Arriba Portal End User License Agreement

Effective Date: 01/01/2026
Last Updated: 08/27/2026

​

This End User License Agreement (“EULA” or “Agreement”) governs access to and use of the Arriba Portal software platform, related websites, applications, APIs, integrations, and services (collectively, the “Platform”) provided by Arriba Data Systems doing business as Arriba (“Arriba,” “we,” “us,” or “our”).

​

By accessing or using the Platform, you acknowledge that you have read, understand, and agree to be bound by this Agreement.

If you do not agree to this Agreement, you may not access or use the Platform.

​

If you access the Platform on behalf of an employer, insurer, third-party administrator, self-insured employer, utilization review organization, medical management organization, healthcare organization, governmental entity, or other business or organization (the “Customer”), you represent that you are authorized to access the Platform on that Customer’s behalf.

Your organization may also have a separate agreement with Arriba governing use of the Platform (the “Customer Agreement”). If this EULA conflicts with a Customer Agreement, the Customer Agreement will control with respect to the rights and obligations of Arriba and the Customer.

​

1. The Arriba Platform

Arriba Portal is a business software platform designed to support healthcare, workers’ compensation, utilization review, case management, claims-related, administrative, billing, communication, document, reporting, and related workflows.

Depending on the services purchased and configured by your organization, Platform functionality may include:

• utilization review;

• medical case management;

• referral management;

• treatment request management;

• physician and clinical review workflows;

• claims and claimant information;

• medical record management;

• document management;

• task and workflow management;

• communications;

• scheduling;

• reporting and analytics;

• billing and invoicing;

• cost-savings information;

• customer and provider management;

• regulatory and compliance workflows;

• third-party integrations;

• data exchange and APIs;

• artificial intelligence and automated assistance; and

• other related functionality.

Features available to individual users depend on the Customer’s subscription, configuration, permissions, and assigned roles.

​

2. Eligibility and Authorized Use

The Platform is intended for authorized business and professional users.

You may access and use the Platform only if:

1. you have been authorized by a Customer or Arriba;

2. you have valid authentication credentials;

3. you are using the Platform for legitimate business purposes;

4. your use is within the scope of your employment, contractual duties, or professional responsibilities; and

5. your use complies with applicable law and the policies of the organization that authorized your access.

You may not use another person’s account or allow another person to use your account.

​

3. License

Subject to this Agreement and any applicable Customer Agreement, Arriba grants you a limited, non-exclusive, non-transferable, non-sublicensable, and revocable right to access and use the Platform solely for authorized business purposes.

This Agreement does not transfer ownership of the Platform or any Arriba intellectual property to you.

All rights not expressly granted are reserved by Arriba and its licensors.

​

4. User Accounts

You are responsible for maintaining the confidentiality and security of your account credentials.

You agree to:

• provide accurate information when establishing or maintaining your account;

• protect your username, password, and other authentication credentials;

• use multi-factor authentication when required;

• not share authentication credentials;

• maintain reasonable security over devices used to access the Platform; and

• promptly report suspected unauthorized access or compromise.

Arriba may terminate active sessions, require additional authentication, reset credentials, temporarily suspend access, or take other reasonable measures when necessary to protect users, Customers, the Platform, or information maintained within the Platform.

​

5. Acceptable Use

You agree to use the Platform only for lawful and authorized purposes.

You may not:

1. access records or information that you are not authorized to access;

2. attempt to bypass authentication, authorization, role-based access, tenant separation, or other security controls;

3. share accounts, passwords, access tokens, or authentication credentials;

4. impersonate another person;

5. upload or transmit malware, ransomware, viruses, malicious code, or harmful content;

6. probe, scan, penetrate, or attempt to exploit the Platform without Arriba’s prior written authorization;

7. interfere with or disrupt Platform operation or availability;

8. reverse engineer, decompile, or disassemble the Platform except where such restriction is prohibited by law;

9. systematically scrape, copy, harvest, or extract Platform information except through functionality or APIs expressly authorized by Arriba;

10. use unauthorized automated software, bots, scripts, or agents to interact with the Platform;

11. copy, sell, resell, sublicense, lease, or commercially exploit access to the Platform;

12. use the Platform or its output to develop or train a competing commercial product without Arriba’s written authorization;

13. remove copyright, trademark, confidentiality, or proprietary notices;

14. submit information that you do not have the right or authority to process; or

15. use the Platform in violation of any applicable law or regulation.

