Terms of use for the website and API services

Subject

These terms govern access to the Vitalink HealthData showcase website and API services. They specify the rights and obligations of the parties, as well as the framework in which health data exchanges can take place. They apply regardless of the channel used: browser, testing tool, integration script, or gateway installed in an institution's network.

Project-specific terms are subject to a separate contract. This contract specifies the environments concerned, issued identifiers, expected volumes, maintenance windows, and technical contacts on both sides. As long as such a contract is not signed, access to API services remains limited to public documentation and test environments.

Site access

Access to the site is provided for informational purposes. We may modify or discontinue all or part of the site, including documentation, request examples, and reference pages, to reflect changes in our interfaces or regulatory obligations.

We do not guarantee continuous availability of the showcase website. It is a presentation and documentation medium, distinct from production API services, which have their own contractual commitments. If a page seems obsolete to you, write to us: documentation corrections are treated as a priority.

Use of API services

The use of API services is governed by a contract and by the access scopes defined during commissioning. Each identifier receives a role: reading blood glucose series, writing measurements from a connected watch, consulting clinical resources, or administering an institution. You agree to respect the limits of your role.

Calls are logged to allow for incident diagnosis and access traceability. Do not bypass access controls, do not share your keys between environments, and do not reuse a test identifier for a real flow. Any unauthorized use, attempt at privilege escalation, or massive data extraction may lead to suspension of access, without prejudice to the remedies provided for in the contract.

Documentation for access points, exchange formats, and return codes can be found on the pageAPI Documentation. Technical measures applied to flows can be found on the pageSecurity and encryption.

Intellectual property

The contents of the site and documentation are protected by applicable law. You may not reproduce, republish, or adapt them without written authorization. This concerns texts, flow diagrams, request examples, and field descriptions published here.

Use of the API does not transfer any ownership rights to our components. You remain the owner of the data you transmit to us and the developments made on your side; we remain the owners of the platform, interfaces, and tools we make available. Internal use within your institution, including copying excerpts into your own technical documentation, remains possible without any special procedure.

Data and privacy

The processing of personal data is described in the privacy policy, which details the legal bases relied upon, retention periods, and the rights you have.

You must not transmit real patient data via the site's forms. The forms are used to describe a project, request access, or report a problem; they do not constitute a production channel. Production data exchanges go through the channels provided for this purpose, with the identifiers issued for your institution.

Liability

Vitalink HealthData provides an integration infrastructure. We route, normalize, and secure measurements from measurement devices and connected watches to the institution's electronic record. Clinical use of the data remains the responsibility of the institution, including interpretation of values, course of action, and medical decision-making.

We provide neither diagnosis nor clinical interpretation. Our liability is limited under the terms provided for in the applicable contract, which also specifies incident reporting mechanisms, response times, and available remedies.

Modifications

We may modify these terms. The version in force is the one published on the site, with the update date indicated at the top of the page. Continued use of the site constitutes acceptance of the updated terms.

When a modification changes a client's obligations under contract — access scopes, service commitments, data processing — we inform the technical and contractual contacts of the institution concerned through the agreed channels, and not through this page alone.