HIPAA & GDPR Regulations

PostureCo does collect anonymized, de-identified analytics data, which identifies no one.

If you are a U.S. healthcare company that uses either service, it is your sole responsibility to decide whether you need a Business Associate Agreement (BAA) with PostureCo and, if you do, to request one. The BAA must be fully executed by both you and PostureCo before any protected health information (PHI) is uploaded, transmitted, recorded, or dictated, which includes before you turn on cloud backup or synchronization for records that contain PHI, before you use PostureScribe.AI with PHI, and before you invite any patient to RemoteScreen®.

This article explains, in plain language, when PostureCo has access to your data, when a BAA is available, where cloud data is stored, how PostureCo protects it, and what you accept when you use PostureCo’s services. It is informational only and is not legal advice. It does not change any agreement: the Terms of Service & End User License Agreement, the PostureCo Cloud Services Agreement, the PostureScribe.AI User Agreement, the Privacy Policy, and any executed BAA govern (see Related documents below). Please consult your own legal counsel about your obligations under HIPAA, the GDPR, and other laws.

Your data is kept on your device and is not sent to PostureCo#

PostureScreen® and its modules (LeanScreen®, SquatScreen®, SitScreen seated posture, and range of motion), and the standalone LeanScreen® and SquatScreen® apps, are local-first:

• The apps do not require personally identifiable information (PII) about you, the app user. Business details you choose to enter, such as your clinic name and business address, and your own name for customized reports and outgoing emails, are stored on the device itself.
• The patient and client information you enter, such as names, dates of birth, photos, videos, and assessment results, is stored on your device.
• PostureCo has no access to, custody of, or control over data kept only on your device (other than the de-identified analytics data described below), and cannot view, retrieve, restore, or recover it.
• Security, access, addition, removal, and monitoring of that data are the responsibility of the device owner. That includes device passcodes and encryption, the app’s security settings (see Passcode security, app lock, and report encryption), exports, independent backups, and any arrangements the owner has made with each client.
• Your device, and services you or your organization turn on for it, such as iCloud Backup, iCloud Photos, iCloud Drive, Google Drive, or Dropbox, may copy that data off the device to servers that other companies operate. Those services are not PostureCo’s services, PostureCo has no access to or control over them, and no BAA with PostureCo covers them. If you are a HIPAA covered entity or business associate (most practices that bill health insurance electronically are), you should keep PHI out of iCloud (Apple’s iCloud terms do not allow you to use it for PHI) and out of every other such service unless you use it under a business account with your own BAA with that company. For example, turn off iCloud Backup for PostureScreen, turn off “Save images to device Photos app” and “Save videos to device Photos app” in PostureScreen and keep patient photos out of the Photos app (with iCloud Photos on, they upload to iCloud; with it off, iCloud Backup can include them), and back up with PostureCo Cloud Services (Cloud Backup in the app), under a BAA we sign for U.S. healthcare practices on request, or an encrypted computer backup you control (Terms of Service, Section 7). If you work in health and fitness only and are not covered by HIPAA, these precautions are recommended but optional: whether you take them is up to you, as long as you follow any other privacy law that applies to you. If you are outside the United States, also see Outside the United States below.

When PostureCo has your data#

PostureCo stores or processes patient or client records only when you choose to:

• Use PostureCo Cloud Services (formerly known as “SyncScreen”): cloud backup, storage, and synchronization in PostureScreen, the PostureCo Cloud web portal, RemoteScreen®, and PostureRay® on PostureCo Cloud (a separate PostureRay® subscription is required). Cloud Services are optional, and nothing is uploaded to PostureCo unless you subscribe and set them up. Once they are set up, PostureScreen may upload client records automatically, for example whenever you add or edit a client or add an assessment.
• Use PostureScribe.AI®, PostureCo’s AI documentation assistant (see AI features below).
• Send records to PostureCo yourself, for example with a support request, or through a support plan that includes cloud backup. Never send PHI to PostureCo, including for support, unless a BAA is in effect, and then only through a secure method PostureCo has approved (Terms of Service, Section 8.4).

Unless you use PostureCo Cloud Services or PostureScribe.AI (or choose to send records to PostureCo yourself), PostureCo never has access to your patient or client records.

