Browser Extension Terms and Conditions (Schedule B)

Scribeable Browser Extension - Supplemental Terms

Last Updated: February 5, 2026

IMPORTANT: EHR DATA ACCESS DISCLOSURE The Scribeable Browser Extension interacts with your Electronic Health Record (EHR) system by accessing web page content within your browser. This means the extension can read clinical data displayed in your EHR, including patient information. By installing and using this extension, you acknowledge that: (a) the extension accesses EHR data in your browser to facilitate note transfer; (b) you are responsible for ensuring your organization's IT policies permit browser extension use with your EHR; (c) you must comply with all applicable HIPAA, state privacy, and EHR vendor policies regarding third-party access to patient data; and (d) data accessed by the extension is encrypted and transmitted using the same security measures as the core Scribeable platform.

IMPORTANT NOTICE

These Browser Extension Terms and Conditions ("Extension Terms") supplement and are incorporated into the Platform Terms of Use. By downloading, installing, or using the Scribeable Browser Extension ("Extension"), you agree to these Extension Terms in addition to the Platform Terms of Use.

These Extension Terms specifically govern the use of the Scribeable Browser Extension for integration with Electronic Health Record (EHR) systems. If there is any conflict between these Extension Terms and the Platform Terms of Use with respect to the Extension, these Extension Terms shall control.

1. EXTENSION OVERVIEW

1.1 Purpose

The Extension is a browser-based tool that integrates with your EHR system to enable:

Automatic insertion of Scribeable-generated clinical summaries into EHR fields
Patient context matching between Scribeable and your EHR
Smart field detection and mapping for various EHR systems
Token-based secure retrieval of clinical documentation
Preview and editing of content before EHR insertion
Selective section insertion (HPI, Assessment, Plan, etc.)

1.2 Supported EHR Systems

The Extension is designed to work with the following EHR systems:

Epic Systems
Cerner (Oracle Health)
athenahealth
NextGen Healthcare
Allscripts
Additional systems as listed on our website

1.3 Installation

The Extension is available through:

Chrome Web Store (for Google Chrome, Microsoft Edge, Brave)
Additional browser stores as supported

2. GRANTS OF RIGHTS AND PERMISSIONS

2.1 Your Grant to Scribeable

By installing and using the Extension, you hereby grant Scribeable during the term of your subscription a non-exclusive, worldwide, royalty-free right and license to:

(a) Access Your EHR System:

Read and analyze the structure and layout of your EHR system's web pages
Identify and map input fields, text areas, and other user interface elements
Detect patient context information displayed on the screen
Access patient identifiers visible in the EHR interface (for matching purposes only)

(b) Read and Scan EHR Data:

Scan the Document Object Model (DOM) structure of EHR web pages
Read visible patient identifiers (name, MRN, DOB) for context matching
Read field labels and metadata to determine appropriate insertion points
Analyze page structure to detect EHR system type and version

(c) Write to Your EHR System:

Insert clinical summaries and documentation into appropriate EHR fields
Simulate user typing and interaction as needed for insertion
Submit or save data to your EHR system as directed by you
Interact with EHR interface elements (buttons, dropdowns, etc.)

(d) Store Configuration Data:

Save field mapping configurations for your specific EHR system
Store user preferences for insertion behavior
Cache page structure information for performance optimization
Maintain synchronization state between Scribeable and your EHR

2.2 Authorization Acknowledgment

You acknowledge and agree that by granting such access, you authorize Scribeable to use your EHR system as though you were accessing it yourself. Scribeable will only perform actions that you explicitly request through the Extension interface.

2.3 EHR System Authentication

The Extension operates within your authenticated EHR session. You are responsible for:

Maintaining the security of your EHR credentials
Ensuring your EHR session remains secure while using the Extension
Logging out of your EHR when not in use
Complying with your organization's EHR security policies

3. DATA COLLECTION AND PROCESSING

3.1 PHI Collected by Extension

When you use the Extension, Scribeable will collect and process the following PHI visible in your EHR system:

(a) Patient Context Data:

Patient name
Medical Record Number (MRN)
Date of Birth
Current encounter or visit information
Any other identifiers needed for context matching

(b) EHR Metadata:

EHR system type and version
Field labels and identifiers
Page URL and structure
User interface layout information

(c) Clinical Documentation:

Text entered or inserted into EHR fields
Clinical summaries transferred from Scribeable to EHR
Synchronization status and timestamps

3.2 Purpose of Data Collection

Collected data is used solely to:

Match patients between Scribeable and your EHR
Identify correct fields for documentation insertion
Ensure accurate and appropriate data transfer
Maintain synchronization state
Improve field mapping accuracy over time
Provide technical support and troubleshooting

3.3 Data Storage and Retention

The extension stores clinical data temporarily in encrypted local browser storage for a maximum of 24 hours to facilitate note transfer between your EHR and Scribeable. Local storage is automatically purged: (a) after 24 hours; (b) when you sign out of the extension; (c) when you uninstall the extension; or (d) when you clear browser data. No clinical data is persisted in local storage beyond the active session.

