Terms and Conditions
Last updated: August 3, 2026
These Terms and Conditions ("Terms") are entered into by and between you ("Customer" or "User") and Reveris Inc. ("Reveris," "we," "us," or "our"), and govern your access to and use of the Service. By accessing or using the Service, you agree to be bound by these Terms.
1. Nature of the Service
This platform ("Service") is powered in whole or in part by an artificial intelligence ("AI") model. Outputs generated by the Service are based on various inputs, including human inputs, and produced through automated, probabilistic processes and are not reviewed by a human prior to delivery unless explicitly stated otherwise. The Service is not a substitute for professional medical, legal, or clinical judgment, and outputs should be independently verified by a qualified professional before being relied upon for any decision affecting any client or any outcome.
2. HIPAA
We design and maintain the Service with the intent of aligning with the requirements of the Health Insurance Portability and Accountability Act of 1996, as amended ("HIPAA"), including safeguards addressing the confidentiality, integrity, and availability of Protected Health Information ("PHI"). This may include, where applicable, administrative, physical, and technical safeguards, encryption in transit and at rest, access controls, audit logging, and Business Associate Agreements ("BAAs") with covered entities or business associates as required.
While we apply HIPAA standards, we do not represent or warrant that the Service is fully HIPAA compliant in all circumstances. No system, AI-based or otherwise, can guarantee the complete prevention of privacy or security incidents. Use of the Service to process PHI is at the user's own risk, and users remain responsible for determining whether the Service is appropriate for their specific regulatory obligations before submitting any PHI.
3. No Guarantee Against Privacy or Security Incidents
Our platform has been designed to meet the requirements of the HIPAA Security Rule, which establishes national standards to protect individuals' electronic protected health information that is created, received, used, or maintained by a covered entity or its business associate. We use industry-standard encryption for data at rest and in transit, maintain audit logs, enforce least-privilege access controls, and operate on HIPAA-eligible cloud or on-premise infrastructure.
While we implement safeguards to protect the confidentiality of information processed by the Service, including information that may constitute PHI or other sensitive personal data, we expressly disclaim any guarantee that:
- Unauthorized access, disclosure, or use of data will never occur;
- The AI model will never generate outputs that inadvertently reveal, reconstruct, or infer sensitive information from training data, prior inputs, or other sources;
- Data transmitted to or processed by the Service (including any third-party AI infrastructure providers) will be completely free from risk of interception, breach, or misuse.
Users acknowledge that the use of AI models introduces inherent and evolving risks, including but not limited to model inversion, prompt injection, data leakage between sessions, and unintended memorization, which cannot be eliminated entirely even with robust safeguards in place.
4. User Responsibilities
Users are responsible for:
- Determining whether the Service is suitable for their intended use case, including any use involving PHI or other regulated data;
- Implementing the user's own internal safeguards, workforce training, and incident response procedures as required under HIPAA or other applicable law;
- Promptly notifying us of any suspected or actual privacy or security incident involving the Service.
5. Limitation of Liability
To the fullest extent permitted by applicable law, we disclaim all warranties, express or implied, regarding the accuracy, reliability, security, or fitness for a particular purpose of the Service. In no event shall we be liable for any direct, indirect, incidental, special, consequential, or punitive damages, including but not limited to damages arising from unauthorized access to, or disclosure of, PHI or other sensitive data, regardless of whether we were advised of the possibility of such damages. Nothing in this disclaimer is intended to limit liability in a manner prohibited by applicable law, including any non-waivable obligations under HIPAA or state privacy statutes.
6. California Residents: Additional Notices
HIPAA does not preempt certain California privacy laws, and where California law imposes stricter or additional obligations, those obligations apply independently of, and in addition to, HIPAA.
7. GDPR and International Data Protection
Where the Service processes personal data of individuals located in the European Economic Area ("EEA"), the United Kingdom, or other jurisdictions with substantially similar data protection frameworks, we design and operate the Service with the intent of aligning with the requirements of the General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and, where applicable, the UK GDPR and Data Protection Act 2018.
7.1 Safeguards
Depending on the nature of processing, this may include: identifying and documenting a lawful basis for processing under Article 6 (and, for special category data such as health information, an applicable condition under Article 9); entering into Data Processing Agreements with customers and sub-processors as required under Article 28; implementing appropriate technical and organizational measures under Article 32; conducting Data Protection Impact Assessments where processing is likely to result in high risk; and using approved transfer mechanisms, such as the European Commission's Standard Contractual Clauses or the UK International Data Transfer Addendum, for any transfer of personal data outside the EEA or UK.