Separately, PostureCo automatically collects anonymized, aggregated technical and usage data and de-identified measurement data, such as range-of-motion angles and postural translations. This data contains no PHI, does not include names, addresses, or government ID numbers, and does not identify anyone. PostureCo uses it for product improvement, analysis, research, and artificial intelligence model development, and keeps it in its analytics system on Google Cloud.

When PostureCo stores or processes patient or client records for you in the cases above, your agreements with PostureCo also authorize it to create de-identified data from them: from PHI, only as HIPAA’s de-identification standard (45 C.F.R. § 164.514) allows and only as your executed BAA permits; from other personal information, only as applicable law and your agreements with PostureCo permit. PostureCo will not create de-identified data under this authorization from records first uploaded or submitted before October 15, 2026, unless you have affirmatively accepted (for example, by clicking to accept) a version of the Terms of Service, the Cloud Services Agreement, or the PostureScribe.AI User Agreement dated October 15, 2026 or later. PostureCo may use de-identified and aggregated data, which identifies no one, for the same purposes, and may disclose, license, or sell de-identified data (Terms of Service, Section 6; Cloud Services Agreement, Section 4.2; Privacy Policy, Section 13.4). It keeps de-identified data in de-identified form and does not try to re-identify it, except as the law permits. Otherwise, PostureCo accesses identifiable patient or client records only to provide, secure, and support the services, as you authorize, as Section 8.7 of the Terms of Service describes, or as the law requires.

Business Associate Agreements (BAAs)#

HIPAA generally requires a covered entity (or a business associate) to have a written Business Associate Agreement with a vendor that creates, receives, maintains, or transmits PHI on its behalf. PostureCo is not a business associate by default, and using a PostureCo product or service does not by itself create a BAA. PostureCo agrees to act as your business associate only under an executed BAA, and you must not provide PHI to PostureCo without one (Terms of Service, Section 8.4).

Who can get a BAA#

PostureCo enters into a BAA only with a U.S. healthcare provider, covered entity, or business associate (a “healthcare company”) that uses PostureCo Cloud Services (including RemoteScreen and PostureRay on PostureCo Cloud), PostureScribe.AI, or the cloud backup and online ViewBox included in a PostureRay technical support plan.

• Not for the mobile apps alone. PostureCo does not enter into a BAA for PostureScreen and its modules used without Cloud Services or PostureScribe.AI, because that data is kept on your device and is not sent to PostureCo, and PostureCo has no access to it (other than the de-identified analytics data described above).
• United States only. PostureCo generally enters into BAAs only with persons and organizations located in the United States. If a healthcare practitioner outside the United States wishes to use PostureCo Cloud Services, PostureCo may consider a request case by case, in its sole discretion, and has no obligation to agree. Outside the United States, it is your responsibility to ask PostureCo for any agreement your own laws require (see Outside the United States below).
• The BAA must cover the service you use. A BAA that covers only PostureScribe.AI does not cover Cloud Services, and a BAA that covers only Cloud Services does not cover PostureScribe.AI, unless it covers both (Cloud Services Agreement, Section 7.2; PostureScribe.AI User Agreement, Section 1.1).
• Fitness and wellness professionals who are not HIPAA covered entities or business associates generally do not need a BAA. Whether you need one is for you to decide.

The responsibility is yours#

It is your sole responsibility to determine whether a BAA is required for your use of PostureCo Cloud Services or PostureScribe.AI and, if it is, to request one from PostureCo. PostureCo has no obligation to ask whether you need a BAA, to offer one, or to remind you. A request alone does not create a BAA: no BAA exists until it is fully executed by both you and PostureCo, and it must be fully executed before any PHI is uploaded, transmitted, recorded, or dictated, which includes before you turn on cloud backup or synchronization for records that contain PHI, before you use PostureScribe.AI with PHI, and before you invite any patient to RemoteScreen. Because PostureScreen may upload your client records automatically as soon as Cloud Services are set up, if you are a HIPAA covered entity or business associate, you must not set up or turn on Cloud Services on any device or account that holds PHI until your BAA with PostureCo is fully executed (Cloud Services Agreement, Section 7.3). PostureCo may accept, negotiate, or decline any proposed BAA. Without an executed BAA, you must not upload, send, record, or dictate any PHI, and any PHI you upload, send, record, or dictate anyway is at your sole risk.

How to request a BAA#

Send your request through the PostureCo contact form or by email to info@postureco.com. Include your organization’s legal name, address, and authorized signatory, and say whether you use PostureCo Cloud Services, PostureScribe.AI, or both. You may send your own BAA form for PostureCo’s review or ask for PostureCo’s standard BAA. Do not include any PHI or other patient or client information in your request. The contact form, text messages, and ordinary email are not secure channels for health information.

