursuit Health," "we," "us," or "our"), a Delaware corporation.

By creating an account, accessing the TETRA platform, or otherwise using the Services, you ("User," "you," or "your") acknowledge that you have read, understood, and agree to be bound by these Terms, the Data Oath, and the Privacy Policy.

If you are entering into this agreement on behalf of an organization, you represent and warrant that you have the authority to bind that organization to these Terms.

We will not retroactively change these Terms to expand our use of your data or reduce your rights without your explicit consent. Material changes require 60 days' advance written notice and the right to exit at no cost.

3. Definitions

• "Agreement" — These Terms, together with the Data Oath, Privacy Policy, any Order Form or Statement of Work, and any Business Associate Agreement (BAA), all of which are incorporated by reference.
• "Authorized Users" — Individuals authorized by Customer to access and use the Services under Customer's account.
• "BAA" — A Business Associate Agreement executed between InPursuit Health and a covered entity, governing the handling of PHI.
• "Customer" — An organization or individual that has entered into a subscription or enterprise agreement with InPursuit Health.
• "Customer Data" — All data, including PHI, submitted to or processed through the Services by or on behalf of Customer. Customer Data remains Customer's property at all times.
• "Data Oath" — The six unconditional commitments published at InPursuitHealth.com/data-oath.html, incorporated into these Terms as legally binding obligations.
• "PHI" — Protected Health Information as defined under HIPAA (45 C.F.R. § 160.103).
• "Services" — The TETRA™ platform and all associated products described in Section 4.
• "TETRA Vault" — The logical data isolation architecture described in Section 11 by which each Customer's data is stored, governed, and protected separately.

4. What We Provide

InPursuit Health provides health data orchestration, interoperability, and AI governance infrastructure. The Services include:

• TETRA™ — Core data orchestration platform. The data fabric foundation that unifies disparate health systems, eliminates silos, and provides a unified data substrate for every connected layer. Validated at 135,000 writes/second and tested at 8 billion+ transactions over a five-day stress test.
• TETRA Ex™ — Bidirectional health data exchange infrastructure. Reads from every major data source in U.S. healthcare and writes validated data back to source systems. Covers 97% of U.S. hospitals and 280M+ patient records. TEFCA-aligned, FHIR R4 native.
• TETRA Conductor™ — Model-agnostic AI orchestration. The intelligent routing layer that evaluates clinical context in real time and directs each interaction to the optimal AI model or agent. No vendor lock-in. <200ms routing decision latency.
• TETRA Aegis™ — Supervisory AI control plane. Intercepts, classifies, risk-scores, and mediates every AI interaction before sensitive data leaves your organization. Enforces HIPAA, NIST, and custom governance policies at the architectural level.
• TETRA Sentinel™ — The AI that watches AI. Continuous behavioral surveillance, hallucination detection, drift monitoring, and adversarial defense across all AI interactions in your environment.
• InPursuit Consumer Application — A consumer-facing personal health data vault and wellness platform that gives individuals unified access to their complete health record, patient-controlled permissions, and AI-powered care navigation.
• Website and marketing properties at InPursuitHealth.com and related domains.

The specific Services available to you depend on your subscription tier and any applicable Order Form. We reserve the right to add and evolve features, with notice to Customers for material changes.

5. Eligibility

To access the Services, you must:

• Be at least 18 years of age;
• Have legal authority to enter into a binding agreement (or be expressly authorized to do so on behalf of an organization);
• Comply with all applicable federal, state, and local laws and regulations, including HIPAA, the HITECH Act, CMS conditions of participation, and applicable state health privacy laws; and
• For provider accounts: hold a valid, active professional license in good standing in the applicable jurisdiction.

Provider accounts are subject to NPI verification. InPursuit Health may suspend or deny access to any account that does not meet eligibility requirements.

