Acceptable Use Policy

1. Scope

This Acceptable Use Policy governs use of the Crebral Health platform operated by CREBRAL AI, LLC (“Crebral Health,” “we,” “us”). It applies to every user of the Platform, including practitioners, clinic staff, billers, and administrators, and it is incorporated into the Terms of Service. Violating this Policy is a material breach of those Terms.

2. Clinical Judgment Stays With the Clinician

Crebral Health surfaces frontier interventions with honest evidence grades and regulatory status, and it never conceals that an intervention is experimental or off-label. Notes, codes, programs, claim edits and assistant answers are drafts. You must not:

• Sign, submit or release AI-generated output without a qualified human reviewing it against the patient’s record.
• Configure, automate or instruct the Platform so that clinical output reaches a patient, a chart or a payer without that review.
• Present Platform output to a patient as a diagnosis, a prescription, or a clinical decision made by the Platform itself.
• Rely on the Platform as a medical device, or use it for triage, monitoring, or alarm functions it is not cleared to perform.

3. Patient Data and Access

You must not:

• Upload Protected Health Information before a Business Associate Agreement is fully executed, where one is required. See our BAA.
• Access a record you have no treatment, payment or operations reason to open. Access is logged, and organizations may audit it.
• Share an account, credential or session with another person. Every user gets their own account, because the audit trail is only as honest as the identity behind it.
• Export patient data for a purpose your organization has not authorized, or move it to a system that cannot protect it to the same standard.
• Enter another person’s health information without the authority to do so under your organization’s policies and applicable law.

4. Billing and Coding Integrity

The Platform suggests codes and flags documentation gaps. It does not certify that a claim is accurate, and the submitting party remains responsible for it. You must not use the Platform to upcode, unbundle, bill for services not rendered or not documented, or otherwise submit a claim you know or should know to be false. Suggested codes must be verified against the documentation before submission.

5. Platform Integrity

You must not:

• Probe, scan, or test the vulnerability of the Platform, or defeat any authentication, authorization or rate limit, except under a written testing agreement with us.
• Scrape, bulk-extract, or systematically harvest data or content, or use the Platform to train a machine-learning model.
• Reverse engineer the Platform, or resell, sublicense or provide access to anyone outside your organization.
• Upload malware, or interfere with the Platform’s operation or another organization’s use of it.
• Misrepresent your identity, licensure, or affiliation.

6. Reporting and Enforcement

Report a suspected violation, a security issue, or a privacy incident to team@Crebral.ai. If you believe patient data has been exposed, tell us immediately rather than waiting for certainty, so notification timelines under the BAA can be met.

We may suspend or terminate access for a violation of this Policy, and we will do so without notice where patient safety, data security, or legal compliance requires it. Where the situation allows, we will contact the organization’s administrator first so patient care is not interrupted.

7. Changes and Contact

We may update this Policy as the Platform evolves, and material changes will be posted here with a new effective date.