Terms of Service

1. Agreement to Terms

By accessing or using the Provatus platform ("Service"), you agree to be bound by these Terms of Service ("Terms"). If you do not agree to these Terms, do not use the Service. These Terms apply to all users, including insurance carriers, health plans, and their authorized representatives ("Customers").

2. Description of Service

Provatus is an AI-powered provider directory intelligence platform that helps insurance carriers verify whether healthcare providers listed in their directories are active, licensed, and compliant. The Service uses ProvataCheck™, our proprietary 35-point verification engine, to query publicly available federal and state data sources — including NPPES, OIG LEIE, CMS Medicare data, and state licensing boards — and generate Provider Vitality Scores™ and audit-ready compliance reports.

The Service is intended to assist with compliance obligations under the No Surprises Act (45 CFR §149.410) and related regulations. It does not constitute legal advice. Customers are responsible for their own regulatory compliance determinations.

3. Eligibility

The Service is available only to entities and individuals authorized to process provider directory data for legitimate healthcare compliance purposes. By using the Service, you represent that you have the legal authority to submit and process the provider data you upload, and that your use complies with all applicable laws, including HIPAA where applicable.

4. Acceptable Use

You agree not to:

• Upload provider data you are not authorized to process.
• Use the Service to harass, stalk, or unlawfully investigate individual providers.
• Attempt to reverse-engineer, scrape, or extract underlying data from the Service.
• Resell or redistribute verification results without written authorization from Provatus.
• Circumvent any security, access control, or rate-limiting measures.
• Use the Service for any purpose that violates applicable law or regulation.

5. Data and Privacy

Provider data you upload is used solely to perform verification and generate compliance reports for your account. We do not sell or share your uploaded data with third parties except as required to query the public data sources that power our verification engine (e.g., NPPES API, OIG LEIE). Verification results are stored in your account and accessible only to authorized users within your organization.

All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). We retain uploaded provider files for 90 days after upload and audit logs for 3 years to support regulatory inquiries.

6. Accuracy and Disclaimers

Provatus queries publicly available government datasets that may be subject to reporting lags, data entry errors, or coverage gaps. Provider Vitality Scores™ are probabilistic assessments, not guarantees. A Green score does not certify that a provider is currently practicing; a Red or Amber score does not conclusively establish that a provider is inactive.

THE SERVICE IS PROVIDED "AS IS." PROVATUS MAKES NO WARRANTY, EXPRESS OR IMPLIED, REGARDING THE ACCURACY, COMPLETENESS, OR FITNESS FOR A PARTICULAR PURPOSE OF ANY VERIFICATION RESULT. CUSTOMERS ARE SOLELY RESPONSIBLE FOR THEIR COMPLIANCE DECISIONS.

7. Limitation of Liability

To the maximum extent permitted by law, Provatus and its affiliates shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of the Service, including any regulatory fines or penalties you incur regardless of whether Provatus was advised of the possibility of such damages. Our total liability to you for any claim arising under these Terms shall not exceed the fees you paid to Provatus in the three months preceding the claim.

8. Intellectual Property

The Service, including the Provider Vitality Score™ algorithm, CCM Risk Engine, and all associated software, is owned by Provatus and protected by intellectual property law. These Terms do not grant you any ownership interest in the Service. You retain ownership of the provider data you upload.

9. Termination

Either party may terminate access to the Service at any time. Provatus reserves the right to suspend or terminate accounts that violate these Terms, engage in unauthorized data access, or pose a security risk to other Customers. Upon termination, your uploaded data will be deleted within 30 days, except where retention is required by law.

10. Changes to Terms

We may update these Terms from time to time. We will notify you of material changes by email or by posting a notice in the Service at least 14 days before the changes take effect. Continued use of the Service after the effective date constitutes acceptance of the revised Terms.

11. Governing Law

These Terms are governed by the laws of the State of California, without regard to conflict of law principles. Any disputes shall be resolved in the state or federal courts located in San Francisco County, California.

12. Contact

Questions about these Terms? Contact us at legal@provatus.com.