6. Accounts and Access

6.1 Account Registration

You must provide accurate, current, and complete information during registration and maintain the accuracy of that information throughout the term of your account. You are responsible for all activity that occurs under your account credentials.

6.2 Credential Security

You are responsible for maintaining the confidentiality of your login credentials. Report any suspected unauthorized access immediately to security@InPursuitHealth.com.

6.3 Multi-Factor Authentication

MFA is required for all accounts with access to PHI or clinical data. This is not optional. Failure to maintain MFA will result in access suspension until the requirement is met.

6.4 Authorized User Management

Customers are responsible for managing their Authorized Users, ensuring all Authorized Users comply with these Terms, and immediately deprovisioning access for individuals who are no longer employed or authorized. All access changes are reflected in your real-time audit log.

7. Acceptable Use

7.1 Permitted Use

You may use the Services for lawful purposes consistent with your subscription — including operating value-based care programs, managing clinical workflows, facilitating health information exchange, and empowering patients to access and control their health data.

7.2 Prohibited Conduct

You agree not to:

• Use the Services in violation of any applicable law, including HIPAA, the HITECH Act, federal anti-kickback statutes, or applicable state health privacy laws;
• Access, collect, or transmit PHI or personal information without appropriate authorization;
• Attempt to circumvent, disable, or tamper with security features, access controls, or audit logging;
• Reverse engineer, decompile, or attempt to derive the source code of any component of the TETRA platform;
• Use the Services or Customer Data to train, fine-tune, or benchmark AI or machine learning models for purposes outside your own clinical workflows, without our express written consent;
• Resell, sublicense, or provide access to the Services to unauthorized third parties;
• Introduce malware, ransomware, or any malicious code into the Services;
• Use the Services to facilitate healthcare fraud, fraudulent billing, upcoding, or any scheme that violates the False Claims Act or related statutes;
• Use the Services in any manner that could damage, overburden, or impair our infrastructure or interfere with other customers' use.

7.3 Clinical Decision Responsibility

The TETRA platform supports clinical decision-making. It does not replace it. AI-generated outputs, care gap alerts, risk scores, and clinical recommendations are informational. The licensed provider is always the decision-maker. InPursuit Health does not assume clinical liability for patient outcomes.

8. Data Oath Obligations — Our Binding Commitments to You

The following commitments are unconditional legally binding obligations. They are not qualified by other provisions of these Terms. No carve-out, exception, or future amendment may narrow them without your explicit written consent.

• We will never sell your data. Customer Data and PHI will never be sold, traded, brokered, licensed, or transferred to any third party for financial consideration — not to advertisers, data brokers, pharmaceutical companies, insurers, or anyone else.
• You own your data — always. Customer retains full intellectual property ownership of all Customer Data. InPursuit Health's role is custodian and operator, never owner. Your data rights do not transfer to us and cannot be acquired by us.
• Your data trains only your insights. We will never use Customer Data — including any de-identified, anonymized, or aggregated form of Customer Data — to train, fine-tune, benchmark, or develop AI models for any purpose other than clinical AI workflows within your own TETRA Vault, unless you provide explicit written authorization for a specific and described use. We will never pool your clinical data with any other customer's data for any purpose.
• Full transparency — always. You will always have direct access to real-time audit logs showing what data we hold, who accessed it, when, and for what purpose. There are no hidden processes, shadow analytics, or secondary uses you have not approved.
• Data is never our product. Our revenue model does not depend on the commercial value of Customer Data. We earn revenue from infrastructure subscriptions and outcome-based arrangements. Data monetization is prohibited — not deferred.
• Security is ongoing. We commit to continuous investment in penetration testing, vulnerability assessments, compliance audits, and emerging threat response. Your data protection does not have an expiration date.

9. Data Ownership and Rights

9.1 Customer Ownership

As between InPursuit Health and Customer, Customer retains all right, title, and interest in and to Customer Data, including PHI. These rights are not transferable to InPursuit Health under any circumstance, including merger, acquisition, or insolvency.

