Acceptable Use Policy

Pi Health Inc. and its affiliates (collectively, "Pi Health") provide access to the Front-End Interoperable Capture Software ("FICS") clinical trial platform through subscription agreements. This Acceptable Use Policy ("AUP") applies to all users accessing the platform through their organization's subscription. Users must agree to comply with this AUP to access any services.

Changes

Pi Health reserves the right to modify this AUP at any time, with notification provided through commercially reasonable efforts such as website posting or email notification to users' organizations.

User Responsibilities

Users must:

• Follow the AUP guidelines
• Comply with provided documentation
• Adhere to all applicable laws, rules, and regulations, and the commonly accepted practices of the healthcare community
• Ensure proper patient consents before using the Services
• Maintain compliance with HIPAA and data retention requirements
• Review their organization's privacy notices

These responsibilities represent guidelines rather than exhaustive lists.

Intended Uses

FICS is designed to:

• Store, index, and manage clinical trial data
• Enable data access for authorized end users
• Allow retrieval, viewing, and processing of user-created content
• Support viewing, downloading, and transmission of reports

Prohibited Uses

Users shall not:

• Use the Services for any purpose other than the intended clinical trial data management purposes
• Attempt to gain unauthorized access to any systems or networks connected to the Services
• Upload or transmit any viruses, malware, or other harmful code
• Interfere with or disrupt the integrity or performance of the Services
• Use the Services to store or transmit content that infringes upon the intellectual property rights of any third party
• Use the Services to store or transmit any content that is unlawful, harmful, threatening, abusive, or otherwise objectionable
• Reverse engineer, decompile, or disassemble any aspect of the Services
• Sublicense, sell, resell, or otherwise make the Services available to any third party without prior written consent

Data Protection

Users must:

• Handle all patient data in accordance with applicable data protection laws including HIPAA
• Not share access credentials with unauthorized individuals
• Report any suspected data breaches immediately to their organization and Pi Health
• Follow all data handling procedures outlined in their organization's policies

Consequences of Violation

Pi Health reserves the right to suspend or terminate access to the Services for any user found to be in violation of this AUP. Pi Health may also pursue legal remedies for any damages resulting from violations.