Terms of Use
Contents
- The Service and its data source
- Eligibility and accounts
- No PHI — not a HIPAA Business Associate
- API keys and security
- Acceptable use and quotas
- Plans, billing, and auto-renewal
- Cancellation and refunds
- Availability and changes to the Service
- Intellectual property
- Disclaimers and limitation of liability
- Governing law and disputes
- Contact
1. The Service and its data source
The Service provides programmatic access to National Provider Identifier (NPI) records sourced from the public NPPES dataset published by the Centers for Medicare & Medicaid Services (CMS), optionally enriched with Medicare enrollment (PECOS) and OIG LEIE exclusion indicators. The official CMS NPPES registry is the system of record.
We provide the data "as is." While we work to keep data current and accurate, we do not warrant that it is complete, error-free, or up to date. You are responsible for validating data before relying on it for eligibility, payment, credentialing, exclusion screening, or any other decision that affects patients, payers, or third parties.
2. Eligibility and accounts
- You must be at least 18 years old and authorized to enter contracts on behalf of the entity you represent.
- You agree to provide accurate registration information and keep it current.
- One account per person or legal entity. You may not create accounts to circumvent quota limits or other restrictions.
- We may suspend or terminate accounts that violate these Terms without prior notice.
3. No PHI — not a HIPAA Business Associate
The Service returns provider-directory information, which is public data. It is not designed to receive, store, or process Protected Health Information (PHI). You agree not to transmit PHI to the Service. VBC Risk Analytics does not act as a HIPAA Business Associate in connection with the Service, and no Business Associate Agreement (BAA) is created or implied by your use of it.
4. API keys and security
- Your API key is confidential. Keep it secret and do not embed it in public client-side code, public repositories, or shared environments.
- You are responsible for all activity under your key, including activity by authorized or unauthorized third parties who obtain access to it.
- Notify us promptly at contact@vbcriskanalytics.com if you believe your key has been compromised.
- We may rotate, suspend, or revoke a key for security reasons, suspected abuse, or violations of these Terms.
5. Acceptable use and quotas
Each plan includes a monthly request quota (Free: 1,000 · Starter: 12,500 · Pro: 125,000). Usage above your quota may be rate-limited or billed per your plan terms. In addition, you agree that you will not:
- Resell, sublicense, or redistribute raw data in bulk, or use the Service to recreate or compete with the underlying NPPES or LEIE database.
- Scrape, overload, or attempt to circumvent quotas, authentication, or rate limits.
- Use the Service for any unlawful purpose or in violation of third-party rights.
- Use the Service to make adverse employment, credit, insurance, or housing decisions about individuals without complying with applicable law (e.g., FCRA).
- Transmit viruses, malware, or any code designed to disrupt the Service.
6. Plans, billing, and auto-renewal
Paid plans are recurring subscriptions. By subscribing, you authorize VBC Risk Analytics (via our payment processor, Stripe) to charge your payment method the plan price on a recurring monthly or annual basis, depending on the billing interval you select. Your subscription automatically renews at the then-current price until you cancel.
Current pricing is shown on the pricing page. We may change prices on prospective renewals with 30 days' advance notice by email or in-product notice. Continued use after a price change takes effect constitutes acceptance of the new price.
7. Cancellation and refunds
You can cancel anytime from the billing portal. Cancellation takes effect at the end of the current billing period — you retain full access until then, and no further charges are made. The free tier requires no cancellation. Except where required by applicable law, fees already paid are non-refundable. If you believe a charge was made in error, contact us within 30 days at contact@vbcriskanalytics.com.
8. Availability and changes to the Service
We aim for high availability but do not guarantee uninterrupted or error-free service. We may add, modify, deprecate, or remove endpoints, fields, or features. Where a change is materially adverse and within our control, we will provide reasonable advance notice (at minimum 14 days) via the documentation or by email to registered account holders. Continued use after a change constitutes acceptance.
9. Intellectual property
The underlying NPPES data is published by CMS and is in the public domain. Our enrichments, API design, documentation, and software are proprietary to VBC Risk Analytics and protected by copyright and other intellectual property laws. These Terms do not transfer any ownership rights to you. You receive a limited, non-exclusive, non-transferable license to access and use the Service as permitted by your plan and these Terms.
10. Disclaimers and limitation of liability
THE SERVICE AND DATA ARE PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, ACCURACY, OR NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, TIMELY, SECURE, OR ERROR-FREE.
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, VBC RISK ANALYTICS' TOTAL LIABILITY ARISING FROM OR RELATED TO THE SERVICE — REGARDLESS OF THE THEORY OF LIABILITY — WILL NOT EXCEED THE AMOUNTS YOU PAID FOR THE SERVICE IN THE 12 MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM. WE ARE NOT LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES, INCLUDING LOST PROFITS, DATA LOSS, OR BUSINESS INTERRUPTION, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
11. Governing law and disputes
These Terms are governed by the laws of the State of Delaware, without regard to conflict-of-law principles. Any dispute arising under these Terms that cannot be resolved informally will be submitted to binding arbitration under the rules of the American Arbitration Association, conducted in the State of Delaware. Notwithstanding the foregoing, either party may seek injunctive or other equitable relief in a court of competent jurisdiction.
12. Contact
Questions about these Terms? Reach us at:
VBC Risk Analytics LLC
contact@vbcriskanalytics.com
Troy, Michigan, United States
Also see: Privacy Policy