Arriba may suspend or terminate access where Arriba reasonably determines that continued access creates a security, privacy, legal, regulatory, or operational risk.

​

6. Customer Data

“Customer Data” means information submitted to, transmitted through, generated within, or maintained by the Platform on behalf of a Customer.

As between Arriba and the Customer, the Customer retains its rights in Customer Data, subject to the applicable Customer Agreement.

Arriba does not obtain ownership of Customer Data merely because that information is processed through the Platform.

The Customer authorizes Arriba to process Customer Data as necessary to:

• provide and operate the Platform;

• perform requested services;

• maintain integrations;

• provide technical support;

• maintain security;

• prevent fraud or unauthorized activity;

• perform backups and disaster recovery;

• troubleshoot errors;

• maintain audit records;

• comply with applicable law; and

• fulfill Arriba’s contractual obligations.

• ​

7. Confidential and Sensitive Information

The Platform may contain confidential or sensitive information, including:

• personally identifiable information;

• claims information;

• employment information;

• medical information;

• protected health information;

• financial information;

• legal information; and

• other confidential Customer information.

You may access such information only when authorized and only to the extent reasonably necessary to perform your authorized duties.

You may not disclose information obtained through the Platform to persons who are not authorized to receive it.

​

8. HIPAA and Protected Health Information

Certain Customers and services may be subject to the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and related regulations.

Where Arriba is acting as a Business Associate under HIPAA, Arriba’s obligations regarding Protected Health Information (“PHI”) are governed by the applicable Business Associate Agreement (“BAA”) and applicable law.

This EULA does not replace, modify, or supersede an applicable BAA.

Nothing in this EULA independently authorizes a user to access PHI.

Users may access PHI only when authorized by the applicable Customer and when such access is consistent with applicable law, Customer policies, contractual requirements, and assigned Platform permissions.

​

9. Privacy

Arriba processes personal information in accordance with applicable law, its contractual obligations, and the Arriba Privacy Policy.

The Arriba Privacy Policy is available at:

www.arriabdatasys.com/privacy

The Customer that provides your Platform account may separately collect, control, monitor, retain, or process information associated with your use of its business systems.

Questions regarding Arriba’s privacy practices may be directed to:

it@arribadatasys.com

​

10. Security

Arriba maintains administrative, technical, and organizational safeguards designed to protect information processed through the Platform.

Depending upon the applicable services and configuration, safeguards may include:

• encrypted network communications;

• encryption of stored information where appropriate;

• authentication controls;

• role-based access controls;

• multi-factor authentication;

• tenant-level access controls;

• network and application security controls;

• audit logging;

• monitoring and alerting;

• vulnerability management;

• backup and recovery procedures; and

• other security measures appropriate to the services provided.

No information system can be guaranteed to be completely secure, and users remain responsible for protecting their credentials, devices, and authorized access.

​

11. Audit Logging and Monitoring

Activity within the Platform may be logged and monitored for legitimate business purposes, including:

• security;

• regulatory compliance;

• quality assurance;

• troubleshooting;

• fraud prevention;

• auditing;

• technical support;

• system administration; and

• enforcement of contractual and legal requirements.

Audit information may include:

• authentication activity;

• record access;

• changes to records;

• workflow actions;

• approvals;

• communications;

• document activity;

• timestamps;

• IP addresses;

• device or browser information; and

• other operational events.

Users of Customer-provided business accounts should understand that activity performed through those accounts may be visible to or auditable by the applicable Customer, subject to applicable law.

​

12. Clinical and Professional Decisions

Arriba Portal is a technology platform.

Unless expressly stated in a separate agreement, Arriba does not provide medical, legal, accounting, claims-adjusting, or other licensed professional advice through the Platform.

Platform information and functionality may assist physicians, nurses, claims professionals, case managers, utilization review personnel, administrators, and other professionals in performing their responsibilities.

The Platform is not a substitute for professional judgment.

Clinical decisions, utilization review determinations, treatment recommendations, claims decisions, legal decisions, and other professional determinations remain the responsibility of appropriately qualified and authorized individuals.

Users are responsible for reviewing relevant information before making or approving professional decisions.

​

13. Artificial Intelligence and Automated Features

The Platform may include artificial intelligence, machine learning, natural-language processing, optical character recognition, document processing, automated extraction, summarization, search, recommendation, workflow automation, or similar technologies (“AI Features”).

