1. Acceptance of Terms

Welcome to the website and services of Alanos, LLC ("Alanos," "Company," "we," "us," or "our"). These Terms of Use ("Terms") constitute a legally binding agreement between you ("User," "you," or "your") and Alanos, LLC governing your access to and use of our website located at alanoshealthcare.com, all associated subdomains, and any services, products, applications, or content offered through these platforms (collectively, the "Services").

By accessing, browsing, or using our Services, you acknowledge that you have read, understood, and agree to be bound by these Terms and our Privacy Policy. If you do not agree to these Terms, you must discontinue use of our Services immediately.

2. Product and Service-Specific Terms

Alanos, LLC offers a variety of services and products, including but not limited to healthcare technology solutions, clinical workflow automation, medical document review platforms, and customized healthcare software. Many of our products and services are governed by their own specific terms of use, terms of service, subscription agreements, or licensing agreements ("Product-Specific Terms").

Important: In the event of any conflict or inconsistency between these Terms and any Product-Specific Terms applicable to a particular service or product you use, the Product-Specific Terms shall control and supersede these Terms to the extent of such conflict. These Terms apply generally to your use of our website and Services except where expressly superseded by Product-Specific Terms.

Product-Specific Terms will be presented to you prior to your use of the applicable product or service. By using such products or services, you agree to be bound by both these Terms and the applicable Product-Specific Terms.

3. User Responsibilities and Compliance

3.1 Lawful Use

You agree to use our Services only for lawful purposes and in accordance with these Terms, all applicable Product-Specific Terms, and all applicable local, state, national, and international laws and regulations. You are solely responsible for ensuring that your use of our Services complies with all laws applicable to you based on your jurisdiction, including but not limited to healthcare regulations, data protection laws, and professional licensing requirements.

3.2 Intended Use

Our Services are designed for specific purposes as described in their respective documentation and Product-Specific Terms. You agree to use our products and services only as intended and in accordance with all applicable documentation, user guides, and instructions provided by Alanos. Misuse, modification, or use of our Services beyond their intended purpose is prohibited and may result in termination of access.

3.3 Prohibited Activities

You agree not to:

• Use the Services in any manner that could damage, disable, overburden, or impair our systems or interfere with any other party's use of the Services.
• Attempt to gain unauthorized access to any portion of the Services, computer systems, or networks connected to the Services.
• Use any automated means to access the Services, including robots, spiders, or scrapers, without our express written permission.
• Reverse engineer, decompile, disassemble, or otherwise attempt to derive the source code of any software comprising the Services.
• Use the Services to transmit any malicious code, viruses, or harmful components.
• Violate any applicable laws or regulations through your use of the Services.

4. Important Disclaimers Regarding Medical Services

4.1 Not a Substitute for Professional Medical Services

IMPORTANT NOTICE: The services and products provided by Alanos, LLC are healthcare technology and support solutions. Our Services are NOT intended to replace, substitute, or serve as an alternative to the professional services of licensed healthcare providers, including but not limited to:

• Medical diagnosis and assessment
• Clinical treatment and care
• Medical advice or recommendations
• Patient management or clinical decision-making
• Any other services that require a licensed healthcare professional

4.2 AI-Generated Content Disclaimer

Certain features of our Services may utilize artificial intelligence, machine learning, or automated processing technologies to generate content, summaries, analyses, or recommendations ("AI-Generated Content"). You acknowledge and agree that:

• AI-Generated Content is provided for informational and assistive purposes only and should never be relied upon as a substitute for professional judgment.
• AI-Generated Content may contain errors, inaccuracies, or omissions and should always be reviewed, verified, and validated by qualified professionals before any action is taken based upon it.
• You assume full responsibility for any decisions made or actions taken based on AI-Generated Content.
• Alanos, LLC expressly disclaims any liability for harm, damages, or losses resulting from reliance on AI-Generated Content without appropriate professional review and verification.

Users are strongly advised to exercise caution and professional judgment when using any AI-powered features of our Services.

