Acceptable Use Policy

1. Purpose

This policy sets out how TScribe, Ureport, the organisation dashboard and the browser extension (together, “the services”) may be used. It forms part of the Terms of Service. The short version: use the services for honest, professional clinical documentation, protect your account, and do not try to break or abuse the platform.

2. Who may use the services

The services are for licensed healthcare professionals, healthcare students and trainees working under supervision, and the institutions they work in, together with the administrators those institutions appoint. They are not for the general public and not for anyone under 18.

3. What you may do

• Dictate clinical reports, notes and form entries in the course of your professional work
• Build and use templates for your own or your department’s documentation
• Copy, paste or file finished reports into records systems you are authorised to use
• Administer an organisation you are authorised to administer

4. Clinical records

You must not use the services to create, alter or backdate a clinical record fraudulently, to fabricate findings, to document an encounter that did not take place, or to produce a record for a patient you did not attend. Every draft the services produce must be reviewed by a qualified clinician before it is used clinically. You are responsible for what is submitted in your name.

5. Accounts and credentials

One person, one account. You must not share your password, two-factor method or approved device with anyone else, sign in as someone else, or let someone else dictate under your credentials. Tell us immediately if you suspect your account has been compromised. Organisations must not register accounts on behalf of people who will not use them.

6. Patients and consent

You must use the services in a way that is consistent with your institution’s data governance policies, your professional regulator’s rules and your patients’ consent. Do not record a consultation in conversation mode without the consent required where you practise. Do not include patient-identifiable information in support messages or attachments; we do not need it, and support messages are stored so a person can reply.

7. Technical misuse

You must not:

• Reverse-engineer, decompile or attempt to extract the source, models or templates of the services beyond what the law expressly permits
• Scrape, crawl or bulk-download content from the services, or use automated tools to interact with them other than through interfaces we publish
• Send audio or content that is not clinical dictation in order to obtain transcription or language processing for another purpose
• Attempt to bypass credit metering, per-member limits, device approval or two-factor authentication
• Probe, scan or test the security of our systems without written permission (see reporting vulnerabilities for the right way)
• Overload, disrupt or interfere with the services or with other people’s use of them
• Upload files containing malware, or use the support channel to deliver them
• Use the services to build or train a competing product

8. The browser extension

Use the extension only on records systems and sites you are authorised to use, and only to place your own dictation in fields you are authorised to fill. Do not use it to enter content into another person’s record without authority, or on a shared device without signing out afterwards.

9. Organisation administrators

Administrators may see members, usage and devices, and may set limits, approve devices and remove members. They must not attempt to obtain report content through the services, must not use the dashboard to monitor staff beyond what their institution’s policies allow, and must remove members promptly when their access should end.

10. Enforcement

We may suspend or close an account, or an organisation, that breaches this policy, with or without notice depending on the severity, and may report unlawful activity to the appropriate authorities. Where we can, we will tell you what happened and give you a chance to respond. Records we are required to keep, and security logs, survive closure in a form no longer linked to a named person.

11. Reporting misuse

If you believe someone is misusing the services, email hello@unitypulse.io with what you saw. Do not include patient details.

12. Contact

Questions about this policy? Reach us at hello@unitypulse.io or through the contact page. Unitypulse, Nigeria.