Acceptable use policy

1. Purpose

This policy applies to everyone who uses Biomatrix on behalf of a Customer. It exists to protect patients, staff, Customers and the Service. It forms part of our Terms of Service.

2. Handling patient data

• Access patient records only when you have a legitimate care or operational reason to do so.
• Don't copy, export, photograph or share patient information outside the purposes your organisation has approved.
• Record information accurately and attach files to the correct patient.
• Don't enter patient information into free-text fields that aren't designed for it, such as staff profile notes.

3. Accounts and access

• Use only your own account. Never share passwords or one-time codes.
• Lock or sign out of shared workstations when you step away.
• Don't attempt to access branches, records or features beyond the permissions you've been given.

4. Prohibited activity

You must not:

• use the Service for anything unlawful, fraudulent or harmful;
• upload malware or content that infringes others' rights;
• probe, scan or test the vulnerability of the Service without our written permission (see our responsible disclosure process on the Security page);
• interfere with or overload the Service, or circumvent rate limits or access controls;
• scrape, reverse engineer or copy the Service except as allowed by law;
• use the Service to build a competing product;
• resell or provide access to third parties outside your organisation.

5. Patient communications

Features that send messages, documents or results to patients must be used only for care-related communication with patients who have provided those contact details to your organisation. They must not be used for unsolicited marketing.

6. Enforcement

If we become aware of a breach of this policy, we may notify the Customer administrator, and where necessary to prevent harm, suspend the relevant user or feature. Customers are responsible for taking appropriate action with their own staff.

7. Reporting

Report suspected misuse or security issues to security@biomatrix.ng.