Terms of Use

UPMC HEALTH PLAN, INC. ONC INTEROPERABILITY DEVELOPER PORTAL TERMS OF USE

By registering with the UPMC Health Plan ONC Interoperability Developer Portal (the “Portal”) or using any services or information provided through or in connection with the Portal, you and/or any company, entity, or person that you represent (collectively, “You” or “Your”) expressly agree to be bound by these terms of use (“Terms of Use”), which incorporates by reference any updates or additional terms and conditions posted through the Portal or otherwise made available to You by UPMC Health Plan, Inc. These Terms of Use define the legal agreement (the “Agreement”) between You and UPMC Health Plan, Inc., on behalf of it and its affiliates, (collectively, “UPMC”) and set forth the legal requirements for Your use of the Portal. IF YOU DISAGREE WITH OR ARE UNWILLING TO BE BOUND BY THESE TERMS OF USE, OR IF ACCEPTING THESE TERMS OF USE OR PARTICIPATING WOULD VIOLATE ANY LAW, THIRD PARTY RIGHT, OR OBLIGATION OF YOURS, DO NOT PARTICIPATE IN UPMC’S INTEROPERABILITY DEVELOPER PROGRAM.

Services Provided

Through the Portal, UPMC may provide You with access to documentation, registration services, developer sandbox services, and other developer services related to UPMC’s application programming interfaces – the “Patient Access API”, the “Rx Formulary API”, the “Provider and Pharmacy Directory API”, the “Explanation of Benefits API”, and the “Clinical Data API” (together, the “APIs”) – provided pursuant to the Office of the National Coordinator for Health Information Technology (ONC) Cures Act Final Rule (also referred to as the CMS Interoperability and Patient Access Final Rule (CMS-9115-F)). References to “the Services” in this Agreement include Your access and connection to and use of the Portal and APIs.

Registration

In order to access the Services, You will be required to register at the Portal by providing certain information (including identification and contact details) as part of the registration process for the Services, or as part of Your continued use of the Services. You agree that any and all registration information You provide is accurate, complete, and up to date. You also agree to inform UPMC promptly of any updates so that we can keep You informed of any changes to the Services or this Agreement.

Upon registering and being approved by UPMC, UPMC will issue to You developer credentials such as a Client ID and Client Secret, a password, and/or a security token (collectively, “Developer Credentials”). Developer Credentials are intended to be used only by You and are necessary to identify any software which You are using with the APIs. You are responsible for maintaining the confidentiality of Your Developer Credentials and agree not to share them with any third party. You are responsible for all acts that occur while Your Developer Credentials are being used, whether or not You authorized such acts, and any security breach caused by Your failure to maintain the confidentiality of Your Developer Credentials. You agree to notify UPMC immediately in the event of loss or theft of Your Developer Credentials, or if You believe the confidentiality of Your Developer Credentials has been compromised in any way, or in the event of Your learning about a possible or actual unauthorized use of the Services. Notifying UPMC of any unauthorized use of Your Developer Credentials will not relieve You of responsibility for any actions and/or damages that occur as a result of the unauthorized use.

You may only access (or attempt to access) each of the applicable APIs after You and Your application have successfully been registered with UPMC for production access to the applicable API and by the means described in the documentation for that API. UPMC reserves the right to revoke Your Developer Credentials and/or access to the APIs at any time without prior notice for Your failure to comply with this Agreement or where UPMC reasonably determines that Your access to the APIs would present an unacceptable level of risk to the security of UPMC’s APIs or information technology systems.

If You are granted Developer Credentials, You may only use those credentials with the application You register with the Portal. UPMC may revoke Your Developer Credentials if You use or attempt to use them with another application or product that has not been registered with the Portal.

Use of the Services

Subject to the Terms of Use set forth in this Agreement and in accordance with the API documentation and applicable law, including the CMS Interoperability and Patient Access Final Rule (CMS-9115-F), You may only use (i) the Patient Access API, the Rx Formulary API, the Explanation of Benefits API, and/or the Clinical Data API to retrieve, with the express approval and at the direction of a UPMC enrolled member, certain data, as applicable, concerning adjudicated claims, encounter data from capitated providers, formulary data, and certain clinical data, to the extent UPMC maintains any such data, (ii) the Provider and Pharmacy Directory API to retrieve, as applicable, certain UPMC provider and pharmacy directory information, and (iii) the developer sandbox services to test Your application’s connection to the APIs. You may not access, connect to, retrieve data from, or use in any way the Patient Access API, the Rx Formulary API, the Explanation of Benefits API, and/or the Clinical Data API except with the express approval and at the direction of the applicable UPMC enrolled member.

