🏆 Sanafin named winner of the InnoBooster Sustainable Digital Finance Award

View
Agreement & Trust

Terms of Service & Compliance

These terms define the service boundaries, regulatory compliance frameworks, and trust standards between Sanafin and our enterprise partners.

Using Sanafin

Sanafin provides SaaS infrastructure to structure, deploy, and automate outcome-based healthcare contracts. Our platform integrates smart escrow accounts, data verification feeds, and automated routing pipelines to help health insurers, sponsors, and care teams execute value-based agreements.

Account & Access Rules

  • Authorized CredentialsUsers must maintain the confidentiality of all system credentials and API tokens.
  • Access ScopePlatform access is granted solely to configure contracts, integrate clinical data sources, and manage escrow accounts.

User Responsibilities

  • Accurate ThresholdsCustomers are responsible for specifying correct clinical metrics and verification logic in contract models.
  • Lawful Data SourcingYou must ensure all digital health data, laboratory results, or clinical evidence feeds are legally obtained.

Security Infrastructure

We secure customer systems and data through institutional-grade controls:

  • End-to-End EncryptionAll data is encrypted in transit using TLS 1.3 and at rest with AES-256 keys.
  • Role-Based Access (RBAC)Strict authentication rules govern access to contract rules, escrow balances, and API credentials.
  • De-identification SinksClinical biomarker feeds are pseudonymized at the integration source to protect privacy.

Compliance & Governance

Our governance framework is aligned with leading national and global standards:

  • Regulatory AlignmentDesigned to meet the operational standards of GDPR (Europe), DSG (Switzerland), and HIPAA (United States).
  • Swiss Legal PrinciplesEscrow allocations and contract triggers are modeled to reflect the Swiss Code of Obligations.
  • Audit-Ready LogsPlatform activity logs are designed for institutional SOC-2 compliance audits.

Acceptable Use

You agree not to bypass security configurations, introduce malicious code, reverse-engineer the contract execution compiler, or attempt to manipulate verification events. Any suspicious activity will result in immediate API suspension.

Risk Management & Fallbacks

We mitigate operational risks through clear contract safety valves and automated fallbacks. Every outcome-based contract structured on Sanafin includes explicit parameters to manage edge cases:

Exception Paths

Predefined logic handles missing data feeds, client dropouts, or temporary connection issues without locking funds.

Oracle Fallbacks

If primary digital health validation sources fail, secure human-review checkpoints resolve clinical disputes.

Escrow Safety

Funds are routed only upon verified outcome confirmation, preventing unauthorized or early payout release.

Payment & Escrow Terms

Platform subscription fees and escrow service charges are defined in executed Statements of Work (SOW) or Order Forms. Escrow deposits are held securely in custody bank accounts and can only be routed according to deterministic, verified contract criteria.

Intellectual Property

Sanafin owns all proprietary software, databases, API designs, and interfaces. Open-source specifications, including the EDEN framework schema, are licensed separately under their respective MIT/standard open licenses.

Verification Transparency

Transparency is key to eliminating disputes. Sanafin publishes the mathematical algorithms used to verify outcomes and calculate time-value thresholds under the open-source EDEN framework. Payers and providers can inspect and run independent tests on the validation scripts to confirm correctness before deploying them to production.

Limitations of Liability

Sanafin is a software provider and is not a party to clinical treatment outcomes or care decisions. We do not provide medical or clinical advisory. To the maximum extent permitted by law, Sanafin is not liable for indirect, incidental, or consequential damages resulting from clinical data inaccuracies or verification source failures.

Termination

Either party may terminate platform access in accordance with SOW agreements. Upon termination, active escrow balances will be refunded or routed according to the final contract status in the secure auditing registry.

Contact & Inquiries

For legal inquiries, terms compliance, or data security documentation, contact: hello@sanafin.tech