Terms of Service

Last updated: 12 June 2026

These Terms of Service govern your use of Codon. Codon is operated by Bitsort ApS (CVR 37759333), trading as TheraponSystems. By creating an account or using the service you agree to these terms. Codon is a business-to-business service offered to organisations; it is not offered to consumers.

Contracting entity and contact

The Codon service is provided by Bitsort ApS (CVR 37759333), a private limited company registered in Denmark, trading as TheraponSystems. References to “we”, “us”, “Codon” or “TheraponSystems” in these terms mean Bitsort ApS.

Registered address: Tobaksvejen 20, 2860 Søborg, Denmark.

Legal and contractual contact: legal@bitsort.io

The service

Codon is a FHIR R4 terminology server with optional clinical NLP and PHI de-identification add-ons. Plans, ops budgets and features are published on the pricing page. The Foundation tier is free and limited to 1,000 ops per month.

Governing law and venue

These terms are governed by the laws of Denmark, without regard to conflict-of-law rules. Any dispute arising out of or in connection with these terms shall be subject to the exclusive jurisdiction of the courts of Copenhagen (Københavns Byret) as the court of first instance. The service is offered to businesses only and is not directed at consumers, so mandatory consumer-protection venue rules do not apply.

Acceptable use

• The API may not be used to submit personal data without lawful basis under GDPR. The PHI de-identification endpoints are intended to be run BEFORE clinical data leaves your environment, not as a route to export PHI.
• You will not attempt to exfiltrate licensed terminology content (SNOMED CT, LOINC, ICD-10/-11) in bulk for redistribution. Sublicense terms are governed by each terminology's upstream licence.
• You will not abuse rate limits or attempt to circumvent plan entitlements.

Fees, billing and payment

Paid plans are billed in advance per billing period. Card payments are processed by our payment processor, Stripe; by subscribing you authorise the applicable charges. Plan changes take effect according to the behaviour of our billing engine, as follows.

• Plan changes and renewals are reflected from Stripe through to your account entitlements. Upgrades apply on payment; the Foundation tier remains the baseline plan your account falls back to.
• If a payment fails, your subscription enters a dunning grace period. If payment is not recovered within that period your account is automatically downgraded to the free Foundation tier, with the corresponding ops budget and feature set. When a valid payment is subsequently received, your plan is restored automatically.
• Metered overage applies where you have opted into it: Enterprise soft-cap overage is charged per call beyond your budget, and the PHI add-on (€499/month including the first 50,000 PHI ops) is metered at €0.005 per call beyond the bundled volume. Metered usage is reported to Stripe with idempotent reporting and reconciliation.
• Except where required by mandatory law, fees already paid are non-refundable, and we do not provide pro-rated refunds for partial billing periods on downgrade or cancellation.

Limitation of liability

Codon is decision-support tooling for clinical terminology workflows. It is not a medical device and does not make clinical decisions for you. You remain responsible for clinical judgement and downstream use of any code, mapping or AI-assisted output served by the API.

To the maximum extent permitted by law, our total aggregate liability arising out of or in connection with the service is limited to the fees you paid for the service in the twelve (12) months preceding the event giving rise to the claim. We are not liable for any indirect, incidental, special or consequential damages, or for lost profits, revenue, data or goodwill, even if advised of their possibility.

Nothing in these terms limits liability that cannot be limited by law, including liability for gross negligence or wilful misconduct. For breaches of our data-protection obligations under the Data Processing Agreement, our total aggregate liability is limited to two (2) times the fees you paid for the service in the twelve (12) months preceding the event giving rise to the claim; this higher cap applies instead of, not in addition to, the general cap above.

Data processing

Processing of personal data on your behalf is governed by our Data Processing Agreement (DPA), which forms part of these terms where personal data is processed. Clinical and PHI features require the PHI add-on and a signed DPA before they may be used.

The output of the de-identification features is pseudonymised, not anonymised: re-identification cannot be excluded, and human review of the output remains required before any onward use.

Third-party content licences

Some terminologies require you to hold your own upstream licence — for example a SNOMED CT affiliate licence, a UMLS/UTS account, or a WHO licence — as indicated by the in-product license workbench. Codon enforces access gates for licensed content, but holding the required licence remains your responsibility, and you are responsible for compliance with the terms of each upstream licence.

Termination and suspension

We may suspend or restrict access for non-payment or for abuse of the service. On termination you retain your data-subject and portability rights.

• You may export your tenant's data in a portable format (GDPR Art. 20) and request erasure (GDPR Art. 17): encrypted PHI field data is rendered unrecoverable by cryptographic shredding of your tenant keys, while stored files (such as uploaded licence documents) and other tenant records are deleted directly, in the same erasure operation.
• After termination you have a 30-day window to retrieve your tenant data before it is deleted.

Changes to the service and these terms

We may update the service and these terms from time to time. Changes to these terms do not apply retroactively.

For material changes — including price increases and changes that reduce your rights or our obligations — we will give at least thirty (30) days' written notice before the change takes effect, and the change will take effect no earlier than your next billing period. If you do not accept a material change, you may terminate your subscription with effect from the date the change takes effect; in that case we will refund, pro rata, any prepaid fees for the period after termination, notwithstanding the no-refund rule above.

Non-material changes (such as clarifications, changes to features that do not reduce what you have paid for, or changes required by law) take effect when posted. Continued use after a change takes effect constitutes acceptance of the updated terms.

Language

These terms are published in English, Danish and Norwegian. The English text is the governing version; the Danish and Norwegian texts are convenience translations, and in case of any inconsistency the English text prevails.

Contact

Questions about these terms: legal@bitsort.io

For the current Data Processing Agreement template (Markdown) see nexus/docs/compliance/dpa-template.md in the repository.