Terms of Service
Last updated: June 2026. These Terms of Service (“Terms”) govern access to and use of the Aegis BioCryption platform and related services (the “Service”) operated by Grant Infra Services Inc., a company organized under the laws of the Republic of Korea, which provides the Aegis BioCryption product (“Aegis,” “we,” “us”). By creating an account, subscribing, or using the Service, you (“Customer,” “you”) agree to these Terms on behalf of your organization.
1. Eligibility and Accounts
The Service is offered solely to verified organizations (including healthcare providers, covered entities, business associates, and their authorized research partners) acting in a business capacity. The Service is not intended for consumers or for individuals acting in a personal capacity. You represent that you are at least 18 years old, are authorized to bind your organization, and that the information you provide is accurate and kept current. You are responsible for safeguarding account credentials and for all activity under your account, and must notify us promptly of any unauthorized use.
2. Description of the Service
Aegis provides a secure transfer layer that moves regulated medical imaging studies (e.g., DICOM MRI and CT) between an authorized sending organization and an authorized receiving organization, with encryption in transit and at rest, time-boxed access, independent volume metering, and a tamper-evident audit trail. Aegis provides the transfer technology only; the diagnostic interpretation, clinical decisions, and use of any data exchanged remain the sole responsibility of the parties. The Service is not a medical device and does not provide medical advice.
3. Protected Health Information; Business Associate Agreement
To the extent the Service processes Protected Health Information (“PHI”) as defined under the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations (“HIPAA”), Aegis acts as a Business Associate. A Business Associate Agreement (“BAA”) must be executed between the parties before any PHI is transmitted through the Service, and the BAA governs the permitted uses and disclosures of PHI. In the event of a conflict between these Terms and an executed BAA with respect to PHI, the BAA controls. You are responsible for ensuring you have the lawful basis, authorizations, and patient relationships necessary for each transfer.
4. Customer Responsibilities and Acceptable Use
You agree to use the Service only for lawful purposes and only to exchange data you are authorized to share. You will not: (a) upload data for which you lack authority or a lawful basis; (b) attempt to access another organization’s data; (c) reverse engineer, probe, or circumvent the Service’s security, metering, or audit mechanisms; (d) use the Service to develop a competing product; (e) introduce malware or disrupt the Service; or (f) use the Service in violation of HIPAA, HITECH, applicable state law, or export controls. You are responsible for maintaining appropriate administrative, physical, and technical safeguards within your own environment.
5. Fees and Billing
Clinical (sending) institutions use the Service at no charge. Research (receiving) institutions pay US$1 per study delivered (including 2 GB, then US$0.50 per additional GB) on a usage basis: usage is metered independently of both sender and receiver, reconcilable by either party, and totaled and billed at the end of each monthly period. There is no upfront charge and no platform subscription fee. Billing data contains no patient identifiers. Fees are charged through our third-party merchant of record and payment processor and are exclusive of applicable taxes unless stated otherwise. Except where required by law, fees are non-refundable. We may change pricing on prospective notice.
6. Licenses and Activation
Upon activation — starting a usage-based plan for research institutions, or a signed Business Associate Agreement for clinical institutions, which send for free — and any required agreements, we issue a license credential (serial) that activates your access. Licenses are non-transferable, are bound to your organization, and may be suspended or revoked for non-payment, breach, or termination. You are responsible for keeping license credentials confidential.
7. Suspension and Termination
We may suspend or terminate access immediately for non-payment, suspected security risk, violation of these Terms or the BAA, or as required by law. You may cancel your plan or stop using the Service at any time, effective at the end of the then-current billing period. Upon termination, your right to use the Service ceases, and data handling follows the BAA and our retention practices. Sections intended to survive termination (including confidentiality, disclaimers, limitations of liability, and indemnification) survive.
8. Intellectual Property
The Service, including all software, designs, and documentation, is owned by Aegis and protected by intellectual-property laws. We grant you a limited, non-exclusive, non-transferable, revocable right to use the Service while your license is active. You retain all rights to the data you submit; you grant us a limited license to process that data solely to provide the Service and as permitted by the BAA.
9. Confidentiality
Each party will protect the other’s confidential information with at least reasonable care and use it only to perform under these Terms. This obligation does not apply to information that is public through no fault of the receiving party, independently developed, or required to be disclosed by law.
10. Warranties and Disclaimers
The Service is provided “as is” and “as available.” Except as expressly stated in an executed master services agreement, Aegis disclaims all warranties, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. Aegis does not warrant uninterrupted or error-free operation. The Service does not replace professional medical judgment.
11. Limitation of Liability
To the maximum extent permitted by law, neither party will be liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits or data, arising out of or relating to the Service. Each party’s aggregate liability arising out of these Terms will not exceed the fees paid by you to Aegis in the twelve (12) months preceding the claim, except for obligations under the BAA, breaches of confidentiality, or indemnification, which are governed by the applicable agreement.
12. Indemnification
You will defend, indemnify, and hold harmless Aegis from claims arising out of your data, your use of the Service in violation of these Terms or law, or your failure to obtain necessary authorizations for a transfer.
13. Governing Law and Disputes
These Terms are governed by the laws of the Republic of Korea, without regard to conflict-of-laws principles. The parties will attempt to resolve disputes in good faith; any unresolved dispute will be subject to the exclusive jurisdiction of the courts of the Republic of Korea, unless an executed master services agreement provides otherwise.
14. Changes to these Terms
We may update these Terms from time to time. Material changes will be communicated through the Service or by email, and continued use after the effective date constitutes acceptance.
15. Contact
Questions about these Terms: contact us or email support@aegisbiocryption.com.
This document is a general template provided for transparency and does not constitute legal advice. The binding agreement is the executed master services agreement, BAA, and DPA between the parties; please have your counsel review all agreements before execution.