Developer Agreement

1.1 API Keys

Formisoft may provide you with API credentials (e.g., API keys, client IDs, secrets) to access our services. These credentials must be kept secure and confidential.

1.2 Sandbox Access

A sandbox environment may be available for testing and development purposes. Under no circumstances may the sandbox be used with real personal, health, or identifiable data of individuals. You are solely responsible for ensuring that all data used in the sandbox is fictional or anonymized.

2.1 Regulatory and Legal Compliance

Throughout the use of the services, the Developer represents and warrants that it complies with all applicable legal and regulatory requirements in its region of operation, including but not limited to obligations concerning the collection, processing, transmission, storage, and disclosure of personal information (PII) and protected health information (PHI), as well as any other relevant frameworks.

2.2 Security and Confidentiality

You must implement and maintain reasonable and appropriate administrative, technical, and physical safeguards to ensure the confidentiality, integrity, and availability of data accessed, processed, or transmitted through the APIs.

2.3 Restrictions

You may not:

• Use the APIs in a way that violates any law or regulation.
• Use the Formisoft properties other than in accordance with the provided documentation.
• Attempt to reverse-engineer, decompile, or tamper with the APIs or underlying systems.
• Frame, distribute, resell, or share your API credentials with unauthorized parties.
• Use the sandbox or production environment with real data without proper authorization.
• Use the APIs to develop or support applications that compete with Formisoft.
• Interfere with or disrupt access to the Formisoft services by other users.

2.4 Data Use and Security

You agree to use any data accessed via the API only as authorized by users and in compliance with your own privacy policy. You must immediately notify Formisoft of any suspected or actual data breach or security incident. Formisoft may monitor API usage and audit your implementation to ensure compliance.

• End User Content: Developers will access, use, transfer, disclose, or otherwise process End User Content only as authorized by the End User and in accordance with Developer's terms with the End User.
• Security Incidents: Developers must promptly notify Formisoft of any Security Incident and share relevant findings. Developers are responsible for notifying End Users and authorities in accordance with applicable laws. Where a Security Incident originated on the Developer's side and Formisoft has no independent reporting obligation, any breach notification that references Formisoft by name requires Formisoft's prior written approval.

2.5 Confidentiality

You agree to maintain the confidentiality of any non-public information shared by Formisoft, including technical documentation, business processes, in-development features, legal, or financial information. Disclosure to third parties is not permitted without prior written consent.