Acceptable Use Policy

1. Purpose and scope

This Acceptable Use Policy (“Policy”) sets out rules the Client and all users must follow when using Saitooth. It supplements the Terms and Conditions of Use and the Data Processing Agreement. Accessing and using the platform constitutes acceptance of this Policy. Each authorized user is responsible for their actions; the Client manages its organization's users, permissions and credentials.

2. Permitted use

The platform must be used to manage dental clinical records and related functions within the Client's organization, with authorization to process all entered data.

3. Prohibited use

The following are prohibited:

• —Sharing accounts or passwords between users.
• —Accessing patient data without authorization.
• —Attempting to access another organization's data.
• —Scraping, data mining or bulk content extraction.
• —Reverse engineering, decompiling or copying source code.
• —Abusing the API, including unauthorized automated access.
• —Introducing malware, viruses or harmful code, or attacking the platform.
• —Using the platform unlawfully or contrary to applicable regulations.
• —Uploading or processing personal data without authorization to act as Controller.
• —Conducting or publishing service performance tests without prior written authorization.
• —Conducting security testing, including network discovery, port and service identification, vulnerability scanning, password cracking, remote access testing or penetration testing, without prior written authorization.
• —Licensing, selling, renting, transferring, assigning, distributing, hosting, subcontracting or making services available to third parties without express authorization.

4. Credentials and confidentiality

• —Each user must use their own individual credentials.
• —The Client is responsible for keeping its organization's access credentials confidential.
• —The Client must immediately notify Saitooth of unauthorized access or suspected credential compromise.

Access device and network security: the Client alone is responsible for securing devices (computers, phones and tablets) used to access the platform. The Client agrees to avoid unsecured public Wi-Fi when processing patient information and to use biometric locks or strong device passwords. Saitooth is not responsible for interception, credential theft or leaks resulting from Client negligence in public environments or shared networks.

5. Consequences of noncompliance

Breaching this Policy may result in account suspension or termination under the Terms and Conditions, without prejudice to applicable legal liability.