Legal
Terms of service
Effective August 13, 2026 · CuraDefend is operated by Psalm Wave LLC (“CuraDefend,” “we”).
1. The service
CuraDefend provides organizational risk, security, and compliance-support services for healthcare organizations: a reviewed Protection Assessment, issued reports, remediation planning, and the CuraDefend Monitor subscription. Specific engagements may be governed by an order form or service agreement; these terms govern the website and platform generally.
2. What the service is not
CuraDefend assessments and scores are informational risk-management tools and do not constitute legal advice, regulatory certification, or a guarantee of HIPAA compliance. You remain responsible for your organization’s legal obligations. See our Disclaimers page, which is incorporated into these terms.
3. No patient information
You agree not to submit protected health information or any patient-identifying information to CuraDefend in any field, file, or communication. The service is designed and offered on the basis that it does not receive PHI, and CuraDefend does not act as your business associate. If PHI is submitted in violation of these terms, we may quarantine and delete it and will notify your administrator.
4. Accounts and security
You are responsible for the accuracy of information your team submits, for maintaining the confidentiality of credentials, and for the actions taken under your accounts. We strongly recommend enabling two-factor authentication. Notify us promptly of suspected unauthorized access.
5. Honest input
The value of an assessment depends on truthful answers. Reviewed scores reflect the information provided; deliberately false answers void the reliability of any resulting report. “Unsure” is always an acceptable answer.
6. Fees
Assessment fees are invoiced after qualification at the rate stated on our pricing page at the time of your application. CuraDefend Monitor is billed monthly and may be canceled at any time, effective at the end of the billing period. Issued reports remain accessible after cancellation.
7. Your data
Your organization owns the information it submits and the reports issued to it. You grant CuraDefend the rights needed to operate the service — to store, process, and display that information to your authorized users and our reviewers. Our Privacy policy describes our handling in detail.
8. Acceptable use
- No attempts to access another organization’s data or to probe, scan, or test the platform’s security without written authorization.
- No submitting unlawful content, malware, or information you lack the right to share.
- No reselling or white-labeling reports without a written agreement.
9. Disclaimers and liability
The service is provided “as is” without warranties of any kind, express or implied, including fitness for a particular purpose. To the maximum extent permitted by law, CuraDefend’s aggregate liability arising out of the service is limited to the fees you paid to CuraDefend in the twelve months preceding the claim, and neither party is liable for indirect, incidental, or consequential damages. Nothing in these terms limits liability that cannot be limited by law.
10. Termination
You may stop using the service at any time. We may suspend or terminate access for material breach of these terms, with notice where practicable. Sections that by their nature survive (data ownership, disclaimers, liability limits) survive termination.
11. Changes
We may update these terms with notice on this page and, for material changes, by email to account administrators. Continued use after the effective date constitutes acceptance.
12. Contact
Psalm Wave LLC · legal@curadefend.com