Effective Date: July 10, 2026 · Last Reviewed: July 2026
These Terms of Service govern access to and use of auditmd.xyz and all professional Health IT compliance audit, assessment, and advisory services offered under the AuditMD brand by DFEAL LLC ("DFEAL," "we," "us," or "our"). By using this site or engaging our services, you agree to these Terms.
These Terms of Service ("Terms") govern access to and use of auditmd.xyz (the "Site") and all professional Health IT compliance audit, assessment, and advisory services offered under the AuditMD brand (the "Services") by DFEAL LLC, a Delaware limited liability company with a registered address at 254 Chapman Rd, Ste 208, Newark, DE 19702 ("DFEAL," "we," "us," or "our").
By accessing the Site, submitting an intake or discovery-call form, engaging Aria (our AI advisor), or signing a statement of work or invoice for the Services, you ("Client," "you," or "your") agree to be bound by these Terms. If you are entering into these Terms on behalf of an organization, you represent that you have authority to bind that organization, and "you" refers to that organization.
AuditMD is DFEAL's AI Health IT Readiness Audit™ platform. The Services combine AI-assisted analysis with expert human review to help healthcare organizations, Health IT vendors, and government/payer entities assess Health IT and AI-governance readiness across compliance domains including HIPAA, interoperability (FHIR), AI model governance, cybersecurity posture, and the 21st Century Cures Act. Services are offered in three engagement layers:
"AI Health IT Readiness Audit™" is a trademark of DFEAL LLC. Service scope, deliverables, and timelines for a given engagement are as described in the applicable quote or statement of work, which controls over the general description on the Site in the event of a conflict.
The Services are business-to-business professional services intended for healthcare organizations, Health IT vendors, government agencies, and payer organizations. The Site and Services are not directed at individual consumers and are not intended for use by anyone under the age of 18.
Engagements begin with a discovery call, typically preceded by a pre-call questionnaire. Following the discovery call, DFEAL provides a custom quote scoped to your organization's size and complexity, generally within 48 hours. Pricing is not published on the Site because it is engagement-specific; the quote or statement of work you accept is the binding price term for that engagement. DFEAL does not bill on an open-ended, time-and-materials basis unless the quote expressly says so — every engagement carries a fixed-price guarantee at the scope quoted.
Fees for each engagement are set out in the quote or statement of work accepted by Client and are not subject to change during the engagement except by written agreement of both parties (for example, a documented change in scope).
For Layer 1 (one-time) engagements, a 50% deposit is due to begin Stage 1 (Intake & Scoping); the remaining balance is invoiced on Net 14 payment terms. For Layer 2 and Layer 3 monthly retainers, DFEAL invoices monthly in advance on Net 14 payment terms, with no deposit required. Amounts not paid when due may accrue a late charge of 1.5% per month (or the highest rate permitted by law, if lower) on the outstanding balance. DFEAL may suspend Services, including pausing an in-progress audit stage or a monthly retainer, for invoices more than 14 days past due, upon written notice.
Upon acceptance of a quote, DFEAL issues an invoice through our billing platform (currently Stripe). DFEAL will confirm renewal terms with Client ahead of each Layer 2/Layer 3 renewal cycle.
Fees are exclusive of applicable sales, use, or similar taxes, which are Client's responsibility unless Client provides a valid exemption certificate.
If Client cancels a Layer 1 engagement after the deposit has been paid, the deposit is refunded on a pro-rated basis according to the engagement stage reached at the time of cancellation:
| Stage Reached at Cancellation | Deposit Refund |
|---|---|
| Stage 1 — Intake & Scoping (Days 1–3) | 50% of deposit refunded |
| Stage 2 — AI-Powered Domain Analysis (Days 4–7) | 25% of deposit refunded |
| Stage 3 — Expert Human Review (Days 8–11) | No refund |
| Stage 4 — Executive Reporting & Handoff (Days 12–14), or once final deliverables have been transmitted | No refund |
Cancellation requests must be submitted in writing to support@auditmd.xyz. Refunds are issued to the original payment method within 10 business days of a confirmed cancellation.
Retainer engagements have an initial minimum term of three (3) months (the "Minimum Term"), after which they continue month-to-month until cancelled. Fees for the Minimum Term are non-refundable except in the case of DFEAL's uncured material breach. After the Minimum Term, either party may cancel with thirty (30) days' written notice; Client remains responsible for fees for Services rendered through the effective date of cancellation.
These Terms remain in effect for as long as Client uses the Site or receives Services. A Layer 1 engagement terminates upon delivery of final deliverables and payment in full. Layer 2 and Layer 3 retainers renew automatically at the end of each monthly billing cycle unless cancelled in accordance with Section 6.2. Upon completion of a Layer 1 engagement, DFEAL may propose a Layer 2 or Layer 3 ongoing engagement where appropriate; Client is under no obligation to accept.
Either party may terminate an engagement immediately for the other party's uncured material breach, following fifteen (15) days' written notice and opportunity to cure. Sections 5 (Fees), 9–17, and any other provision that by its nature should survive, survive termination.
Client agrees to:
Delays in providing required information or access may extend engagement timelines; DFEAL is not responsible for missed delivery dates caused by Client delay.