AI Features may assist users with activities including:

• extracting information from documents;

• organizing information;

• summarizing records;

• searching and retrieving relevant information;

• categorizing documents or data;

• identifying potentially missing or inconsistent information;

• generating draft text;

• suggesting workflow actions; and

• assisting with administrative tasks.

AI-generated information may contain errors, omissions, incomplete information, or inaccurate interpretations.

AI Features are intended to assist users and do not replace appropriate human review or professional judgment.

Unless Arriba expressly identifies a particular feature as authorized to perform an automated action, users should review material AI-generated information before relying upon it.

AI Features are not intended to independently make medical, utilization review, legal, claims, benefits, or other professional determinations affecting an individual’s rights, treatment, or benefits.

​

14. Third-Party Services and Integrations

The Platform may connect with or depend upon third-party products and services.

These may include:

• claims systems;

• accounting systems;

• identity providers;

• email and communication services;

• electronic data interchange services;

• medical guideline services;

• document-processing services;

• cloud infrastructure;

• storage providers;

• APIs; and

• other external systems.

Third-party services may be governed by separate terms and privacy policies.

Arriba is not responsible for the operation, availability, policies, or acts of third-party services outside Arriba’s reasonable control.

Use of a third-party integration may require separate authorization from the Customer or the third-party provider.

​

15. Data Retention

Customer Data is retained in accordance with:

• the applicable Customer Agreement;

• Customer configuration;

• Arriba data-retention policies;

• legal and regulatory obligations; and

• legitimate business requirements.

Information may remain within active systems, backups, archives, audit records, security records, or other systems where continued retention is legally, contractually, or operationally required.

Termination of an individual user account does not necessarily result in deletion of records created or accessed by that user.

​

16. Intellectual Property

Arriba and its licensors retain all rights, title, and interest in the Platform and related intellectual property, including:

• software;

• source code;

• object code;

• architecture;

• databases and database structures;

• user interfaces;

• workflows;

• designs;

• documentation;

• reports and report structures;

• APIs;

• trademarks;

• logos;

• graphics;

• processes; and

• underlying technologies.

Customer Data remains subject to the Customer’s applicable ownership rights.

If you voluntarily provide suggestions, ideas, enhancement requests, or other feedback concerning the Platform, Arriba may use that feedback to improve its products and services without obligation or compensation, provided such use does not disclose Customer Confidential Information.

​

17. Platform Availability and Changes

Arriba may modify, update, improve, or replace Platform functionality from time to time.

The Platform may occasionally be unavailable due to:

• scheduled maintenance;

• emergency maintenance;

• infrastructure failures;

• cybersecurity events;

• network or telecommunications failures;

• third-party provider interruptions;

• upgrades; or

• circumstances outside Arriba’s reasonable control.

Any uptime guarantee, service-level commitment, support obligation, disaster-recovery commitment, response-time commitment, or service credit is governed solely by the applicable Customer Agreement or Service Level Agreement.

​

18. Electronic Communications

The Platform may provide electronic communications relating to:

• account administration;

• authentication;

• referrals;

• workflow activity;

• assignments;

• documents;

• tasks;

• scheduling;

• security;

• system notifications; and

• other transactional or operational matters.

By using the Platform, you consent to receiving electronic communications reasonably necessary for providing and securing the services.

​

19. Electronic Records and User Actions

Actions performed through an authenticated account may be recorded as actions performed by the user associated with that account.

The Platform may maintain electronic records identifying:

• the user performing an action;

• the date and time of the action;

• the affected record;

• changes made;

• approvals or acknowledgments; and

• related workflow information.

Where permitted by applicable law and Customer policies, authenticated electronic approvals, submissions, acknowledgments, and other actions may constitute electronic records of the applicable transaction.

​

20. Suspension and Termination

Your right to use the Platform may end if:

• your Customer terminates your access;

• your employment or authorization ends;

• the applicable Customer Agreement terminates;

• you violate this Agreement;

• your account presents a security risk;

• continued access would violate applicable law; or

• Arriba otherwise has the contractual or legal right to terminate access.

Upon termination, you must immediately stop accessing the Platform.

Provisions concerning confidentiality, intellectual property, data, disclaimers, limitations of liability, dispute resolution, and other provisions that by their nature should survive termination will continue to apply.