(a) Local Storage:

The Extension stores field mappings and preferences locally in your browser
Patient context data is cached temporarily for matching purposes
Local storage is encrypted using browser security features

(b) Server-Side Storage:

Patient identifiers used for matching are stored encrypted on our servers
Field mapping data may be uploaded to improve detection for all users
PHI is stored only as long as necessary to provide the service
Clinical documentation is stored as described in our Privacy Policy

(c) Retention Period:

Active session data is retained during your EHR session
Cached data is automatically deleted after 24 hours of inactivity
Field mappings are retained for the duration of your subscription
Clinical documentation follows standard retention policies

3.4 Data Sharing

Extension data is shared:

Between the Extension and Scribeable's secure backend servers
With our AI service providers (Anthropic, Deepgram) as covered by our BAAs
As otherwise described in our Privacy Policy and BAA

We do not sell or share Extension data with third parties for their own purposes.

4. YOUR RESPONSIBILITIES AND WARRANTIES

4.1 Authorization to Grant Access

You are responsible for compliance with all applicable state and federal privacy laws when using the extension, including but not limited to: (a) California Confidentiality of Medical Information Act (CMIA); (b) Illinois Biometric Information Privacy Act (BIPA) if voice features are used; (c) New York SHIELD Act data security requirements; and (d) any state-specific patient consent requirements for electronic data transfer. Scribeable provides tools to assist with compliance but does not guarantee compliance with jurisdiction-specific requirements.

You represent and warrant that:

(a) Legal Authority:

You have the legal right and authority to grant Scribeable access to your EHR system
You are not violating any agreements with your EHR vendor or healthcare organization
You have obtained all necessary permissions from your employer or practice

(b) Patient Consent:

You have obtained appropriate patient consents for AI-assisted documentation
You have provided required disclosures about data processing through the Extension
Your use of the Extension complies with all applicable privacy laws

(c) EHR Terms Compliance:

Your use of the Extension does not violate your EHR system's terms of use
You have verified that browser extensions are permitted by your organization
You will not use the Extension in a manner that violates your EHR vendor's policies

(d) Professional Responsibility:

You will review all content before inserting it into the EHR
You will verify accuracy of patient matching
You will ensure clinical appropriateness of all documentation
You maintain ultimate responsibility for all EHR entries

4.2 Security Obligations

You agree to:

Keep the Extension updated to the latest version
Use the Extension only on secure, authorized devices
Not share your device or browser session with unauthorized persons
Report any security concerns or suspicious activity immediately
Follow your organization's device and browser security policies

4.3 Prohibited Uses

You shall not:

Use the Extension to access EHR systems you are not authorized to use
Allow others to use the Extension under your credentials
Attempt to reverse engineer or modify the Extension
Use the Extension to extract data from EHRs in violation of agreements
Circumvent any security measures in the EHR or Extension
Use the Extension for any unlawful purpose

5. EHR INTEGRATION MECHANICS

5.1 Field Detection and Mapping

(a) Automatic Detection:

The Extension automatically detects your EHR system type
It identifies common clinical documentation fields
It creates mappings between Scribeable sections and EHR fields
Mappings are refined based on usage patterns

(b) Field Mapping Database:

We maintain a database of known field mappings for supported EHRs
Mappings are updated as EHR systems evolve
You can customize mappings for your specific configuration
Custom mappings are stored securely

(c) Intelligent Insertion:

The Extension uses multiple insertion methods based on field type
It respects field validation rules and character limits
It preserves formatting where supported by the EHR
It handles dynamic/React-based interfaces appropriately

5.2 Patient Context Matching

(a) Matching Process:

The Extension reads visible patient identifiers from the EHR
It matches this context with the active patient in Scribeable
It verifies match confidence before allowing data insertion
It alerts you if matching is uncertain

(b) Safety Mechanisms:

Wrong-patient insertion prevention
Visual confirmation of matched patient
Manual override capability when needed
Detailed audit logging of all matches

5.3 Insertion Methods

The Extension supports multiple insertion techniques:

Direct Value Assignment: For simple text fields
Simulated Typing: For fields that require user input events
React Component Interaction: For modern JavaScript frameworks
Rich Text Editing: For formatted content areas
Section Replacement: For structured documentation templates

