Optional. This addendum applies only to practices whose owner accepts it in Align.ai (Settings, BAA & compliance). It is offered to customers located in the United States. Version AGGREGATE-DATA-USE-2026-10-1.0.
Data Use Addendum (De-identified and Aggregate Data)
This Data Use Addendum ("Addendum") supplements the Business Associate Agreement ("BAA") and the Terms of Service between CoreForge Consulting LLC ("CoreForge") and the practice accepting it ("Customer"). It applies only after Customer accepts it in Align.ai.
1. Definitions. "Customer Data" means data Customer or its users submit to Align.ai, including Protected Health Information ("PHI"). "De-identified Data" means data de-identified in accordance with 45 C.F.R. 164.514(b). "Aggregate Data" means statistics derived from the data of at least ten (10) customers that do not identify any customer, patient, or other individual.
2. Authorization. Customer authorizes CoreForge, as Customer's business associate, to (a) de-identify PHI in accordance with 45 C.F.R. 164.514(b), and (b) perform data aggregation services relating to Customer's health care operations, as permitted by 45 C.F.R. 164.504(e)(2)(i)(B).
3. Permitted uses. CoreForge may use De-identified Data and Aggregate Data to (a) produce benchmarks and statistics about practice performance, such as visit averages, rebook rates and collections per visit; (b) provide comparative benchmarks to Customer and to other customers; and (c) operate, maintain and improve Align.ai.
4. Standards. CoreForge will (a) publish no statistic derived from fewer than ten (10) customers; (b) store no customer identifier with Aggregate Data; (c) produce no patient-level or individual-level output; and (d) suppress or round small values where needed to prevent identification.
5. Prohibitions. CoreForge will not (a) attempt to re-identify any patient, individual or customer, or link De-identified Data or Aggregate Data with other information for that purpose; (b) sell PHI or Customer Data; (c) disclose De-identified Data or Aggregate Data in a form that identifies Customer; or (d) use PHI to train general-purpose artificial intelligence models. Any person CoreForge permits to receive De-identified Data or Aggregate Data will be bound by restrictions at least as protective as these.
6. Ownership. Customer retains all rights in Customer Data. De-identified Data and Aggregate Data created under this Addendum contain no PHI and are owned by CoreForge.
7. Withdrawal. Customer may withdraw from this Addendum at any time in Align.ai settings. Withdrawal is prospective: Customer's data will be excluded from benchmarks computed after withdrawal, and Aggregate Data already computed will not be recalled.
8. Survival and precedence. Sections 4 through 7 survive termination with respect to De-identified Data and Aggregate Data created before termination. The BAA's obligations to return or destroy PHI continue to apply. This Addendum supplements the BAA; if they conflict, the BAA controls, except to the extent this Addendum expressly authorizes de-identification and data aggregation.
9. Jurisdiction. This Addendum is offered to customers located in the United States. It does not apply to customers whose services are governed by CoreForge's Service Provider Agreement for Canada.
Accepting or withdrawing
The practice owner accepts or withdraws in Settings, BAA & compliance. Without an acceptance, a practice’s data is never used for benchmarks.