DashboardHC Platform Access Terms

Last Updated: September 2026

These Platform Access Terms ("Terms") apply to individuals who access or use the DashboardHC analytics platform, including any associated mobile or web applications, APIs, and related systems (collectively, the "Platform") on behalf of an organization that is a DashboardHC customer (the "Customer").

DashboardHC is operated by Data Services Partners ("DashboardHC", "we", or "us").

1. Relationship to Customer Agreements

Customer and DashboardHC are parties to one or more separate written agreements governing the use of the Platform, including a SaaS Services Agreement and a Business Associate Agreement (together, the "Customer Agreements").

• These Terms govern your individual access to and use of the Platform as an authorized user of a Customer.
• The Customer Agreements exclusively govern all rights and obligations between DashboardHC and Customer, including those relating to fees, service levels, data ownership, Customer Data, and Protected Health Information ("PHI").
• If there is any conflict between these Terms and the Customer Agreements, the Customer Agreements control.
• These Terms do not grant you any independent rights or remedies against DashboardHC; any rights or remedies arise solely under the Customer Agreements between DashboardHC and Customer.

2. Eligibility and User Provisioning

• You may use the Platform only if you are authorized by a Customer and are accessing the Platform solely on that Customer's behalf for its internal business purposes.
• DashboardHC does not provide consumer or direct-to-individual accounts.
• All user accounts are provisioned, managed, and deprovisioned by the Customer or at the Customer's direction, including accounts created via single sign-on, SCIM, or requests submitted to DashboardHC support. The Customer is responsible for determining who is authorized to access the Platform on its behalf.

3. Authorized and Permitted Use

You agree that you will:

• Use the Platform only for legitimate business purposes of the Customer.
• Access and use only those features, data, and environments for which the Customer has given you appropriate authorization.
• Handle any PHI or other sensitive information in accordance with the Customer's policies and procedures, including those adopted to comply with the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations ("HIPAA").
• Immediately notify the Customer (and, if appropriate, DashboardHC support) if you suspect that any credentials, accounts, or data have been compromised or accessed without authorization.

4. Prohibited Activities

You may not, and you agree not to allow any third party to, directly or indirectly:

• Access or attempt to access the Platform, any systems, or data that you are not explicitly authorized to access.
• Circumvent, disable, or interfere with any security controls, access restrictions, audit logging, or technical protections used by the Platform.
• Export, scrape, or systematically download data from the Platform except as permitted by the Customer Agreements and the Customer's internal policies.
• Use the Platform to provide services to third parties that compete with DashboardHC or that are unrelated to the Customer's internal business operations.
• Perform penetration testing, vulnerability scanning, or other security testing of the Platform without DashboardHC's prior written authorization.
• Introduce any malicious code, or use the Platform in a way that could damage, disable, overburden, or impair the Platform or interfere with other users' access.
• Use the Platform in violation of any applicable law, regulation, or the Customer's internal policies, including those adopted for HIPAA compliance.

5. AI-Assisted Features and Responsible Use

Certain Platform features let you direct DashboardHC's AI-assisted tools to generate, configure, and publish software code, applications, dashboards, workflows, calculations, or other content that DashboardHC hosts and makes available to end users that you or your Customer designate ("Generated Content"). Generated Content may access Customer Data only through the Platform interfaces, APIs, permissions, and access controls made available to the applicable user or Customer.

• You may not use AI-assisted features to create or publish Generated Content that is malicious, unlawful, or that attempts to damage, disable, overburden, exfiltrate data from, or otherwise interfere with the Platform, DashboardHC's systems, or any third party. This applies regardless of whether the harmful outcome was something you directed or something an AI tool produced on its own.
• You are responsible for reviewing and testing any Generated Content before publishing it or making it available to end users, and for ensuring it complies with these Terms, applicable law, and your Customer's policies.
• DashboardHC does not independently validate the accuracy, completeness, suitability, or intended behavior of Generated Content. Customer and its authorized users are responsible for reviewing and testing Generated Content before publishing it, making it available to end users, or relying on it for operational purposes.
• As with any other content or activity on the Platform, DashboardHC retains the rights described in Section 9 (Suspension or Termination of Access) to suspend, limit, remove, or disable access to any Generated Content that DashboardHC reasonably believes poses a security risk or violates these Terms, the Customer Agreements, or applicable law.

Customer-Selected AI Services and MCP

The Platform may permit authorized users to connect or interact with third-party artificial intelligence, large language model, or other services selected by the Customer, including through Model Context Protocol (MCP) interfaces. Such services are selected and authorized by the Customer and are not operated or engaged by DashboardHC as DashboardHC subprocessors. Customer and its authorized users are responsible for evaluating and authorizing use of those services and for complying with applicable Customer policies, contractual requirements, and legal requirements, including determining whether an appropriate business associate agreement or other contractual arrangement is required.

6. Account Security and Safeguards

• DashboardHC maintains commercially reasonable administrative, physical, and technical safeguards appropriate for a HIPAA business associate to protect the security, confidentiality, and integrity of Customer Data processed in the Platform.
• The Customer is responsible for user provisioning, access approvals, and role assignments in the Platform.
• You must keep your login credentials confidential and may not share them with any other person.
• You must promptly notify the Customer (and, if directed, DashboardHC) of any suspected unauthorized use of your account or any other security incident related to the Platform.

7. Monitoring and Audit Logging

To support security, compliance, and operations, DashboardHC may monitor use of the Platform and maintain audit logs relating to access, authentication, and certain user activities. Use of the Platform is subject to such monitoring and logging in accordance with the Customer Agreements.

8. Geographic Restrictions

The Platform is intended for use in the United States. Access to the Platform from outside the United States may be restricted or disabled, and Customer is responsible for ensuring that any cross-border use complies with applicable law and the Customer Agreements.

9. Suspension or Termination of Access

• DashboardHC may suspend, limit, or terminate your access to the Platform at any time if DashboardHC reasonably believes that your use poses a security risk, violates these Terms, the Customer Agreements, or applicable law, or at the direction of the Customer.
• Any suspension or termination of the underlying services provided to the Customer, and any related remedies, are governed solely by the Customer Agreements.

10. No Clinical or Consumer Use

• The Platform is designed primarily for analytics, reporting, and operational decision support. It is not a substitute for professional medical judgment and does not provide medical advice, diagnosis, or treatment.
• The Platform is not intended for use in emergency or life-support situations. Any clinical decisions must be made by qualified healthcare professionals using their independent judgment and data sources other than the Platform alone.
• DashboardHC does not provide services directly to patients or consumers.

11. Disclaimers and Limitations for Users

To the maximum extent permitted by law, the Platform is provided to you as an authorized user on an "as is" and "as available" basis. Any warranties, disclaimers, limitations of liability, and remedies that apply to the Customer's use of the Platform are set forth solely in the Customer Agreements.

Nothing in these Terms expands DashboardHC's liability or obligations beyond what is stated in the Customer Agreements. Your rights (if any) in relation to the Platform arise solely through the Customer.

12. Changes to These Terms

We may update these Terms from time to time. The "Last Updated" date above indicates when these Terms were last revised. We may communicate material changes through the Platform or other appropriate channels. If there is any conflict between these Terms and the Customer Agreements, the Customer Agreements control.

13. Contact

If you have questions about these Terms, please contact your organization's Platform administrator or email DashboardHC at help@dashboardhc.com.