5.4 Preview and Approval

Before inserting content into your EHR:

The Extension displays a preview of the content to be inserted
You can edit the content directly in the preview
You can select specific sections to insert
You must explicitly approve the insertion
No automatic insertion occurs without your action

6. TECHNICAL REQUIREMENTS

6.1 Browser Compatibility

Supported browsers:

Google Chrome (version 100+)
Microsoft Edge (version 100+)
Brave (version 1.50+)
Other Chromium-based browsers (best effort support)

6.2 EHR System Requirements

For optimal functionality:

Modern, standards-compliant web browsers
JavaScript enabled
Cookies and local storage enabled
No conflicting browser extensions
Stable internet connection

6.3 Performance Considerations

The Extension:

Uses minimal CPU and memory resources
Caches data locally to reduce network traffic
Implements efficient DOM scanning algorithms
May experience delays with slow EHR systems or networks

7. LIMITATIONS AND DISCLAIMERS

7.1 EHR Compatibility

YOU ACKNOWLEDGE AND AGREE THAT:

(a) No Guarantee of Compatibility:

The Extension may not work with all EHR systems or versions
EHR vendor updates may break Extension functionality
Custom EHR configurations may not be supported
We do not guarantee compatibility with all EHR features

(b) Best Effort Support:

We will use reasonable efforts to maintain compatibility
We will update the Extension for major EHR systems
We may not support legacy or uncommon EHR systems
Compatibility may vary based on EHR configuration

(c) No Liability for EHR Issues:

We are not responsible if your EHR vendor prohibits browser extensions
We are not liable for conflicts with other extensions or software
We are not responsible for EHR system performance issues
We have no control over EHR system availability or changes

7.2 Field Mapping Accuracy

(a) Mapping Limitations:

Automatic field detection may not be 100% accurate
You must verify correct field mapping before insertion
Custom EHR fields may not be detected automatically
Field mappings may become outdated after EHR updates

(b) Your Verification Responsibility:

You must review and verify all mapped fields
You must confirm content is inserted in the correct location
You must ensure documentation meets EHR requirements
You are solely responsible for final EHR entries

7.3 "AS IS" Provision for Extension

THE EXTENSION IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND. SPECIFICALLY:

We do not warrant error-free or uninterrupted operation
We do not warrant compatibility with your specific EHR
We do not warrant accurate field detection or mapping
We do not warrant that insertion will always succeed
We do not warrant that the Extension will meet your needs

Notwithstanding the foregoing disclaimers, nothing in this section shall limit: (a) Scribeable's obligations under any executed Business Associate Agreement; (b) liability for gross negligence or willful misconduct; or (c) liability that cannot be excluded or limited under applicable law.

7.4 Patient Matching Accuracy

While we implement robust patient matching algorithms:

You must always verify the correct patient is matched
You are responsible for preventing wrong-patient documentation
The Extension provides tools to assist matching but not guarantee it
Always confirm patient identity before inserting documentation

8. LIABILITY LIMITATIONS

8.1 Extension-Specific Liability Exclusions

NOTWITHSTANDING ANYTHING IN THE PLATFORM TERMS OF USE, WE WILL NOT BE RESPONSIBLE OR LIABLE FOR:

(a) EHR Access Issues:

Your inability to access or use the Extension
Your EHR vendor's policies regarding browser extensions
Restrictions imposed by your healthcare organization
Technical incompatibilities with your EHR system

(b) Documentation Errors:

Content inserted in incorrect EHR fields
Formatting issues in the EHR
Data corruption or loss in your EHR
Failure of insertion to complete successfully

(c) Wrong-Patient Events:

Documentation inserted for the wrong patient
Patient matching errors
Context detection failures
Human error in patient verification

(d) EHR System Impact:

Performance degradation of your EHR
Data integrity issues in your EHR
Conflicts with other EHR functionality
Unintended changes to EHR data

8.2 User Responsibility

You acknowledge and agree that:

You bear ultimate responsibility for all EHR entries
You must independently verify all content before and after insertion
You are responsible for compliance with EHR vendor policies
You assume all risk of using browser-based automation tools

9. UPDATES AND MODIFICATIONS

9.1 Extension Updates

(a) Automatic Updates:

The Extension may automatically update through your browser's update mechanism
You will receive notification of significant changes
You may need to reload your EHR page after updates
Critical security updates may be applied immediately

(b) Update Requirements:

You agree to keep the Extension reasonably up-to-date
We may require updates to maintain compatibility
We may discontinue support for outdated versions
Updates may be necessary for security or compliance

9.2 Feature Changes

We reserve the right to:

