Version: 2026-10-02_v10 (supersedes 2026-10-01_v9) Effective: 2 October 2026 Provider: DJG Media Limited, CRO No. 762838, Coliemore House, Coliemore Road, Dalkey, Dublin, Ireland, which provides Ask Brigid and MyBrigid

This is the template order form. A practice that wants signed terms completes it with us. Publishing it does not sign it for any practice. Fields marked "To complete" are filled in for each practice; nothing marked "To complete" or "proposed" is agreed until the order is executed. A practice that subscribes without an order form is on the Terms of Service, the Data Processing Agreement and the Refund and Cancellation Policy.

1. Parties and service

| Field | Agreed particulars | |---|---| | Supplier | DJG Media Limited, CRO No. 762838, Coliemore House, Coliemore Road, Dalkey, Dublin, Ireland | | Customer legal name and legal form | To complete; identify the controller, not only the practice's trading name | | Customer registration number, if applicable | To complete; not required for a sole trader | | Customer address | To complete | | Authorised customer signatory and role | To complete | | Customer privacy and incident contacts | To complete, including an urgent contact route | | Supplier contact | support@askbrigid.com; privacy@askbrigid.com; legal@askbrigid.com | | Start date | To complete; the Customer's access begins on this date | | Go-live date | The date the Customer confirms in writing that it will use the Service for its practice ("you say go"). Where a migration is performed, that confirmation follows the Customer's check of the moved records under clause 8.3. Where no migration is performed, the go-live date is the start date unless the Customer names a later date | | Migration | To complete: none, or commissioned from [source system] under the migration instruction attached to this order. Fee: none unless stated here | | Territory | Republic of Ireland | | Products | Ask Brigid clinic app and clinic-linked MyBrigid, within the enabled scope below; MyBrigid access is free to patients and separate from clinic healthcare charges | | Included features | Attach the approved feature schedule; do not infer inclusion from a plan name | | Excluded purposes | Diagnosis, clinical triage, medical risk scoring/alerts, treatment recommendations, prescribing decisions and autonomous clinical decisions. Routes that are switched off are listed in section 6 of the Privacy Policy; this template does not enable them | | Patient eligibility and representative access | Own accounts: age 18+. Intended family scope: clinic-verified guardian access for under-16s and separately verified authorised adult representatives. Guardian links end at 16; ages 16–17 are handled directly with the clinic. Attach the tested authority and confidentiality procedure | | Recording/transcription and AI | Patient recording and transcription, drafting notes and letters from supplied material for the clinician to sign, and factual summaries, as section 6 of the Privacy Policy describes; no AI conversation with patients is offered. The patient's AI choice applies. General notes require a no-patient-information declaration | | Clinic mailbox assistance | Intended scope includes approved shared/clinic and individual staff inboxes and attachments. Attach the actual provider/purpose schedule and transparency/lawful-basis assessment; no automatic patient-consent check is represented for every unlinked email |

2. Subscription and payment

| Field | Agreed particulars | |---|---| | Plan | Essential / Professional / separately negotiated existing entitlement arrangement | | Included users and usage | To complete | | Agreed price, currency and VAT treatment | To complete; verify against the checkout/invoice before execution | | Founding discount / free period | None, or "Schedule C applies" for a founding practice | | Billing interval | Monthly in advance, from the go-live date. No fee is payable for any period before the go-live date (clause 8.3): until go-live the subscription runs as a free trial, which the Supplier extends to the go-live date | | Initial term | One month from the go-live date | | Renewal | Successive one-month terms | | Customer notice to prevent renewal | 30 days before the end of the current term | | Payment method / due date | To complete | | Payment grace, suspension and restoration | To complete; specify notice, cure period and how access is restored | | Prices on the date of this order (price lock, clause 8.4) | To complete from the published price list on the date the Customer accepts this order — on 23 September 2026 Essential €129 and Professional €299 per month billed monthly, or €103 and €239 per month billed annually, excluding VAT. Verify against the checkout before execution |

An annual arrangement requires an express completed variation stating the annual charge, term, renewal and cancellation rules; a displayed monthly equivalent is not a monthly subscription. Full AI is not offered as a new self-service sale. No optional feature may bypass the release's clinical or privacy restrictions through a higher subscription tier.

3. Termination and continuity

Convenience termination: Customer gives 30 days' written notice effective at the end of the current monthly term, except during the parallel period, when clause 8.2 applies instead (immediate effect; refund as clause 8.2 sets out); Supplier gives 90 days' written notice. Termination for material breach: written notice and 30 days to cure, subject to any lawful need for earlier protective restriction. The DPA's supplier-objection termination remedy applies.

Commercial suspension does not create a new right to retain patient information or prevent fulfilment of data-protection obligations. Agree the authorised export/access route during any suspension or dispute before execution. The parties coordinate an orderly exit; patient care and statutory records requests are not resolved merely by disabling a subscription.