RemoteScreen and your patients#

RemoteScreen collects information directly from your patients into your PostureCo Cloud account. If you are a U.S. covered entity or business associate, your BAA with PostureCo must be fully executed before you invite any patient to use RemoteScreen. You are responsible for the notices you give and the consents and authorizations you obtain from your patients. You are also responsible for the patients you invite: tell them not to use a VPN or other location-masking tool with RemoteScreen, and do not invite or allow any patient who is outside the United States to use the AI-Guided Health History (see AI features below). Patients can read how RemoteScreen handles their information in the RemoteScreen Patient App Privacy Policy.

What PostureCo does under an executed BAA#

Under an executed BAA, PostureCo:

• uses and discloses PHI only as the BAA permits (including, where it permits, to create de-identified data as described in When PostureCo has your data above) and as needed to provide the contracted service;
• applies HIPAA Security Rule safeguards (see How PostureCo protects cloud data below);
• reports security incidents and breaches of unsecured PHI to you without unreasonable delay and no later than 60 calendar days after discovery, or within any shorter period the executed BAA or applicable law requires;
• requires its subcontractors that handle PHI, such as AWS and its AI providers, to protect it under their own BAAs;
• supports your obligations to give patients access to their PHI, to amend it, and to account for disclosures; and
• returns or destroys PHI when the service ends, where feasible. Cloud data may be permanently deleted 30 days after your subscription ends.

The executed BAA controls over any conflicting term of PostureCo’s agreements, but only as to PHI. PostureCo is not a medical-records custodian or a system of record, so keep your own records and backups. PostureCo’s HIPAA Compliance Statement describes its HIPAA safeguards in more detail.

Where cloud data is stored (AWS, regional, GDPR)#

• Amazon Web Services (AWS). PostureCo Cloud Services’ storage, backup, and synchronization infrastructure runs on AWS, under a signed Business Associate Addendum between PostureCo and AWS. Cloud Services data, including PHI, is stored and processed in AWS services that AWS designates as HIPAA-eligible; information sent to an AI provider for the AI features is processed by that provider under its own BAA with PostureCo (PostureScribe.AI User Agreement, Section 6; see AI features below).
• Regional storage: you choose the location, and the choice is your responsibility. PostureCo uses regional AWS infrastructure. When you set up PostureCo Cloud Services, you choose, directly in the software, the location (AWS region) where your Cloud Services data is stored, from the regions PostureCo offers at the time (for example, the United States, Europe, or Asia, where offered). Choosing the correct region for where you are and for the laws that apply to you (including data-residency, data-protection, and health-information laws such as HIPAA, the GDPR, and the UK GDPR) is your sole responsibility. PostureCo has no obligation to determine, verify, or monitor where you or your patients are located, and it cannot reliably tell (for example, because someone may connect through a VPN, which the Terms of Service prohibit). PostureCo stores your data in the region you select and relies on your selection. If the software offers no choice, or you do not make one, your data is stored in the United States. PostureCo does not promise that any particular region, or a region for every country, is available, and it may add, change, or retire regions (Terms of Service, Section 8.6; Cloud Services Agreement, Section 4).
• Chose the wrong region? Contact us to move it. If you selected the wrong region, set up your data outside your country by mistake, or later need your data moved to another region, contact PostureCo support promptly once you realize it, through the contact form, by email at info@postureco.com, or toll free at 866-577-7297, and do not include any PHI or other patient information in your request. After verifying your request (Privacy Policy, Section 6), PostureCo will help: it will move your data to the region you choose from those PostureCo then offers and delete it from the region it is moved from (including any region where it was created by mistake), within a reasonable time. Copies in secure backups expire on their normal retention cycle and stay protected until then. PostureCo does not guarantee a completion time, and the affected services may be limited or unavailable while the move takes place. PostureCo does not move your data to another region on its own initiative, except as the Cloud Services Agreement (Section 4.1) allows, for example if a region is retired or becomes unavailable, or as needed to provide, secure, or support the services or to comply with law. Until the move is complete, and for any time before you tell PostureCo, you alone are responsible for your data being stored and processed in the region you selected (or in the United States, if you made no choice), including any legal consequences, and, to the extent the law allows, PostureCo is not liable for it.
• No VPNs or other location masking. You may not access or use any PostureCo service (the websites, the apps, the PostureCo Cloud web portal, RemoteScreen, PostureScribe.AI, or PostureCo’s APIs) through a virtual private network (VPN), proxy server, anonymizing network, or any other tool that hides, masks, or changes the location you connect from, including a VPN provided by your employer or practice. Doing so is a material breach of the Terms of Service (Terms of Service, Section 4). PostureCo may not be able to detect it and has no obligation to look for it, and it may block, suspend, or end access if it suspects it. You are solely responsible for every consequence of using a VPN or other location-masking tool, including using a feature where it is not available, storing data in a region that is wrong for you, and any resulting violation of law, and you are responsible for everyone who uses your account; to the extent the law allows, PostureCo is not liable for any of it.
• Redundancy. AWS stores data redundantly across multiple availability zones within the region you selected.
• Access from the United States. Whichever region you choose, PostureCo personnel and service providers in the United States may access your data as needed to provide, secure, and support the services. Where the law requires a transfer mechanism for this, PostureCo relies on one the law permits, such as standard contractual clauses.
• Physical security. AWS provides the physical and environmental security of its data centers, which have their own independent attestations (such as SOC and ISO reports). PostureCo operates no data centers of its own.