Restrictions on Your Use of the Services

You may not (i) violate the security or integrity of any network, computer or communications system, software application, or network or computing device, whether related to the Services, the Portal, or any UPMC information technology system, (ii) access the APIs by any means other than use of an application that has been registered with UPMC, (iii) modify, reproduce, adapt, translate, reverse engineer, create derivative works based upon, publicly display, sell, rent, license, decrypt, commercially exploit, or otherwise attempt to derive, reconstruct, identify, or discovery any source code, underlying ideas, or algorithms of the Services by any means, (iv) remove any proprietary notices, labels, or UPMC copyright or trademarks from the Services. You agree to use the Services only for lawful purposes. You agree not to, directly or indirectly, interrupt or attempt to interrupt the operation of the Services in any way. Any conduct by You that, as reasonably determined by UPMC, restricts, inhibits, or interferes with the ability of any other user to use the Services (including by means of hacking or defacing any portion of the Services, or by engaging in spamming, flooding, or other disruptive activities) is prohibited. You must not transmit or otherwise make available through or in connection with the Services any program routine, device or other undisclosed feature comprising of a trap door, time bomb, Trojan horse, worm, spyware, bot, keystroke logger, cookie, malicious logic, virus, usage lock, physical or electronic license key or disabling mechanism or other routine, device, file or feature, whether such disabling mechanisms are based on calendar date or elapsed time, that are designed to track, monitor or capture computer or user files, information or data, or to delete, disable, deactivate or otherwise render the Services, the network, or any UPMC information technology system inoperable.

You also agree that You will not (and will not attempt to) (i) access or use the Services, Portal, the APIs, or any component thereof in any manner or for any purpose not expressly authorized by these Terms of Use, (ii) distribute, sublicense, lease, rent, loan, or otherwise use or make any component of the Services available for use by third parties, including as part of a service bureau, outsourcing, or external consulting arrangement, (iii) collect, compile, or otherwise attempt to “screen scrape,” “data mine” or “harvest” any component of the Services, including through the creation of any duplicate or derivative data store, (iv) deactivate, bypass, or circumvent any access controls or security measures for the Services, (v) engage in any activity that disrupts or impairs the performance of the Services, or (vi) access or use the Services in violation of any applicable laws or regulations, the intellectual property or other rights of any third party, or any contractual or legal duty or obligation including in a manner prohibited by these Terms of Use.

Your use of the APIs will be subject to certain limitations on access, calls, or use as set forth within this Agreement, the API documentation, or otherwise provided by UPMC. These limitations are necessary to protect the security of UPMC’s information technology systems, manage the load on the system, promote equitable access, and prevent abuse, and these limitations may be adjusted without notice, as reasonably determined by UPMC. If UPMC reasonably determines that You have attempted to exceed or circumvent these limitations, Your Developer Credentials may be revoked.

Monitoring and Audit

UPMC will monitor Your use of the Services and/or APIs to, for example, improve the Services or to ensure compliance with this Agreement and the API documentation. You consent and agree that UPMC may audit Your applications and use of the Services. You agree to cooperate with any monitoring or audit, and You will not interfere with or otherwise attempt to block any monitoring or audit. UPMC reserves the right to (i) investigate and take appropriate action, including legal action against You if You these Terms of Use are breached and (ii) seek available any and all remedies legally available, including specific performance, injunctive relief, and/or attorneys’ fees.

Representations and Warranties

You represent and warrant that You and Your users are 18 years of age or older. You represent and warrant that You have the authority to bind the company, entity, or person You represent by Your actions. You represent and warrant that You will comply with all security requirements for access to and use of the Services and any APIs.

You represent and warrant that Your collection, storage, transmission and use of any and all information available through the Services has complied and will comply with Your privacy policy, applicable laws, and the instructions of Your application users.

