Legal

CATO is a data analysis platform designed for biomedical researchers. It provides AI-assisted data exploration, statistical analysis, code execution, and literature review capabilities. By using CATO, you agree to the following terms.

CATO is intended for:

• Exploratory data analysis and statistical modeling
• Generating and executing analysis code in sandboxed environments
• Biomedical literature search and review, including multi-source academic search, AI-powered evidence extraction, citation network analysis, and document generation
• Organizing and managing research datasets
• Full-text analysis of open-access research papers
• Use of expanded bioinformatics tools and analysis libraries available in the sandbox

When using Literature Intelligence, your search queries are transmitted to external academic databases and APIs (PubMed, PMC, Europe PMC, Unpaywall, CORE, Crossref, OpenAlex, DataCite, Semantic Scholar, arXiv, bioRxiv, medRxiv, ChemRxiv, SSRN, Research Square, OSF, Zenodo, HAL, ClinicalTrials.gov, and patent databases). You should not include personally identifiable information or PHI in literature search queries.

If your data originates from health records, you are responsible for ensuring it has been properly de-identified in accordance with HIPAA Safe Harbor (removal of all 18 identifier categories) or Expert Determination (a qualified statistician has certified the re-identification risk is very small) before uploading it to CATO.

You must also refrain from entering PHI into chat conversations, including patient names, identifiers, or any information that could be linked to a specific individual.

Organizations that need to process PHI must enter into an enterprise agreement that includes Business Associate Agreements (BAAs) with CATO and all relevant third-party service providers. Contact us to discuss enterprise deployment options including self-hosted and VPC configurations where data does not leave your infrastructure.

You may not use CATO to:

• Process PHI without an enterprise BAA in place
• Process other identifiable consumer health, genetic, biometric, or patient-level data through a standard account
• Attempt to re-identify de-identified datasets
• Circumvent security controls or sandbox restrictions
• Generate malicious code or conduct unauthorized access
• Violate any applicable laws or regulations
• Using CATO to systematically download or redistribute full-text research papers beyond fair use
• Circumventing publisher access controls or paywalls through CATO's literature tools

You are responsible for maintaining the confidentiality of your account credentials. Do not share your login or API keys with others. Automated or programmatic abuse of the platform is prohibited.

CATO reserves the right to suspend or terminate accounts that violate this policy. We will make reasonable efforts to notify you before taking action, except in cases of egregious or urgent violations.