Acceptable Use Policy

01Scope

This Acceptable Use Policy ("AUP") applies to all access to and use of the Path-iQ Services — including the web application, the iOS and Android mobile apps, APIs, and any associated tools. It supplements our Terms of Service and EULA, and any conflict is resolved in favor of the more restrictive provision.

02Permitted uses

Path-iQ is intended for qualified clinical and laboratory users. The following uses are permitted when carried out by an authorised account holder within the scope of their professional role:

• Routine histopathology workflow — case review, slide annotation, and report preparation under the supervision of a qualified pathologist.
• Second opinions and consultative review between credentialed pathologists.
• Tumor board preparation and case presentation.
• Internal quality assurance, peer review, and competency assessment.
• Teaching, training, and continuing medical education using de-identified or appropriately consented material.
• Research carried out under an ethics-approved protocol and a written Data Processing Agreement where applicable.
• Administrative tasks performed by laboratory administrators on accounts under their authority.

03Prohibited uses

You must not, and must not allow any person to:

• Use Path-iQ for autonomous diagnosis without sign-out by a qualified pathologist responsible for the case.
• Use the Services in connection with patient care outside the indications for use described in the Clinical Safety Disclaimer.
• Use Path-iQ for any high-risk decision the platform is not validated for, or in any jurisdiction where the relevant module lacks regulatory authorisation.
• Upload, share, or process patient data without a lawful basis and the appropriate consents and agreements in place.
• Attempt to re-identify de-identified data, or combine datasets in a way that would re-identify individuals.
• Use the Services to harass, threaten, or discriminate against any person, or to make decisions that violate anti-discrimination law.
• Sell, sublicense, white-label, or otherwise commercialise Path-iQ outputs outside the scope of your contract.

04Clinical responsibilities

Clinical users are responsible for:

• Confirming that the case, stain, organ system, and modality are within the validated indications for the AI assistance they are using.
• Reviewing AI output before relying on it, and applying their own professional judgement to every case.
• Signing out reports under their own name and credentials, not under another user's account.
• Escalating any suspected AI error, near-miss, or adverse event using the channels in the Clinical Safety Disclaimer.

Path-iQ does not replace a pathologist. The named, signed-out pathologist remains the decision-maker for every case.

05Security and access

You must not:

• Share your account credentials, MFA tokens, or device-bound sessions with anyone.
• Bypass, disable, or interfere with authentication, encryption, rate limits, or any other security control.
• Probe, scan, or test the vulnerability of the Services without prior written authorisation. Coordinated disclosure of suspected vulnerabilities is welcome — contact us at rahul.wasnik@pathiq.cloud with subject line "Security disclosure".
• Use Path-iQ on a device that you know to be jailbroken, rooted, or otherwise compromised in a way that defeats the platform's security model.
• Access an account, organisation, or case that you are not authorised to access.

06Content and data

You must not upload to, generate on, or transmit through the Services any content that:

• You do not have the lawful right to process — including patient data without an appropriate legal basis.
• Infringes the intellectual property, privacy, or other rights of any third party.
• Contains malware, ransomware, or any other malicious code.
• Is unlawful, defamatory, harassing, or otherwise objectionable.
• Contains personal data of children, victims, or other vulnerable individuals beyond what is strictly necessary for the clinical purpose.

07AI-specific rules

When using AI-assisted features you must not:

• Use AI outputs as the sole basis for a diagnostic decision — outputs are assistive and require pathologist sign-out.
• Apply AI modules outside their stated indications, organ systems, stains, or modalities.
• Attempt to reverse-engineer, extract weights from, or otherwise copy the Path-iQ AI models.
• Use the Services to develop a competing AI/ML diagnostic product.
• Submit prompts or inputs designed to elicit unsafe outputs, bypass safety mitigations, or produce content prohibited by this AUP.

08Mobile app conduct

Additional rules apply to use of the Path-iQ mobile apps on iOS and Android:

• Mobile is for review, communication, alerts, and lightweight annotation. Primary diagnostic sign-out should be carried out on a calibrated, regulatory-cleared display where required by your jurisdiction.
• Do not photograph the mobile screen of a case and re-share patient-identifying images outside the platform.
• Do not export, screenshot, or screen-record patient data except where your role and local policy permit it.
• Keep the operating system and the Path-iQ app updated to the latest supported version. We may block sessions on outdated or known-vulnerable builds.
• If your device is lost or stolen, revoke the session immediately via the web admin or contact your organisation administrator.

09Enforcement

If we believe a user has violated this AUP we may, depending on severity and our contractual obligations:

• Contact the user or the organisation administrator to investigate.
• Throttle or temporarily suspend access to specific features.
• Suspend the user account, the device session, or the organisation tenant.
• Terminate the account or contract under the Terms of Service.
• Preserve logs and other evidence and cooperate with law enforcement or regulators where lawfully required.
• Report a suspected clinical safety issue to the relevant regulator where reporting is required.

For serious or repeated violations — including security attacks, mass scraping, autonomous diagnostic use, or attempts to re-identify patients — we may suspend access immediately without prior notice.

10Reporting violations

If you become aware of a violation of this policy — whether by another user, a staff member, or an external party — report it to rahul.wasnik@pathiq.cloud. For suspected clinical safety issues use subject line "Clinical Safety Concern"; for security issues use "Security disclosure". Reports are treated confidentially to the extent permitted by law.

11Contact

Questions about this policy or its application to a specific use case can be sent to rahul.wasnik@pathiq.cloud.