Disclaimer

YOUR USE OF THE SERVICES (INCLUDING ANY DOCUMENTATION, INFORMATION, PROGRAMS, SOFTWARE, APIs OR OTHER MATERIAL ACCESSED ON THE SERVICES) IS AT YOUR SOLE RISK. THE SERVICES ARE PROVIDED ON AN “AS IS” AND “AS AVAILABLE” BASIS.

TO THE FULLEST EXTENT PERMITTED BY LAW, UPMC EXPRESSLY DISCLAIMS ALL WARRANTIES OF ANY KIND RELATED TO THE SERVICES, WHETHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NONINFRINGEMENT. WITHOUT LIMITATION TO THE ABOVE, UPMC DOES NOT PROVIDE ANY REPRESENTATION OR WARRANTY THAT (I) THE SERVICES WILL MEET YOUR REQUIREMENTS, (II) THE SERVICES WILL BE UNINTERRUPTED, TIMELY , SECURE, OR ERROR-FREE, (III) THE RESULTS THAT MAY BE OBTAINED FROM THE USE OF THE SERVICES WILL BE ACCURATE OR RELIABLE, (IV) THE QUALITY OF ANY PRODUCTS, SERVICES, INFORMATION, OR OTHER MATERIAL PURCHASED OR OBTAINED THROUGH THE SERVICES WILL MEET YOUR EXPECTATIONS, NEEDS OR REQUIREMENTS, AND (V) THAT ANY ERRORS ASSOCIATED THE SERVICES WILL BE CORRECTED.

UPMC IS NOT RESPONSIBLE FOR ANY INACCURACIES OR DEFECTS IN THE INFORMATION, SOFTWARE, COMMUNICATION LINES, INTERNET OR YOUR INTERNET SERVICE PROVIDER (ISP), COMPUTER HARDWARE OR SOFTWARE, OR ANY OTHER SERVICE OR DEVICE THAT YOU USE TO ACCESS THE SERVICES.

NO ADVICE OR INFORMATION, WHETHER ORAL OR WRITTEN, OBTAINED BY YOU FROM UPMC OR ITS AFFILIATES OR THROUGH OR FROM THE SERVICES SHALL CREATE ANY WARRANTY NOT EXPRESSLY STATED IN THESE TERMS OF USE.

YOU SHALL BE SOLELY AND FULLY RESPONSIBLE FOR ANY DAMAGE TO THE SERVICES OR ANY COMPUTER SYSTEM, ANY LOSS OF DATA, OR ANY IMPROPER USE OR DISCLOSURE OF INFORMATION ON THE SERVICES CAUSED BY YOU OR ANY PERSON USING YOUR DEVELOPER CREDENTIALS. EXCEPT AS PROHIBITED OR LIMITED BY LAW, UPMC CANNOT AND DOES NOT ASSUME ANY RESPONSIBILITY FOR ANY LOSS, DAMAGES, OR LIABILITIES ARISING FROM YOUR MISUSE OF ANY PROTECTED HEALTH INFORMATION, ADVICE, IDEAS, INFORMATION, INSTRUCTIONS, OR GUIDELINES ACCESSED THROUGH THE SERVICES.

Limitation of Liability

TO THE FULLEST EXTENT PERMITTED BY LAW, YOU AGREE THAT UPMC, UPMC AFFILIATES, ANY UPMC LICENSOR OR SUPPLIER, ANY THIRD PARTY WHO PROMOTES THE SERVICES OR PROVIDES A LINK TO THE SERVICES SHALL NOT BE LIABLE TO YOU FOR ANY SPECIAL, PUNITIVE, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, LOSSES, FEES, CHARGES, EXPENSES OR LIABILITIES YOU INCUR RELATED TO YOUR ACCESS AND USE OF THE SERVICES.