9.2 Limited Operating License

Customer grants InPursuit Health a limited, non-exclusive, non-transferable license to access, process, store, and transmit Customer Data solely to: (a) provide the Services as described in this Agreement; (b) operate and maintain the security and reliability of the platform; and (c) comply with applicable law. This license is strictly limited to these purposes. It does not permit InPursuit Health to use Customer Data for its own commercial benefit, product development, or AI training. The license terminates immediately upon expiration or termination of the applicable subscription.

9.3 Data Portability

Customer may export all Customer Data at any time, in standard FHIR R4 or CSV formats, at no additional charge. Upon request or account termination, InPursuit Health will make a complete data export available within 72 hours and maintain it for 90 days. After that period, data is securely destroyed per NIST SP 800-88 guidelines, and Customer receives written confirmation of destruction.

9.4 No Adverse Use of Customer Data

InPursuit Health will not:

• Use Customer Data to compete with Customer;
• Share Customer Data with any of Customer's competitors;
• Analyze Customer Data to develop insights that are then sold to or shared with any other organization;
• Use Customer Data in any way that is not expressly authorized in this Agreement or the applicable BAA.

10. HIPAA and Business Associate Agreement

For Customers that are HIPAA-covered entities or business associates themselves, a signed BAA is required before any PHI is processed through the TETRA platform. This is not optional and cannot be waived. To request a BAA, contact privacy@InPursuitHealth.com.

As a Business Associate, InPursuit Health will comply with all applicable HIPAA Privacy Rule, Security Rule, and Breach Notification Rule requirements. In the event of conflict between these Terms and the BAA regarding PHI-specific obligations, the BAA controls.

InPursuit Health is HIPAA-ready — meaning our architecture and practices are designed and maintained to comply with HIPAA as a Business Associate for covered entities that have executed a BAA with us. We do not display "HIPAA Compliant" as an absolute credential for all users — HIPAA compliance is a bilateral obligation that requires a signed BAA to be operative for your organization.

11. TETRA Vault Architecture

The TETRA Vault is the logical data isolation model underlying the TETRA platform. These are architectural facts, not marketing commitments:

• Logical isolation: Each organization's data is logically isolated from every other organization's data at the storage, query, and API levels. Your data does not share a storage context with any other customer.
• No cross-customer pooling: Customer Data is never combined with, compared against, or aggregated with the data of any other customer for any purpose — analytical, commercial, or operational.
• Customer-controlled permissions: Access permissions to your TETRA Vault are set by you. InPursuit Health personnel access your Vault only for support purposes explicitly requested by you, and only with your authorization recorded in the audit log.
• Immutable audit logs: All access to Customer Data generates an immutable, timestamped audit record. These logs cannot be altered or deleted — by you or by InPursuit Health — during the applicable retention period. You have real-time access to your full audit log through the platform.
• TETRA Aegis™ enforcement: All AI model interactions with data in your Vault are mediated by TETRA Aegis™ before any data leaves your organization. TETRA Sentinel™ monitors continuously for anomalies, policy violations, and unauthorized access attempts.

12. AI Governance

12.1 The TETRA Conductor™ Principle

InPursuit Health does not pick AI model winners. TETRA Conductor™ is model-agnostic infrastructure. Any AI model — commercial or open source — can operate within the TETRA orchestration layer. We are the rails, not the train. This means your organization is never locked into a single AI vendor and can migrate models without changing your data infrastructure.

12.2 TETRA Aegis™ — Mandatory Supervisory Control

Every AI interaction within the TETRA enterprise platform passes through TETRA Aegis™. This is an architectural constraint, not a policy setting. No AI model — regardless of vendor — interacts with PHI or clinical data without passing through the TETRA Aegis supervisory layer. This layer intercepts, classifies, risk-scores, and mediates every interaction in under 200ms. You cannot opt out of this protection.

