Meridian Platform – Enterprise Terms of Service

Effective Date: March 16, 2026

These Terms of Service (“Terms”) govern access to and use of the Meridian Platform Portal (“Platform” or “Portal”), a cloud-based software platform that facilitates healthcare claims administration, plan member enrollment management, and related administrative workflows.

The Platform is made available to authorized organizations including insurance brokers, plan administrators, healthcare providers, consultant pharmacists, and other authorized participants involved in healthcare benefit administration (collectively, “Authorized Organizations”).

By accessing or using the Platform, you agree to be bound by these Terms.

1. Definitions

“Platform”

The Meridian cloud-based software system including the administrative portal and related services used to manage claims, enrollment, and communications.

“Authorized User”

An individual authorized by an Authorized Organization to access the Platform.

“Customer Organization”

A broker, plan administrator, healthcare provider organization, or other entity authorized to use the Platform.

“Protected Health Information (PHI)”

Information defined as protected health information under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and related regulations.

“Customer Data”

Data submitted to or processed through the Platform by Authorized Organizations or their users, including claim data, member information, and uploaded documents.

2. Platform Purpose

The Meridian Platform is a software-as-a-service (SaaS) system designed to facilitate administrative workflows related to healthcare benefit plans, including:

Healthcare claim submission and tracking
Plan member enrollment administration
Secure communications among authorized participants
Document management related to claims processing

The Platform does not provide medical advice, medical treatment, diagnosis, or clinical decision support.

The Platform functions solely as an administrative technology platform.

3. Eligibility and Authorized Access

Access to the Platform is restricted to Authorized Users acting on behalf of a Customer Organization.

Customer Organizations are responsible for:

Managing user permission
Ensuring only authorized personnel access the Platform
Maintaining compliance with applicable laws and regulations

User accounts are non-transferable and must not be shared.

4. Data Ownership and Roles

4.1 Customer Data Ownership

All Customer Data submitted to the Platform remains the property of the Customer Organization or its applicable data owner.

Meridian does not claim ownership of Customer Data.

4.2 Data Controller and Data Processor Roles

For purposes of data protection regulations:

Customer Organizations act as Data Controllers (or Covered Entities / Business Associates under HIPAA where applicable).
Meridian acts as a Data Processor / Service Provider, processing data solely to provide the Platform services.

Meridian processes Customer Data only in accordance with:

These Terms
Applicable service agreements
Instructions from the Customer Organization

5. HIPAA and Protected Health Information

The Meridian Platform may process information that qualifies as Protected Health Information (PHI).

Where PHI is processed:

Customer Organizations are responsible for ensuring lawful collection and disclosure of PHI.
Meridian acts as a technology service provider supporting claims administration workflows.

Where applicable, Meridian may enter into a Business Associate Agreement (BAA) with Customer Organizations to support compliance with HIPAA requirements.

Meridian implements reasonable administrative, technical, and physical safeguards designed to protect PHI and other sensitive data.

However, Customer Organizations remain responsible for:

Ensuring authorized use of PHI
Complying with applicable healthcare regulations
Controlling user access to PHI within their organizations

6. Acceptable Use

Authorized Users agree not to:

Submit fraudulent or misleading claims information
Upload unauthorized or unlawful data
Attempt to access information outside their authorized scope
Interfere with the operation of the Platform
Circumvent security controls

All user actions may be recorded in system audit logs for security, compliance, and operational purposes.

7. Communications and Messaging

The Platform includes messaging and notification tools to facilitate communications among authorized participants in the claims process.

Users agree that communications must:

Relate to legitimate claims administration activities
Be accurate and professional
Comply with applicable privacy laws and organizational policies

8. Security and Safeguards

Meridian implements commercially reasonable security safeguards including:

Role-based access controls
Encryption in transit and at rest (where applicable)
Activity monitoring and logging
Secure infrastructure hosting practices

Customer Organizations remain responsible for:

Managing user credentials
Enforcing internal access controls
Protecting devices used to access the Platform

9. Platform Availability

The Platform is provided on an “as-available” basis.

Meridian will use reasonable efforts to maintain platform availability but does not guarantee uninterrupted access.

Service interruptions may occur due to:

Scheduled maintenance
System upgrades
Security updates
External infrastructure failures

10. Limitation of Liability

To the maximum extent permitted by law:

Meridian shall not be liable for indirect, incidental, special, consequential, or punitive damages arising from the use of the Platform.

Meridian’s total liability arising out of or relating to the Platform shall not exceed the total fees paid by the Customer Organization for the services during the twelve (12) months preceding the claim.

The Platform is provided as a technology facilitation system and does not control or determine insurance claim decisions or payment outcomes.

11. Indemnification

Customer Organizations agree to indemnify and hold harmless Meridian and its affiliates from claims, damages, or liabilities arising from:

Customer misuse of the Platform
Submission of inaccurate or fraudulent data
Violations of applicable healthcare or privacy laws
Unauthorized disclosure of protected information by the Customer Organization or its users

12. Suspension or Termination

Meridian may suspend or terminate access to the Platform if:

A user violates these Terms
Unauthorized or suspicious activity is detected
Required by law or regulatory authority
Directed by the Customer Organization

Upon termination, access to the Platform may be revoked.

13. Governing Law and Jurisdiction

These Terms shall be governed by and construed in accordance with the laws of:

[State / Jurisdiction — e.g., Delaware, USA]

Any disputes arising from these Terms shall be resolved exclusively in the courts located within that jurisdiction.

14. Modifications

Meridian may update these Terms periodically.

Material updates may be communicated through the Platform or via email notification.

15. Contact Us

For any concerns or questions, please contact us at info@meridianplatform.com