WITH RESPECT TO DIRECT DAMAGES, AND WHERE THE ABOVE EXCLUSIONS OF INDIRECT AND CONSEQUENTIAL DAMAGES IS LIMITED OR PROHIBITED UNDER LAW, YOU AGREE THAT ANY AND ALL DAMAGES, LOSSES, FEES, CHARGES, EXPENSES OR LIABILITIES YOU SUFFER OR INCUR RELATED TO YOUR ACCESS AND USE OF THE SERVICES THAT RESULT FROM ANY ACT OR OMISSION OF UPMC, UPMC AFFILIATES, ANY UPMC LICENSOR OR SUPPLIER, ANY THIRD PARTY WHO PROMOTES THE SERVICES OR PROVIDES A LINK TO THE SERVICES SHALL BE LIMITED TO THE FEE PAID BY YOU PRIOR TO THE FIRST OCCURRENCE OF THE SUBJECT DAMAGES, LOSSES, FEES, CHARGES, EXPENSES OR LIABILITIES, OR $100.00, WHICHEVER IS GREATER.

THE ABOVE LIMITATIONS AND EXCLUSIONS TO LIABILITY APPLY REGARDLESS OF THE TYPE OF DAMAGES OR CLAIMS, INCLUDING WITHOUT LIMITATION DAMAGES OR CLAIMS RELATED TO (I) PERSONAL INJURY, WRONGFUL DEATH, LOSS OF USE, LOSS OF PROFITS, INTERRUPTION OF SERVICE, OR LOSS OF DATA; OR (II) MISTAKES, OMISSIONS, INTERRUPTIONS, DELETION OF FILES, ERRORS, DEFECTS, DELAYS IN OPERATION OR TRANSMISSION, OR (III) ANY FAILURE OF PERFORMANCE, WHETHER OR NOT LIMITED TO ACTS OF GOD, COMMUNICATION FAILURE, THEFT, DESTRUCTION OR UNAUTHORIZED ACCESS TO YOUR RECORDS, PROGRAMS, OR SERVICES, OR (IV) OTHERWISE ARISING OUT OF OR IN ANY WAY CONNECTED WITH THE USE OF, OR THE INABILITY TO USE, THE SERVICES. YOU AGREE THAT THIS LIMITATION APPLIES EVEN IF UPMC, UPMC AFFILIATES, ANY UPMC LICENSOR OR SUPPLIER, ANY THIRD PARTY WHO PROMOTES THE SERVICES OR PROVIDES A LINK TO THE SERVICES HAS BEEN ADVISED OF THE LIKELIHOOD OR POSSIBILITY OF SUCH DAMAGES, LOSSES, FEES, CHARGES, EXPENSES OR LIABILITIES.

THE PARTIES AGREE THAT THE EXCLUSIONS OF REMEDIES AND LIMITATIONS SPECIFIED IN THIS SECTION ARE A REASONABLE ALLOCATION OF RISK, AND APPLY REGARDLESS OF THE FORM OF ACTION, WHETHER IN CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY OR OTHERWISE, AND APPLY EVEN IF ANY LIMITED REMEDY SPECIFIED IN THESE TERMS AND CONDITIONS IS FOUND TO HAVE FAILED OF ITS ESSENTIAL PURPOSE.

TO THE EXTENT THE ABOVE LIMITATION OF LIABILITY IS RESTRICTED UNDER LAW, THE ABOVE LIMITATIONS SHALL BE APPLIED TO THE FULLEST EXTENT PERMITTED UNDER SUCH LAW.

Indemnification

You agree to indemnify and hold UPMC, its parents, subsidiaries, affiliates, officers and employees, harmless from any claim, demand, or damage, including reasonable attorneys' fees, asserted by any third party due to or arising out of or related to (i) Your use of or conduct on the Services, (ii) Your application or the development, maintenance, or use of any aspect of the application, (iii) any content or information accessed, collected, distributed, uploaded, or transmitted by You or Your users, (iv) Your violation of these Terms of Use or any other terms related to the Services, Portal, and/or the APIs, (v) any use of Your Developer Credentials by You or any third party, (vi) the infringement or other violation by You, Your application, or Your marks of any law or intellectual property or other right of any person or entity, and (vii) Your application users.

Ownership

As between You and UPMC, UPMC owns the Services. Parts of the Services are subject to trademark, service mark, copyright, and/or other intellectual property rights held by UPMC Health Plan, Antares Management Solutions, and UPMC’s suppliers and vendors. Any trademark or copyright notices may not be deleted or altered in any way. UPMC's trademarks and copyrights may not be used in connection with any products or services that are not offered by or on behalf of UPMC. You acknowledge that these rights are valid and protected in all forms, media, and technologies existing now or hereinafter developed.

