Healthcare
PE backed. Multi-site provider. One spend category, verified line by line — recurring every year.
Reconciles, reports spend, and automates payments.
No insight into accuracy, pricing, or compliance. No system continuously audits recurring spend. Bill Intelligence fills that gap.
Manages contracts and onboards vendor relationships.
























































PE backed. Multi-site provider. One spend category, verified line by line — recurring every year.
Plug and Play partner. One spend category, one country — recurring every year.
Multi-location services enterprise. Two spend categories, verified line by line — recurring every year.
Healthcare M&A Advisory firm. Over 125 years of experience maximizing business value and $1B+ in deals closed. “Spendly helped identify approximately $150,000 in recurring EBITDA improvement, representing an estimated $1,000,000+ in additional enterprise value based on the transaction multiple.” — Ryan Mingus, Managing Director & Partner, Tusk Practice Sales

Working with Spendly has been a great experience. Their team has helped us uncover meaningful savings and create value without disrupting our existing vendors or day-to-day operations. What really stands out is how easy they are to work with. They are responsive, practical, and focused on delivering results. Spendly has given us another way to identify opportunities to improve our costs while allowing our teams to stay focused on achieving our operational goals.

As CFO, I’m accountable for financial performance and operational discipline. Spendly made an immediate difference by surfacing cost saving opportunities we had previously overlooked. Within a single quarter, we reduced expenses across several vendor categories, and those savings directly improved our bottom line. Spendly is now a core lever in our margin optimization toolkit.

Spendly gives us a repeatable way to drive EBITDA savings across our portfolio. We’ve seen meaningful cost reductions across multiple operating expense categories – often over 30% – without requiring portfolio companies to change core vendors or disrupt business operations. Spendly’s ability to quickly identify cost reduction opportunities, provide the supporting data-driven evidence, and act as “tip of the spear” in negotiating with vendors helps make Bill Intelligence a compelling and resource-efficient value creation tool for private equity.
Time to value is five to seven business days. We start with your largest spend categories, where errors are most likely and the recoverable amount is highest.
No.
Read-only access to your ERP, accounting, AP, or vendor portals — or simply upload invoices and any further data to confidently find you savings. Nothing in your close process changes.
According to IOFM research 39% of operating expense invoices contain a billing error. Based on our data 96% of clients realize a cost reduction and 80-85% of invoices contain a billing error.
A cost-reduction industry expert who knows your spend. The AI does the line-level work; a growth leader outlines how to reduce cost and get refunds.
Last Updated: May 13, 2026
Please read the following Privacy Policy carefully. This Privacy Policy governs and applies to your use of our Web app and our Services. By using our Web app, you acknowledge that you have read and understand all of this Privacy Policy, and you agree to be bound by our Privacy Policy. We are sensitive to the concerns that you have about the use of the Information that you disclose to us via our Web app and use of our Services. Accordingly, this Privacy Policy sets forth our privacy practices and the possible uses of the Information that we gather or you provide us through our Web app and Services.
Spendly, Inc. (collectively referred to herein as “Spendly,” “Company,” “we,” “our,” or “us”) recognizes the importance of protecting personal data we may collect from visitors and any other individual or entity (“Users,” “you,” or “your”) who visit our websites. This Privacy Policy applies to data collection by Spendly and shall apply to your use of the website, www.getspendly.com, and other Spendly-related sites, applications, software, communications, capabilities, and services (“Services”) accessible on or by any top-level Spendly domain owned by us (each, a “Site” and collectively the “Sites”), but excluding services that state that they are offered under a different privacy policy. Any capitalized words not defined in this Privacy Policy shall have the meaning ascribed to them in the Terms of Use.
The Company reserves the right to change this Privacy Policy at any time. If you do not agree to the amended Privacy Policy, you agree to stop using our Web app. You will be deemed to have accepted the amended Privacy Policy if you continue to use our Web app after such changes have been made showing the “Last Updated” date. Any
changes will be effective immediately upon the posting of the new date. If changes are made, we will simply change the date appearing at the top of this page to show when the Privacy Policy was last modified, and you agree it is your responsibility to check back often for updates.
Irrespective of which country or state you live in, you authorize us to transfer, store, and use your information in the United States and any other country or state where we operate. In some of these countries, the privacy and data protection laws and rules regarding when government authorities may access data may vary from those in the country where you live. If you do not agree to the transfer, storage, and use of your information in the United States and any other country where we operate, you agree not to use the Sites or Services.
If you have any questions or comments about this Privacy Policy, please submit a request to spendly@getspendly.com.
Our Privacy Policy applies to all of the Services offered by Spendly and its affiliates, including some Spendly Partners, and Services offered on other sites, but excludes services that have separate privacy policies that do not incorporate this Privacy Policy. Our Privacy Policy does not apply to services offered by other companies or individuals, including products or sites that may be displayed to you, or other sites linked from our Services. Our Privacy Policy does not cover the information practices of other companies and organizations who advertise our Services.
By accessing or using the Sites in any manner, you also agree to be bound by Spendly’s Terms of Use (the “Agreement”). Please read the Agreement carefully. If you
do not accept all of the Terms of Use contained in or incorporated by reference into the Agreement, please do not use the Sites.
We collect information, including personal data, to provide better services to all our Users. We use the term “Personal Data” or “Personal Information” to refer to any information that identifies or can be used to identify you. Common examples include: full name, contact information (including email address), digital identity (such as a login name or handle), information about your device, certain metadata, phone number, age, gender, IP address, geographic location, geo positional data, information supplied during registration, data usage trends, browser information, demographic information, browsing preferences, browsing data, type of device being used, Web app usage information, information regarding any URLs used with our Web app, data regarding use of our Web app, other information relevant to surveys or offers, and any other information we are legally allowed to collect.
Additionally, we will have access to your information, as well as financial and other information you input when using our Web app and software. This information will also include any information or data you enter about other people such as your customers, clients, or any other third parties. We require this information to provide Users with better service. We shall not be liable for, and you agree to indemnify us from, all such claims by third parties related to your misuse of such third-party information. You represent and acknowledge that you have the express written consent to use the information provided by those third parties to facilitate business and transactions with them.
“Sensitive Personal Data” refers to a smaller subset of Personal Data which is considered more sensitive to the individual, such as race and ethnic origin, political
opinions, religious or philosophical beliefs, trade-union membership, genetic or biometric information, physical or mental health information, medical insurance data, or sexual orientation.
