← Back to site
Demo software — do not upload real patient or client data.

Independent of full HIPAA compliance, the Service does already maintain an append-only audit log of access to records flagged as containing patient/case data (actor, IP address, timestamp, and action), retained for 365 days — see Privacy Policy below.

Demo Status & No-PHI Notice

Last updated September 3, 2026

Pont AI ("we," "us," "Pont AI") is currently offered as a demonstration / pre-launch product. This notice describes our actual current state of compliance and security, and it controls over any general or aspirational statement made elsewhere on this site if the two conflict.

What "demo" means here

  • The Service is provided for evaluation, testing, and demonstration purposes only.
  • We have not completed a HIPAA Security Rule risk analysis, and we do not currently represent that Pont AI is HIPAA compliant.
  • We have not signed a Business Associate Agreement (BAA) with any customer, and we do not currently have BAAs in place with all of our infrastructure, storage, or AI subprocessors.
  • Our infrastructure has not been audited or certified to a HIPAA-grade, SOC 2, or equivalent standard.
  • Account authentication is currently username/password only. We have not implemented multi-factor authentication or the assurance levels described in NIST SP 800-63B as AAL2 or AAL3.
Do not upload, enter, or transmit real Protected Health Information (PHI), real personally identifiable client information, or any other real, sensitive data belonging to an actual patient, plaintiff, or client. Use only fictitious names and synthetic/sample documents when evaluating the Service.

What changes when we exit demo status

Before we accept real PHI or real client case data in production, we intend to: complete a HIPAA risk assessment and implement required administrative, physical, and technical safeguards; execute BAAs with covered entities/business associates and with our own relevant subprocessors; and roll out stronger authentication (at minimum, optional MFA). Until we publish an update to this notice stating otherwise, assume none of that is true yet.

Your responsibility

If you use the Service anyway to input real, sensitive information, you do so at your own risk and against our explicit instruction not to. You remain solely responsible for determining whether use of the Service is appropriate for your data and for complying with any law or professional obligation that applies to you.

Terms of Service

Last updated September 3, 2026

These Terms of Service ("Terms") govern access to and use of the Pont AI platform (the "Service"). By creating an account or using the Service, you agree to these Terms on behalf of yourself and, if applicable, the organization you represent ("Customer," "you").

The Service

Pont AI is a case-management platform intended to help law firms, medical providers, and their clients/patients organize case records, documents, tasks, and communications on a shared, access-controlled record. The Service is currently offered in demo status — see the Demo Status & No-PHI Notice above, which forms part of these Terms.

Accounts & authorized users

  • You must provide accurate account information and keep your credentials confidential.
  • You are responsible for all activity under your account and for the conduct of any user your organization's administrator invites onto the Service.
  • Your organization's admin controls role assignment and access levels for your organization's own users; we do not adjudicate internal staffing decisions.

Acceptable use

You will not, and will not permit any user to:

  • Use the Service for any unlawful purpose, or in a way that violates a third party's rights;
  • Attempt to gain unauthorized access to another organization's data, another user's account, or any part of the Service not made available to you;
  • Upload malware, or attempt to probe, scan, or test the vulnerability of the Service without our prior written authorization;
  • Reverse engineer or attempt to extract the source code of the Service, except to the extent applicable law expressly permits it;
  • Upload real PHI or real client/case data in violation of the Demo Status & No-PHI Notice above;
  • Interfere with or disrupt the integrity or performance of the Service, or attempt to circumvent its access controls.

Customer data & your responsibilities

Customer retains all right, title, and interest in the case files, documents, and other content it uploads to the Service ("Customer Data"). You are solely responsible for determining whether your use of the Service complies with your own professional, ethical, and legal obligations — including, for legal customers, applicable rules of professional conduct, and for healthcare-adjacent customers, applicable healthcare privacy law.

Fees & suspension

Where the Service is offered under a paid subscription, fees and billing terms will be set out in an order form or invoice. We may suspend or terminate access for breach of these Terms, non-payment, or if we reasonably believe continued access poses a security or legal risk (including continued upload of real PHI in violation of the Demo Status Notice).

Intellectual property

We and our licensors own the Service itself — its software, design, and underlying technology. Customer Data remains Customer's. As between us, Customer owns the output the Service generates from Customer's own data, to the extent permitted by applicable law and subject to the rights of any underlying third-party AI provider whose model produced it.

Confidentiality

Case files, medical records, client communications, documents, and other information uploaded to or processed through the Service are Customer's confidential information. We will use reasonable measures to protect it and will not disclose it except as necessary to provide the Service, as this Customer instructs, or as law requires.

Disclaimers

THE SERVICE IS PROVIDED "AS IS," WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. GIVEN ITS CURRENT DEMO STATUS, WE DO NOT WARRANT THAT THE SERVICE IS SECURE, ERROR-FREE, OR SUITABLE FOR ANY PARTICULAR REGULATORY ENVIRONMENT.

Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, NEITHER PARTY WILL BE LIABLE FOR INDIRECT, INCIDENTAL, CONSEQUENTIAL, SPECIAL, OR PUNITIVE DAMAGES, OR LOST PROFITS OR REVENUE, ARISING FROM THE SERVICE. OUR AGGREGATE LIABILITY ARISING OUT OF OR RELATED TO THESE TERMS WILL NOT EXCEED THE FEES YOU PAID US FOR THE SERVICE IN THE TWELVE MONTHS PRECEDING THE CLAIM (OR, DURING FREE DEMO USE, ZERO).

Indemnification

You will indemnify us against claims arising from your unlawful use of the Service, your violation of these Terms, or content you upload in violation of the Demo Status & No-PHI Notice. We will indemnify you against claims that the Service itself, as provided by us, infringes a third party's intellectual property rights.

