Terms of Service

1. Acceptance of Terms

By using MyRHC's website or services, you represent that you are at least 18 years old and have the authority to enter into these Terms. If you are using our services on behalf of an organization, you represent that you have the authority to bind that organization to these Terms.

2. Services

MyRHC provides the following services to Massachusetts research, healthcare, and compliance organizations:

• Managed Security Services (MSSP) - 24/7 security monitoring, threat detection, and incident response
• IT Management Services (MSP) - Cloud infrastructure, networking, backup, and disaster recovery
• Web Development and Digital Marketing - HIPAA-compliant websites, patient portals, and digital platforms
• Compliance Services - HIPAA, FDA 21 CFR Part 11, SOC 2, and regulatory compliance support

Specific services, features, and pricing are outlined in individual Service Agreements executed between MyRHC and clients.

3. User Responsibilities

You agree to:

• Provide accurate and complete information when requesting services or assessments
• Maintain the security of your account credentials and promptly notify us of unauthorized access
• Use our services in compliance with all applicable laws and regulations
• Not attempt to gain unauthorized access to our systems or interfere with service delivery
• Not use our services for any unlawful, fraudulent, or malicious purposes

4. Intellectual Property

All content on the MyRHC website, including but not limited to text, graphics, logos, software, and LTFI technology, is the property of MyRHC or its licensors and is protected by copyright, trademark, and other intellectual property laws. You may not reproduce, distribute, modify, or create derivative works without our express written permission.

5. Confidentiality and Data Protection

MyRHC is committed to protecting your confidential information and complying with HIPAA, Massachusetts data privacy laws (201 CMR 17.00), and industry best practices. Our handling of your data is governed by:

• Our Privacy Policy (available at /privacy)
• Business Associate Agreements (BAA) for HIPAA-covered entities
• Service Agreements outlining specific data handling procedures
• Security policies and technical safeguards meeting industry standards

6. AI-Powered Features

MyRHC offers optional AI-powered features to assist with compliance guidance and analysis. By using these features, you agree to the following terms:

6.1 Third-Party AI Provider

AI features are powered by third-party AI providers (currently xAI Grok via OpenRouter). Your queries and interactions with AI features are processed by these third-party services according to their respective terms and privacy policies.

6.2 Prohibited Content

CRITICAL: You must NEVER submit the following to AI features:

• Protected Health Information (PHI) - Patient names, medical record numbers, diagnoses, treatment information, or any data covered by HIPAA
• Personally Identifiable Information (PII) - Social security numbers, dates of birth, financial account information, passwords, or other identifying data
• Confidential Business Information - Trade secrets, proprietary research data, or information covered by NDAs
• Sensitive Employee Information - Personnel records, disciplinary actions, or HR-related data

Violation of these restrictions may result in immediate termination of your access to AI features and potential liability for any resulting data breaches.

6.3 Consent Requirements

Before using AI features, you must:

• Explicitly opt-in to AI features through our consent process
• Confirm that you have consulted with your organization's Data Protection Officer (DPO) or compliance officer
• Acknowledge that your organization's policies permit use of third-party AI services
• Accept these updated Terms of Service

6.4 Informational Purposes Only

AI-generated responses are provided for informational purposes only and do not constitute legal, regulatory, or professional compliance advice. AI responses may contain errors, omissions, or outdated information. You should always verify AI-generated guidance with qualified compliance professionals and official regulatory sources before making compliance decisions.

6.5 Usage Logging

We log AI feature usage for audit, compliance, and service improvement purposes. Logs include metadata such as feature used, timestamp, and response time. We do NOT store the content of your prompts or AI responses.

6.6 Consent Revocation

You may revoke your AI consent at any time through your account settings. Upon revocation, you will no longer have access to AI-powered features until consent is re-granted.

7. Service Level and Availability

While we strive to provide continuous and uninterrupted service, we do not guarantee that:

• Our services will be error-free or uninterrupted
• Defects will be corrected immediately
• Our website or services will be free from viruses or other harmful components

Specific Service Level Agreements (SLAs) are outlined in individual Service Agreements with clients.

8. Limitation of Liability

To the maximum extent permitted by law, MyRHC shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to loss of profits, data, or goodwill, arising from your use of our services. Our total liability shall not exceed the amount paid by you for services in the 12 months preceding the claim.

9. Indemnification

You agree to indemnify and hold harmless MyRHC, its officers, employees, and agents from any claims, damages, losses, or expenses arising from your violation of these Terms or misuse of our services.

10. Termination

We reserve the right to suspend or terminate your access to our services at any time for violation of these Terms or for any other reason at our discretion. Upon termination, you must cease all use of our services and delete any downloaded materials.

11. Changes to Terms

We may modify these Terms at any time. Material changes will be posted on our website with an updated "Last Updated" date. Your continued use of our services after changes constitutes acceptance of the modified Terms.

12. Governing Law and Dispute Resolution

These Terms are governed by the laws of the Commonwealth of Massachusetts, without regard to conflict of law principles. Any disputes arising from these Terms or our services shall be resolved through:

• Good-faith negotiation between the parties
• If negotiation fails, binding arbitration in Boston, Massachusetts
• Courts of competent jurisdiction in Massachusetts for matters not subject to arbitration

13. Severability

If any provision of these Terms is found to be invalid or unenforceable, the remaining provisions shall continue in full force and effect.

14. Entire Agreement

These Terms, together with our Privacy Policy and any executed Service Agreements, constitute the entire agreement between you and MyRHC regarding the use of our services.

15. Contact Information

For questions about these Terms of Service, please contact us: