Tech preview. In force from 30 October 2026 for the HealthOS SaaS tech preview. We will review and update these documents as the service matures, and give workspace managers at least 30 days’ notice of any change that is materially worse for them.
Who this applies to
This policy is part of the HealthOS SaaS Subscription Terms. It applies to everyone who uses the service through a workspace, and the subscribing organisation is responsible for its people following it.
Government credentials
- Connect only credentials your organisation holds and is entitled to use: your GPMS machine credential, your B2G Developer Portal application, your PRODA device and your own staff’s GPMS identities.
- Do not lodge anything under another person’s GPMS identity, or sign a declaration for someone else.
- Do not use the service to read records from Services Australia or the Department that your organisation has no reason to see.
- Keep your credentials current, and revoke them in RAM or PRODA if they may have been exposed.
Other workspaces and accounts
- Do not try to reach another subscriber’s workspace or data, or to get past the controls that keep workspaces apart.
- Do not share sign-ins, or use another person’s account.
- Do not try to give yourself access or permissions your workspace’s managers have not given you.
Testing and load
- Do not scan, probe, penetration test or load test the service without our written permission. Ask at security@healthos.net.au.
- Do not run automated tools against the service, or use it in a way that degrades it for others, except through an interface we provide for that purpose.
- If you find a weakness, report it as our disclosure policy describes, and do not use it.
The classification
- Do not point another AI system or automated tool at the classification in Code Navigator, and do not paste the index, tabular list or coding standards into another AI tool.
- Do not copy, extract or scrape the classification, or share it outside your organisation.
- Use Code Navigator and Code Captain only in Australia.
Section 12 of the terms sets these out in full.
What you put in
- Only put in personal and health information you are entitled to hold and to have us process.
- Do not upload malicious code, or anything unlawful.
- Do not use the service to send messages people have not asked for.
If this policy is broken
We may remove content, suspend an account or suspend a workspace, as the terms describe, and we will tell the workspace’s managers why. Report misuse to security@healthos.net.au.