12.3 No AI Black Boxes

Every AI-generated recommendation, risk score, and care gap alert produced through the TETRA platform includes the full reasoning chain. Explainability is not optional and cannot be disabled. All AI decisions are logged in your immutable audit trail.

12.4 Bias Monitoring

We continuously test AI models operating within the TETRA platform for demographic bias in risk scoring, care recommendations, and patient outreach prioritization. Equitable care delivery is an engineering requirement, not a policy statement.

12.5 What We Will Never Do With AI

• Sell AI-derived insights built on your patient population to any third party
• Share anonymized data sets, model weights, or predictive models trained on your data with any other organization
• Allow third-party AI vendors to retain, train on, or analyze your clinical data without an explicit, described, written authorization from you
• Deploy autonomous clinical AI that makes patient care decisions without a licensed provider in the loop

13. Intellectual Property

13.1 InPursuit Health IP

The TETRA platform, its underlying technology, software, algorithms, patent-pending architectures, trade secrets, trademarks, and proprietary methodologies are and remain the exclusive intellectual property of InPursuit Health, Inc. These Terms grant you no ownership rights in our intellectual property — only the right to use the Services as expressly described.

13.2 Trademarks

TETRA™, TETRA Ex™, TETRA Conductor™, TETRA Aegis™, TETRA Sentinel™, "Harness the Power of Your Data"™, "Results Matter"™, and InPursuit Health™ are trademarks and service marks of InPursuit Health, Inc. Unauthorized use is prohibited.

13.3 Patent-Pending Architecture

Aspects of the TETRA platform are subject to pending patent applications, including: client-side supervisory AI mediation; risk scoring of prompt payloads; adaptive data redaction; dynamic policy enforcement; AI-to-AI safety filtering; and clinical supervisory control plane architecture. Use of the Services does not grant any rights under these pending or issued patents.

13.4 Customer IP in Customer Data

Customer retains all intellectual property rights in Customer Data. Nothing in these Terms grants InPursuit Health any intellectual property right in Customer Data, in derivative works of Customer Data, or in insights derived from Customer Data.

13.5 Feedback

If you provide suggestions or feedback about the Services, you grant InPursuit Health a perpetual, royalty-free license to incorporate that feedback into the Services. This license applies to functional improvements only and does not grant InPursuit Health any right to Customer Data.

14. Fees and Payment

14.1 Revenue Model Transparency

InPursuit Health's revenue comes from infrastructure access subscriptions and outcome-based arrangements. We do not earn revenue from data monetization, data licensing, or advertising. Subscription fees pay for infrastructure, security, and support — not for access to a data monetization pipeline that subsidizes artificially low software fees.

14.2 Subscription Fees

Fees are set forth in the applicable Order Form or Subscription Agreement. All fees are in U.S. dollars. Fees are non-refundable except as expressly stated in the applicable agreement or required by law.

14.3 Payment Terms

Invoices are due within 30 days of the invoice date unless otherwise specified. Past-due amounts accrue interest at 1.5% per month or the maximum rate permitted by law. We will provide 10 days' written notice before suspending Services for non-payment.

14.4 Price Changes

We will provide at least 60 days' written notice of any subscription price changes. Price changes take effect at the start of the next renewal period following notice. You may terminate before the change takes effect without penalty.

14.5 Taxes

You are responsible for all applicable taxes, duties, and charges arising from your use of the Services, excluding taxes based on InPursuit Health's net income.

15. Confidentiality

Each party agrees to hold the other party's Confidential Information in strict confidence using at least the same degree of care it uses to protect its own most sensitive information (but no less than reasonable care), and not to disclose it to any third party except as necessary to perform obligations under this Agreement or as required by law.

"Confidential Information" includes: Customer Data, PHI, proprietary technology, business plans, pricing, and any information designated as confidential. It does not include information that: (a) is or becomes publicly known without breach; (b) was lawfully known before disclosure; (c) is lawfully received from a third party without restriction; or (d) must be disclosed by law or court order, with prompt prior notice to the other party where legally permitted.

