Terms of Service

Last updated: July 2026

Welcome to OpenCRO. By using this website, you agree to these Terms of Service.

Purpose of this website

OpenCRO publishes product comparisons and cybersecurity, privacy, and business risk analyses of AI-enabled medical devices and related healthcare software.

Our goal is to educate, inform, and encourage discussion about cybersecurity, privacy, and business risk in digital health while demonstrating the OpenCRO methodology for business threat modeling and risk analysis.

Public information only

Our analyses are generated using publicly available information, including regulatory submissions, public company websites, product documentation, scientific publications, press releases, and other publicly available sources.

• We do not use confidential company information.
• We do not access private systems.
• We do not claim knowledge of any organization's internal security controls.

Modeled scenarios

OpenCRO generates modeled product comparisons, threat stories, threat models, asset valuations, risk scores, and mitigation recommendations using the OpenCRO methodology.

They describe plausible cybersecurity and privacy scenarios derived from publicly available information and established risk analysis techniques. They are not statements of fact about any organization's actual security posture. The existence of a modeled threat or vulnerability does not imply that such a vulnerability exists in any specific product, device, or organization.

Accuracy

We aim to use accurate and current public information. However, public information may be incomplete, outdated, or incorrect. If you believe that any page contains a factual error based on publicly available information, we welcome your feedback and will review the material promptly.

No professional advice

The information on this website is provided for educational and informational purposes only. Nothing on this website should be considered legal, regulatory, cybersecurity, engineering, investment, medical, or other professional advice. Organizations should perform their own independent assessments before making business or technical decisions.

Open knowledge

OpenCRO was created to encourage discussion and improve cybersecurity across the healthcare industry. Unless otherwise stated, all original content created by OpenCRO is licensed under the Creative Commons Attribution-ShareAlike 4.0 International (CC BY-SA 4.0) License.

You are free to:

• Share — copy and redistribute the material in any medium or format.
• Adapt — remix, transform, and build upon the material for any purpose, including commercial use.

Under the following conditions:

• Give appropriate credit to OpenCRO.
• Include a link to the CC BY-SA 4.0 license.
• Indicate if changes were made.
• Distribute derivative works under the same license.

This license applies only to original content created by OpenCRO. Company names, trademarks, logos, product names, regulatory documents, scientific publications, and all other third-party content remain the property of their respective owners and are not covered by this license.

Acceptable use

You may browse, read, download, cite, and share content from this website in accordance with the Creative Commons license described above. You may not falsely represent OpenCRO's analyses as statements of fact, claim endorsement by OpenCRO where none exists, or remove required attribution.

Limitation of liability

This website and its content are provided “as is” without warranties of any kind, express or implied. To the fullest extent permitted by applicable law, OpenCRO shall not be liable for any direct, indirect, incidental, consequential, or other damages arising from the use of this website or reliance on its content.

Changes to these terms

These Terms of Service may be updated from time to time. The latest version will always be published on this page.

Contact

Questions or comments regarding these Terms are always welcome.

You can contact OpenCRO using the contact information at opencro.com/contact.