As you evaluate whether Spendly is the right solution for your company, you may choose to provide us with Personal Data about yourself, including your name, company name, phone number, and email address by completing forms on our website. You may also choose to provide us with employment and education information when you apply for a job at Spendly via our Site. You may elect to provide us with location and address information. You may also provide us with Personal Data about yourself when you report a problem or have a question about our services.
We collect certain information automatically, such as your operating system version, browser type, and internet service provider. We also collect information about your interaction with the Services, such as creating or logging into your account, or opening or interacting with the Services on your mobile device. When you use our Site, we automatically collect and store this information in service logs, including details of how you used our Site, Internet protocol address, cookies that uniquely identify your browser, the referring web page, and pages visited. We may also collect and process information about your actual location. The information we collect automatically is statistical data and may or may not include Personal Data, but we may maintain it or associate it with Personal Data we collect in other ways or receive from third parties.
We and our partners use various technologies (including cookies, web beacons, pixel tags, and similar tracking technologies) to collect and store information when you visit our services. These technologies allow us to recognize your browser or device, count Users who visit our pages, track website statistics, analyze how visitors arrive at the Sites, and understand what content is popular. We also use third-party analytics providers to understand how visitors use our Site. You may be able to change the preferences on your browser or device to prevent or limit your device’s acceptance of cookies, but this may prevent you from taking advantage of some of our features. For more information about cookies, you may visit www.allaboutcookies.org.
We use your Personal Data in ways that are compatible with the purposes for which it was collected or authorized by you, including:
We use information collected from cookies and other technologies to improve your User experience and the overall quality of our services. We may also use the information we obtain about you in other ways for which we provide specific notice at the time of collection.
From time to time, personal financial information (including credit card information) may be transmitted to facilitate transactions between you and us. Unless you authorize us as part of the Services we provide, we will not share such financial information with third parties other than those required to process and facilitate the sending and receiving of payments, including payment facilitators, banks, processing gateways, financial intermediaries, and merchant processors. You understand that we cannot control how these third parties will use such financial information to perform their services. By using our Web app and Services, you consent to this sharing of financial information. We do not store credit card information; the credit card information and actual processing does not take place on, and is not stored on, our servers. The transaction is processed on the servers of the particular credit card processor we use.
You agree to assume the risk and agree that it is your responsibility to properly handle, secure, not store, and destroy such financial information as may be necessary to protect it from misuse. You hold us harmless and indemnify us from any claims, breaches, loss, or damage resulting from the use of those payment facilitators, banks, processing gateways, financial intermediaries, and merchant processors we use. You agree we shall not be liable to you or any third party for misuse of such financial information.
We do not share personal data with companies, organizations, and individuals outside of Spendly unless one of the following circumstances applies:
With your consent. We will share Personal Data with companies, organizations, or individuals outside of Spendly when we have your consent to do so.
Enterprise Accounts. Your employer or organization may offer you access to our Services. We will share Personal Data with your employer or organization. Your employer or organization can review and manage your use of such enterprise Services.
For external processing. We provide personal information to our affiliates or other trusted businesses or partners to process it for us, based on our instructions and in compliance with our Privacy Policy and any other appropriate confidentiality and security measures. These third parties include marketing partners, third-party hosted services providers, and similar partners. It is our policy to only share Personal Data with contractors, service providers, and other third parties who are bound by contractual obligations to keep Personal Data confidential and use it only for the purposes for which we disclose it to them.
For Legal Reasons. We will share Personal Data with companies, organizations, or individuals outside of Spendly if we have a good-faith belief that access, use,
preservation, or disclosure of the information is reasonably necessary to meet any applicable law, regulation, legal process, or enforceable governmental request; enforce applicable Terms of Use, including investigation of potential violations; detect, prevent, or otherwise address fraud, security, or technical issues; or protect against harm to the rights, property, or safety of Spendly, our Users, or the public. We attempt to notify Users about legal demands for their Personal Data when appropriate in our judgment, unless prohibited by law or court order or when the request is an emergency.
Business Transfers. If we establish a new related entity, are acquired by or merged with another organization, or if substantially all of our assets are transferred to another organization, Personal Data about our Users may be one of the transferred business assets. This includes any potential acquirer, joint venture, or successor entity, and applies in the event of bankruptcy, reorganization, or sale of assets.
Non-Personal and Aggregate Information. Spendly may compile and share information in aggregated form (i.e., in a manner that would not personally identify you) or in de-identified form so that it cannot reasonably be used to identify an individual. We may disclose such de-identified information publicly, to third parties, or to Spendly Partners under agreement with us.
We disclose Personal Information for a business purpose to the following categories of third parties:
We will not disclose, sell, distribute, rent, lease, or use any of a User’s data, Personal Information, or Financial Information, or the data of the User’s customers, clients, lessees, payees, mortgagors, or other third parties, to third parties who are not our officers, directors, members, managing members, employees, business partners, affiliates, strategic partners, licensors, licensees, independent contractors, third-party service providers, agents, or representatives, unless we have your permission or are required by law to do so. We do not store credit card information.
We will not (a) modify your data, except for use with our Web app or when expressly permitted in writing by you; (b) disclose your data except as compelled by law or as expressly permitted in writing by you; or (c) access or use your data except to provide the application and prevent or address service or technical problems, or at your request in connection with customer support matters. In addition, we will comply with all applicable laws in providing the application to you. We agree to maintain the confidentiality of any data accessible by us or our Web app indefinitely following the expiration or termination of this Agreement.
Some of our Spendly Partners are healthcare providers, dental practices, or other entities subject to the Health Insurance Portability and Accountability Act of 1996, as amended by the Health Information Technology for Economic and Clinical Health Act (“HIPAA”). When we provide Services to such Partners, we may receive, create, maintain, or transmit Protected Health Information (“PHI”) on their behalf, including in invoices, billing records, lab fee statements, and other documents submitted through our Web app.
When this occurs:
1. Spendly acts as a HIPAA Business Associate. Our Spendly Partner is the HIPAA Covered Entity and is responsible for the patient relationship, including obtaining all necessary patient authorizations and providing required Notices of Privacy Practices. Spendly’s role is limited to performing the Services described in our agreement with that Partner.
2. The Business Associate Agreement controls. Our handling of PHI is governed by a separate Business Associate Agreement (“BAA”) executed between Spendly and the applicable Partner. In the event of any conflict between this Privacy Policy and the BAA with respect to PHI, the BAA controls.
