Acceptable Use Policy

la plateforme Uli is a professional tool intended for healthcare establishments and their authorised staff. Use of the platform must comply with applicable legislation, medical ethics and the rules below. Any breach may result in the immediate suspension or termination of the account.

1. Strictly prohibited uses

a. Unlawful or unethical uses

• Using the platform to document, facilitate or conceal unlawful acts: fraudulent prescriptions, unlawful practice of medicine, prescribing outside the regulatory framework.
• Entering false patient information, falsifying appointments, clinical notes or any element with evidential purpose.
• Refusing, discriminating against or prioritising a patient on the basis of gender, origin, religion, sexual orientation or any other criterion prohibited by law.

b. Breaches of security and confidentiality

• Sharing a user account, password or authentication token between several persons.
• Accessing or attempting to access data beyond the permissions granted by the Clinic.
• Exporting, extracting or transmitting patient data to unauthorised systems.
• Photographing, recording the screen or publicly disseminating content containing patient-identifying data.

c. Attacks on the platform

• Attempting to bypass access controls, rate limits or security mechanisms.
• Using bots, unauthorised automated scripts, scraping or mass-extraction tools.
• Submitting malicious data (XSS scripts, injections, infected files) or introducing vulnerabilities.
• Decompiling, disassembling or reverse engineering the software.

d. Abusive uses towards patients

• Using patient contact details for commercial solicitation unrelated to care.
• Sending unsolicited messages (spam), advertising or otherwise unrelated to the care provided.
• Transmitting patient data to third parties (insurers, employers, commercial partners) without explicit consent.

2. Expected best practices

• Each Clinic staff member must have their own account, with a unique and strong password.
• Roles and permissions must be configured according to the principle of least privilege.
• The account of a collaborator leaving the Clinic must be deactivated without delay.
• Clinical notes must be factual, professional and useful to the care provided.
• Workstations used to access the platform must be up to date, protected by an antivirus and locked when unattended.

3. Reporting

Any abusive use observed, any suspicion of account compromise or any technical vulnerability must be reported without delay to support@ouli.tech. Uli undertakes to handle security reports with diligence and confidentiality.

4. Consequences of a breach

In the event of a breach, Uli may, depending on its severity:

• issue a warning to the account concerned and to the Clinic's management;
• temporarily suspend the user account or the Clinic account;
• terminate the subscription immediately, without refund;
• refer the matter to the competent authorities where the conduct constitutes a criminal offence.

5. Contact

For any question: support@ouli.tech.