5. HIPAA Compliance and Shared Responsibility

5.1 Shared Responsibility Model

For customers using our healthcare-related products and services subject to the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"), Alanos, LLC operates under a shared responsibility model for HIPAA compliance. Under this model:

Alanos's Responsibilities:

• We maintain appropriate administrative, technical, and physical safeguards to protect Protected Health Information ("PHI") handled by our systems as described in our HIPAA Compliance Statement and applicable Business Associate Agreements.
• We ensure that PHI processed, stored, or transmitted through our covered services is handled in accordance with HIPAA requirements and applicable product specifications.
• We provide secure, compliant infrastructure and implement industry-standard security measures.

User Responsibilities:

• Credential Security: You are solely responsible for maintaining the confidentiality and security of your account credentials, including usernames, passwords, API keys, and any other authentication mechanisms. You must not share your credentials with unauthorized individuals.
• Secure Environment: You are responsible for ensuring that the devices, networks, and systems you use to access our Services are free from malicious software, unauthorized access tools, or any other vulnerabilities that could compromise the security of PHI.
• Access Controls: You are responsible for implementing appropriate access controls within your organization to ensure that only authorized personnel access PHI through our Services.
• Employee Training: You are responsible for ensuring that your workforce members who access PHI through our Services are appropriately trained on privacy and security practices.
• Incident Reporting: You must promptly notify us of any known or suspected security incidents or unauthorized access to PHI.

For detailed information about our HIPAA compliance practices, please refer to our HIPAA Compliance Statement.

6. Intellectual Property

All content, features, functionality, software, designs, trademarks, service marks, and other intellectual property associated with our Services are and shall remain the exclusive property of Alanos, LLC or our licensors. Nothing in these Terms grants you any right, title, or interest in our intellectual property except for the limited license to use the Services as expressly provided herein.

7. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, ALANOS, LLC AND ITS OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, AND AFFILIATES SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF PROFITS, DATA, USE, GOODWILL, OR OTHER INTANGIBLE LOSSES, ARISING OUT OF OR IN CONNECTION WITH YOUR USE OF OR INABILITY TO USE THE SERVICES, EVEN IF WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

IN NO EVENT SHALL OUR TOTAL LIABILITY TO YOU FOR ALL CLAIMS ARISING OUT OF OR RELATED TO THESE TERMS OR YOUR USE OF THE SERVICES EXCEED THE AMOUNT YOU HAVE PAID TO US FOR THE SERVICES IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM, OR ONE HUNDRED DOLLARS ($100), WHICHEVER IS GREATER.

8. Indemnification

You agree to indemnify, defend, and hold harmless Alanos, LLC and its officers, directors, employees, agents, and affiliates from and against any and all claims, damages, obligations, losses, liabilities, costs, and expenses (including attorneys' fees) arising from: (a) your use of the Services; (b) your violation of these Terms; (c) your violation of any third-party rights, including intellectual property or privacy rights; or (d) your violation of any applicable law or regulation.

9. Disclaimer of Warranties

THE SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SERVICES WILL BE UNINTERRUPTED, ERROR-FREE, OR SECURE, OR THAT ANY DEFECTS WILL BE CORRECTED.

10. Governing Law and Dispute Resolution

These Terms shall be governed by and construed in accordance with the laws of the State of Montana, without regard to its conflict of law provisions. Any dispute arising out of or relating to these Terms or the Services shall be resolved exclusively in the state or federal courts located in Missoula County, Montana, and you consent to the personal jurisdiction of such courts.

11. Modifications to Terms

We reserve the right to modify these Terms at any time. We will provide notice of material changes by posting the updated Terms on this page with a revised effective date. Your continued use of the Services after any such modifications constitutes your acceptance of the updated Terms.

12. Severability

If any provision of these Terms is found to be unenforceable or invalid, that provision shall be limited or eliminated to the minimum extent necessary so that these Terms shall otherwise remain in full force and effect.

