Authorized use
You may use PatientLock services only on systems, accounts, data, and environments you own, control, or are authorized to administer, and only within the scope allowed by the applicable agreement and customer policy.
Prohibited activity
- Unauthorized access, scanning, exploitation, surveillance, or interference with another party's systems or data.
- Malware distribution, credential theft, phishing, extortion, destructive activity, denial of service, or concealment of unlawful conduct.
- Bypassing service controls, license restrictions, usage limits, or customer approval requirements.
- Using PatientLock services to violate privacy, export-control, intellectual-property, employment, or other applicable law.
- Introducing PHI, classified information, export-controlled data, or other sensitive data into a workflow not approved for that data.
- Misrepresenting modeled, measured, or security findings as guarantees, certifications, or third-party endorsements.
Automated and remediation actions
Customer-authorized automation and remediation must remain within configured permissions and supported actions. The customer is responsible for defining its authorization boundary, change controls, backups, and any approvals required before production action.
Enforcement
PatientLock may restrict or suspend use that creates a material security, legal, or operational risk or violates an applicable agreement. Commercial suspension and termination rights remain governed by the MSA and applicable Service Order or SOW.
Report concerns
Suspected abuse may be reported to legal@patientlock.net. Security vulnerabilities should be reported under the Vulnerability Disclosure Policy.