GDPR, UK GDPR, and other privacy laws#

• For patient and client data you upload, you are the controller and PostureCo is a processor acting on your instructions. A data processing agreement is available on request through the contact form or info@postureco.com.
• To the extent a U.S. state consumer-health-data or privacy law applies to that data, PostureCo acts solely as a service provider or processor on your behalf and does not sell or share it (as that law defines those terms). De-identified data, which identifies no one, is described under When PostureCo has your data above.
• PostureCo is the controller of its own account, billing, support, website, and security data, as described in its Privacy Policy.
• You are responsible for your lawful basis for processing, the notices you give, and the consents you obtain (including explicit consent for health data where the law requires it), for choosing the correct region for your data (see Regional storage above), and for determining whether you may use the services under the laws that apply to you. Where use outside the United States is allowed, it is at your own risk; PostureScribe.AI and the AI-Guided Health History may not be used outside the United States at all (see AI features below).
• Patients and clients should send requests to access, correct, or delete their records to the professional who collected them.

Outside the United States#

• Following your own laws is your responsibility. If you are a healthcare provider or other professional outside the United States and use PostureCo Cloud Services, even only to back up health information, you alone must identify and follow every law that applies to you and to your patients’ and clients’ information, such as data-protection, health-information, professional-secrecy, data-residency, health-data-hosting, and record-retention laws (Terms of Service, Section 9.5; Cloud Services Agreement, Section 8).
• GDPR terms are already included. Where the GDPR, the UK GDPR, or the Swiss Federal Act on Data Protection applies, the Cloud Services Agreement already includes data processing terms (Section 8.3) and, where Section 8.4 makes them apply, standard contractual clauses (Section 8.4), which apply, as those Sections provide, when you accept it, without a separate signature. They are not a BAA and do not cover any other requirement of your law. A separately signed data processing agreement is available on request.
• Ask for anything else before you upload. If your law requires any other agreement (including one like a HIPAA BAA), registration, notification, authorization, or certification, it is your responsibility to identify it, request it from PostureCo, and send PostureCo any document for review before you upload that information. PostureCo may accept, negotiate, or decline any request, and it does not claim that its services meet any requirement of a law outside the United States unless it confirms that in a writing PostureCo signs. Until what your law requires is in place, do not use Cloud Services for that information: using them anyway breaches the Terms of Service and is at your sole risk, even if you never sent PostureCo anything to sign, and, to the extent the law allows, you must indemnify PostureCo.

