Terms of Service
Effective April 22, 2026
These terms govern your use of Auth57 Labs. By creating an account, subscribing to a plan, or accessing any Auth57 API, you agree to them. If you're agreeing on behalf of a company, you confirm you have authority to bind that company.
1. What Auth57 Labs is
Auth57 Labs is a B2B platform that sells structured, verified prior-authorization (PA) rule data. Current products include:
- Cafe — PA lookup web application
- Compare — cross-state divergence engine
- Compliance — CMS-0057-F / CMS-0062-P gap analysis
- API — REST access to the PA dataset
- MCP — Model Context Protocol server for AI agents
Auth57 is a product of Automatic Delight, a US-based product studio. Where these terms say "we," "us," or "Auth57," it refers to Automatic Delight operating as Auth57 Labs.
2. Your account
You need an account to subscribe. You're responsible for keeping your credentials (including API keys) secure, for all activity under your account, and for notifying us promptly if you suspect unauthorized use. You must provide accurate information and keep it up to date.
3. Subscriptions and billing
Subscriptions auto-renew monthly or annually at the plan's listed price. You can cancel anytime through your dashboard or Stripe customer portal; cancellation stops future renewals and takes effect at the end of the current billing period. Paid subscriptions are non-refundable once billed, except where required by law.
We may change subscription pricing; we'll notify active subscribers at least 30 days before any change takes effect for them. If you don't agree, you can cancel before the new price applies.
Failed payments may suspend access until resolved. We don't issue pro-rated refunds for partial-month usage.
4. Acceptable use
You agree not to:
- Resell, sublicense, or redistribute the Auth57 dataset (bulk or in substantial extracts) as a standalone dataset
- Use Auth57 to build a directly competitive PA rule database
- Scrape, crawl, or otherwise bulk-extract data in ways designed to circumvent plan rate limits
- Share API keys across organizations or publish them publicly
- Use Auth57 to transmit Protected Health Information (PHI) or other regulated personal data. Auth57 is not a HIPAA Business Associate — see the Privacy Policy.
- Interfere with service integrity, try to compromise security, or reverse-engineer the platform
- Use the service in violation of any applicable law
5. API access and rate limits
Each plan has an API rate limit appropriate to its price tier. Published rate limits are enforced per API key. We reserve the right to throttle, suspend, or cap access if usage materially exceeds fair-use expectations for your plan, or if usage threatens service stability.
We may change rate-limit thresholds; where we reduce them, we'll notify existing subscribers.
6. Accuracy and verification
Auth57 data is drawn from publicly available regulatory sources (CMS, state Medicaid agencies, payer publications) and is human-reviewed. We maintain a continuous Watch pipeline to keep it current. We do not guarantee that any rule is complete, accurate, or up-to-date at the instant you query it.
Auth57 is a reference tool, not a clinical, legal, compliance, or payment-decision authority. Before using any Auth57 data in a patient-facing clinical decision, a coverage determination, a compliance filing, a regulatory submission, or any other decision with legal or medical consequences, you must verify the rule directly with the authoritative source. The Auth57 response includes a source_url field for exactly this purpose.
7. Your content
You retain all rights to any data you submit through Auth57 (for example, your own PA policy documents uploaded to the Compliance product). You grant us a limited, non-exclusive license to process and store that data only as needed to deliver the service to you. We do not use your submitted data to train third-party models, and we do not sell it.
8. Our intellectual property
The Auth57 dataset, platform code, design system, product names, logos, and all related work are owned by Automatic Delight and its licensors. These terms grant you a non-exclusive, non-transferable right to access and use the services during your paid subscription period — not ownership of the underlying data, software, or brand.
9. Confidentiality
Each party agrees to keep confidential information shared by the other confidential and to use it only to fulfill these terms. This includes our non-public pricing, roadmap, and technical specifications you encounter. It does not include information that is already public, independently developed, or received from a third party without restriction.
10. Privacy
Our handling of personal information is described in the Privacy Policy, which is incorporated by reference.
11. Service availability
We target high availability but do not guarantee a specific uptime SLA on standard plans. Where you require a contractual SLA, enterprise terms are available on request. Planned maintenance will be announced in advance when practical; emergency maintenance may happen without notice.
12. Termination
You may cancel your subscription at any time. We may suspend or terminate access for breach of these terms, non-payment, abuse, security risk, or extended non-use. We will give reasonable notice except where notice is not possible (for example, active abuse or a court order).
On termination, your access ends; we may retain limited records for legal, tax, and audit purposes consistent with the Privacy Policy.
13. Disclaimers of warranty
The services are provided "as is" and "as available."
We disclaim, to the fullest extent permitted by law, all warranties express or implied, including merchantability, fitness for a particular purpose, non-infringement, and any warranty arising from course of dealing or usage of trade. We do not warrant that the services will be uninterrupted, error-free, or that every data point is current at every moment.
14. Limitation of liability
Important — please read.
To the fullest extent permitted by law, in no event will Auth57 Labs or Automatic Delight be liable for any indirect, incidental, consequential, special, exemplary, or punitive damages — including lost profits, lost revenue, lost data, or business interruption — arising out of or related to these terms or the services, even if advised of the possibility of such damages.
Our total aggregate liability for any claim arising out of or related to these terms or the services is limited to the amounts you paid us for the services in the twelve (12) months before the event giving rise to the claim. If you have paid us nothing, our aggregate liability is one hundred US dollars ($100).
15. Indemnification
You agree to defend, indemnify, and hold harmless Auth57 Labs, Automatic Delight, and their officers and employees from third-party claims arising out of (a) your use of the services in violation of these terms, (b) content you submit, (c) your use of Auth57 data in a clinical, legal, or compliance decision without independent verification, or (d) your violation of law. We will promptly notify you of any such claim.
16. Changes to these terms
We may update these terms from time to time. The "Effective" date at the top shows the current version. Material changes will be announced by email to active account holders at least 14 days before they take effect. Continued use after the effective date is acceptance of the updated terms.
17. Governing law and disputes
These terms are governed by the laws of the State of California, without regard to its conflicts-of-law principles. Any dispute that cannot be resolved informally will be brought in the state or federal courts located in Alameda County, California, and you consent to the jurisdiction of those courts.
The United Nations Convention on Contracts for the International Sale of Goods does not apply.
18. Miscellaneous
- Entire agreement. These terms, together with the Privacy Policy and any signed enterprise order, are the entire agreement between us.
- Severability. If a court finds any provision unenforceable, the rest of these terms still apply.
- No waiver. Our failure to enforce a right is not a waiver of that right.
- Assignment. You may not assign these terms without our consent; we may assign them to an affiliate or in connection with a merger, acquisition, or sale of assets.
- Force majeure. Neither party is liable for delays or failures caused by events beyond reasonable control.
19. Contact
Legal notices under these terms should go to hello@auth57labs.com.