Governing law & disputes

These Terms are governed by the laws of the jurisdiction specified in your order form, or, absent one, the State of Delaware, without regard to conflict-of-law rules. Disputes will be resolved in the courts located in that jurisdiction, unless a separately signed agreement between us specifies arbitration.

Changes

We may update these Terms from time to time. We will update the "Last updated" date above; continued use after an update constitutes acceptance.

Privacy Policy

Last updated September 3, 2026

This Privacy Policy explains what personal information Pont AI collects, how we use it, and the choices you have. It applies to visitors of our marketing site and users of the Service.

Information we collect

  • Account information — name, email, phone, organization, role, and login credentials.
  • Case & document content — case records, documents, notes, and messages you or your organization upload to the Service, which may include health information if you choose to upload it (see the Demo Status Notice above — please don't use real PHI while we're in demo status).
  • Usage information — pages viewed, actions taken within the Service, IP address, browser/device type, and timestamps, collected for security and troubleshooting purposes.

We do not currently use third-party advertising or analytics cookies on this marketing site. If that changes, we will update this policy before doing so.

How we use information

  • To provide, maintain, and secure the Service;
  • To authenticate users and enforce access controls;
  • To respond to support requests and communicate with you about the Service;
  • To detect, investigate, and prevent fraud, abuse, or security incidents.

How we share information

The Service, including its database and document storage, runs as a self-hosted stack — we do not use a separate third-party storage company (e.g., a distinct "cloud storage" vendor) to hold your documents. The one infrastructure subprocessor in this category is whoever hosts the underlying server(s) the Service runs on. Where a customer uses the Linda AI feature, case content is also shared with our AI model provider (see AI Disclaimer & Data Use below). We do not sell personal information. We may disclose information if required by law or to protect the rights, safety, or property of Pont AI or others.

Access logging

The Service maintains an append-only audit log of access to records flagged as containing patient or case data — recording the actor, IP address, timestamp, and action taken — retained for 365 days. This log cannot be edited or deleted through normal application use. This is a real, already-implemented safeguard, separate from and not a substitute for full HIPAA compliance (see the Demo Status & No-PHI Notice above).

When the Service marks a consent request as "signed," this means the patient, while logged into their own patient portal account, reviewed the consent template text and clicked to approve it — an electronic acknowledgment captured with a timestamp. It is not a certified, notarized, or vendor-processed electronic signature (we do not use a dedicated e-signature product such as DocuSign or Adobe Sign), and it does not involve a drawn or typed signature image. Staff may also record a consent obtained by other means (for example, on paper or by phone) directly in the Service on the patient's behalf.

Data retention & deletion

We retain Customer Data for as long as your organization's account is active, plus a reasonable period afterward to allow for export or as required by law. You may request deletion of your account or case data by contacting us; deletion from active systems is generally completed within a reasonable time, though residual copies may persist briefly in backups until they age out.

Your rights

Depending on where you live, you may have rights to access, correct, or delete your personal information, or to object to certain processing. To exercise these rights, contact us using the details below. We have not yet built self-service tooling for automated data-subject requests during this demo phase; requests are currently handled manually.

Children's data

The Service is not directed to children, and we do not knowingly collect personal information from children under 13 (or the relevant age of digital consent in your jurisdiction) through our marketing site.

Changes to this policy

We may update this Privacy Policy from time to time; the "Last updated" date above reflects the most recent revision.

Contact

Questions about this policy can be directed to the contact listed in the site footer.

AI Disclaimer & Data Use

Last updated September 3, 2026

Certain features of the Service ("Linda AI" and similar features) use third-party generative AI models to summarize, answer questions about, or otherwise process content you upload.

AI output is not guaranteed

AI-generated output may be inaccurate, incomplete, outdated, or misleading. It should not be relied on without human review. You are solely responsible for reviewing and independently verifying any AI-generated output before using it in connection with a legal, medical, financial, or other professional decision. We do not guarantee the accuracy, completeness, or reliability of AI-generated output.

What data goes to our AI provider

When you use an AI-assisted feature on a case, the documents and messages associated with that case may be sent to our third-party AI model provider (currently Google, via its Gemini API) so that it can answer questions about that content. We do not send data to the AI provider except when a user on that case actively uses the AI feature. We also have credentials configured for a second AI provider, OpenRouter, as infrastructure for future features; as of this writing no feature sends data to it, and we will update this page before that changes.

Model training

We do not use Customer Data to train our own generalized AI models. Our understanding of our current AI provider's terms is that API-submitted content is not used to train their models, but you should not treat that as a guarantee independent of the provider's own published terms, which can change. We will update this section if our architecture or provider changes in a way that affects this.

Data retention with the AI provider

Files and conversation content sent to the AI provider are retained by that provider only as needed to service the request, subject to the provider's own data-handling terms. We do not currently have a signed Business Associate Agreement with our AI provider — another reason not to submit real PHI to the Service while it remains in demo status.

Not Medical Advice

Last updated September 3, 2026

The Service is not a substitute for professional medical advice, diagnosis, or treatment, and is not intended for use in emergency medical situations. If you are experiencing a medical emergency, call your local emergency number immediately.

  • Any AI-generated or automatically generated summary of medical records or documents should not be relied upon as a diagnosis or treatment recommendation.
  • The Service processes healthcare-related information for legal case-management workflows — it does not itself provide healthcare services.
  • Always seek the advice of a qualified physician or other healthcare provider with any questions about a medical condition.

Photo Credits

Last updated September 4, 2026

Photography on our marketing site is sourced from Unsplash and used under the Unsplash License. Attribution is not legally required by that license, but we credit each photographer below as a courtesy.