Auroa.io — Acceptable Use Policy (AUP)

Auroa.io (the "Platform") provides B2B software infrastructure for workforce compliance tracking, staff credential management, encrypted clinical logging, and automated family engagement updates. Clinical features are available only to authorized care organizations operating under applicable privacy agreements.

PHI may be entered only within Auroa features expressly designated for encrypted clinical records and only by organizations with an active Business Associate Agreement. Users must not place PHI in workforce rosters, public forms, support messages, billing records, or other fields not designated for clinical information.

• Use clinical care fields only for the resident or client associated with that record.
• Use workforce import fields only for employment, credential, and registry validation data.
• Do not export, disclose, or share protected records with unauthorized people.

The Subscriber (the "Company") and its authorized administrators, staff, and employees bear sole legal and operational responsibility for all data inputted into the system. If any employee, contractor, or user affiliated with the Subscriber places PHI outside the designated encrypted clinical features, the Subscriber is in material breach of this Agreement.

The Subscriber agrees to defend, indemnify, and hold harmless Auroa.io, its parent LLC, and its operators from any and all federal or state regulatory penalties, lawsuits, financial damages, legal fees, or operational losses arising from the Subscriber's unauthorized use or disclosure of Protected Health Information (PHI), or placement of clinical data outside designated secure fields.

By checking the agreement box and completing the Stripe checkout session, you acknowledge and certify that Auroa.io utilizes automated, modern third-party sub-processors to run its unified system architecture, including:

• Auroa Systems Private Storage & Secure User Passphrase Authentication
• Stripe Inc. (Embedded Subscription Billing & Invoicing Gateways)
• Make.com / Celonis (Automated Webhook Payload Processing Loops)
• GoHighLevel / Plivo (Asynchronous SMS and AI Customer Support Routing)

Subscriber certifies that staff will use clinical and workforce features only for their intended purposes and will follow applicable access, privacy, and security controls.