ABAIQ™ QA Suite — Terms of Use

Interim version. Effective July 12, 2026.

1. Acceptance and scope

These Terms of Use ("Terms") govern your use of the ABAIQ QA Suite (the "QA Suite"), an optional feature of ABAIQ operated by Hybreu Digital LLC ("ABAIQ," "we," "us"). By enabling, accessing, or using the QA Suite, and by electronically signing the in-app Supervision & QA Data-Sharing Consent, you agree to these Terms. These Terms apply in addition to the ABAIQ extension Terms of Use, Privacy Policy, and Security Policy. Where these Terms conflict with the extension's baseline terms as to how the QA Suite handles PHI (including the fact that the QA Suite transmits and retains PHI on a server, described in Sections 5 and 6), these Terms and the Data-Sharing Consent control for the QA Suite.

2. What the QA Suite is; human oversight

The QA Suite lets a technician (e.g., RBT) send a completed session note to a supervising clinician (e.g., BCBA) for documentation-quality review. ABAIQ runs an automated, AI-assisted evaluation on each submitted note and may draft suggested revisions. Consistent with the CASP Practice Parameters for Artificial Intelligence Use in Applied Behavior Analysis, the AI serves as a tool to support clinical work; it does not supplant it. The supervising clinician reviews each note and retains full clinical responsibility for the documentation and every clinical decision. ABAIQ does not practice behavior analysis, does not supervise, and does not make clinical, diagnostic, or billing determinations.

3. Eligibility and authority

You may use the QA Suite only if you are a behavior-analytic professional acting within a legitimate supervisory or treatment relationship, and you represent and warrant that you are authorized by your organization and by applicable law to create, disclose, and receive the client information contained in the notes you send or receive.

4. HIPAA compliance and permitted disclosure

The QA Suite is designed to operate consistent with the Health Insurance Portability and Accountability Act and its implementing regulations at 45 CFR Parts 160 and 164 (the "HIPAA Rules").

• Business Associate role. With respect to PHI processed through the QA Suite, ABAIQ acts as a Business Associate of your organization and will use and disclose that PHI only as permitted by the applicable Business Associate Agreement ("BAA"), by these Terms, or as required by law (45 CFR 164.502(e), 164.504(e)). Any subcontractor that handles PHI for ABAIQ is bound by the same restrictions.
• Permitted disclosure for treatment. Sending a note to your chosen supervisor is a disclosure for treatment, payment, or health-care-operations purposes made within your supervisory or treatment relationship, permitted under the HIPAA Rules (45 CFR 164.506). Nothing is sent automatically; you select each note and each recipient.
• Minimum necessary. The QA Suite is built to limit identifiers to the minimum necessary (45 CFR 164.502(b), 164.514(d)): only the note text and its note type, service date, client initials, and sender/supervisor identity are transmitted. Full client names are never transmitted. Connection and status metadata contain no clinical content.
• Safeguards. ABAIQ maintains administrative, physical, and technical safeguards for electronic PHI as required by the HIPAA Security Rule (45 CFR 164.308–164.312), including access controls and encryption of PHI in transit and at rest (45 CFR 164.312).
• Breach notification. Following discovery of a breach of unsecured PHI, ABAIQ will notify the affected organization without unreasonable delay and in no event later than 60 calendar days after discovery (45 CFR 164.410), as further specified in the BAA.

5. Infrastructure: PHI is processed on BAA-covered, encrypted servers

Unlike the ABAIQ extension's baseline note-writing, where content remains on your device, the QA Suite transmits PHI to and processes it on ABAIQ's server infrastructure. That infrastructure is covered by a Business Associate Agreement (Amazon Web Services), and PHI is encrypted in transit and at rest. Because the stored PHI is encrypted to render it unusable, unreadable, and indecipherable to unauthorized persons, it is treated as "secured" PHI under the HIPAA Breach Notification Rule (45 CFR 164.402; HHS encryption guidance). PHI is not stored or processed on infrastructure that is not covered by a BAA.

6. Data storage, retention, and deletion

Please note: the QA Suite retains data. This is a change from local-only note handling.

• What is retained. When you send a note, ABAIQ stores and retains the note text and its note type, service date, client initials, sender and supervisor identity, and the associated AI quality evaluation and any supervisor feedback, on the BAA-covered infrastructure described in Section 5.
• Why. Retention is necessary to deliver the review workflow (the supervisor reviews, returns, or accepts the note) and to maintain the documentation record that supervision and audit defensibility require.
• Retention period. Retained records are kept for a minimum of six (6) years, consistent with the HIPAA documentation-retention standard (45 CFR 164.316(b)(2)), and longer where the applicable BAA, your organization's instructions, or state law require it (for example, records involving minor clients may need to be retained until a number of years after the client reaches the age of majority). Absent a longer requirement, records are retained for the duration of the supervisory relationship plus six (6) years. Where the applicable BAA, your organization's instructions, or state law set a longer period, that longer period controls.
• Deletion. You or your organization may request deletion of specific records in writing to support@abaiq.ai. On termination of the relationship, retained PHI is returned or destroyed as provided in the BAA. Disconnection stops future sharing but does not recall notes already sent.

7. Alignment with the CASP AI Practice Parameters

The QA Suite is designed to be consistent with the CASP Practice Parameters for Artificial Intelligence Use in Applied Behavior Analysis. In particular:

• AI supports, does not supplant. AI assists documentation quality review; the practitioner retains full clinical responsibility and makes every clinical decision.
• Transparency. The use of AI is disclosed to you here and in-app. You remain expected, per your professional obligations, to reflect your own clinical judgment and observations in every note and to disclose AI's contribution to a work product where your ethics code requires it.
• Session-specific documentation. ABAIQ's evaluation and any suggested revisions are designed to reflect the specific encounter you documented; ABAIQ does not fabricate clinical data and does not reuse another client's or session's content.
• Client consent and opt-out (your organization's responsibility). Obtaining informed consent from clients or caregivers for AI-assisted tools — including visibility into how AI is used, its risks and benefits, and the opportunity to decline (opt-out) at any time — is the responsibility of your organization and clinician, not ABAIQ. ABAIQ provides a template authorization form to assist; it does not obtain client consent on your behalf.

