BUILD v1.3.0 LTS SECURED • LAST REVISED: OCTOBER 2025

verified DATA SOVEREIGNTY & LEGAL PROTOCOLS

Privacy Policy & Terms of Service

Institutional data custody protocols, on-premises patient confidentiality commitments, and local workstation licensing terms for Hospital Billing Pro v1.3.0.

Architectural Mode

dns 100% Air-Gapped / LAN Native

Zero multi-tenant cloud storage. PHI never leaves hospital premises.

§ 01.00 Core Principle

Institutional Data Sovereignty Principle

lock

verified_user

Absolute Zero-Cloud Mandate

Hospital Billing Pro does not collect, transmit, store, or process protected health information (PHI) or hospital financial ledgers on third-party remote cloud servers. All patient demographic, diagnostic, and financial records reside exclusively on hospital hardware and client-controlled local area network (LAN) nodes.

1.1 Local Storage Guarantees: All database operations, including MSSQL, SQLite, or PostgreSQL clinical schema engines utilized by Hospital Billing Pro, operate strictly within the storage partitions provided by the licensee’s local workstation or hospital-managed data centers.

1.2 No Shadow Cloud Replicas: No automated backups are synchronized with any server owned, leased, or managed by Hospital Billing Pro Technologies Inc. Backups, archive rotations, and disaster recovery procedures are governed wholly by the healthcare facility's designated Chief Information Officer or IT Administrator.

1.3 Cryptographic Isolation: Financial records, charge masters, and patient balances remain encrypted at rest using local machine keystores that are inaccessible to software maintenance personnel without on-site credential authorization.

Air-Gapped Workstation Certification Compatible with ISO/IEC 27001 segregated network segments

NETWORK_IO: 127.0.0.1 / LOCALHOST ONLY

§ 02.00 Network Communications

Local Telemetry & Communication Scope

cell_tower

The software is engineered under a principle of absolute silence. Zero background patient telemetry, diagnostic metadata, or billing volume numbers are ever transmitted over external public networks.

vpn_key Permitted Outbound Scope (Explicit)

The only external network communications permitted are point-to-point, user-initiated cryptographic license validation handshakes with the primary licensing broker (`auth.hospitalbillingpro.com`) to activate perpetual multi-seat licenses.

Payload: [Hashed Serial + Workstation UUID]

support_agent On-Demand Support Handshakes

Technical diagnostic sessions require manual, explicit administrator override via dual-factor authenticated diagnostic portals. No persistent reverse-tunnels or permanent maintenance backdoors exist in the compiled binary.

Requires Operator Consent Token

2.3 EDI Transmission Boundary Note:

When utilizing integrated EDI 837/835 institutional claims generation, file outputs are written to local directory paths specified by the billing supervisor. Routing such files to insurance clearinghouses is governed by the hospital’s secure SFTP tunnels and falls under the hospital’s primary payor agreements.

§ 03.00 Jurisdictional Governance

Data Controller vs Data Processor Mandates

balance

Under applicable national and international healthcare data privacy statutes—including HIPAA, HITECH, GDPR (Health Provisions), and institutional health confidentiality laws:

ROLE A

Healthcare Institution as Sole Data Controller & Custodian The hospital or clinical network retains exclusive, unencumbered rights, title, and ownership of all medical records, inpatient admissions data, billing ledgers, and insurance claim registers. You establish retention periods, patient disclosure rights, and access control policies.

ROLE B

Hospital Billing Pro as Software Vendor / Non-Possessor Hospital Billing Pro acts purely as a software publisher and tool provider. We have neither physical nor electronic possession of your data keys. We are not a cloud host, not an intermediary clearinghouse, and not a sub-processor of confidential records.

§ 04.00 Desktop Architecture

Terms of Use & Local Software License

description

4.1 Grant of Perpetual Local License: Upon purchase and execution of an enterprise contract, Hospital Billing Pro Technologies Inc. grants the licensee a non-exclusive, non-transferable, perpetual right to install and run the Hospital Billing Pro binary on the agreed number of designated hospital workstations and LAN server environments.

4.2 Reverse Engineering & Source Integrity: Licensee shall not decompile, disassemble, reverse engineer, or create derivative works from the application binaries, DLL assemblies, or database schema definitions, except to the minimal extent permissible by statutory law for local interface interoperability.

4.3 No Embedded Online Payment or Subscription Billing: The desktop software is a complete institutional management platform. It does not enforce recurring cloud software-as-a-service billing within the UI, contains zero consumer credit card payment processing modals, and does not require third-party subscription gateways to remain operational.

4.4 High-Availability & Redundancy: Hospital IT departments are authorized to deploy hot-standby nodes across identical hardware environments within the same physical hospital campus for disaster failover redundancy without incurring secondary seat penalties.

§ 05.00 CLIENT ACTION REQUIRED

Notice on Missing / Unconfirmed Policies

notification_important

flag Institutional Policy Finalization Notice

Note for Hospital Administration: Refund terms, statutory governing jurisdiction, and institutional arbitration rules are finalized upon mutual execution of the formal Software Deployment Agreement with our enterprise team.

Due to regional variations in hospital network procurement regulations across state and international jurisdictions, standardized consumer-grade dispute clauses are replaced with custom Enterprise Master Service Agreements (MSAs) tailored to your institution’s compliance framework.

Ready to draft your institution's custom SLA? Consult directly with our deployment engineers and legal counsel.

outgoing_mail Request Custom MSA Draft

policy

Compliance Standards Alignment Matrix

REV 2025-Q4

check_circle HIPAA Security Rule 45 CFR Part 160 & Part 164 Subparts A & C verified. Physical & workstation audits compliant.

check_circle HITECH Act Standard Enforces zero external data breaches through complete air-gap cryptographic isolation.

check_circle ICD-10 & CPT Strictness Static bundled validation engine. Coding lookups execute with zero live web latency.

draw

Institutional Procurement Officers & Legal Counsel

Request our comprehensive Security Whitepaper, Data Flow Topology Diagrams, and standard BAA (Business Associate Agreement) addendum.

email enterprise@hospitalbillingpro.com call +91 7987429087