7.2 No guarantee
As with our HIPAA posture described above, we do not represent or warrant that the Service achieves or maintains complete GDPR compliance in every respect, or that all processing activities carried out by every customer or user of the Service will independently satisfy GDPR requirements. GDPR compliance depends significantly on how a given customer or user configures, deploys, and uses the Service, including the lawful basis they establish, the data they choose to submit, and their own obligations as a data controller. Customers and users acting as data controllers remain responsible for ensuring their own use of the Service complies with GDPR.
7.3 Data subject rights
Where GDPR applies, data subjects may have rights to access, rectify, erase, restrict, or port their personal data, and to object to certain processing, including profiling or automated decision-making. Requests can be submitted through info@reverisglobal.com and we will respond within the timeframes required under Article 12.
7.4 Automated decision-making
To the extent the Service's AI-generated outputs are used to make decisions that produce legal effects or similarly significantly affect a data subject without meaningful human involvement, Article 22 protections may apply. We recommend that users ensure that a human reviews AI-generated outputs before they are used to make such decisions.
8. Breach Notification
In the event of a security incident involving PHI processed through the Service, we will provide notification in accordance with the Breach Notification Rule under HIPAA (45 C.F.R. §§ 164.400–414) and any applicable Business Associate Agreement, where such obligations apply to us.
9. Payment Terms
Fees for the Service are billed via invoice. Subscription fees are billed at the then-current rate for each user seat, as set out in the applicable order form or as published on our pricing page. In addition, Customer is billed monthly, in arrears, for the compute and AI model usage ("AI Token Fees") consumed by Customer's use of the Service during that billing period.
Invoices are due and payable no later than ten (10) days after Customer's receipt of the invoice. Reveris may suspend Customer's access to the Service if an invoice remains unpaid past its due date.
Fees are non-refundable. Notwithstanding the foregoing, Reveris may, in its discretion, issue a prorated partial refund following its review of Customer's actual resource usage for the period in question. Refund requests may be directed to info@reverisglobal.com.
10. Term and Termination
These Terms, and any subscription entered into under them, remain in effect until terminated. Customer may terminate its subscription and access to the Service at any time by providing notice to info@reverisglobal.com. Customer remains responsible for all fees, including AI Token Fees, incurred prior to the effective date of termination.
Upon termination, Reveris will delete Customer's data from the Service, other than copies retained in encrypted backups (which are purged in the ordinary course under Reveris' standard backup retention schedule) or data Reveris is required to retain by law or under an applicable Business Associate Agreement.
Reveris may also suspend or terminate Customer's access to the Service for material breach of these Terms, including non-payment, upon notice to Customer.
11. Intellectual Property
The Service, including the underlying AI models, model training methodologies, software, infrastructure, and all improvements and derivatives thereof, is owned by and remains the exclusive property of Reveris Inc., which hosts the infrastructure and bears the costs of model training, compute, and all associated expenses. Other than the limited right to access and use the Service granted under these Terms, no ownership interest in the Service is transferred to Customer.
Customer retains all right, title, and interest in and to Customer Data, including any client goals, history, labs, and other information Customer submits to the Service. Customer grants Reveris a limited license to use Customer Data solely to provide, maintain, and improve the Service, including retraining AI models in response to reported errors as described elsewhere in these Terms. Reveris will only use de-identified or aggregated data to improve the Service generally, and will do so consistent with applicable law and any Business Associate Agreement then in effect.
12. Governing Law and Dispute Resolution
These Terms are governed by the laws of the State of California, without regard to its conflict-of-laws principles. Any dispute arising out of or relating to these Terms or the Service will be subject to the exclusive jurisdiction of the state and federal courts located in California, and each party consents to personal jurisdiction and venue there. Nothing in this Section limits either party's right to seek injunctive or equitable relief in any court of competent jurisdiction.
13. Changes to These Terms and Conditions
We may update these Terms and Conditions from time to time to reflect changes in our practices, the Service, or applicable law. Continued use of the Service after such updates constitutes acceptance of the revised terms.
14. Contact
Questions regarding these Terms and Conditions, our privacy and security practices, or requests for a Business Associate Agreement may be directed to: info@reverisglobal.com.