Termination

This Agreement is effective until terminated by either party. If You no longer agree to be bound by the Terms of Use set forth in this Agreement, You must cease Your use of the Services. If You breach or violate any provision of this Agreement, then UPMC may revoke Your Developer Credentials, in whole or in part, and refuse to provide You with access to the Services.

UPMC may terminate or deny You access to and use of all or part of the Services and APIs at any time if UPMC reasonably determines that Your access to the Services and/or APIs would present an unacceptable level of risk to the security of UPMC’s information technology systems. If such an event occurs, You may petition UPMC to receive or regain access to the Services and/or APIs by contacting UPMC.

If this Agreement is terminated for any reason, then (i) this Agreement will continue to apply and be binding upon You in respect of Your prior use of the Services (and any unauthorized further use of the Service), and (ii) any UPMC rights that, by their nature are intended to survive termination or expiration of this Agreement, shall so survive.

Privacy

For information on the personal information UPMC’s collects, how we collect such information, and why we collect personal information when You visit or use the Services or other online services, review our Privacy Statement at https://www.upmchealthplan.com/legal/privacy. The Privacy Statement explains when, why, and with whom we share that information when You use the Services or other online services. The term “personal information” used in these terms and conditions means information about an individual that identifies or describes a natural person.

Our Privacy Statement covers the UPMC Health Plan, its affiliates, and any of its or its affiliates’ online services accessible that link to the Privacy Statement.

Electronic Communications

When You send emails or other electronic messages to UPMC or in connection with the Services, You are communicating electronically and consent to UPMC’s review and analysis of such messages and to receive return communications, if any, from UPMC electronically. You agree that all agreements, notices, disclosures, and other communications that UPMC provides to You electronically satisfy any legal requirement that such communications be in writing.

Modifications to Terms of Use

UPMC may amend or update this Agreement and/or any Terms of Use at any time by notifying You of such updates by any reasonable means, including by posting the updated Agreement to the Portal. Your continued participation in the Services constitutes Your acceptance of any amended or modified Terms of Use.

Publicity

Except as expressly authorized in writing by UPMC, You may not issue a press release, advertisement, or publicity statement concerning Your participation in the Services.

General

These Terms of Use are governed by the laws of the State of Pennsylvania and the United States of America. Any litigation arising out of or in connection with Your use of the Services or these Terms of Use shall be resolved exclusively in state or federal courts located in Allegheny County, Pennsylvania. Use of the Services is unauthorized in any jurisdiction that does not give effect to all provisions of these terms and conditions, including without limitation this paragraph. You agree that no joint venture, partnership, employment, or agency relationship exists between You and UPMC as a result of these terms and conditions or use of the Services. UPMC’s performance under these Terms of Use is subject to existing laws and legal process, and nothing contained in these terms and conditions is in derogation of UPMC’s right to comply with governmental, court and law enforcement requests or requirements relating to Your use of the Services or information provided to or gathered by UPMC with respect to such use. If any part of these Terms of Use is determined to be invalid or unenforceable pursuant to applicable law including, but not limited to, the warranty disclaimers and liability limitations set forth above, then the invalid or unenforceable provision will be deemed superseded by a valid, enforceable provision that most closely matches the intent of the original provision and the remainder of the agreement shall continue in effect. UPMC’s failure to exercise or enforce any right or provision of these Terms of Use shall not constitute a waiver of the enforcement of such right or provision. Unless otherwise specified herein, these Terms of Use constitute the entire agreement between the user and UPMC with respect to the Services (excluding the use of any software which may be subject to an end-user license agreement) and it supersedes all prior or contemporaneous communications and proposals, whether electronic, oral or written, between the user and UPMC with respect to the Services. A printed version of these Terms of Use and of any notice given in electronic form shall be admissible in judicial or administrative proceedings based upon or relating to these terms and conditions to the same extent and subject to the same conditions as other business documents and records originally generated and maintained in printed form. You and UPMC agree that any cause of action arising out of or related to Services must commence within one (1) year after the cause of action arose; otherwise, such cause of action is permanently barred. The section titles in these term and conditions are solely used for the convenience of the parties and have no legal or contractual significance.