4. Return/deletion on exit

The Controller chooses return or deletion under the DPA. Unless this order sets different periods, the periods in clause 10 of the DPA apply:

| Stage | Deadline and trigger | |---|---| | Export window | 30 days from the end of service. Export during the term, at any time and without fee, is clause 8.1 | | Active-system deletion | Within 90 days after the export window closes, confirmed to the Customer in writing | | Backup expiry | Within 90 days after active-system deletion |

Deletion covers the database, stored files and the copies in file backups. Database backups expire by rotation (Schedule 1 of the DPA); a backup is not edited selectively. The Supplier confirms completion or explains any lawful retention exception with its category, basis and duration.

5. Support, availability and incidents

Ordinary support hours: Monday–Friday 09:00–17:00 Europe/Dublin, excluding Irish public holidays, through the in-product report control or support@askbrigid.com. First-response targets are urgent 15 working minutes, high one working hour, normal four working hours and low 24 working hours. These are contractual first-response targets, not resolution guarantees. The clock starts when a request is received during support hours; a request received outside those hours starts at the next opening. Only time within support hours counts: the clock pauses at closing and resumes at the next opening. All times follow Europe/Dublin, including daylight-saving changes. For clarity, 24 working hours means three full eight-hour support days, not 24 elapsed hours. Security-incident handling below is separate and is not paused by this support schedule.

No numerical uptime commitment or service credit applies unless expressly completed in an attached schedule. State planned-maintenance arrangements and measured recovery targets separately.

Security incidents are separate from ordinary support. The DPA's without-undue-delay/24-hour controller-notification commitment applies when the Supplier becomes aware of a covered breach, including outside support hours. Incident lead: David Galvin, director. The deputy is named in the Supplier's breach-response procedure. The Customer records its own urgent incident contact in this order.

6. Liability and insurance

The selected inter-party liability cap is the greater of €50,000 and the fees paid in the twelve months before the first event giving rise to the claim, applied to the stated twelve-month aggregation period. The aggregation-period operation, exclusions, any separate data-protection limit and treatment of customer-data loss: to complete.

Nothing excludes liability that cannot lawfully be excluded or limits a data subject's mandatory rights under Article 82 GDPR. Statutory conditions govern liability between responsible controllers/processors and to data subjects; a contract between these parties does not determine a patient's rights. The DPA's Article 28 duties remain intact. Specify the interaction between those duties and any permitted inter-party monetary limit expressly.

Insurance. The Supplier does not currently hold cyber insurance or technology professional-indemnity insurance. If cover is obtained, the insurer, policy, limits, exclusions and dates are recorded here.

7. Contract documents and precedence

Enter the exact versions of the Terms of Service, the DPA and each schedule. For personal-data processing duties, the DPA prevails over conflicting commercial wording. This order supplies the clinic-specific particulars the DPA expressly leaves to it; it does not reduce mandatory obligations. For other commercial particulars, this order takes precedence over the platform terms to the extent expressly agreed. The parties resolve any remaining conflict before execution.

| Incorporated document | Version / file / evidence reference | |---|---| | Ask Brigid Terms of Service | To complete | | Data Processing Agreement | To complete (current version 2026-10-02_v6) | | Schedule A — processing/retention | Complete below | | Schedule B — authorised suppliers | Complete below | | Service/support variations | None unless attached and identified | | The four guarantees | Clause 8 of this order | | Schedule C — founding practice | Only where clause 2 says "Schedule C applies" |

8. The four guarantees

These are the four guarantees published on askbrigid.com on the date of this order, made binding here in the words of this clause 8; the website's wording summarises them and is not incorporated. The liability cap in clause 6 does not reduce a refund due under clause 8.2 or fees waived under clause 8.3. They are commercial terms: for personal-data duties the DPA still prevails (clause 7), and nothing here reduces a mandatory obligation. For commercial particulars they prevail over any conflicting wording in the platform terms.

8.1 Your data leaves free. At any time during the term, and during the export window in clause 4 after it ends, the Customer may ask for a full export of the data the Supplier processes on its behalf, in a structured, commonly used and machine-readable format (DPA clause 10), with stored documents and recordings in their original file formats. The Supplier delivers it within five Business Days of the request. No fee is charged for any export requested within that window, including on exit. This is in addition to the self-service export in the Service. "Business Day" means Monday to Friday, excluding Irish public holidays.

8.2 Run it alongside your current system for 90 days. For 90 days from the go-live date (the parallel period) the Supplier does not require the Customer to switch off, cancel or stop using any existing system, and nothing in the Service does so. The Customer may end this agreement at any time during the parallel period by written notice, with immediate effect — the 30-day notice in clause 3 does not apply. The Supplier then:

• refunds in full every subscription fee paid under this order, and the unused balance of any top-up tokens the Customer bought at the price it paid for them, within 30 days of the notice;
• provides the export in clause 8.1 free of charge; and
• applies clause 4 to return or deletion.

