The terms your subscription turns on.

Whose name sits opposite yours

The Health Lock Solutions name belongs to Fortify 24x7 and is used by it. Fortify 24x7 is what your agreement names, what issues invoices, and what prints on statements as FORTIFY 24X7. Buy anything here and these terms apply.

Should you already hold a separately signed written agreement with Fortify 24x7 covering these same services, that document outranks this page.

What a line actually supplies

Each line provides a named vendor platform, set up and operated by Fortify 24x7 engineers, at the unit and the rate shown on its card. The keyway page belonging to a line describes what it does and where it stops, and both halves of that description form part of what you are buying.

Vendors alter their products. Where a platform gains or loses something, we keep the line delivering substantially what was described, and we tell you when a change matters.

Counts, units and arithmetic without tricks

A unit is attached to every line. Endpoints. Nodes. Mailboxes. Users. Devices. Servers. Company files. Tenants. What each of those takes in, and what it leaves outside, is written across the pricing page.

You set the counts. When the count you bought and the estate we can see stop agreeing, in either direction, you hear about it. Nothing joins your subscription until you have said yes to it.

Paying, renewing, and price movement

Charges land monthly and in advance against whatever card is lodged with Stripe. Renewal repeats monthly until stopped. A payment that bounces is attempted again, and if it keeps bouncing somebody here reaches out before any service goes dark.

Rates can move. Thirty days of email notice reaches you before a change touches your subscription, and you are free to leave inside that window instead of accepting it.

What has to come from you

Certain things only you can supply, and lines cannot work without them.

• Counts matching reality, plus a straight account of everything your estate holds.
• Administrative access where a line requires it, granted through systems you control.
• One named person able to answer a question about approvals, exceptions and scope.
• Attention when something is escalated. A machine we contained that nobody ever comes back to us about is work left unfinished.

Access, agents, and the machines we reach into

Delivering these services means putting software onto your machines and holding administrative access to platforms carrying your name. Buying the lines authorises that, and it goes toward delivering and supporting them and nothing else.

You confirm that you hold the right to authorise it for each device and account in scope. Where hardware belongs to a member of staff, that means the question has been settled with them beforehand.

The things we are not promising

This section carries more weight than the rest, so it is written without softening.

• No compliance, no certification. These lines back the technical safeguards sitting under a HIPAA security program. They do not render an organization compliant with HIPAA, HITECH, CMIA, any state health privacy statute or anything else, and nothing sold here constitutes an accreditation, an attestation or a seal.
• No promise of prevention. No control repels everything. What is for sale is reduced exposure and a competent response arriving quickly.
• No promise about hardware we cannot reach. Manufacturer-locked clinical systems frequently refuse an agent outright. Those fall outside these lines, and you will be told as much rather than find them counted quietly.
• No legal or clinical advice. Our opinions are technical. Judgements about notification, regulatory duty and patient care belong to you, your counsel and your professional training.

Health information and what stays yours

When we handle protected health information for you, Fortify 24x7 does so as your business associate, under a separate agreement covering that relationship alone. It sits beside these terms and neither one displaces the other.

Duties nobody is able to sell you stay where they are. The security risk analysis. Policies and procedures in writing. Workforce training, together with the records that evidence it. The sanction policy. Your register of agreements with other vendors. And the judgement on whether an event reaches the threshold for breach notification.

Pausing and finishing

Ending it is your call at any moment. Say so by email, or do it yourself inside the billing pages linked from your account. Charging stops once the covered period expires, and everything keeps running to that point.

We may pause or finish the arrangement where payment repeatedly fails, where the service gets used unlawfully, or where something on your side endangers other customers. Short of an emergency you hear about it first and are given room to correct it.

At the finish, agents are removed or put to sleep, and whatever the vendor platforms hold is cleared on schedules those platforms set. Where a copy of something matters to you, ask before leaving. Asking afterwards is nearly always too late.

Liability, governing law, and the remaining formalities

Liability here carries a ceiling, and the ceiling is money. Add up twelve months of your subscription charges, ending on the day the trouble began, and that figure is the limit. Indirect loss, and loss following on from something else, is not owed in either direction. Where law forbids a cap, none is claimed.

California law governs these terms, setting aside its conflict of laws rules. Should a court strike out a provision, everything else carries on.

Anything you want clarified goes to support@healthlocksolutions.com before you commit, not once you have.