16. Warranties and Disclaimers

16.1 Our Warranties to You

InPursuit Health represents and warrants that:

• The Services will be provided in a professional and workmanlike manner consistent with industry standards for healthcare infrastructure;
• We will maintain all required HIPAA Business Associate obligations under any executed BAA;
• We will not breach any of the six commitments in the Data Oath;
• We have the right and authority to provide the Services and to enter into these Terms;
• We will notify you of any material security incident affecting Customer Data within 60 hours of discovery.

16.2 Platform Availability

While we invest heavily in reliability and uptime, the TETRA platform is provided subject to the service levels specified in your Order Form or Subscription Agreement. We do not warrant uninterrupted or error-free operation, but we commit to transparent communication, rapid response, and root-cause disclosure for any material availability event.

16.3 No Medical Device Warranty

The TETRA platform is not an FDA-cleared medical device. AI-generated clinical recommendations are decision support tools, not diagnostic instruments. InPursuit Health makes no warranty regarding clinical outcomes, diagnostic accuracy, or treatment efficacy.

16.4 Disclaimer of Implied Warranties

Except as expressly stated in Section 16.1, and to the maximum extent permitted by applicable law, InPursuit Health disclaims all implied warranties, including implied warranties of merchantability, fitness for a particular purpose, and non-infringement. These disclaimers do not limit our Data Oath obligations, which are unconditional.

17. Limitation of Liability

17.1 Mutual Limitation

Neither party will be liable to the other for any indirect, incidental, consequential, special, punitive, or exemplary damages — including loss of profits, loss of data, or business interruption — arising out of or related to this Agreement, except as provided in Section 17.2.

17.2 Cap on Liability

InPursuit Health's aggregate liability to Customer for any and all claims arising out of or related to this Agreement in any 12-month period will not exceed the total fees paid by Customer to InPursuit Health in the 12 months preceding the claim giving rise to liability. This cap does not apply to: (a) breach of the Data Oath obligations in Section 8; (b) InPursuit Health's gross negligence or willful misconduct; (c) InPursuit Health's indemnification obligations; (d) breach of confidentiality obligations resulting in unauthorized disclosure of PHI; or (e) any liability that cannot be excluded by applicable law.

17.3 PHI Breach Liability

In the event of a breach of PHI caused by InPursuit Health's failure to comply with its BAA obligations or these Terms, InPursuit Health's liability is not subject to the cap in Section 17.2. PHI breach liability is governed by the applicable BAA and applicable law.

18. Indemnification

Each party will indemnify, defend, and hold harmless the other party and its officers, directors, and employees from and against claims, liabilities, damages, and costs (including reasonable attorneys' fees) arising from:

• Customer indemnifies InPursuit Health for: Customer's misuse of the Services; Customer's violation of these Terms or applicable law; inaccurate information Customer provides; or Customer Data that infringes any third party's rights.
• InPursuit Health indemnifies Customer for: InPursuit Health's breach of the Data Oath commitments in Section 8; InPursuit Health's negligent or wrongful handling of Customer Data or PHI; or claims that the TETRA platform infringes any third party's intellectual property rights.

19. Termination

19.1 Termination by Customer

Customer may terminate their subscription at the end of the current term by providing 30 days' written notice before renewal. Enterprise agreements may specify different notice periods. There are no early termination fees except as specified in an applicable Order Form.

19.2 Termination by InPursuit Health

InPursuit Health may suspend or terminate access to the Services: (a) immediately for material breach that poses a security risk or compromises PHI integrity; (b) upon 30 days' written notice for uncured material breach; or (c) for non-payment following 10 days' written notice. We will not terminate for convenience without 90 days' advance notice.