Fees already incurred on patient card payments taken through the Service during the parallel period are not refunded, because they relate to money the practice has already received.

8.3 We move your data, and you don't pay unless you go live. Where the Supplier performs a migration under this order (from HealthOne, Socrates, iMedDoc, a spreadsheet or paper records, under the migration instruction attached to this order, clause 1), the Supplier maps the records out, rehearses the move against representative records, and sets the Service up with the Customer's staff. The Customer checks the moved records before go-live. If anything is missing or wrong when the Customer checks it, the Supplier fixes it before go-live. If the Supplier cannot fix it to the Customer's reasonable satisfaction, the Customer may decline to go live by written notice: this agreement then ends, no fee is payable (billing starts only at go-live, clause 2), and imported copies are deleted under Schedule A.

8.4 The price on your first order is your price for three years. For 36 months from the go-live date, the Customer may subscribe to any plan that was offered for self-service on the date the Customer accepted this order, at the price recorded for it in clause 2 — including on a change of plan — and no price increase applies on any renewal in that period. After 36 months the then-published price applies from the first renewal that begins at least 30 days after the Supplier gives the Customer written notice of it. An annual arrangement is priced under its own variation (clause 2).

Schedule A — processing and retention

The DPA states the ordinary processing operations and data categories. Record the clinic's specific purposes/restrictions and category schedule here. A separate migration instruction is required only if a migration is commissioned; do not demand an extra migration document from a clinic starting with no import.

| Record category | Purpose and controller | Period / start trigger / basis | Deletion and backup method | |---|---|---|---| | Clinical record, including final clinician notes | Delivery of care by the Customer as controller | [To complete by the Customer. A common professional recommendation is the patient's lifetime plus eight years; the Customer documents the necessity and any specialty or statutory duty. It is not a universal statutory minimum] | Controller-instructed erasure of the active record, followed by backup expiry within the period in clause 4 | | Raw consultation audio, if enabled | Working aid, not the record. The checked transcript and the clinician's note are the clinical record | Deleted 24 hours after the clinician accepts the note, and in any case 7 days after recording. The Customer may instruct a different period, which overrides these defaults (audio retention schedule). Deletion runs nightly | Scheduled deletion of the audio object; backup expiry within the period in clause 4 | | Raw/edited transcripts | Same purpose as the clinical record once filed to it; working data until filed | Filed to the clinical record: as the clinical record row. Not filed: kept until the Customer files or deletes it (see the working-data window below) | Active deletion; backup expiry as above | | Patient messages, submissions and uploads | Care communication and record completion by the Customer | Filed to the clinical record: as the clinical record row. Not filed: kept until the Customer files or deletes it (see the working-data window below) | Active deletion; backup expiry as above | | Imported source files and temporary processing | Migration and format conversion only, where a migration is commissioned | Working data, under Schedule 2 of the DPA: 7 days after an import is cancelled or fails; for a finished import, 30 days after its unmatched documents have left Needs Filing and never later than 90 days after the import finished; a staged file that is the only copy of a document still waiting to be filed is kept until it is filed | Nightly deletion; import holding files are not copied to backups | | Patient links, sharing and representative authority | Controlling who may see a record | Authority records follow the clinical record. Share links and their tokens are working data and expire on their own stated expiry, independently of the record they point at | Link/token expiry and revocation; authority records deleted with the record | | Clinical-access/security and choice evidence | Accountability, security investigation and proof of the patient's choices | Access and security logs: as stated in the security documentation. Legal and optional-choice receipts: six years after the relevant relationship ends, subject to a documented necessity assessment, applicable holds and a verified deletion process | Controlled service-only deletion runner with scoped holds; content-free run log retained | | Supplier-held copies and backups | Underlying purpose/role | Active supplier copies are deleted under the agreed instruction and supplier terms. Restricted backups expire within the agreed backup period. Any separate lawful retention is identified by category, role, basis and period | Supplier deletion on instruction; backup expiry by rotation, not by selective edit |

The Customer's acceptance of this order is the documented instruction. Article 28(3)(a) requires the processor to act only on the controller's documented instructions. The Customer does not need to supply a separate instruction document: accepting this order at signup adopts the periods in this Schedule A as the Customer's documented retention instruction to DJG Media, and the executed copy is the record of it. Where the Customer wants different periods, it states them in this Schedule before acceptance and those override the defaults. Leaving a row unchanged is an instruction to apply it.

Working-data window. Working data that is not filed to the clinical record is deleted from active systems after [30 days, unless the Customer sets another period here], and in any case under clause 4 when service ends. Automatic deletion on this window is not yet in place for unfiled transcripts, messages and uploads; until it is, they are kept until the Customer files or deletes them, and the Supplier deletes them on the Customer's written instruction.