3. PHI is treated separately from other Personal Data. Notwithstanding any provision of this Privacy Policy that may suggest otherwise:
4. Subcontractors handling PHI. Where Spendly engages subcontractors that may receive PHI in connection with the Services, including cloud infrastructure providers and artificial intelligence service providers, Spendly maintains executed business associate agreements with such subcontractors as required by 45 C.F.R. §§ 164.502(e)(1)(ii) and 164.308(b)(2).
5. De-identified information. PHI that has been de-identified in accordance with the standards set forth in 45 C.F.R. § 164.514(b) is no longer Protected Health Information under HIPAA. Spendly may use such de-identified information for any lawful purpose, including benchmarking, research, trend analysis, product improvement, and to train Spendly’s artificial intelligence and machine learning algorithms and improve Spendly’s products and services.
6. Patient requests. If you are a patient of one of our Spendly Partners and you wish to exercise rights with respect to your PHI, including rights of access, amendment, or accounting of disclosures under HIPAA, please direct your request to the Partner that provides your care. We will forward any such requests we receive to the applicable Partner for processing.
7. Breach notification. In the event of a breach of unsecured PHI, Spendly will notify the affected Partner in accordance with the timelines and requirements set forth in the applicable BAA.
8. State health-data laws. Some U.S. states (including, without limitation, Texas, California, and Washington) impose health-data protections that are stricter than or supplemental to HIPAA. Where applicable, Spendly will comply with such laws in addition to HIPAA.
For more information about how Spendly handles PHI, please contact your account representative or email spendly@getspendly.com.
This section outlines our use of Artificial Intelligence (“AI”) and machine learning technologies. By using our Web app, you acknowledge and agree to the practices described herein.
1. How We Use AI. We may leverage AI and machine learning through our Web app and our or third-party software for various purposes to enhance your experience, improve our services, and operate more efficiently. These uses may include: personalization (tailoring content, recommendations, and features based on your preferences and usage patterns); service improvement (analyzing aggregated and de-identified data to identify trends, improve functionality, and develop new features); security and fraud prevention (detecting and preventing malicious activities, unauthorized access, and fraudulent transactions); content moderation (assisting in identifying and moderating inappropriate or harmful content in accordance with our Terms of Service); customer support (powering chatbots or intelligent assistants to provide faster and more efficient support); and data analysis and insights (extracting insights from data to optimize our operations, marketing, and business strategies).
2. Data Used by AI. Our AI systems may process various types of data, including: information you provide directly (such as your profile information, communications,
content you submit, and other Personal Data); automatically collected data (such as usage data, device information, IP addresses, location data, and other Personal Data); and in some cases, publicly available information. We endeavor to use anonymized or aggregated data where possible for AI training and analysis to minimize the use of personally identifiable information.
3. Limitations and Accuracy of AI. AI models, by their nature, may occasionally produce outputs that are incorrect, incomplete, or based on flawed assumptions. AI models are trained on data, and if that data contains biases, the AI may perpetuate or even amplify those biases. AI may not always fully grasp the nuances of human language, intent, or complex real-world situations, potentially leading to misinterpretations. Any decisions or actions taken based solely on AI outputs should be critically reviewed. Our AI systems are designed to assist, not replace, human judgment and oversight.
4. No Automated Decision-Making with Legal or Significant Effects. Unless explicitly disclosed and with your explicit consent where required by law, we do not use AI for automated decision-making that produces legal effects concerning you or similarly significantly affects you.
5. Data Security and Privacy. We implement appropriate technical and organizational measures to protect the data processed by our AI systems, in accordance with our Privacy Policy. This includes data encryption, access controls, and regular security audits.
6. Your Choices and Rights. Your rights regarding your personal data, as outlined in the “Your Rights and Choices” section of this Privacy Policy, apply to data processed by our AI systems. Depending on your jurisdiction, you may have rights related to access,
rectification, erasure, restriction of processing, and objection to processing, even when AI is involved.
7. PHI within AI Systems. For customers who are HIPAA Covered Entities, Spendly’s use of PHI within AI systems is governed by the BAA between the parties, as described in the “Protected Health Information and HIPAA” section above.
8. Changes to this AI Disclaimer. We may update this AI Disclaimer from time to time to reflect changes in our AI practices or legal requirements. We will notify you of any material changes by posting the updated disclaimer on our website or through other appropriate communication channels. Your continued use of our Web app and Services after such modifications constitutes your acknowledgment and acceptance of the revised AI Disclaimer.
You may have certain rights relating to your Personal Information, subject to local data protection law. Whenever you use our Services, we aim to provide you with choices about how we use your Personal Data and access to your Personal Data. If that information is wrong, we strive to give you ways to update it quickly or to delete it, unless we have to keep that information for legitimate business or legal purposes. To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to the information.
Depending on where you live and the applicable privacy laws, your rights may include:
Under the California Consumer Privacy Act (“CCPA”), California residents have specific rights regarding their personal information, including the rights to access, portability, deletion, and non-discrimination for the exercise of privacy rights. California residents may also opt out of our disclosure of Personal Data to third parties for their direct marketing purposes under the California “Shine the Light” law. To exercise these rights, you may submit a request via email to spendly@getspendly.com. You may also designate an agent to exercise your privacy rights on your behalf, with appropriate documentation (valid power of attorney, requester’s government-issued identification, and authorized agent’s government-issued identification).
The Virginia Consumer Data Protection Act (“VCDPA”), Colorado Privacy Act (“CPA”), Connecticut Data Privacy Act (“CTDPA”), and Utah Consumer Privacy Act (“UCPA”) provide residents of those states with rights to confirm and access, correct, delete, port, and opt out of certain types of processing of Personal Information. Residents may exercise these rights by contacting spendly@getspendly.com.
Some data protection laws, including the European Union’s General Data Protection Regulation (“GDPR”) and corresponding legislation in the United Kingdom, provide you with certain rights in connection with Personal Data you have shared with us. If you are resident in the European Economic Area, you may have the rights to be informed, access, correction, erasure (“right to be forgotten”), to object (opt-out), to data portability, to refuse to be subjected to automated decision-making (including profiling), and to lodge a complaint with a supervisory authority. A list of Supervisory Authorities is available at ec.europa.eu.
The Personal Information Protection and Electronic Documents Act (“PIPEDA”) provides Canadian residents with the right to access the personal information we hold about them and the right to challenge the accuracy and completeness of that information and have it amended as appropriate. Canadian residents may submit a request to spendly@getspendly.com.
