Terms and conditions

For purposes of these Terms:

Company: Refers to Cornerstone Credentialing and its legally registered operating entity.

Client: Refers to any individual, medical professional, medical practice, clinic, healthcare organization, or authorized representative engaging Cornerstone's services.

Healthcare Provider: Refers to physicians, practitioners, licensed medical professionals, and other healthcare personnel whose information is processed in connection with credentialing services.

Credentialing Services: Refers to administrative assistance involving provider credentialing, enrollment, verification coordination, recredentialing, application preparation, CAQH assistance, payer enrollment support, and other agreed healthcare administrative services.

Confidential Information: Refers to non-public business, financial, operational, professional, and personal information disclosed in connection with the Company's services.

Personal Information: Refers to information that identifies or can reasonably identify an individual, including information protected under applicable privacy laws.

Protected Health Information (PHI): Refers to protected health information as defined under the U.S. Health Insurance Portability and Accountability Act (HIPAA), when applicable.

Cornerstone provides administrative and operational support services related to healthcare provider credentialing and enrollment.

Depending on the specific service agreement, our services may include:

• Provider credentialing assistance.
• Insurance payer enrollment support.
• Medicare and Medicaid enrollment assistance.
• CAQH profile assistance and maintenance.
• Provider information collection and organization.
• Primary-source verification coordination.
• Recredentialing assistance.
• Professional license and certification verification coordination.
• Application preparation and submission assistance, when authorized.
• Follow-up communications with insurance payers and healthcare organizations.
• Administrative document management.
• Other healthcare administrative services agreed upon in writing.

The exact services, deliverables, fees, timelines, and responsibilities will be established through an applicable proposal, service agreement, statement of work, or other written arrangement.

Cornerstone reserves the right to decline any requested service that is outside its capabilities, contractual scope, legal authority, or permitted business activities.

Cornerstone provides administrative assistance and does not control the decisions of insurance companies, government agencies, healthcare organizations, licensing boards, accreditation organizations, or other third-party institutions.

Accordingly, Cornerstone does not guarantee:

• Approval of credentialing applications.
• Acceptance into any insurance network.
• Approval of Medicare or Medicaid enrollment.
• Approval of provider privileges.
• Provider licensing or certification.
• Specific processing or approval timelines.
• Effective dates of provider enrollment.
• Reimbursement eligibility or payment.
• Continued participation in any payer network.
• Any particular financial or business outcome.

All credentialing and enrollment decisions remain with the applicable authorized organizations and regulatory authorities.

Any estimated processing times communicated by Cornerstone are estimates only and may change depending on third-party requirements, application completeness, verification procedures, and other circumstances outside our control.

The Client acknowledges that payment for Cornerstone's services is for the agreed administrative work performed, not for a guaranteed approval or enrollment outcome.

The Client is responsible for ensuring that all information and documentation provided to Cornerstone are accurate, complete, current, authentic, and legally authorized for disclosure.

This includes, but is not limited to:

• Full legal names and personal information.
• Social Security numbers and tax identification information.
• National Provider Identifiers (NPIs).
• Medical licenses.
• Educational credentials.
• Residency and fellowship records.
• Board certifications.
• Professional work history.
• Malpractice and professional liability information.
• Disciplinary and adverse-action disclosures.
• Practice locations.
• Ownership and control information.
• DEA registration information, where applicable.
• Medicare and Medicaid enrollment information.
• Insurance and payer-related documentation.

The Client agrees to:

1. Provide accurate and complete information.
2. Disclose material changes to provider information.
3. Supply requested documentation within a reasonable period.
4. Review documents and applications prepared by Cornerstone.
5. Correct errors and omissions before submission.
6. Obtain all necessary permissions and authorizations.
7. Cooperate with verification requests.
8. Respond promptly to requests for additional information.
9. Maintain current professional licenses and required certifications.
10. Notify Cornerstone of any relevant disciplinary action, license restriction, exclusion, or other material change.

Cornerstone is entitled to rely on information and documents supplied by the Client and authorized third parties unless the parties expressly agree in writing to additional verification responsibilities.

Cornerstone is not responsible for inaccuracies, omissions, falsified documents, misrepresentations, or incomplete disclosures originating from the Client or its representatives.

