User agreement

1. What this agreement is

This user agreement applies to every person who signs in to a PACT workspace on behalf of a participant — data owner, data user or ecosystem operator. It sits on top of the terms and conditions; where the two differ, this agreement governs the individual’s use.

2. Your seat

A seat is personal. It grants access to exactly one workspace: the provider, consumer or operator seat the participant assigned to you. Actions taken with your seat are attributed to you in the audit record.

3. Machine credentials

API credentials authenticate integrations, not people. They are shown once, must be stored as secrets, and must be revoked when an integration is retired. A leaked credential is reported to the operator immediately.

4. Using another participant’s offer

Access is limited to the purpose, duration and scope written in the agreement attached to the offer. Re-sharing, re-identification of personal data, or use beyond the agreed purpose is a breach of this agreement, independently of what the data itself would allow.

5. Disconnecting

When your seat ends, access to the workspace stops and credentials are revoked. Records of past exchanges remain with the participants that hold them.