AI features#

PostureScribe.AI® and RemoteScreen’s AI-Guided Health History use artificial intelligence services from third-party providers:

• Primary provider: SpaceX AI (SpaceXAI LLC, formerly known as xAI, which provides the Grok models). SpaceX AI provides AI services to PostureCo under a signed Business Associate Agreement and with zero data retention, meaning it does not retain the data it processes for PostureCo. PostureScribe.AI uses it to transcribe your recordings and to generate the documentation you request. The AI-Guided Health History uses it for the voice intake, and PostureCo may also use other AI providers bound by a BAA with PostureCo for the intake, such as AWS (including Amazon Bedrock).
• Fallback provider for PostureScribe.AI: Amazon Bedrock, which PostureCo uses inside its own AWS account under PostureCo’s BAA with AWS (Amazon Bedrock is a HIPAA-eligible AWS service). PostureCo uses Amazon Bedrock’s zero-data-retention setting where the selected model supports it; any retention AWS requires, for example for abuse detection, stays within AWS under PostureCo’s BAA with AWS.
• No model training. Under PostureCo’s arrangements, neither provider may use PostureScribe.AI inputs or outputs to train its models.
• What is sent. PostureScribe.AI sends the AI provider the audio you record (for transcription) and the exam and assessment findings, notes, prompts, and instructions needed to produce the documentation you ask for. PostureCo designs it to send only what is needed (consistent with HIPAA’s minimum-necessary standard). Audio recordings are not kept long-term: they are deleted when you sign off on the note or generate it.
• PHI. Without an executed BAA, do not include any PHI in your recordings or other inputs. Even with a BAA, do not dictate identifiers that are not needed.
• Consent to record. Before you record or transcribe any conversation, obtain every consent the law requires (some states, such as Florida and California, require the consent of everyone in the conversation), plus any patient consent or authorization required for AI processing. Before the AI-Guided Health History starts, RemoteScreen asks the patient to confirm they are not having a medical emergency, to acknowledge that the AI does not give medical advice, and to consent to being recorded for transcription.
• Review every output. AI output can be inaccurate, incomplete, or fabricated. Review, edit, and verify everything before you use it. AI output is not medical advice, a diagnosis, or a treatment recommendation, and you remain responsible for your documentation and every professional decision.
• Changes. PostureCo may add, change, or replace AI providers or models at any time without prior notice, except where Section 8.3 of the Cloud Services Agreement or applicable law requires notice, but sends PHI only to AI providers bound by a BAA (or an equivalent subcontractor agreement) with PostureCo.
• Availability. PostureScribe.AI is available in the USA only at this time and may be used only inside the United States. Using it from outside the United States, including through a VPN or other location-masking tool, whether by you or by anyone using your device or account, is not allowed or authorized by PostureCo and, just as for the AI-Guided Health History, is a breach of the PostureScribe.AI User Agreement and the Terms of Service until PostureCo formally releases it outside the United States in the way described below for the AI-Guided Health History (PostureScribe.AI User Agreement, Section 3.2; Terms of Service, Sections 4 and 8.8). Anyone who uses PostureScribe.AI from outside the United States anyway does so entirely at their own risk and, to the extent the law allows, must fully indemnify PostureCo for that use. PostureCo’s failure to detect or block it does not excuse the breach, and PostureCo may suspend or end access to PostureScribe.AI. The AI-Guided Health History (RemoteScreen’s AI voice intake) is available in the USA only at this time. RemoteScreen posture photos and movement videos are available worldwide. The AI-Guided Health History needs Cloud Services Platinum ($49.99 USD/month) or higher plus a PostureScribe.AI subscription. Platinum includes up to 12 intakes per month, and Diamond (coming soon) up to 25. Every Cloud Services plan includes unlimited posture photo and movement video uploads, limited only by your storage.
• AI-Guided Health History: inside the United States only. The AI-Guided Health History may be used only inside the United States. Using it from outside the United States, including through a VPN or other location-masking tool, whether by you or by a patient you invite, is a breach of the Terms of Service until PostureCo formally releases it outside the United States, which it will do only by publishing updated terms or a written release notice on its website or in the services; no other statement, including one by PostureCo support or sales staff, releases it (Terms of Service, Sections 4 and 8.9). Do not invite or allow any patient or client who is outside the United States to use it; you are responsible for the patients you invite. PostureCo may block or turn off the feature and is not responsible for any use of it outside the United States. RemoteScreen posture photos and movement videos may still be sent from anywhere, subject to your own responsibilities for choosing the correct region and following the laws that apply to you.