Nothing in this section relieves Cornerstone of its own legal obligations or responsibility for its independently performed services.

The Client represents and warrants that it has obtained all necessary permissions, authorizations, consents, and legal rights before providing Cornerstone with personal information or documents belonging to healthcare providers or other individuals.

Where required, the Client must obtain appropriate written authorization for:

• Collection and processing of provider information.
• Verification of professional credentials.
• Communication with licensing boards and educational institutions.
• Communication with insurance payers.
• Access to provider enrollment platforms.
• CAQH-related activities.
• Access to authorized databases.
• Submission of applications and supporting documents.
• Disclosure or transmission of information to authorized recipients.

Cornerstone will not knowingly access an account, database, provider profile, or government system without appropriate authorization.

The Client remains responsible for ensuring that any person executing a certification, attestation, or legally binding declaration has the required legal authority.

Cornerstone personnel may not impersonate a healthcare provider, sign a provider's personal certification without lawful authority, or make false statements on behalf of a Client.

Cornerstone is an administrative credentialing support provider and does not operate as:

• A medical practice.
• A hospital.
• A healthcare provider.
• A medical licensing board.
• An insurance company.
• An insurance payer.
• A government enrollment authority.
• A legal or accounting firm.
• An accreditation organization.

Cornerstone does not provide medical diagnosis, treatment, legal advice, tax advice, or independent professional licensing determinations.

The Client remains responsible for its own professional, clinical, regulatory, enrollment, and business decisions.

Cornerstone does not replace the Client's internal credentialing committee, medical director, compliance officer, authorized official, or other legally responsible decision-maker.

Credentialing and enrollment activities may involve third-party organizations, including:

• CAQH.
• Medicare and Medicaid.
• Commercial insurance payers.
• State licensing boards.
• National Practitioner Data Bank (NPDB).
• Educational institutions.
• Credential verification organizations.
• Healthcare facilities.
• Other governmental and regulatory authorities.

Cornerstone does not own or control these organizations, their systems, their policies, or their decision-making processes.

The Client acknowledges that third-party organizations may:

• Change their application requirements.
• Request additional documentation.
• Delay processing.
• Reject applications.
• Suspend or restrict access.
• Change enrollment criteria.
• Experience technical interruptions.
• Modify their policies or procedures.

Cornerstone is not responsible for third-party decisions, system outages, processing delays, or actions outside its reasonable control.

This provision does not excuse Cornerstone from performing its agreed contractual obligations with reasonable care.

Where NPDB-related services are offered, Cornerstone will only perform activities permitted by applicable federal regulations and authorized arrangements.

The Client is responsible for establishing its eligibility and legal authority to request NPDB information.

The Client must provide any required designation, written agreement, registration information, or authorization before Cornerstone performs an authorized-agent function.

NPDB information must only be accessed, used, disclosed, and retained for legally permitted purposes.

Cornerstone does not guarantee the completeness of information maintained by the NPDB or other third-party databases.

Nothing in these Terms authorizes Cornerstone or any Client to access restricted information unlawfully or outside the scope of applicable authorization.

Both parties agree to protect confidential information obtained through their business relationship.

Cornerstone will use reasonable and appropriate administrative, technical, and organizational safeguards to protect confidential information from unauthorized access, use, disclosure, alteration, or destruction.

Confidential information may include:

• Provider records.
• Credentialing documentation.
• Financial information.
• Business information.
• Client lists.
• Operational procedures.
• Internal communications.
• Pricing and contractual arrangements.
• Personal and professional information.

Cornerstone may disclose confidential information only:

1. To personnel who require access to perform authorized services.
2. To authorized subcontractors or service providers subject to appropriate contractual protections.
3. To authorized third parties when necessary to perform the agreed services.
4. When required by law, regulation, court order, or lawful governmental request.
5. When otherwise authorized by the relevant Client or individual.

Confidentiality obligations do not apply to information that can be demonstrated to be publicly available through lawful means, independently developed without use of confidential information, or lawfully received without a confidentiality restriction.

Confidentiality obligations continue after termination of the business relationship for as long as the information remains confidential or protected by applicable law.

Cornerstone recognizes that credentialing services may involve sensitive personal information and, depending on the engagement, protected health information.

The Company will process personal information in accordance with applicable privacy and data protection laws, including the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its implementing regulations, and applicable U.S. privacy and healthcare requirements.