Upon receiving your request, we will confirm receipt by sending you an email. We may take steps to verify your identity before granting you access to the information. We will respond to your request within the timeframe required by applicable law (forty-five (45) days for California requests; thirty (30) days for Canadian requests). If we require more time, we will inform you of the reason and extension period in writing.
In some cases, our ability to uphold these rights for you may depend upon our obligations to process Personal Information for security, safety, fraud prevention reasons, compliance with regulatory or legal requirements, or because processing is necessary to deliver the services you have requested. Where this is the case, we will inform you of specific details in response to your request. For PHI requests, please see the “Protected Health Information and HIPAA” section above.
In the preceding twelve (12) months, we have not sold any Personal Information.
Our legal bases for collecting and using Personal Data may include:
In each circumstance, we will weigh the necessity of our processing for the purpose against your privacy and confidentiality interests, including taking into account your reasonable expectations, the impact of processing, and any safeguards which are or could be put in place. We will limit such processing for our legitimate business interest to what is necessary for its purposes.
By providing an email address on the Spendly Sites or Services, you agree that we may contact you in the event of a change in this Privacy Policy, to provide you with any Service-related notices, or to provide you with information about our events, invitations, or related educational information. “Opt-in” is generally defined as any affirmative action by a User to submit or receive information.
You may opt out at any time by:
We reserve the right to contact you in the event of a change in this Privacy Policy or to provide you with any service-related notices.
Third-party partners may place or recognize a unique cookie on your browser when you visit our Sites for the purpose of serving you targeted advertising (also referred to as “online behavioral advertising” or “interest-based advertising”). You may find more
information about entities involved in online advertising and additional choices you may make, including opt-out of having your information used for internet-based advertising, through the Network Advertising Initiative (“NAI”) and the Digital Advertising Alliance (“DAA”).
Spendly customers (“Spendly Partners”) engage us to deliver Services to their employees, customers, and other users. Partner Information, Information about our Partners’ Contacts, and Archival Information are governed by this Privacy Policy, the Spendly Terms of Use, and any other services agreements between Spendly and the applicable Partner.
Spendly Partner Information. We collect information about individuals within our Spendly Partners’ organizations, including name, work email address, work phone number, job title, or similar information. We use Partner Information to support the Partner account, maintain our business relationship with the Partner, respond to Partner inquiries, or perform accounting functions. Spendly Partners may update personal information and password by logging into the Spendly Platform and updating their account, or contact Spendly support to delete their Personal Data. In some cases, we may not be able to delete Partner Information, and in such cases we will tell you why.
Information about our Partners’ Contacts. We collect information about contacts (employees, customers, and others) that may be uploaded into the Spendly Platform. This may include name, email address, phone number, job title, or similar information. We use this information to provide Services to such contacts. Spendly Partners may update or delete this information in the Spendly Platform or by contacting Spendly support.
Archival Information. We collect communications information for archival purposes on behalf of, and as directed by, our Spendly Partners. This information may include emails, texts, websites, and other forms of data or electronic communications. We do not control or monitor the information our Spendly Partners collect and store through our services. It is the Partner’s obligation to obtain all necessary consents and to comply with all applicable laws. Individuals must contact the applicable Partner to correct, amend, or delete their information.
Automatically Collected Information. We collect information automatically about how our Spendly Partners use our services via cookies, web beacons, and similar tracking technologies. We collect this information to monitor, support, and improve our services or to provide Spendly Partners with certain customized features.
We treat Partner Information, Information about our Partners’ Contacts, Archival Information, and Automatically Collected Information as the confidential and proprietary information of our Spendly Partners, subject to the terms of the Spendly Terms of Use and any other service agreement between Spendly and the Partner. We will retain Partner Information for as long as needed to provide services to our Partner, or for the period of time requested by a particular Partner.
The Sites may contain links to webpages operated by parties other than Spendly. We do not control such websites and are not responsible for their contents or the privacy policies or other practices of such websites. Our inclusion of links to such websites does not imply any endorsement of the material on such websites or any association with their operators. We strongly recommend that each User review the third party’s terms and policies before linking to or providing information to those websites. Users may be permitted to export, transfer, upload, or archive their data and other information from our
Web app into various external cloud storage locations. User understands and agrees that we have no control over the security or privacy policies of those external connectors, integration systems, websites, or third-party software applications and agrees to hold us harmless from any claims related to any loss sustained related in any way to the export, transfer, upload, or archive of their data and other information.
Spendly currently processes all customer data within the United States. We do not currently market or offer our Services to residents of the European Economic Area, United Kingdom, or Switzerland.
If you are located in the European Economic Area, United Kingdom, or Switzerland and you choose to use our Services, you authorize the transfer of your information to the United States, where data protection laws may differ from those in your country. If we expand our operations to serve European customers in the future, we will implement appropriate data transfer mechanisms (such as Standard Contractual Clauses or certification under the EU-U.S. Data Privacy Framework) and update this Privacy Policy accordingly.
Spendly maintains administrative, technical, and physical safeguards designed to protect the User’s Personal Data and information against accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure, or use. We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, taking into account technological reality, cost, the scope, context, and purposes of processing weighted against the severity and likelihood that the processing could threaten individual rights and freedoms. We restrict access to personal
information to Spendly employees, contractors, business partners, and agents who need to know that information in order to operate, develop, or improve our services. These individuals are bound by confidentiality obligations. We use commercially reasonable security measures such as encryption, firewalls, and Secure Socket Layer software (“SSL”) or hypertext transfer protocol secure (“HTTPS”) to protect Personal Data.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will use reasonable efforts to protect each User’s personal data, we cannot guarantee the security of data transmitted to our Web app; any transmission is at the risk of each User. Please do not email or text us credit card information or other sensitive personal or financial information.
We may retain your Personal Data for a period of time consistent with the original purpose for collection. We keep your Personal Data for no longer than reasonably necessary for your use of Web apps and Services and for a reasonable period of time afterward. We may also retain your Personal Data during the period of time needed for us to pursue our legitimate business interests, conduct audits, comply with our legal obligations, resolve disputes, and enforce our agreements.
We retain your Personal Data even after your business relationship with us ends if reasonably necessary to comply with our legal obligations (including law enforcement requests), meet regulatory requirements, resolve disputes, maintain security, prevent fraud and abuse, enforce our Terms of Use, or fulfill your request to “unsubscribe” from further messages from us. We will retain de-personalized information after your account has been closed. PHI retention is governed by the BAA.
