Skip to content
Sofya
reasoningcontinuous careintegrationssecuritynewsroomtalk to usenespt
talk to us
reasoningcontinuous careintegrationssecuritynewsroomenespt
responsible use

Terms of Use

Terms designed for clinical intelligence that supports professionals without displacing clinical judgment, the care relationship, or the rules that apply to each deployment.

Effective · August 1, 2026

The operating agreement in plain language

  • Use Sofya to organize evidence, document care, and support clinical reasoning.
  • A qualified professional must review every output before relying on it or adding it to a record.
  • Use identifiable patient data only in an expressly authorized institutional environment.
  • Do not use the public experience for emergencies or as a direct-to-patient diagnosis service.
On this page
  1. 01Agreement and scope
  2. 02Service provider and corporate identity
  3. 03Eligibility, authority, and electronic acceptance
  4. 04Clinical purpose and professional control
  5. 05Review is required before clinical use
  6. 06Transparency, provenance, and correction
  7. 07Ethical AI in the care relationship
  8. 08Patient information and authorized environments
  9. 09Your representations, notices, and recording consent
  10. 10Emergencies and direct patient use
  11. 11Validated use, regulated functions, and reporting channels
  12. 12Brazilian clinical use
  13. 13United States clinical use
  14. 14Permitted use and prohibited conduct
  15. 15Content, ownership, and feedback
  16. 16Availability, changes, and suspension
  17. 17Third-party claims caused by misuse
  18. 18Risk allocation and mandatory rights
  19. 19Notices, severability, and entire agreement
  20. 20Updates and contact
01

Agreement and scope

These Terms govern access to sofya.med, its public interactive experience, and any Sofya service that links to these Terms. “Sofya,” “we,” and “us” refer to the Sofya entity providing the applicable service. By using the service, you agree to these Terms and confirm that you have authority to do so.

A signed order form, enterprise agreement, business associate agreement, data processing agreement, research protocol, or other institutional contract controls if it conflicts with these public Terms. The intended use and regulatory status of a particular deployment are defined by its product documentation and contract, not by a marketing page or disclaimer.

02

Service provider and corporate identity

The applicable Sofya provider is the entity identified in the order form or institutional agreement. For the public site and direct relationships in Brazil, the relevant entity is Sofya Tecnologia Ltda. · CNPJ 46.163.535/0001-84 · Rua Padre Adelino, 2074, 12º andar, conjunto 121, Quarta Parada, São Paulo, SP 03303-000, Brazil.

For direct relationships in the United States, the relevant entity is Sofya AI Inc. · Florida document P25000007209 · 2 S Biscayne Blvd, Suite 2450, Miami, FL 33131, United States. A contract may identify another affiliated provider for a particular territory or service, and that identification controls for the contracted relationship.

03

Eligibility, authority, and electronic acceptance

The public clinical experience is intended for adults acting in a professional, institutional, educational, research, or authorized evaluation capacity. By accepting these Terms, you represent that you are legally able to enter this agreement and, if acting for an organization, that you have authority to bind or act for that organization within the scope of your role.

Selecting the acceptance control constitutes an electronic signature and creates a binding record of the version accepted and the time of acceptance. If you do not accept these Terms and the Privacy Policy, do not use an AI, transcription, attachment, or clinical-case function. Merely reading public editorial content does not require acceptance.

04

Clinical purpose and professional control

Sofya may organize clinical information, surface evidence, suggest possibilities, support documentation, and help a care team follow a case over time. These capabilities are designed to augment professional work.

Sofya does not independently practice medicine or issue a final diagnosis. An output becomes part of a diagnosis, prescription, treatment, prognosis, referral, discharge instruction, or medical record only after a qualified professional reviews and adopts it. The responsible professional remains in control of the decision and the communication with the patient.

05

Review is required before clinical use

AI-generated content can be incomplete, outdated, imprecise, or wrong. Before relying on an output, the user must compare it with the patient’s presentation and record, confirm material facts, check primary sources when appropriate, and apply current evidence, local protocols, contraindications, allergies, interactions, dose limits, and the user’s own professional judgment.

Do not copy an output into a medical record without review. Preserve uncertainty, provenance, clinically relevant limitations, and the distinction between observed facts, patient reports, and generated inferences. If an output conflicts with the case, applicable guidance, or professional judgment, disregard it and use the established clinical escalation path.

06

Transparency, provenance, and correction

Sofya will identify an experience as AI-assisted and, where reasonably available for the applicable feature, distinguish submitted facts from generated inferences, expose clinically relevant sources or provenance, and communicate material limitations. A citation, confidence signal, or explanation is contextual information, not proof that the output is correct or complete.

Users and institutions must provide any AI notices required for the care context and must not conceal material AI participation from patients or professionals. They must preserve a meaningful path to question, correct, override, contest, and escalate an output. Report a material error without unnecessary patient information; correction of the product does not amend a medical record controlled by a healthcare organization.