Aria is powered by a third-party AI model (DeepSeek AI) and is provided for general, pre-engagement informational purposes. Conversations with Aria are not part of any engagement record, are not reviewed by a human advisor in real time, and do not create an advisory or client relationship between Client and DFEAL. Do not rely on Aria's responses as a substitute for a discovery call, a signed statement of work, or professional advice.
Our audit methodology uses proprietary AI-powered scanning tools to perform initial domain analysis, as described on the Site ("AI-Powered Domain Analysis," Days 4–7). Every AI-generated finding is reviewed and validated by DFEAL's clinical and compliance experts before inclusion in a deliverable ("Expert Human Review," Days 8–11). Deliverables reflect the state of Client's environment and applicable regulatory guidance as of the assessment date and are advisory in nature; see Section 10.
The Services provide an independent readiness assessment and recommendations. They do not constitute legal advice, and DFEAL is not a law firm. Completion of an audit, retainer engagement, or any deliverable does not guarantee that Client is or will remain compliant with HIPAA, the 21st Century Cures Act, or any other law, regulation, or industry standard, and does not guarantee any particular outcome in a regulatory examination, audit, investigation, or enforcement action. Client remains solely responsible for its own compliance decisions and for obtaining independent legal counsel where appropriate.
Upon payment in full for the applicable engagement, DFEAL grants Client a non-exclusive, perpetual, internal-use license to the deliverables prepared specifically for Client (Executive Summary, Compliance Scorecard, Risk Register, Remediation Roadmap, and PMO Optimization Plan, as applicable). DFEAL and its licensors retain all right, title, and interest in and to the underlying AuditMD methodology, scoring frameworks, templates, software, the Aria chat widget, the Site, and the "AI Health IT Readiness Audit™" mark, none of which is licensed to Client except as embodied in the delivered reports. Client may not resell, sublicense, or represent DFEAL's methodology or templates as its own.
Each party may receive confidential or proprietary information of the other in connection with an engagement ("Confidential Information"). Each party agrees to use the other's Confidential Information solely to perform its obligations under these Terms and the applicable engagement, and not to disclose it to third parties except to personnel, contractors, or service providers with a need to know and under confidentiality obligations at least as protective as those in this Section, or as required by law. This Section does not limit DFEAL's handling of Client data as described in our Privacy Policy, including engagement with the subprocessors listed there.
Our collection, use, and protection of information submitted through the Site or during an engagement is described in our Privacy Policy, which is incorporated into these Terms by reference. As stated there, DFEAL does not collect PHI, does not sell Client data, and uses a limited set of subprocessors (Netlify, Zapier, Google Workspace, DeepSeek AI for the Aria widget, and GitHub for source control) under appropriate safeguards.
TO THE MAXIMUM EXTENT PERMITTED BY LAW, DFEAL WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, CONSEQUENTIAL, SPECIAL, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, LOST DATA, OR REPUTATIONAL HARM, ARISING OUT OF OR RELATING TO THE SITE OR SERVICES, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. DFEAL'S AGGREGATE LIABILITY FOR ANY CLAIM ARISING OUT OF OR RELATING TO THESE TERMS OR AN ENGAGEMENT WILL NOT EXCEED THE TOTAL FEES PAID BY CLIENT TO DFEAL FOR THE APPLICABLE ENGAGEMENT IN THE TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM.
This limitation does not apply to Client's payment obligations, either party's indemnification obligations, or breaches of Section 12 (Confidentiality).
Client agrees to indemnify and hold DFEAL harmless from third-party claims arising out of Client's breach of these Terms, Client's submission of PHI or unlawful content through the Site or Aria, or Client's misuse of deliverables in a manner inconsistent with Section 11. DFEAL agrees to indemnify and hold Client harmless from third-party claims that DFEAL's deliverables, as provided and used in accordance with these Terms, infringe a third party's U.S. intellectual property rights.
These Terms and any dispute arising out of or relating to the Site, the Services, or an engagement are governed by the laws of the State of Delaware, without regard to its conflict-of-laws principles.
Any dispute that cannot be resolved informally within 30 days of written notice will be resolved by binding arbitration administered by the American Arbitration Association under its Commercial Arbitration Rules, before a single arbitrator, seated in New Castle County, Delaware. Arbitration will proceed on an individual basis only — Client and DFEAL each waive any right to bring or participate in a class, collective, or representative action, and waive any right to a jury trial. Notwithstanding the foregoing, either party may seek injunctive or other equitable relief in a court of competent jurisdiction in Delaware to protect its Confidential Information or intellectual property pending arbitration.
DFEAL may update these Terms from time to time to reflect changes in our Services, technology, or legal requirements. When we make material changes, we will update the "Last Reviewed" date at the top of this page and, for active engagement clients, notify the primary engagement contact by email. Continued use of the Site or Services after notice of an update constitutes acceptance of the revised Terms; changes do not apply retroactively to a fully executed statement of work unless both parties agree in writing.
Questions about these Terms can be directed to:
Email: support@auditmd.xyz
Phone: +1 (844) 442-0529
Mailing Address: DFEAL LLC, 254 Chapman Rd, Ste 208, Newark, DE 19702
Website: auditmd.xyz