Add, modify, or remove Extension features
Change field mapping algorithms
Update supported EHR systems list
Discontinue support for specific EHR versions
Modify insertion techniques

Material changes will be communicated through:

Extension notifications
Email to your registered address
Release notes on our website

10. PRIVACY AND DATA PROTECTION

10.1 Extension Privacy Practices

The Extension's data collection and use is governed by:

Our Privacy Policy (incorporated by reference)
Our Business Associate Agreement (if applicable)
These Extension Terms

10.2 Browser Permissions

The Extension requires the following browser permissions:

activeTab: To interact with your current EHR tab
storage: To save preferences and field mappings
https://*: To communicate with our servers
clipboardWrite (optional): To copy content to clipboard
notifications (optional): To alert you of sync status

You can review and revoke permissions through your browser settings.

10.3 Analytics and Telemetry

The Extension may collect anonymous usage data:

Feature usage statistics
Performance metrics
Error reports and crash logs
EHR system compatibility data (without PHI)

You can opt out of telemetry in Extension settings.

11. TERMINATION OF EXTENSION USE

11.1 How to Stop Using the Extension

You may stop using the Extension at any time by:

Uninstalling it through your browser's extension manager
Disabling it in extension settings
Terminating your Scribeable subscription

11.2 Effect of Uninstallation

When you uninstall the Extension:

All locally stored data is deleted from your browser
Your account and cloud data remain accessible through other Scribeable platforms
Field mapping customizations are lost
You can reinstall the Extension at any time

11.3 Our Right to Discontinue

We may discontinue the Extension:

With 90 days' notice for planned discontinuation
Immediately if required by law or regulation
Immediately if your EHR vendor prohibits its use
If supporting the Extension becomes technically infeasible

12. SUPPORT AND TROUBLESHOOTING

12.1 Extension Support

Support for the Extension is provided through:

In-app help and documentation
Email support at [email protected]
Video tutorials on our website
Support priority based on your subscription tier

12.2 Troubleshooting Steps

If you experience issues:

Verify your Extension is up-to-date
Clear browser cache and reload your EHR page
Check that your EHR system is supported
Verify no conflicting extensions are installed
Contact support with detailed information

12.3 Diagnostic Information

With your permission, we may collect:

Extension version and browser information
Error logs and console output
Anonymized EHR page structure
Screenshots (with PHI redacted)

13. COMPLIANCE AND REGULATORY

13.1 HIPAA Compliance

The Extension is designed to be HIPAA-compliant when used with our Business Associate Agreement:

Data transmission is encrypted
Access is authenticated and authorized
Audit logs are maintained
PHI is minimized and protected

13.2 FDA Regulatory Status

The Extension is not a medical device and is not regulated by the FDA. It is:

An administrative documentation tool
A workflow efficiency application
Not intended for diagnosis or treatment
Not intended to replace clinical judgment

13.3 Export Controls

The Extension is subject to U.S. export control laws. You may not use the Extension:

In countries subject to U.S. embargo
By individuals on restricted party lists
In violation of export regulations

14. INTELLECTUAL PROPERTY

14.1 Extension Ownership

The Extension, including all code, algorithms, interfaces, and documentation, is owned by Scribeable and protected by copyright, patent, and trade secret laws.

14.2 Open Source Components

The Extension may include open source software components licensed under their respective open source licenses. A list of such components and their licenses is available in the Extension's settings or on our website.

14.3 No Reverse Engineering

You may not:

Reverse engineer, decompile, or disassemble the Extension
Extract source code from the Extension
Create derivative works based on the Extension
Remove or obscure any proprietary notices

15. MISCELLANEOUS

15.1 Relationship to Main Terms

These Extension Terms supplement the Platform Terms of Use. All provisions of the Platform Terms of Use apply to your use of the Extension except as specifically modified by these Extension Terms.

15.2 Entire Agreement for Extension

These Extension Terms, together with the Platform Terms of Use, Privacy Policy, and BAA (if applicable), constitute the entire agreement regarding the Extension.

15.3 Contact for Extension Issues

For Extension-specific questions or issues:

General Support: [email protected]
Technical Issues: [email protected]
Security Concerns: [email protected]
Privacy Questions: [email protected]

ACKNOWLEDGMENT

BY INSTALLING, DOWNLOADING, OR USING THE EXTENSION, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THESE EXTENSION TERMS AND AGREE TO BE BOUND BY THEM.

IF YOU DO NOT AGREE TO THESE EXTENSION TERMS, DO NOT INSTALL OR USE THE EXTENSION.

Last Updated: February 5, 2026 Version: 2.0

Browser Extension Terms

Legal Document