Cornerstone will:

• Limit information processing to legitimate and authorized business purposes.
• Restrict access to authorized personnel.
• Maintain appropriate confidentiality obligations.
• Implement reasonable security safeguards.
• Use appropriate contractual protections with service providers.
• Maintain procedures for handling security incidents.
• Handle personal information according to applicable retention and disposal requirements.

The Client acknowledges that no electronic system, internet transmission, or storage environment can be guaranteed to be completely secure.

Cornerstone will take reasonable steps to protect information but does not warrant absolute immunity from unauthorized access, cyberattacks, or other security incidents.

Where HIPAA applies, the parties will execute a separate Business Associate Agreement (BAA) or other appropriate contractual documentation before handling PHI under the applicable engagement.

If a separate BAA or data processing agreement applies, its terms will govern the relevant protected information to the extent of any conflict with these general Terms.

Fees for Cornerstone's services will be established in the applicable proposal, invoice, quotation, or service agreement.

Unless otherwise agreed in writing:

• Payments are due according to the agreed invoice terms.
• Additional services may incur additional charges.
• Work outside the agreed scope may require a separate quotation.
• Government, payer, licensing, verification, or third-party fees are not included unless expressly stated.
• The Client is responsible for applicable taxes and charges imposed on its transactions, subject to applicable law.

Cornerstone reserves the right to suspend services for overdue payments after providing reasonable notice.

Any applicable late-payment charges must be expressly agreed in the applicable service agreement and comply with applicable law.

The Client remains responsible for fees for services already performed and authorized expenses incurred before suspension or termination.

Cornerstone may suspend or terminate services when:

• The Client materially breaches these Terms or an applicable service agreement.
• The Client fails to pay outstanding invoices.
• The Client provides materially false or misleading information.
• The Client refuses to provide necessary documentation or authorization.
• The Client requests unlawful or unauthorized activities.
• Continuing services would create a material legal, regulatory, security, or ethical risk.
• The Client materially interferes with the performance of agreed services.

Where reasonably possible, Cornerstone will provide written notice and an opportunity to correct the issue.

Either party may terminate a service engagement in accordance with the applicable written service agreement.

Upon termination:

1. Outstanding fees become payable according to the applicable agreement.
2. Cornerstone may discontinue pending administrative work.
3. The parties will coordinate the return or transfer of relevant Client materials.
4. Confidentiality and data protection obligations will continue.
5. Information will be retained, returned, or securely disposed of according to applicable legal and contractual requirements.

Termination does not eliminate rights or obligations that accrued before termination.

All content on the Cornerstone website, including text, graphics, logos, design elements, branding, photographs, website layouts, and other original materials, is owned by or licensed to Cornerstone unless otherwise indicated.

No person may reproduce, distribute, modify, publish, or commercially exploit Company intellectual property without prior written permission.

Client-provided documents and records remain subject to the ownership and rights of the applicable Client or individual.

Cornerstone may use its pre-existing templates, internal systems, procedures, and administrative materials when performing services. Unless expressly agreed otherwise, the Client does not acquire ownership of Cornerstone's underlying tools, methods, or proprietary processes.

The website and its general informational content are provided on an "AS IS" and "AS AVAILABLE" basis to the extent permitted by applicable law.

Cornerstone does not warrant that:

• The website will always be available.
• All website content will always be error-free.
• Every third-party system will operate without interruption.
• External databases will contain complete or current information.
• Every application will be accepted or approved.
• Every administrative process will be completed within a particular period.

Nothing in this section excludes warranties or obligations that cannot legally be excluded.

To the maximum extent permitted by applicable law, Cornerstone will not be liable for indirect, incidental, special, exemplary, punitive, or consequential damages, including loss of profits, loss of anticipated revenue, loss of business opportunities, or business interruption arising from the use of the website or services.

To the extent legally permissible, and subject to the exceptions below, Cornerstone's aggregate liability arising out of a particular service engagement will not exceed the total fees actually paid or payable to Cornerstone for that engagement during the twelve (12) months preceding the event giving rise to the claim.

This limitation does not apply to the extent prohibited by law, or to liability that cannot legally be limited or excluded, including applicable statutory obligations and any liability arising from fraud or willful misconduct.

