Terms of Service

Public summary updated: April 22, 2026

This page is a public summary of PHIGuard's current standard Terms of Service. The operative agreement for each customer is the version reviewed and accepted in the PHIGuard onboarding flow for that customer's legal entity.

Contracting party and acceptance

PHIGuard's current contracting party is Ventora Labs, a Wyoming corporation, d/b/a PHIGuard. The customer contracting party is the clinic, practice, or company legal entity identified during signup.

PHIGuard uses an in-app legal acceptance flow. An organization owner or organization admin reviews the current Terms and current Business Associate Agreement during onboarding, enters signer details, and accepts both documents on behalf of the customer legal entity before billing can proceed.

What the service covers

PHIGuard provides HIPAA-native task management, compliance workflows, incident documentation, vendor BAA tracking, audit evidence, and related administrative tooling for healthcare organizations.

PHIGuard provides software and supporting controls. It does not provide legal advice and does not guarantee that use of the service alone satisfies every regulatory obligation for a customer.

Customer responsibilities

• Use the service lawfully and in accordance with HIPAA and other applicable requirements.
• Maintain accurate account, administrator, and billing information.
• Use unique accounts for each workforce member; shared accounts are not permitted.
• Do not misuse the service for malicious, abusive, fraudulent, or unauthorized activity.

Subscriptions, trials, and billing

PHIGuard subscriptions may be offered on monthly or annual terms, as shown in the applicable pricing or checkout flow. Subscription fees are billed in advance and renew automatically until canceled.

Where a trial is offered, PHIGuard may allow the customer to start without a payment method. If billing details are not added before the trial ends, PHIGuard may pause the subscription until billing is completed. Billing stays locked until the current Terms and current BAA have been accepted.

• Taxes are the customer's responsibility except for taxes based on PHIGuard's income.
• Nonpayment may result in suspension after reasonable notice where legally permitted.
• Cancellation takes effect according to the applicable billing flow and already-paid period.

Data, confidentiality, and HIPAA

The customer retains ownership of customer data. PHIGuard receives a limited right to host, process, transmit, secure, support, and improve the service using that data as permitted by the Terms, the BAA, and applicable law.

PHI handled by PHIGuard is governed by the Business Associate Agreement accepted alongside the Terms. The BAA controls if there is a conflict about PHI handling.

Support, suspension, and termination

PHIGuard provides commercially reasonable support and administrative assistance during an active subscription term. The current standard Terms do not include a public uptime commitment or standalone service-level agreement.

Either party may terminate for a material breach that remains uncured for 30 days after notice. PHIGuard may suspend access immediately where necessary to prevent harm, address a security issue, or comply with law.

Liability and dispute framework

The service is provided on an "as is" and "as available" basis to the maximum extent permitted by law. Under the current standard Terms, each party's aggregate liability is capped at the fees paid or payable by the customer in the 12 months before the event giving rise to the claim, subject to liabilities that cannot be limited by law.

The current standard Terms select Delaware law and exclusive venue in state and federal courts located in Delaware.

Document updates and notices

PHIGuard may publish updated Terms prospectively. If a newer standard Terms or BAA version becomes current, PHIGuard can require re-acceptance before protected app access or new billing actions continue.

Legal notices to PHIGuard should be directed to:

Ventora Labs, a Wyoming corporation, d/b/a PHIGuard
30 N Gould St Ste N, Sheridan, WY 82801
angel.campa@phiguard.app

Executed copies

PHIGuard stores evidence of legal acceptance for the accepted Terms and BAA versions, including the document snapshot, signer details, timestamp, and related execution artifacts. Executed copies are stored server-side per acceptance record, and PHIGuard can provide them through its current support or operational handling flow.