The Site is not intended for use by children. Our Web app and Services are not intended for those under 18, and we will not knowingly collect any information from anyone under the age of 18. If we discover that we have collected any personally-identifying information from a child or person under the age of 18, we will promptly remove that information from our database. If you believe we might have any information from a child under 18, please contact us at spendly@getspendly.com.
Spendly does not track its users over time and across third-party websites to provide targeted advertising and therefore does not respond to Do Not Track (“DNT”) signals. However, some third-party sites do keep track of your browsing activities when they serve you content. If you are visiting such sites, your browser may include controls to block and delete cookies, web beacons, and similar technologies, to allow you to opt out of data collection through those technologies.
Global Privacy Control (“GPC”) is a technical specification that you can use to inform websites of your privacy preferences regarding ad trackers. We honor the GPC signal automatically in your cookie preferences.
Your provision of Personal Data is required in order to use certain parts of our Services and Web apps. If you fail to provide such Personal Data, you may not be able to access and use our Services and/or Web apps, or parts of our Services and/or Web apps.
Our Privacy Policy may change from time to time. We will not reduce your rights under this Privacy Policy without your explicit consent. We will post any privacy policy changes on this page and, if the changes are significant, we will provide a more prominent notice (including, for certain services or programs, email notification of privacy policy changes). We will also keep prior versions of this Privacy Policy in an archive for your review.
Please contact us if you have any specific questions or would like to access your personal information, request that your personal information be removed from our database, or to have your information updated, changed, or modified. You can contact us via email at spendly@getspendly.com. Spendly, Inc. · spendly@getspendly.com
Last Updated: May 13, 2026
These Terms of Use (“Terms”) govern your access to and use of the services provided by Spendly, Inc. d/b/a “Spendly” (“Spendly,” “we,” “us,” or “our”), including our website located at www.getspendly.com and any related applications, platforms, or services (collectively, the “Services”).
By accessing or using the Services, you agree to be bound by these Terms, our Privacy Policy, and any applicable order forms, subscription agreements, or other commercial agreements (collectively, the “Agreement”).
If you do not agree to these Terms, you may not access or use the Services.
Spendly provides a business expense optimization platform that helps organizations identify, analyze, and reduce operating costs.
Our Services include:
Bill Intelligence is Spendly’s subscription-based software service that analyzes user-provided data, including billing data, expense data, contracts, vendor information, and related business information.
Bill Intelligence may provide:
Important Disclaimers. Bill Intelligence is provided for informational and business support purposes only.
If you elect to use Spendly’s vendor engagement or negotiation services, you authorize Spendly to act as your limited agent solely for:
This authorization applies only to vendor categories you designate and does not allow Spendly to enter into contracts on your behalf, terminate service, or incur charges without your express written approval. You may revoke this authorization at any time by written notice.
Certain Services, including Bill Intelligence, are provided on a subscription basis. By purchasing a subscription, you agree to pay all applicable fees as set forth in your order form or agreement and to authorize Spendly to charge your payment method on a recurring basis.
Auto-Renewal. Subscriptions automatically renew for successive terms unless canceled prior to the renewal date.
Fees and Payments. All fees are due in advance and are non-refundable, except as required by law or expressly stated otherwise.
Price Changes. We may modify subscription pricing with reasonable notice. Continued use of the Services after such changes constitutes acceptance.
Suspension for Non-Payment. We reserve the right to suspend or terminate access to the Services for failure to pay fees when due.
Your use of certain Services may be governed by a separate agreement, including a subscription agreement, order form, or savings share agreement. These agreements govern pricing, billing, term, and service scope. In the event of a conflict, the separate agreement controls.
You must be at least 18 years old to use the Services. If you are using the Services on behalf of a company, you represent that you have authority to bind that entity to these Terms.
To access certain features, you may be required to create an account. You agree to provide accurate and complete information, maintain the security of your credentials, and be responsible for all activity under your account.
You may provide data, documents, and other content (“User Content”) to the Services. You retain ownership of your User Content. You grant Spendly a limited, non-exclusive license to use, process, and analyze your data; provide, maintain, and improve the Services; and generate insights and outputs. You represent that you have all necessary rights to provide such data.
Notwithstanding the foregoing, if any User Content constitutes Protected Health Information under HIPAA, your provision of such PHI to Spendly is governed by the BAA between the parties, which controls in the event of any conflict with this Section 9.
We will use commercially reasonable efforts to protect the confidentiality of your non-public information. We will not disclose your confidential information except as necessary to provide the Services, as required by law, or as permitted by our Privacy Policy.
You agree not to use the Services for unlawful purposes; upload false, misleading, or infringing content; attempt unauthorized access to systems or data; interfere with or disrupt the Services; or reverse engineer or copy the platform.
The Services may reference or interact with third-party vendors or services. Spendly does not control or guarantee third-party services, is not responsible for third-party actions or outcomes, and does not endorse any vendor unless explicitly stated.
We may modify, suspend, or discontinue any part of the Services at any time without liability. We do not guarantee uptime, availability, or uninterrupted access.
All rights in the Services, including software, design, and content (excluding User Content), are owned by Spendly. You are granted a limited, non-exclusive, revocable license to use the Services. You may not copy, modify, or distribute the Services or reverse engineer or attempt to extract source code.
The Services, including Bill Intelligence, may use artificial intelligence (“AI”). AI outputs may contain errors or inaccuracies, be incomplete or outdated, or reflect biases or incorrect assumptions. You are solely responsible for reviewing and validating AI outputs and for any decisions made based on those outputs. Spendly does not guarantee that AI-generated insights will result in cost savings, improved vendor terms, or any measurable outcome.
For customers who are HIPAA Covered Entities, Spendly’s use of PHI within AI systems is governed by the BAA between the parties.
THE SERVICES ARE PROVIDED “AS IS” AND “AS AVAILABLE.” TO THE MAXIMUM EXTENT PERMITTED BY LAW, SPENDLY DISCLAIMS ALL WARRANTIES, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND ACCURACY OR RELIABILITY. We do not guarantee that the Services will be uninterrupted or error-free.
TO THE MAXIMUM EXTENT PERMITTED BY LAW, SPENDLY SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, OR CONSEQUENTIAL DAMAGES, INCLUDING LOSS OF PROFITS, LOSS OF DATA, OR BUSINESS INTERRUPTION. IN ALL CASES, SPENDLY’S TOTAL LIABILITY SHALL NOT EXCEED THE AMOUNT PAID BY YOU IN THE PRIOR SIX (6) MONTHS.