13. Contact Information

If you have questions or concerns about these Terms, please contact us at:

1. Introduction and Commitment

Alanos, LLC ("Alanos," "we," "us," or "our") is firmly committed to protecting the privacy and security of Protected Health Information ("PHI") in compliance with the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"), the Health Information Technology for Economic and Clinical Health Act ("HITECH"), and all applicable federal and state regulations governing the privacy and security of health information.

This HIPAA Compliance Statement outlines our policies, procedures, and technical safeguards implemented to ensure that PHI entrusted to us is handled in a secure, compliant, and responsible manner. Our commitment to HIPAA compliance is foundational to our operations and integral to the trust our clients place in us.

2. Scope of Compliance

Our HIPAA compliance program applies to:

• All products and services offered by Alanos that involve the processing, storage, transmission, or access of PHI on behalf of covered entities or business associates.
• All employees, contractors, and workforce members who may have access to PHI in the course of their duties.
• All systems, applications, infrastructure, and processes used to handle PHI.

We act as a Business Associate under HIPAA when providing services that involve PHI on behalf of Covered Entities or other Business Associates.

3. Secure Cloud Infrastructure

3.1 Microsoft Azure Environment

All PHI processed by Alanos is hosted exclusively on Microsoft Azure's secure cloud infrastructure. Microsoft Azure is an industry leader in cloud security and compliance, offering:

• HIPAA Compliance: Microsoft Azure maintains HIPAA compliance and provides a Business Associate Agreement (BAA) covering all Azure services used to process PHI.
• SOC 1, SOC 2, and SOC 3 Certifications: Azure undergoes regular third-party audits to validate security controls.
• ISO 27001 Certification: Azure is certified under the international standard for information security management.
• FedRAMP Authorization: Azure meets rigorous federal security standards.
• Physical Security: Azure data centers feature multi-layered physical security, including biometric access controls, surveillance, and 24/7 security personnel.

3.2 Business Associate Agreements with Cloud Providers

Alanos has executed a Business Associate Agreement (BAA) with Microsoft Azure. This agreement establishes Microsoft's obligations to safeguard PHI in accordance with HIPAA requirements and ensures that appropriate protections are in place throughout the cloud infrastructure.

4. Business Associate Agreements with Clients

4.1 BAA Inclusion

Alanos, LLC provides a Business Associate Agreement (BAA) to all clients whose use of our services involves PHI. A BAA is included at no additional cost with every purchase of our products or services that handle PHI.

4.2 BAA Contents

Our standard Business Associate Agreement includes:

• Permitted and required uses and disclosures of PHI
• Obligations to implement appropriate safeguards
• Requirements for reporting security incidents and breaches
• Provisions for ensuring subcontractor compliance
• Termination and PHI disposition procedures
• Our compliance with the HIPAA Privacy, Security, and Breach Notification Rules

4.3 Compliance Documentation

Compliance Report Availability: Clients may request a copy of our compliance documentation, including security policies, risk assessments, and audit reports, at any time. To request compliance documentation, please contact us at info@alanoshealthcare.com. We will provide requested documentation within a reasonable timeframe, subject to any confidentiality limitations.

5. Administrative Safeguards

Alanos has implemented comprehensive administrative safeguards to protect PHI:

5.1 Security Management Process

• Risk Analysis: We conduct regular risk assessments to identify potential vulnerabilities and threats to PHI.
• Risk Management: We implement security measures to reduce identified risks to reasonable and appropriate levels.
• Sanction Policy: Workforce members who violate our security policies are subject to appropriate disciplinary action.
• Information System Activity Review: We regularly review system activity logs, access reports, and security incident tracking.

5.2 Workforce Security

• Authorization and Supervision: Only authorized workforce members have access to PHI, and such access is limited to what is necessary for their job functions.
• Workforce Clearance: Background checks and appropriate vetting procedures are conducted for employees with access to PHI.
• Termination Procedures: Access to PHI is promptly revoked upon termination or change in job function.