How PostureCo protects cloud data#

When you use PostureCo Cloud Services, PostureCo’s safeguards include:

• Comprehensive data management: you can add, review, change, and remove your clients’ data with the tools in the PostureScreen app, including deleting it from your device and from PostureCo’s cloud storage (copies in secure backups are removed as backup retention cycles run). To have PostureCo delete stored data from its servers, send a notarized written request (or equivalent legal attestation) to info@postureco.com; PostureCo requires this to confirm that the request is legitimate and authorized, and deletion is subject to reasonable processing time, secure backup retention cycles, and any retention that applicable law or legal process requires. Where a law that applies to your request does not permit PostureCo to require notarization, or requires PostureCo to bear its cost, PostureCo will verify the request by another reasonable method that law permits (Privacy Policy, Section 6).
• Segmented storage: each account’s storage location is segmented from every other account, and per-practice data separation is enforced on PostureCo’s servers.
• API-request authentication: every Cloud Services user must authenticate with PostureCo’s APIs before reading from or writing to storage.
• Temporary access tokens: each signed-in session uses short-lived, practice-scoped credentials that are valid for a limited time and cannot be reused after they expire.
• Encryption at rest with AES-256.
• Encryption in transit with TLS.
• Multi-factor authentication on the PostureCo Cloud web portal, with automatic session expiry.
• Limited disclosure: PostureCo uses and discloses customer PHI only as an executed BAA permits or the law requires. PostureCo’s service providers that receive PHI act for PostureCo under BAAs with PostureCo. Other cloud data is used and disclosed only as the Cloud Services Agreement and the Privacy Policy describe.
• Limited staff access (blind storage): only a limited number of designated senior PostureCo technology staff can access the storage systems, for technology maintenance and as needed to secure and support the service. PostureCo staff do not look at your uploaded records in the ordinary course of service. PostureCo’s systems process them automatically only to provide, secure, and support the services and, where Section 6 of the Terms of Service permits, to create de-identified data (see When PostureCo has your data above).
• Logging and integrity checks: access and administrative events are logged, and cloud writes carry integrity checksums.
• Incident response: PostureCo maintains incident-response and breach-notification procedures consistent with applicable law, including HIPAA (where it applies) and the Florida Information Protection Act.

No method of transmission or storage is completely secure, and PostureCo cannot guarantee absolute security. PostureCo may change its safeguards and service providers while maintaining equivalent or better protection. Cloud Services do not replace your own independent backups. Please report a suspected security issue to info@postureco.com.

Accepting the terms, and the laws that apply to you#

• Using a PostureCo service means accepting its terms. By accessing, downloading, installing, buying, registering for, or using any PostureCo website, app, or service, you accept the Terms of Service & End User License Agreement, the product agreement for that service (such as the Cloud Services Agreement or the PostureScribe.AI User Agreement), and the Privacy Policy, and you acknowledge the HIPAA Compliance Statement, even where no click-through is shown (Terms of Service, Section 1). A patient who uses RemoteScreen only at a professional’s invitation is not a party to these agreements; the RemoteScreen Patient App Privacy Policy explains how their information is handled.
• Click to accept, and sign. PostureCo may also ask you to click to accept, for example when you sign up, when you log in to PostureCo Cloud, in the apps, and after an app update. PostureScribe.AI requires your electronic signature, and PostureCo may require one for Cloud Services. A click, checkbox, or electronic signature binds you just like a handwritten signature; if you decline, you must stop using that service, and PostureCo may restrict access until you accept.
• PostureCo cannot tell who you are. PostureCo distributes its apps worldwide through app stores and online and cannot check who downloads, buys, or uses them, what kind of professional you are (for example, a healthcare provider, covered entity, business associate, or fitness or wellness professional), where you are, or which laws apply to you; it relies on you. You must determine and follow every law that applies to you and to the information you handle, including HIPAA and similar laws elsewhere (for example, the GDPR, the UK GDPR, Canada’s PIPEDA and provincial health-information laws, and Australia’s Privacy Act; these are examples only).
• Breaking the law breaks the Terms. Using any PostureCo service in violation of a law that applies to you is a material breach of the Terms of Service: your right to use that service for that purpose ends automatically, you must stop immediately, PostureCo may suspend or end your access, and, to the extent the law allows, you must indemnify PostureCo (Terms of Service, Section 9.6).

Related documents#

• HIPAA Compliance Statement
• Terms of Service & End User License Agreement
• PostureCo Cloud Services Agreement
• PostureScribe.AI User Agreement
• Privacy Policy
• RemoteScreen Patient App Privacy Policy

Questions? Contact PostureCo through the contact form, by email at info@postureco.com, or toll free at 866-577-7297 (international: +1-866-577-7297), and never include patient information. PostureCo may update this article at any time without notice. If this article differs from an agreement listed above, the agreement governs.