You agree to indemnify and hold harmless Spendly and its affiliates from any claims arising from your use of the Services, your violation of these Terms, your User Content, or your reliance on AI outputs.
You agree to use the Services in compliance with all applicable laws and regulations.
We may suspend or terminate your access at any time for any reason. You may stop using the Services at any time. Upon termination, your access will cease, and certain provisions will survive, including liability and indemnification.
We may update these Terms at any time. Changes become effective upon posting. Continued use of the Services constitutes acceptance.
These Terms are governed by the laws of the State of North Carolina. All disputes shall be resolved in courts located in Mecklenburg County, North Carolina.
If you are a HIPAA Covered Entity (or a Business Associate of a Covered Entity) and you provide Protected Health Information (“PHI”) to Spendly in connection with the Services, the following additional terms apply:
(a) Business Associate Agreement Required. Spendly will execute a Business Associate Agreement (“BAA”) with you prior to receiving PHI. The BAA governs Spendly’s handling of PHI and, in the event of any conflict between these Terms (including the license grant in Section 9, the AI Disclaimer in Section 15, the Limitation of Liability in Section 17, or the Indemnification provisions in Section 18) and the BAA with respect to PHI, the BAA controls.
(b) Limited Use of PHI. Notwithstanding Section 9, the license you grant Spendly with respect to PHI is limited to the uses expressly permitted by the BAA. Spendly will not use PHI for product improvement, AI/ML training, or any purpose other than as permitted by the BAA. Notwithstanding the foregoing, Spendly may de-identify PHI in accordance with 45 C.F.R. § 164.514(b) and use such de-identified information for any lawful purpose, including to train, develop, and improve its artificial intelligence and machine learning models and the Services.
(c) Customer Responsibilities. You represent and warrant that: (i) you have all necessary authorizations from your patients to disclose PHI to Spendly for the purposes described in the BAA; (ii) you will submit only the minimum PHI necessary for Spendly to perform the Services; and (iii) you are responsible for maintaining your own HIPAA compliance program, including required Notices of Privacy Practices and patient authorization processes.
(d) No Endorsement of HIPAA Compliance. Spendly’s provision of the Services and execution of a BAA does not constitute an endorsement, certification, or guarantee of your HIPAA compliance. You remain solely responsible for your own compliance with HIPAA and other applicable healthcare laws.
Spendly, Inc.
Email: support@getspendly.com
Last Updated: May 13, 2026
This Business Associate Agreement (the “BAA”) is incorporated into the Spendly Terms of Service (the “Terms”) by reference and is attached as Exhibit A thereto. This BAA governs the handling of Protected Health Information (“PHI”) by Spendly, Inc., a Delaware corporation (“Spendly” or “Business Associate”), on behalf of customers that are HIPAA Covered Entities or Business Associates of Covered Entities (each, a “Customer,” “you,” or “Covered Entity”).
By accepting the Terms and using the Spendly platform, services, and any related applications (collectively, the “Services”), Customer acknowledges and accepts this BAA. The Effective Date of this BAA is the date on which Customer accepts the Terms.
This BAA supplements, and is part of, the agreement between Spendly and Customer governing the Services (including the Bill Intelligence Agreement or applicable order form, the “Underlying Agreement”). In the event of any conflict between this BAA and the Underlying Agreement or the Terms with respect to PHI, this BAA controls.
Customers who require a separately executed Business Associate Agreement (such as those whose procurement processes require a wet signature) may request a standalone BAA by contacting Spendly at spendly@getspendly.com. The substantive terms of the standalone BAA are identical to this web-posted version.
WHEREAS, Customer is a Covered Entity (or a Business Associate of a Covered Entity) as defined under the Health Insurance Portability and Accountability Act of 1996, as amended by the Health Information Technology for Economic and Clinical Health Act (“HITECH”) and their implementing regulations at 45 C.F.R. Parts 160 and 164 (collectively, “HIPAA”);
WHEREAS, Spendly provides Bill Intelligence services to Customer, including AI-driven analysis of dental laboratory invoices, statements, and related billing documents to identify overcharges, miscoded items, and billing discrepancies (the “Services”), pursuant to the Underlying Agreement;
WHEREAS, in performing the Services, Spendly may receive, create, maintain, or transmit Protected Health Information (“PHI”) on behalf of Customer;
WHEREAS, the Parties enter into this BAA to comply with the requirements of HIPAA, including 45 C.F.R. § 164.504(e);
NOW, THEREFORE, in consideration of the mutual promises contained herein, the Parties agree as follows:
Capitalized terms used but not otherwise defined in this BAA shall have the meanings ascribed to them in HIPAA. Without limiting the foregoing, the following terms used in this BAA shall have the same meaning as those terms in the HIPAA Rules: Breach, Data Aggregation, Designated Record Set, Disclosure, Health Care Operations, Individual, Minimum Necessary, Notice of Privacy Practices, Protected Health Information, Required by Law, Secretary, Security Incident, Subcontractor, Unsecured Protected Health Information, and Use.
1.1 “Business Associate” shall have the meaning given at 45 C.F.R. § 160.103, and in reference to the party to this BAA, shall mean Spendly, Inc.
1.2 “Covered Entity” shall have the meaning given at 45 C.F.R. § 160.103, and in reference to the party to this BAA, shall mean Customer.
1.3 “HIPAA Rules” shall mean the Privacy, Security, Breach Notification, and Enforcement Rules at 45 C.F.R. Part 160 and Part 164.
1.4 “PHI” means Protected Health Information that Spendly creates, receives, maintains, or transmits on behalf of Customer.
1.5 Breach Determination. A “Breach” shall not include any acquisition, access, use, or disclosure of PHI that Spendly has determined, in accordance with the four-factor risk assessment set forth in 45 C.F.R. § 164.402, presents a low probability that PHI has been compromised.
2.1 Services. Spendly may use and disclose PHI only as necessary to perform the Services described in the Underlying Agreement, or as Required by Law. Specifically, Spendly may use PHI contained in lab invoices, statements, and related billing documentation submitted by Customer to identify billing errors, overcharges, miscoded line items, and other discrepancies, and to provide reports and recommendations to Customer.