5.3 Security Awareness and Training

• All workforce members receive HIPAA security and privacy training upon hire and on an ongoing basis.
• Training includes recognition and response to security incidents, password management, and PHI handling procedures.
• Periodic reminders and updates are provided to maintain awareness of evolving threats and compliance requirements.

5.4 Contingency Planning

• Data Backup: PHI is regularly backed up and stored in geographically separate locations.
• Disaster Recovery: We maintain disaster recovery procedures to restore PHI in the event of data loss or system failure.
• Emergency Mode Operations: Critical systems can operate in emergency mode to protect PHI during crises.

6. Technical Safeguards

Alanos implements robust technical safeguards to protect electronic PHI (ePHI):

6.1 Access Controls

• Unique User Identification: Each user is assigned a unique identifier to track access and activity.
• Emergency Access Procedures: Procedures exist for obtaining necessary ePHI during emergencies.
• Automatic Logoff: Sessions are automatically terminated after periods of inactivity.
• Encryption: All ePHI is encrypted both at rest and in transit using industry-standard encryption protocols (AES-256 and TLS 1.2/1.3).

6.2 Audit Controls

• Hardware, software, and procedural mechanisms are in place to record and examine access and activity in systems containing ePHI.
• Audit logs are retained and regularly reviewed to detect unauthorized access or anomalous activity.

6.3 Integrity Controls

• Mechanisms are implemented to ensure that ePHI is not improperly altered or destroyed.
• Electronic signatures and checksums are used where appropriate to verify data integrity.

6.4 Transmission Security

• All ePHI transmitted over networks is encrypted using TLS 1.2 or higher.
• Integrity controls are in place to ensure that data is not modified during transmission.

7. Physical Safeguards

While Alanos operates as a remote-first company, we implement appropriate physical safeguards:

• Cloud Provider Physical Security: All PHI is stored in Microsoft Azure data centers, which maintain comprehensive physical security controls, including restricted access, surveillance, and environmental protections.
• Workstation Use: Policies govern the proper use of workstations that access ePHI, including requirements for secure locations and screen locks.
• Device and Media Controls: Procedures exist for the secure disposal, re-use, and tracking of devices and media containing ePHI.

8. Breach Notification

8.1 Incident Response

Alanos maintains a formal incident response plan that includes:

• Procedures for identifying, reporting, and responding to suspected security incidents
• Designated incident response team members and contact procedures
• Containment, eradication, and recovery procedures
• Documentation and post-incident analysis

8.2 Breach Notification Procedures

In the event of a breach of unsecured PHI, Alanos will:

• Notify affected Covered Entities without unreasonable delay, and in no case later than required by HIPAA and applicable law (generally within 60 days of discovery).
• Provide all information required for Covered Entities to fulfill their breach notification obligations to affected individuals and regulatory authorities.
• Cooperate fully with investigations and remediation efforts.
• Document all breach-related activities and maintain records as required by law.

9. Shared Responsibility Model

HIPAA compliance is a shared responsibility between Alanos and our clients. While we implement comprehensive safeguards for PHI within our control, clients are responsible for:

• Securing their own systems, devices, and networks used to access our Services
• Protecting login credentials and implementing appropriate access controls
• Ensuring their workforce is trained on privacy and security practices
• Promptly reporting any suspected security incidents
• Complying with their own obligations under HIPAA as Covered Entities or Business Associates

For detailed information about user responsibilities, please refer to our Terms of Use.

10. Continuous Improvement

Alanos is committed to the continuous improvement of our HIPAA compliance program. We:

• Regularly review and update our policies and procedures
• Conduct periodic risk assessments and security audits
• Monitor regulatory developments and update our practices accordingly
• Solicit feedback from clients and stakeholders to improve our security posture

11. Contact Information

For questions about our HIPAA compliance program, to request compliance documentation, or to report a security concern, please contact:

We take all inquiries and concerns seriously and will respond within a reasonable timeframe.