07

Ethical AI in the care relationship

Responsible use keeps patients and health professionals at the center. The person remains more important than the prediction, and efficiency must not weaken consent, dignity, equity, confidentiality, or access to human care. The patient-professional relationship remains sovereign in clinical decisions: Sofya may strengthen that relationship, but must not invisibly mediate, assume, or replace it.

  • Human autonomy: keep meaningful professional oversight and never coerce a patient or professional to accept an AI suggestion.
  • Transparency: provide understandable notice when AI materially participates, the task it performs, its clinically relevant basis, provenance, and limits, and who remains responsible, subject to the professional’s and institution’s legal duties.
  • Patient communication: diagnoses, prognoses, and treatment decisions must be communicated with appropriate human mediation; do not delegate difficult clinical conversations to the system.
  • Sovereign care relationship: preserve the professional’s independent judgment and the patient’s values, preferences, questions, and right to human dialogue; the technology must remain support for that relationship.
  • Patient choice and access: where law, institutional policy, or the nature of the workflow requires it, offer an understandable explanation and a meaningful way to seek human review or decline AI participation without improper loss of care.
  • Bias and underserved populations: identify, measure, mitigate, monitor, and correct bias, with specific attention to historically underserved populations, local languages, disability, low-resource settings, and gaps in representation; investigate unexpected disparities instead of treating them as noise.
  • Democratization with evidence: use the technology to broaden access to excellent clinical reasoning and help raise the standard of care globally, while respecting local evidence, culture, regulation, resources, and validated intended use.
  • Safety and accountability: use the service only for validated and authorized workflows, report material errors, and maintain a path for review, correction, and contesting consequential outputs.
  • Consequential decisions: do not use a Sofya output as the sole basis to deny or materially restrict care, benefits, coverage, employment, credentialing, or professional discipline where meaningful human review is required.
  • Professional integrity: do not use automation to conceal authorship, fabricate evidence, or create a record that implies an examination or decision that did not occur.
  • Professional agency: give health professionals appropriate information, training, and a way to question, override, or report the system; do not use Sofya as undisclosed surveillance of professional performance.
WHO principles for AI in health ↗UNESCO Recommendation on the Ethics of AI ↗AMA augmented intelligence principles and resources ↗
08

Patient information and authorized environments

You must have the authority, professional basis, and notices or consents required to enter patient information. Follow minimum-necessary principles and your institution’s policies. The public no-account composer is intended for synthetic or properly de-identified cases unless Sofya has expressly authorized your organization to use identifiable data there.

Audio and documents selected in the public composer are transmitted for transcription or extraction and may require transient processing outside the browser. The experience is designed not to create a persistent medical record, and clinical content is kept outside marketing analytics. Details appear in the Privacy Policy.

09

Your representations, notices, and recording consent

You represent that you have all rights, permissions, professional authority, privacy notices, and legal bases required for each input and requested action. If audio may capture a patient, companion, interpreter, professional, or other person, you are responsible for informing all participants and obtaining every consent or authorization required by the applicable jurisdiction and institution before recording or transcription begins.

Do not submit information about a minor, dependent person, genetic relative, communicable condition, or another person unless you are authorized to do so and the environment is approved for that use. You are responsible for the quality, legality, and relevance of the input and for correcting an inaccurate transcript before relying on it.

10

Emergencies and direct patient use

The public site is not an emergency service and must not be used to obtain time-critical assistance. In an emergency, contact the local emergency service or follow the institution’s emergency protocol.

Unless a deployment is expressly designed, authorized, and labeled for patient use, Sofya is a professional support tool and not a substitute for a consultation with a licensed clinician. Patients should not start, stop, or change treatment based only on generated content.

11

Validated use, regulated functions, and reporting channels

Use only the modalities, populations, indications, territories, workflows, and integrations expressly documented for the applicable feature. Do not infer authorization for autonomous diagnosis, medical-image interpretation, laboratory or genetic analysis, dosing control, patient monitoring, or another regulated function from the availability of a general text, audio, or document capability.

The public composer, contact address, and feedback tools are not adverse-event, product-complaint, pharmacovigilance, emergency, or mandatory incident-reporting channels. Use the legally designated channel and institutional escalation process. You may also notify Sofya of a product-safety concern, but that notice does not replace any report required by law.

12

Brazilian clinical use

In Brazil, use must remain within the professional’s legal scope and the institution’s governance. Consistent with CFM Resolution 2,454/2026, AI supports clinical practice while the physician retains final responsibility for clinical, diagnostic, therapeutic, and prognostic decisions and critically reviews the result against the case, evidence, and good practice.

A software function’s regulatory treatment depends on its intended purpose and actual operation. Nothing in these Terms represents that every Sofya configuration has the same classification or authorization. Use only the features, indications, and environment approved for the applicable deployment.

CFM Resolution 2,454/2026 ↗
13

United States clinical use

In the United States, users must act within applicable licensure, scope-of-practice, institutional, payer, federal, and state requirements. Where Sofya handles protected health information on behalf of a HIPAA covered entity or business associate, the applicable business associate agreement and institutional contract govern that processing. Do not submit PHI through a public or consumer-facing experience that is not expressly covered by those agreements.