2.2 Management and Administration. Spendly may use PHI for the proper management and administration of Spendly or to carry out its legal responsibilities. Spendly may disclose PHI for such purposes provided that the disclosure is Required by Law, or Spendly obtains reasonable assurances from the recipient that the PHI will be held confidentially and used or further disclosed only as Required by Law or for the purposes for which it was disclosed, and the recipient notifies Spendly of any instance of which it becomes aware in which the confidentiality of the PHI has been breached.
2.3 Data Aggregation. Spendly may use PHI to provide Data Aggregation services relating to the health care operations of Customer as permitted under 45 C.F.R. § 164.504(e)(2)(i)(B).
2.4 De-Identification. Spendly may de-identify PHI in accordance with 45 C.F.R. § 164.514(a)–(c). Provided that Spendly implements appropriate de-identification criteria in accordance with the Standards for Privacy of Individually Identifiable Health Information set forth in 45 C.F.R. § 164.514(b), Customer acknowledges and agrees that de-identified information is not PHI and that Spendly may use such de-identified information for any lawful purpose, including benchmarking, research, trend analysis, product improvement, and to train Spendly’s artificial intelligence and machine learning algorithms and other internal uses to improve Spendly’s products and services.
2.5 Minimum Necessary. Spendly shall request, use, and disclose only the minimum amount of PHI necessary to accomplish the intended purpose, in accordance with 45 C.F.R. § 164.502(b).
2.6 Prohibited Uses. Spendly shall not use or disclose PHI in any manner that would violate HIPAA if done by Customer, except as expressly permitted by Sections 2.2, 2.3, and 2.7. Spendly shall not sell PHI or use or disclose PHI for marketing purposes except as permitted by HIPAA and only with Customer’s prior written authorization.
2.7 Artificial Intelligence. Spendly may use PHI within internal and external artificial intelligence (“AI”) systems and models to perform the Services, in accordance with and only to the extent permitted by the HIPAA Rules. Where Spendly engages third-party AI service providers in connection with the Services, Spendly shall ensure such providers are bound by written agreements meeting the requirements of Section 3.4 (Subcontractors). Spendly may use de-identified information (de-identified in accordance with Section 2.4) for any lawful purpose, including in AI models or systems Spendly develops or utilizes.
3.1 Safeguards. Spendly shall implement and maintain administrative, physical, and technical safeguards that reasonably and appropriately protect the confidentiality, integrity, and availability of PHI, including ePHI, as required by 45 C.F.R. §§ 164.308, 164.310, 164.312, and 164.316. Access to Spendly’s systems and PHI will be controlled via user IDs and passwords. Spendly is not responsible for any unauthorized use or disclosure of a user ID or password, or for any breach of this BAA arising as a result of any such unauthorized use or disclosure by Customer.
3.2 Reporting of Unauthorized Use or Disclosure. Spendly shall report to Customer any use or disclosure of PHI not provided for by this BAA of which it becomes aware, including any Security Incident, without unreasonable delay and in no case later than sixty (60) calendar days after discovery, as required by 45 C.F.R. §§ 164.400–414. The Parties acknowledge that unsuccessful Security Incidents (such as routine pings, port scans, and unsuccessful login attempts that do not result in unauthorized access) occur frequently and need not be reported individually; this Section 3.2 shall constitute notice of such unsuccessful incidents.
3.3 Breach Notification. Following discovery of a Breach of Unsecured PHI, Spendly shall notify Customer in writing without unreasonable delay and in no case later than sixty (60) calendar days after discovery. The notification shall include the information required under 45 C.F.R. § 164.404(c) to the extent known and available, including:
Customer shall be responsible for taking all further actions, including notification of affected individuals, the Secretary, and the media, at its sole cost.
3.4 Subcontractors. As timely as reasonably possible, and in accordance with 45 C.F.R. §§ 164.502(e)(1)(ii) and 164.308(b)(2), Spendly shall ensure that any Subcontractor that creates, receives, maintains, or transmits PHI on behalf of Spendly agrees in writing to substantially the same restrictions, conditions, and requirements that apply to Spendly under this BAA. Spendly’s Subcontractors that may handle PHI include, without limitation, cloud infrastructure providers and artificial intelligence service providers used in connection with the Services.
3.5 Designated Record Set. Customer acknowledges and agrees that Customer is solely responsible for PHI maintained by Customer in its own systems and records, and that the lab invoice and billing data submitted to Spendly does not constitute a Designated Record Set in the possession of Spendly. Spendly will cooperate in good faith with Customer to make PHI available so Customer can fulfill its obligations with respect to Individuals’ rights of access and amendment, while recognizing that Spendly’s obligations under Sections 3.6 and 3.7 are limited as described in this Section 3.5.
3.6 Access to PHI. To the extent Spendly maintains PHI in a Designated Record Set, within fifteen (15) business days of a written request by Customer, Spendly shall make such PHI available as necessary to enable Customer to comply with 45 C.F.R. § 164.524.
3.7 Amendment of PHI. To the extent Spendly maintains PHI in a Designated Record Set, within thirty (30) business days of a written request by Customer, Spendly shall make any amendment to such PHI as directed by Customer pursuant to 45 C.F.R. § 164.526.
3.8 Accounting of Disclosures. Spendly shall document and, within thirty (30) business days of a written request by Customer, provide an accounting of disclosures of PHI sufficient to permit Customer to respond to a request under 45 C.F.R. § 164.528. Spendly shall maintain documentation of such disclosures for a period of at least six (6) years following the date of termination of this BAA.
3.9 Access by the Secretary. Spendly shall make its internal practices, books, and records relating to the use and disclosure of PHI available to the Secretary for purposes of determining Customer’s compliance with HIPAA.
3.10 Mitigation. Spendly shall mitigate, to the extent practicable, any harmful effect known to Spendly of a use or disclosure of PHI by Spendly in violation of this BAA.
3.11 Compliance with Subpart E. To the extent Spendly is to carry out one or more of Customer’s obligations under Subpart E of 45 C.F.R. Part 164, Spendly shall comply with the requirements of Subpart E that apply to Customer in the performance of such obligations.
4.1 Notice of Privacy Practices. Customer shall notify Spendly of any limitations in its Notice of Privacy Practices under 45 C.F.R. § 164.520 to the extent such limitations may affect Spendly’s use or disclosure of PHI.
4.2 Changes in Permission. Customer shall notify Spendly of any changes in, or revocation of, an individual’s permission to use or disclose PHI to the extent such changes may affect Spendly’s use or disclosure of PHI.
4.3 Restrictions. Customer shall notify Spendly of any restriction on the use or disclosure of PHI that Customer has agreed to under 45 C.F.R. § 164.522 to the extent such restriction may affect Spendly’s use or disclosure of PHI.
