Hesper AI
Legal

Legal centre

Hesper AI processes claim files for regulated insurance organisations. Our terms are written to be read by your security team, your privacy counsel and your regulator. Everything is published here.

What binds and what does not

Binding: the Terms of Service, Privacy Policy, Data Processing Addendum and Acceptable Use Policy - and, for customers, the Master Subscription Agreement and Order Form they have actually signed.

Not binding: everything else on gethesperai.com. Our MSA, Security and Service Level pages are plain-English summaries published for information. Our blog, research reports, comparison pages, glossary, calculators, benchmarks and marketing materials are information only - not advice, not an offer, and no warranty or representation on which any person may rely.

Where anything published here differs from a document signed by both parties, the signed document governs. Each page below states its own legal effect at the top.

Core agreements

The terms that govern your use of Hesper AI.

Terms of Service

The agreement governing access to gethesperai.com and to the Hesper platform where no separate signed agreement is in place.

Applies to all users

Master Subscription Agreement

Our enterprise paper. Order of precedence, licence scope, human review obligations, data rights, indemnities, liability and term.

Enterprise customers

Privacy Policy

What personal information we collect, why, how long we keep it, who we share it with, and the rights you can exercise.

Data protection

How claim data and personal information are handled.

Data Processing Addendum

Processor terms, CCPA service provider commitments, GLBA reuse limits, breach notification, international transfers and audit rights.

Incorporated into every subscription

Subprocessors

The third parties that process customer data on our behalf, including our AI model providers and their data-retention posture.

30 days' notice before changes

Security

Our information security programme: access control, encryption, tenancy, AI-specific controls, incident response and assurance.

Operational policies

What we commit to, and what we ask of you.

Acceptable Use Policy

Permitted purposes and prohibited uses, including the prohibition on acting adversely on a claim without human review.

Service Level Agreement

Uptime commitment, service credits, support severity definitions and response targets.

Available on request

Provided under a mutual NDA. Write to legal@gethesperai.com.

Mutual NDAOur standard two-page mutual non-disclosure agreement, ready to sign.
SOC 2 Type I reportIndependent examination of the design of our security controls.
Penetration test summaryAnnual third-party test summary letter.
HIPAA Business Associate AgreementWhere protected health information is in scope. Note that workers' compensation and property-and-casualty carriers are generally not HIPAA covered entities.
Insurance Regulatory RiderRegulator examination access, NAIC AI model-bulletin documentation, antifraud-plan support and model change notice.
Security questionnaireCompleted SIG Lite or CSA CAIQ, or we will complete yours.

Legal and contracts

legal@gethesperai.com

Privacy and data rights

privacy@gethesperai.com

Security and disclosure

security@gethesperai.com