API Terms of Use
These API Terms supplement, and form part of, VBC Risk Analytics' Terms of Use and Privacy Policy (together, the "Agreement"). They govern your access to and use of the NPI Registry API and related documentation (the "Service"). If anything here conflicts with the master Terms specifically regarding the Service, these API Terms control. By signing up for an API key or subscribing to a paid plan, you agree to the Agreement.
1. The Service and its data source
The Service provides programmatic access to National Provider Identifier (NPI) records sourced from the public NPPES dataset published by CMS, optionally enriched with additional fields (e.g., Medicare enrollment / PECOS and LEIE indicators). The official CMS NPPES registry is the system of record. We provide the data "as is," and while we work to keep it current and accurate, we do not warrant that it is complete, error-free, or up to date. You are responsible for validating data before relying on it for eligibility, payment, credentialing, or other decisions.
2. No PHI; not a HIPAA Business Associate
The Service returns provider-directory information, which is public data — it is not designed to receive, store, or process Protected Health Information (PHI). You agree not to transmit PHI to the Service. VBC Risk Analytics does not act as a HIPAA Business Associate in connection with the Service, and no Business Associate Agreement is created by your use of it.
3. API keys and security
- Your API key is confidential. Keep it secret and do not embed it in public client-side code or repositories.
- You are responsible for all activity under your key, and for the security of credentials issued to you.
- Notify us promptly at contact@vbcriskanalytics.com if you believe your key has been compromised.
- We may rotate, suspend, or revoke a key for security reasons or for violations of these terms.
4. Acceptable use and quotas
- Each plan includes a monthly request quota (Free 1,000 · Starter 25,000 · Pro 250,000). Usage above your quota may be rate-limited or billed per your plan.
- You may not resell, sublicense, or redistribute the raw data in bulk, or use the Service to recreate or compete with the underlying database.
- You may not scrape, overload, or attempt to circumvent quotas, authentication, or rate limits.
- You may not use the Service unlawfully or in violation of third-party rights.
5. Plans, billing, and auto-renewal
Paid plans are recurring subscriptions. By subscribing, you authorize VBC Risk Analytics (via our payment processor, Stripe) to charge your payment method the plan price on a recurring monthly or annual basis, depending on the billing interval you select, and your subscription automatically renews at the then-current price until you cancel. Current pricing is shown on the pricing page. We may change prices on prospective renewals with 30 days' notice.
6. Cancellation and refunds
You can cancel anytime from the billing portal. Cancellation takes effect at the end of the current billing period — you keep access until then, and no further charges are made. The free tier requires no cancellation. Except where required by law, fees already paid are non-refundable.
7. Availability and changes to the Service
We aim for high availability but do not guarantee uninterrupted service. We may add, change, deprecate, or remove endpoints or fields; where a change is materially adverse and within our control, we'll provide reasonable advance notice in the documentation or by email.
8. Disclaimers and limitation of liability
THE SERVICE AND DATA ARE PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. TO THE MAXIMUM EXTENT PERMITTED BY LAW, VBC RISK ANALYTICS' TOTAL LIABILITY ARISING FROM OR RELATED TO THE SERVICE WILL NOT EXCEED THE AMOUNTS YOU PAID FOR THE SERVICE IN THE 12 MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM. WE ARE NOT LIABLE FOR INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES.
9. Contact
Questions about these API Terms? Email contact@vbcriskanalytics.com.