​

21. Disclaimer of Warranties

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, AND EXCEPT FOR EXPRESS WARRANTIES PROVIDED UNDER AN APPLICABLE CUSTOMER AGREEMENT, THE PLATFORM IS PROVIDED “AS IS” AND “AS AVAILABLE.”

ARRIBA DISCLAIMS IMPLIED WARRANTIES INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT.

ARRIBA DOES NOT WARRANT THAT:

• THE PLATFORM WILL BE COMPLETELY ERROR-FREE;

• THE PLATFORM WILL OPERATE WITHOUT INTERRUPTION;

• EVERY ERROR OR COMPLIANCE ISSUE WILL BE IDENTIFIED;

• AI OR AUTOMATED OUTPUT WILL ALWAYS BE ACCURATE;

• THIRD-PARTY SERVICES WILL ALWAYS BE AVAILABLE; OR

• USE OF THE PLATFORM ALONE WILL ENSURE COMPLIANCE WITH ALL APPLICABLE LAWS, REGULATIONS, OR PROFESSIONAL STANDARDS.

ANY EXPRESS WARRANTIES MADE BY ARRIBA TO A CUSTOMER ARE GOVERNED BY THE APPLICABLE CUSTOMER AGREEMENT.

​

22. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, ARRIBA AND ITS AFFILIATES, OFFICERS, DIRECTORS, EMPLOYEES, CONTRACTORS, LICENSORS, AND SERVICE PROVIDERS WILL NOT BE LIABLE TO AN INDIVIDUAL USER FOR INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, PUNITIVE, OR CONSEQUENTIAL DAMAGES ARISING FROM OR RELATED TO USE OF THE PLATFORM.

WHERE YOUR ACCESS TO THE PLATFORM IS PROVIDED THROUGH A CUSTOMER, ARRIBA’S FINANCIAL LIABILITY RELATING TO THE PLATFORM IS GOVERNED BY THE APPLICABLE CUSTOMER AGREEMENT.

NOTHING IN THIS AGREEMENT LIMITS LIABILITY THAT CANNOT LAWFULLY BE LIMITED OR EXCLUDED.

​

23. Governing Law

Unless otherwise provided in an applicable Customer Agreement, this Agreement is governed by the laws of the State of California, without regard to conflict-of-law principles.

Any legal proceeding arising from this Agreement that is not governed by another controlling contractual dispute-resolution provision will be brought in the appropriate state or federal courts located in Placer County, California, and the parties consent to the jurisdiction of those courts.

​

24. Customer Agreements and Business Associate Agreements

A Customer may have additional agreements with Arriba, including:

• Master Services Agreements;

• Software-as-a-Service Agreements;

• Subscription Agreements;

• Business Associate Agreements;

• Data Processing Agreements;

• Service Level Agreements;

• Security Agreements; or

• Statements of Work.

Those agreements govern the commercial and contractual relationship between Arriba and the Customer.

Nothing in this EULA amends or supersedes an applicable Customer Agreement or Business Associate Agreement.

If there is a conflict between this EULA and an applicable Customer Agreement concerning the relationship between Arriba and the Customer, the Customer Agreement will control.

​

25. Changes to This Agreement

Arriba may update this EULA periodically to reflect changes in:

• Platform functionality;

• applicable law;

• security practices;

• technology;

• regulatory requirements; or

• Arriba services.

The current version of this EULA will be made publicly available through the Arriba website or Platform.

The “Last Updated” date identifies when this Agreement was most recently revised.

Where required, Arriba may require users to affirmatively accept a revised Agreement before continuing to use the Platform.

​

26. Severability

If any provision of this Agreement is determined to be invalid or unenforceable, that provision will be enforced to the maximum extent permitted by law, and the remaining provisions will remain in full force and effect.

​

27. No Waiver

Failure by Arriba to enforce any provision of this Agreement does not waive Arriba’s right to enforce that provision or any other provision in the future.

​

28. Assignment

You may not assign or transfer your rights under this Agreement without Arriba’s written consent.

Arriba may assign this Agreement in connection with a merger, acquisition, corporate reorganization, change in control, sale of assets, or transfer of the Platform or related business.

​

29. Contact Information

Questions regarding this Agreement may be directed to:

Arriba Data Systems
d/b/a Arriba

12532 Quail Meadow
Auburn CA 95603

Website: www.arribadatasys.com    
Legal: info@arribadatasys.com
Privacy: it@arribadatasys.com
Security: it@arribadatasys.com
Support: support@arribadatsys.com