FDA treatment of clinical decision support depends on the software function, intended user, intended use, and whether the health professional can independently review the basis for a recommendation. Access to Sofya does not by itself state FDA clearance, approval, or non-device status. Use each deployment only within its documented intended use and applicable regulatory permissions.

HHS guidance for business associates ↗FDA Clinical Decision Support Software guidance ↗
14

Permitted use and prohibited conduct

You may use the service for lawful clinical, operational, educational, research, evaluation, or institutional purposes within the access and rights granted to you. You are responsible for the legality and accuracy of what you submit and for actions taken from the output.

  • Do not submit data you are not authorized to process or attempt to identify a de-identified person.
  • Do not use the service to discriminate unlawfully, manipulate a patient, impersonate a professional, fabricate care, or evade required human review.
  • Do not probe, disrupt, overload, bypass security, introduce malicious code, or access another person’s organization, patient, encounter, or credentials.
  • Do not reverse engineer or extract models, prompts, software, or protected content except where a non-waivable law expressly permits it.
  • Do not present generated content as independently verified, as Sofya’s medical opinion, or as a regulatory authorization.
15

Content, ownership, and feedback

You retain the rights you have in content you lawfully submit. You grant Sofya the limited rights needed to process that content, provide the requested function, protect the service, and meet legal obligations. Institutional agreements may define additional processing instructions.

Sofya and its licensors retain rights in the service, software, interfaces, models, documentation, and brand. If you provide product feedback, Sofya may use it without identifying a patient or disclosing your confidential information.

16

Availability, changes, and suspension

We may improve, limit, or discontinue public features and may suspend access when reasonably necessary for security, legal compliance, patient safety, service integrity, or breach of these Terms. Clinical organizations should maintain appropriate downtime and fallback procedures rather than make care depend on uninterrupted availability.

17

Third-party claims caused by misuse

To the extent permitted by law, a user acting for professional, business, or institutional purposes will defend and indemnify Sofya and its affiliates, officers, personnel, and service providers against a third-party claim, and reasonable resulting costs, to the extent caused by the user’s unauthorized patient data, failure to obtain required recording or privacy consent, unlawful or prohibited use, material breach of these Terms, or clinical action taken without the required professional review.

This obligation does not apply to the extent a claim was caused by Sofya’s fraud, willful misconduct, gross negligence, violation of non-waivable law, or breach of an applicable signed agreement. Sofya will provide reasonable notice and cooperation, and no settlement may admit fault or impose a non-monetary obligation on an indemnified party without its consent.

18

Risk allocation and mandatory rights

To the maximum extent permitted by law, public and evaluation features and their outputs are provided “as is” and “as available,” without warranties of accuracy, completeness, fitness for a particular patient or purpose, non-infringement, uninterrupted availability, or error-free operation. Sofya is not responsible for a decision made contrary to these Terms, an unreviewed output, an inaccurate input or transcript, a third-party service, or a use outside documented intended use.

To the maximum extent permitted by law, Sofya will not be liable under these public Terms for indirect, incidental, special, exemplary, punitive, or consequential damages, lost revenue, lost data, substitute services, or interruption of business. Sofya’s aggregate liability arising from the public no-account experience will not exceed the greater of US$500 or the amount the claimant paid Sofya for that experience during the preceding 12 months.

These limits do not exclude liability that cannot lawfully be excluded, including mandatory consumer rights or liability arising from fraud, willful misconduct, gross negligence where non-waivable, or another non-waivable duty. For contracted services, the signed agreement controls warranties, service levels, indemnities, liability limits, governing law, and disputes.

19

Notices, severability, and entire agreement

Sofya may provide legal notices electronically through the service, the website, or an address supplied in a contracted relationship. If any provision of these Terms is unenforceable, it will be limited to the minimum extent necessary and the remaining provisions will continue in effect. Delay in enforcing a provision is not a waiver.

These Terms, the Privacy Policy, and any incorporated or signed documents are the entire agreement for the covered public use and supersede prior statements about that use. Headings and summaries aid reading but do not narrow the operative text. The user may not assign these Terms without Sofya’s consent; Sofya may assign them as part of a reorganization, financing, or transfer of the relevant business, subject to applicable law.

20

Updates and contact

We may update these Terms to reflect changes in the service, law, or clinical governance. We will post the revised effective date and provide additional notice when required. Continued use after an effective update means acceptance where permitted by law.

Questions about these Terms, responsible use, or the correct institutional environment may be sent to privacy@sofya.ai. Do not include patient information that is not necessary for the request.

Related documentRead the Privacy Policy →
Contact legal →

Medicine is decision.

Every consultation makes the next one better.

Sofya

A second clinical look during the consultation and between visits.

platformreasoninginteroperabilityinstitutional deployment
contentpublicationsnewsroom
trustsecurityterms of useprivacy
companybrandcontact
© 2026 sofya · são paulo · miami · www.sofya.medenespt
Privacy under your control.

We use optional measurement to improve the site and test experiences. Nothing beyond the essentials loads without your permission.