8. AI limitations; no professional advice

AI-generated evaluations and suggestions may be incomplete, inaccurate, or wrong. They are drafts for a qualified human to accept, edit, or reject. The QA Suite does not guarantee that any note will be complete, compliant, reimbursable, or audit-ready, and does not provide legal, medical, clinical, or professional advice. You are solely responsible for the professional adequacy of any note you finalize.

9. Your responsibilities

• Ensure the accuracy and completeness of the notes you write, send, review, and finalize.
• Use the QA Suite within your professional scope and your organization's policies.
• Enter only the information that is clinically necessary (minimum necessary), and never PHI beyond client initials on identifier fields.
• Obtain any required client/caregiver authorization before using AI-assisted tools, as described in Section 7.
• Safeguard your credentials and access; you are responsible for activity under your account.

10. Notice of material changes, deprecation, error reporting, and support

Consistent with the CASP parameters, ABAIQ will provide reasonable advance notice of the planned deprecation of a QA model or of material changes expected to alter QA outputs, and will make available documentation to help your organization evaluate the tool's continued reliability and appropriateness. We will post any updated Terms at this page and update the effective date; continued use after an update constitutes acceptance.

Error reporting. You may report an incorrect, biased, or unexpected QA output at any time from the in-app Feedback control or by writing to support@abaiq.ai. We acknowledge reports within two (2) business days, triage first for any impact on client safety or clinical accuracy, and inform you of the outcome. Reports may be made without fear of penalty to your account.

Explainability and audit support. On written request from your organization, ABAIQ will provide documentation describing what the QA evaluation considers, the model family in use, and the known limitations of that evaluation, so your organization can assess the tool's continued reliability and appropriateness for its clients and can carry out its own monitoring and auditing responsibilities under the CASP parameters.

11. Disclaimers — provided "AS IS"

THE QA SUITE IS PROVIDED "AS IS" AND "AS AVAILABLE," WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED. TO THE MAXIMUM EXTENT PERMITTED BY LAW, ABAIQ DISCLAIMS ALL WARRANTIES, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND ANY WARRANTY THAT OUTPUTS WILL BE ACCURATE, COMPLETE, CLINICALLY ADEQUATE, COMPLIANT, REIMBURSABLE, OR THAT ANY NOTE WILL PASS AN AUDIT.

12. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, ABAIQ WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, LOST DATA, OR BUSINESS INTERRUPTION, ARISING FROM OR RELATED TO THE QA SUITE, EVEN IF ADVISED OF THE POSSIBILITY. ABAIQ'S TOTAL AGGREGATE LIABILITY FOR ALL CLAIMS RELATING TO THE QA SUITE WILL NOT EXCEED THE GREATER OF (a) THE FEES YOU PAID FOR THE QA SUITE IN THE TWELVE (12) MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM, OR (b) ONE THOUSAND U.S. DOLLARS (US$1,000). Nothing in these Terms limits liability that cannot be limited under applicable law, and this cap does not limit either party's obligations under the BAA or the HIPAA Rules.

13. Indemnification

You agree to indemnify, defend, and hold harmless ABAIQ and its owners, officers, and agents from and against any claims, damages, liabilities, and expenses (including reasonable attorneys' fees) arising from or related to: (a) your use of the QA Suite; (b) the content of the notes you create, send, or finalize; (c) your failure to obtain any required client or caregiver consent or authorization; (d) your violation of these Terms, the HIPAA Rules, or applicable law, or the rights of any third party; or (e) claims by your clients, their families, your organization, or any payer relating to your documentation or clinical decisions.

ABAIQ's indemnity. ABAIQ will likewise indemnify, defend, and hold harmless your organization from and against third-party claims, damages, liabilities, and expenses (including reasonable attorneys' fees) to the extent they arise from ABAIQ's gross negligence or willful misconduct, or from ABAIQ's breach of the applicable Business Associate Agreement, including a breach of unsecured PHI caused by ABAIQ.

Procedure. The party seeking indemnity will promptly notify the other in writing, allow the indemnifying party to control the defense with counsel of its choice, and provide reasonable cooperation at the indemnifying party's expense. Neither party may settle a claim in a way that imposes liability or an admission of fault on the other without that party's prior written consent.

14. Security

ABAIQ maintains administrative, technical, and physical safeguards appropriate to the PHI handled, including encryption in transit and at rest and access controls, and requires each party to electronically sign the Data-Sharing Consent before any PHI is transmitted. No method of transmission or storage is perfectly secure; we cannot guarantee absolute security. Breach-notification obligations are as stated in Section 4 and the BAA.

15. Suspension and termination

We may suspend or terminate access to the QA Suite for violation of these Terms or to protect the security or integrity of the service. You may stop using the QA Suite and disconnect from any supervisor at any time.

16. Governing law and disputes

These Terms are governed by the laws of the State of Florida, without regard to conflict-of-laws rules. The parties will first attempt to resolve any dispute informally by contacting support@abaiq.ai. Any dispute not resolved informally is subject to the exclusive jurisdiction and venue of the state and federal courts located in Miami-Dade County, Florida.

17. Contact

Hybreu Digital LLC ("ABAIQ")
Email: support@abaiq.ai  ·  Web: abaiq.ai