Two classes. Anything filed to the clinical record follows the clinical record's period. Everything else is working data. Filing is a workflow classification, not the legal test for retention: the Customer assesses the purpose, necessity and applicable duties for each category, including correspondence or audio that itself forms part of a care record.

Record any legal holds and retention exceptions, and how they are reviewed and released. Do not classify every professional recommendation as a statutory minimum. The clinic's privacy notice must identify its processing and our role (template).

Schedule B — supplier authorisation

Complete only for the routes actually used. The public register includes historical and excluded providers and is not itself this clinic's authorised set. Assess controller versus processor roles per service. In particular, payment processing for the Supplier's own billing and clinic invoice processing need not have identical roles.

| Provider/service | Purpose, data and role | Countries/remote access | Contract/transfer evidence | Retention/configuration evidence | Authorised? | |---|---|---|---|---|---| | Supabase database/auth/storage/backup | To complete | To complete | To complete | To complete | Pending | | Google service(s), if included — list each | To complete | To complete | To complete | To complete | Pending | | Vercel hosting/logs | To complete | To complete | To complete | To complete | Pending | | Sentry monitoring, if included | To complete | To complete | To complete | Scrubbing/access evidence | Pending | | Resend transactional email, if included | To complete | To complete | To complete | To complete | Pending | | Stripe service(s), if included | To complete | To complete | To complete | To complete | Pending | | Apple APNs, if included | Device tokens/minimal notifications; role to confirm | To complete | To complete | To complete | Pending | | Twilio (staff sign-in codes by text, if a staff member chooses it) | To complete | EU and US routing | To complete | To complete | Pending | | Google Cloud Document AI, Maps and Places, reCAPTCHA, if included | To complete | EU | To complete | To complete | Pending | | Mapbox (maps and place search), if included | To complete | United States | To complete | To complete | Pending | | Microsoft 365 or Google Workspace mailbox/calendar, if the Customer connects one | To complete | Where the Customer's account is held | To complete | To complete | Pending |

The DPA's advance supplier-change notice and objection process applies. Adding a row here does not fill a missing contract or transfer safeguard.

Schedule C — founding practice

This Schedule applies only where clause 2 of this order says "Founding discount / free period: Schedule C applies".

C1. Who is a founding practice. The Customer is a founding practice if this order says so and the order is accepted on or before 31 December 2026. The Supplier accepts no more than ten founding practices.

C2. The founding price. While this Schedule applies, the Customer pays 50% of the subscription price recorded in clause 2 for its plan, and of any plan it later moves to under clause 8.4. The discount:

• applies to subscription fees only, not to the platform fee on patient card payments or to third-party charges passed through at cost;
• runs from the go-live date for as long as this agreement continues without a break;
• ends if the agreement ends, and does not revive if the Customer later signs a new order;
• survives a change of plan, and transfers to a buyer of the practice that takes an assignment of this agreement.

After 36 months the price lock in clause 8.4 ends, but the founding discount continues: it applies to whatever price is then payable.

C3. What the founding practice gives. The Customer will use reasonable efforts to take part in a call with the Supplier of about 30 minutes a week during the first six months after go-live, to say what got in its way. Missing a call is not a breach and does not end the discount. Feedback may be used to improve the Service; it contains no patient data, and nothing said on a call is published or attributed without the Customer's written consent.

C4. Money back, at any time. A founding practice may end this agreement at any time by written notice to support@askbrigid.com, with immediate effect. The Supplier then refunds every subscription fee paid under this order, within 30 days of the notice, provides the export in clause 8.1 free of charge, and applies clause 4 to return or deletion. Platform fees on patient card payments are not refunded, because they relate to money the practice has already received. This replaces clause 8.2's 90-day limit for a founding practice.

C5. Publicity. The Supplier will not name the Customer as a founding practice, or use its name or any quotation, without the Customer's prior written consent, which may be withdrawn for future use.

C6. Precedence. This Schedule is a commercial term of this order. It does not change the DPA or any personal-data obligation.

Execution

| | Customer | Supplier | |---|---|---| | Legal entity | Pending | DJG Media Limited | | Authorised signatory / role | Pending | Pending | | Signature or attributable electronic acceptance | Not signed | Not signed | | Date and exact document version | Pending | Pending |

Before execution: complete the Customer particulars, record the authorised signatories, settle every "To complete" item and attach the applicable schedules. Publishing this template is not a signature by either party.

---

This page renders the document itself. Its fingerprint identifies the exact wording published.

SHA-256: d962189ce8490b79590fd1aa4c4ef48ac3df5c07cd4a51be333cc0a37d3e2b48
Source: docs/legal/ORDER_FORM_2026-10-02_v10.md