Terms of Service & Disclaimer

1. Nature of services

HIPAASafeAI provides technical consulting, architecture guidance, and deployment assistance for in-house, air-gapped AI systems. Our services are advisory and technical in nature. We do not provide legal, accounting, or compliance-officer services.

2. No HIPAA certification or guarantee

We describe our work as "HIPAA-safe" because it is designed to reduce the risk surface that HIPAA-covered entities face when adopting AI. We do not state, imply, or guarantee that any organization, system, or deployment is "HIPAA compliant" or "HIPAA certified."

HIPAA compliance is a property of a covered entity's overall security, privacy, and workforce programs. Achieving and maintaining compliance remains the responsibility of the client organization, in consultation with its legal and compliance professionals.

3. Client responsibilities

Clients are responsible for providing accurate information about their environment, implementing access controls and workforce training, conducting their own risk analysis, and making final decisions about how ePHI is handled within their organization.

4. Limitation of liability

To the fullest extent permitted by law, HIPAASafeAI's liability is limited to the fees paid for the specific engagement giving rise to the claim. We are not liable for breaches, fines, or regulatory actions arising from client decisions, third-party products, or misuse of the systems we help deploy.

5. Confidentiality

We treat client information as confidential and do not disclose it without permission, except as required by law. We do not request, and clients should not provide, ePHI or patient-identifiable information through this website's contact form.

6. Governing law

These terms are governed by the laws of the State of Texas, without regard to conflict-of-law principles.