Policies Agreement

Version 2 · Last updated: September 18, 2026

This Policies Agreement describes the general responsibilities of an organization using the SALT platform. It applies unless Cobalt Speech and Language, Inc. and the organization have signed a separate written agreement that controls the same subject.

1. Authorized use

The organization will use SALT only for lawful professional, clinical, educational, or administrative purposes and will ensure that each user is authorized to access the information available to them.

2. Accounts and access

  • Each person must use an individual account.
  • Credentials may not be shared.
  • Access must be removed promptly when a person no longer needs it.
  • The organization is responsible for assigning appropriate roles and reviewing access periodically.

3. Privacy and data handling

The organization will enter, upload, and disclose personal, educational, and health information only when it has a lawful basis to do so. It will obtain any consent required for recording, transcription, analysis, storage, or sharing and will avoid placing sensitive information in fields not intended for it.

4. Clinical responsibility

SALT provides workflow and clinical decision-support tools. Qualified professionals remain responsible for reviewing generated content, correcting errors, exercising independent judgment, and making all clinical decisions.

5. Security safeguards

The organization will train its workforce on appropriate handling of sensitive information, use reasonable administrative and technical safeguards, keep devices and accounts secure, and follow applicable privacy and security laws.

6. Acceptable use

The organization and its users will not:

  • Use SALT for unlawful, fraudulent, or harmful activity.
  • Attempt to bypass access controls or probe another tenant.
  • Disrupt the service, introduce malicious code, or perform unauthorized security testing.
  • Copy, resell, or reverse-engineer the service except where the law expressly permits it.

7. Incidents

The organization will notify Cobalt promptly if it discovers unauthorized access, misuse, loss of credentials, or another security incident involving SALT. The parties will reasonably cooperate in investigation, mitigation, and any legally required notification.

8. Service administration

Cobalt may maintain, update, suspend, or restrict the service when reasonably necessary for security, reliability, legal compliance, or breach of this agreement. Subscription, payment, retention, export, and termination terms are governed by the applicable order form and Terms of Service.

9. Related documents

This agreement should be read with the Terms of Service and Privacy Policy. If a separate signed agreement conflicts with this generic document, the separate agreement controls to the extent of the conflict.

10. Contact

Questions about this agreement may be sent to legal@cobaltspeech.com.