Any other exceptions, including gross negligence, confidentiality violations, and data protection breaches, must be determined in the applicable negotiated service agreement and under governing law.

Nothing in these Terms eliminates the Client's obligation to pay for services properly performed.

To the extent permitted by applicable law, the Client agrees to defend, indemnify, and hold harmless Cornerstone, its officers, directors, employees, and authorized representatives against third-party claims, damages, liabilities, and reasonable legal expenses arising directly from:

• False, inaccurate, incomplete, or misleading information supplied by the Client.
• The Client's failure to obtain necessary authorizations or consents.
• The Client's violation of applicable laws or regulations.
• Unauthorized use of provider information by the Client.
• Fraudulent or unlawful acts committed by the Client or its representatives.
• The Client's misuse of information obtained through credentialing services.
• The Client's material breach of an applicable agreement.

Cornerstone will be responsible for claims to the extent directly caused by its own breach, negligence, willful misconduct, or violation of applicable law, subject to any lawful limitations agreed between the parties.

The indemnified party must provide reasonably prompt notice of the claim and reasonable cooperation in the defense.

No party may settle a claim in a manner that imposes an admission of liability or continuing obligation on the other party without that party's written consent.

Cornerstone may communicate with Clients through email, telephone, approved messaging systems, electronic platforms, and other agreed communication channels.

Where legally valid, electronic records, approvals, and signatures may be used to establish agreements and authorizations.

The Client is responsible for maintaining the security of its accounts and notifying Cornerstone of suspected unauthorized access.

Certain documents may require specific written authorizations, attestations, or signatures under applicable law and third-party requirements.

Electronic communication does not eliminate any legally required signature or verification procedure.

Visitors and Clients agree not to:

• Use the website for unlawful purposes.
• Submit false or misleading information.
• Attempt unauthorized access to Company systems.
• Introduce malicious software or harmful code.
• Interfere with website security or availability.
• Impersonate another individual or organization.
• Access confidential information without authorization.
• Use the website to violate another person's privacy or intellectual property rights.

Cornerstone may restrict access to the website or take appropriate action against unauthorized or unlawful activity.

Cornerstone will not be responsible for delays or failures caused by circumstances beyond its reasonable control, including natural disasters, severe weather, government actions, civil disturbances, widespread internet or telecommunications failures, power outages, cyber incidents, third-party platform outages, or other events that could not reasonably be prevented.

The affected party will make reasonable efforts to minimize the impact and resume performance when reasonably possible.

This provision does not excuse payment obligations already due for services performed.

These website Terms will be governed by the laws of the Republic of the Philippines, without prejudice to mandatory laws and regulations that may apply in other jurisdictions.

The parties will first attempt to resolve disputes through good-faith written negotiations.

If the dispute cannot be resolved through negotiation, it may be brought before the appropriate courts of competent jurisdiction in the Philippines, subject to applicable law.

For U.S. clients, the applicable service agreement may establish a different or additional governing-law and dispute-resolution arrangement where appropriate.

Nothing in this section prevents either party from exercising rights or remedies that cannot legally be waived.

Cornerstone reserves the right to update or revise these Terms from time to time.

Changes will be published on the website with an updated revision date.

Material changes to an existing service agreement will not automatically modify that agreement unless the parties agree or the applicable contract permits such changes.

Continued use of the website after updated Terms are published constitutes acceptance of the revised website Terms to the extent permitted by law.

If any provision of these Terms is determined to be unlawful, invalid, or unenforceable, the remaining provisions will remain effective to the extent permitted by law.

The invalid provision will be interpreted or modified only to the minimum extent necessary to make it enforceable, where legally permissible.

These website Terms govern general website use and related interactions.

A separately executed Master Services Agreement, Statement of Work, Business Associate Agreement, Data Processing Agreement, or other signed client contract will govern the specific service engagement.

In the event of a conflict, the following order of priority will apply:

1. A specifically applicable Business Associate Agreement for PHI matters.
2. A specifically applicable Data Processing Agreement for personal data processing matters.
3. A signed Master Services Agreement.
4. An applicable Statement of Work, subject to the MSA's priority provisions.
5. These website Terms.

A more specific signed provision will control over a general website provision to the extent of the conflict.

For questions, concerns, or requests concerning these Terms and Conditions, please contact: