EchoReview
WORKFLOW EVALUATION — NOT FOR PATIENT CARE. AI is research-only. No identifiable data without signed agreements.
Read full notice

EchoReview supports cardiologist review and documented sign-off. AI is in development, research-only, and must not guide diagnosis, treatment, urgency, or routing. Routine uploads and reporting exclude experimental AI. Separate research benchmarks remain available to administrators. Hospital use requires an approved data flow; do not upload identifiable patient data without required agreements and verified provider coverage.

Template — for review by hospital counsel

Data Use Agreement (DUA)

This template governs the exchange of de-identified echocardiogram data between a participating hospital and EchoReview during a non-clinical pilot. A separate Business Associate Agreement (BAA) is required before any Protected Health Information (PHI) is exchanged.

1. Parties

This DUA is entered into between [Hospital Legal Name] ("Data Provider") and [EchoReview Legal Entity] ("Recipient").

2. Purpose

The data is provided solely for the purpose of conducting a non-clinical workflow evaluation of permitted study handoff, cardiologist review, and documented sign-off. The pilot is not intended to inform individual clinical decisions.

3. Data Description

Permitted de-identified rendered echo images and available cine frames, with approved non-identifying metadata. The Site must document the applicable de-identification method and inspect pixels, filenames, reference fields, and notes; automatic metadata stripping alone does not establish Safe Harbor compliance.

4. Permitted Uses

  • AI benchmarking is excluded from the workflow-only scope; any separate research use requires explicit approved terms and genuinely blinded evaluation.
  • Workflow validation and turnaround-time measurement.
  • Internal product improvement and aggregate reporting.

5. Prohibited Uses

  • Re-identification of any individual.
  • Use of pilot outputs to direct clinical care.
  • Re-disclosure to any third party except subcontractors bound by equivalent terms.

6. Security

Required safeguards, recipient inventory, retention, deletion, and evidence of implementation must be approved in the final agreement. The readiness checklist does not certify these arrangements. Routine uploads and reporting exclude experimental AI; verify the approved data flow before a hospital patient-data pilot.

7. Term & Termination

This DUA is effective for ninety (90) days and may be terminated by either party with thirty (30) days' written notice. Upon termination, Recipient will destroy or return all data within thirty (30) days.

8. Liability

Liability, insurance, warranties, and remedies: [to be negotiated by counsel]. This discussion template does not establish clinical protection or insurance coverage.

9. Governing Law

This DUA is governed by the laws of [State], without regard to its conflicts-of-law principles.

Disclaimer: This template is provided for convenience and is not legal advice. Both parties should have qualified counsel review and execute the final agreement.

Request executable DUAView BAA template