19.3 Effect of Termination — Data Return

Upon any termination: (a) all licenses granted under these Terms cease; (b) InPursuit Health will make a complete Customer Data export available within 72 hours; (c) Customer Data will be available for export for 90 days; (d) after 90 days, Customer Data will be securely destroyed per NIST SP 800-88 guidelines and Customer will receive written confirmation of destruction. InPursuit Health will not retain Customer Data after destruction except as required by applicable law.

19.4 Survival

The following provisions survive termination: Data Oath obligations (Section 8), Data Ownership (Section 9), Confidentiality (Section 15), Limitation of Liability (Section 17), Indemnification (Section 18), and Governing Law and Dispute Resolution (Sections 20–21).

20. Governing Law

These Terms are governed by and construed in accordance with the laws of the State of Delaware, without regard to conflict of law principles. For disputes not subject to arbitration under Section 21, the parties consent to the exclusive jurisdiction of state and federal courts located in Delaware.

21. Dispute Resolution

21.1 Informal Resolution First

Before initiating formal dispute resolution, the complaining party will provide written notice of the dispute and a proposed resolution to the other party. The parties will attempt to resolve the dispute informally for 30 days from the date of that notice.

21.2 Binding Arbitration

If informal resolution fails, disputes arising out of or relating to these Terms (excluding equitable relief for IP infringement, Data Oath breach, or confidentiality violations) will be resolved by binding arbitration administered by the American Arbitration Association (AAA) under its Commercial Arbitration Rules. Arbitration will be conducted in Delaware, or remotely by agreement. The arbitrator's decision will be final and may be entered as a judgment in any court of competent jurisdiction.

21.3 Exceptions — Equitable Relief

Either party may seek injunctive or other equitable relief from a court of competent jurisdiction, without first pursuing informal resolution or arbitration, for: actual or threatened breach of the Data Oath commitments; unauthorized use or disclosure of PHI; misappropriation of trade secrets; or infringement of intellectual property rights.

21.4 Class Action Waiver

All claims must be brought in the individual capacity of the claimant. Neither party may bring or participate in a class, collective, or representative action arising under this Agreement. This waiver does not apply to regulatory enforcement actions by government agencies.

22. General Provisions

22.1 Entire Agreement

These Terms, together with the Data Oath, Privacy Policy, and any applicable Order Form and BAA, constitute the entire agreement between the parties regarding the subject matter and supersede all prior negotiations, representations, and agreements. In the event of conflict: the BAA controls over these Terms for PHI-related matters; the Data Oath controls over all other documents for data use obligations; and these Terms control over all other conflicts.

22.2 Severability

If any provision of these Terms is found unenforceable, that provision will be modified to the minimum extent necessary to make it enforceable, and all remaining provisions will continue in full force.

22.3 Waiver

Failure to enforce any right under these Terms is not a waiver of that right.

22.4 Assignment

Customer may not assign these Terms without InPursuit Health's prior written consent. InPursuit Health may assign these Terms in connection with a merger, acquisition, or asset sale — provided the successor entity is bound by all Data Oath obligations and existing BAAs as a condition of the transaction, and Customer is given 60 days' advance notice with the right to terminate and export data at no cost before the assignment takes effect.

22.5 Force Majeure

Neither party is liable for delay or failure to perform caused by circumstances beyond its reasonable control, including acts of God, pandemics, or government actions. The affected party will give prompt written notice and use commercially reasonable efforts to resume performance. Force majeure does not excuse InPursuit Health's obligation to protect PHI or notify Customer of a security incident.

22.6 No Third-Party Beneficiaries

These Terms do not create third-party beneficiary rights, except that patients whose PHI is handled under a BAA may enforce the PHI-related protections in these Terms against InPursuit Health to the extent permitted by HIPAA.

22.7 Notices

Legal notices to InPursuit Health: legal@InPursuitHealth.com. Notices to Customer: sent to the email address on record. Email notices are effective 24 hours after sending absent delivery failure. For PHI breaches, notice timelines are governed by the BAA.