4.4 Permissible Requests. Customer shall not request that Spendly use or disclose PHI in any manner that would not be permissible under HIPAA if done by Customer, except as expressly permitted under Sections 2.2, 2.3, and 2.7.
4.5 Authorizations and Patient Requests. Customer is solely responsible for obtaining all authorizations from its patients required under HIPAA to enable Spendly to perform the Services. Customer represents and warrants that it has obtained the necessary authorizations prior to disclosing any PHI to Spendly. If Spendly receives any patient request for access to, amendment of, or accounting of disclosures relating to PHI, Spendly shall forward such request in writing to Customer within five (5) business days of receipt, and Customer shall be solely responsible for responding to such requests.
4.6 Submission of PHI. Customer shall ensure that any lab invoices, statements, or related documents submitted to Spendly contain only the minimum PHI necessary for Spendly to perform the Services. Customer is encouraged to redact or omit patient identifiers where feasible without impairing the Services.
4.7 Notification of Breach. Customer shall promptly notify Spendly of any Breach of HIPAA obligations that may affect Spendly’s use or disclosure of PHI.
5.1 Term. This BAA shall be effective as of the date Customer accepts the Terms and shall remain in effect until terminated as set forth in this Section 5 or until the Underlying Agreement terminates, whichever is later.
5.2 Termination for Cause. Either Party may terminate this BAA and the Underlying Agreement upon written notice to the other Party if the other Party has materially breached this BAA and has failed to cure such breach within thirty (30) calendar days after receiving written notice of the breach. If cure is not feasible, the non-breaching Party may terminate immediately and shall have the right to report the violation to the Secretary.
5.3 Termination for Regulatory Change. Either Party may terminate this BAA upon thirty (30) days’ prior written notice if the HIPAA Rules are amended, or Customer agrees to or becomes subject to restrictions on the use or disclosure of PHI, such that Spendly determines, in its reasonable discretion, that performance of this BAA may cause Spendly to incur unanticipated material costs to comply or face adverse regulatory action.
5.4 Obligations of Spendly Upon Termination. Upon termination of this BAA for any reason, Spendly, with respect to PHI received from Customer, or created, maintained, or received by Spendly on behalf of Customer, shall:
5.5 Survival. The obligations of Spendly under this Section 5, and Sections 3.8 and 6, shall survive the termination of this BAA and the Underlying Agreement.
EXCEPT IN INSTANCES WHERE CUSTOMER VIOLATES ITS OBLIGATIONS UNDER SECTION 4 OF THIS BAA OR ITS CONFIDENTIALITY OBLIGATIONS UNDER THE UNDERLYING AGREEMENT, IN WHICH CASE ITS LIABILITY TO SPENDLY SHALL NOT BE LIMITED, IN NO EVENT SHALL EITHER PARTY BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL OR CONSEQUENTIAL DAMAGES, COVER, PUNITIVE OR OTHER DAMAGES FOR LOSS OF PROFITS, REVENUE, DATA OR USE, INCURRED BY EITHER PARTY OR ANY THIRD PARTY, WHETHER IN AN ACTION IN CONTRACT OR TORT OR OTHER, EVEN IF THE OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES AND NOTWITHSTANDING ANY FAILURE OF THE ESSENTIAL PURPOSE OF THIS BAA OR ANY LIMITED REMEDY HEREUNDER. SPENDLY’S MAXIMUM LIABILITY TO CUSTOMER UNDER THIS BAA SHALL IN NO EVENT EXCEED THE AMOUNT OF FEES PAID BY CUSTOMER DURING THE MOST RECENT SIX (6) MONTH PERIOD BEFORE THE EVENT GIVING RISE TO THE CLAIM.
The provisions of this BAA allocate the risks between Spendly and Customer. The Parties agree that Spendly’s pricing and other terms and conditions of the Underlying Agreement and this BAA reflect the allocation of risk and the limitation of liability specified herein.
7.1 Regulatory References. A reference in this BAA to a section in the HIPAA Rules means the section as in effect or as amended.
7.2 Modifications. Spendly may modify this BAA from time to time by posting an updated version at getspendly.com/baa and providing notice to Customer by email or through the Spendly platform. Continued use of the Services following such notice constitutes Customer’s acceptance of the modified BAA. Spendly will not reduce Customer’s rights under this BAA in a manner that would cause Spendly to fall below HIPAA’s minimum requirements for Business Associates.
7.3 Interpretation. Any ambiguity in this BAA shall be resolved to permit the Parties to comply with HIPAA. In the event of any inconsistency between this BAA and the Underlying Agreement or the Terms, this BAA shall control with respect to PHI.
7.4 Relationship of the Parties. Customer and Spendly agree that Spendly’s services hereunder are being carried out as an independent contractor and not as an employee or agent of Customer.
7.5 No Third-Party Beneficiaries. There are no third-party beneficiaries to this BAA.
7.6 Notices. Notices to Spendly under this BAA shall be sent to spendly@getspendly.com or to such other address as Spendly may designate by posting on the Spendly platform. Notices to Customer shall be sent to the email address associated with Customer’s Spendly account or to such other address as Customer may designate in writing.
7.7 Governing Law. This BAA shall be governed by and construed in accordance with the laws of the State of North Carolina, without regard to its conflict of laws principles, except to the extent preempted by federal law.
7.8 Cooperation in Investigations. The Parties acknowledge that certain breaches or violations of this BAA may result in litigation or investigations pursued by federal or state governmental authorities. Each Party shall cooperate in good faith with the other Party in connection with any such request, investigation, complaint, action, or other inquiry.
7.9 Standalone Execution. Customers who require a separately executed Business Associate Agreement may request a standalone signed version by contacting Spendly. The substantive terms of the standalone BAA are identical to this web-posted version. If a standalone BAA is executed between the Parties, the standalone BAA controls and this web-posted BAA does not apply to such Customer.
There are two ways Customer may accept this BAA:
1. Click-through acceptance via the Terms (default). By accepting the Spendly Terms of Service and using the Services, Customer accepts this BAA as part of the Terms. No separate signature is required. This is the default method of acceptance for the vast majority of Customers.
2. Separately executed BAA. Customers whose procurement processes require a wet signature on the BAA may request a separately executed version by contacting Spendly at spendly@getspendly.com. The substantive terms are identical to this web-posted version.
For questions about this BAA, please contact Spendly at spendly@getspendly.com.