@open-agreements/open-agreements 0.2.2 → 0.3.1

package/content/templates/common-paper-business-associate-agreement/metadata.yaml

@@ -42,14 +42,122 @@ fields:
     type: string
     description: Unit for breach notification period
     section: Terms
-  - name: fill_in_value
+  - name: breach_notification_number
     type: string
-    description: General fill-in value
+    description: Numeric value for the breach notification period (e.g. 5)
+    section: Terms
+  - name: other_changes
+    type: string
+    description: Prose describing other changes to BAA Standard Terms
     section: Terms
   - name: custom_effective_date
     type: string
-    description: Custom effective date
+    description: Custom effective date (if not date of last signature)
+    section: Terms
+  - name: maintains_designated_record_set
+    type: boolean
+    description: Whether Provider maintains PHI in a Designated Record Set
     section: Terms
+  - name: no_subcontracting
+    type: boolean
+    description: Provider will not subcontract
+    section: Subcontracting
+  - name: subcontracting_with_conditions
+    type: boolean
+    description: Provider will not subcontract unless conditions are met
+    section: Subcontracting
+  - name: subcontract_notice_required
+    type: boolean
+    description: Notice must be provided to Company before subcontracting
+    section: Subcontracting
+  - name: subcontract_permission_required
+    type: boolean
+    description: Company explicit permission required for subcontracting
+    section: Subcontracting
+  - name: no_offshoring
+    type: boolean
+    description: Offshoring of PHI and/or Services is not permitted
+    section: Subcontracting
+  - name: offshoring_with_conditions
+    type: boolean
+    description: Offshoring not permitted unless conditions met
+    section: Subcontracting
+  - name: no_deidentification
+    type: boolean
+    description: Provider will not de-identify PHI
+    section: De-identification
+  - name: deidentification_with_conditions
+    type: boolean
+    description: Provider will not de-identify PHI unless conditions met
+    section: De-identification
+  - name: deidentification_purpose
+    type: string
+    description: Specific purpose(s) for which Provider may de-identify PHI (e.g. generating data analytics)
+    section: De-identification
+  - name: deidentify_for_purpose
+    type: boolean
+    description: De-identification for specific purposes only
+    section: De-identification
+  - name: deidentify_additional_requirements
+    type: boolean
+    description: Additional requirements for de-identifying PHI
+    section: De-identification
+  - name: no_aggregation
+    type: boolean
+    description: Provider will not aggregate PHI
+    section: De-identification
+  - name: aggregation_with_conditions
+    type: boolean
+    description: Provider will not aggregate PHI unless conditions met
+    section: De-identification
+  - name: provider_signatory_type
+    type: enum
+    description: Whether the Provider signatory is an entity or individual
+    options:
+      - entity
+      - individual
+    default: entity
+    section: Signature Block
+  - name: provider_signatory_name
+    type: string
+    description: Full legal name of the Provider's signatory
+    section: Signature Block
+  - name: provider_signatory_title
+    type: string
+    description: Title/role of the Provider's signatory (entity only)
+    section: Signature Block
+  - name: provider_signatory_company
+    type: string
+    description: Company name for the Provider signatory (entity only)
+    section: Signature Block
+  - name: provider_signatory_email
+    type: string
+    description: Notice email address for the Provider
+    section: Signature Block
+  - name: company_signatory_type
+    type: enum
+    description: Whether the Company signatory is an entity or individual
+    options:
+      - entity
+      - individual
+    default: entity
+    section: Signature Block
+  - name: company_signatory_name
+    type: string
+    description: Full legal name of the Company's signatory
+    section: Signature Block
+  - name: company_signatory_title
+    type: string
+    description: Title/role of the Company's signatory (entity only)
+    section: Signature Block
+  - name: company_signatory_company
+    type: string
+    description: Company name for the Company signatory (entity only)
+    section: Signature Block
+  - name: company_signatory_email
+    type: string
+    description: Notice email address for the Company
+    section: Signature Block
 required_fields:
   - company_name
   - party_role

package/content/templates/common-paper-business-associate-agreement/replacements.json

@@ -1,3 +1,4 @@
 {
-  "[ # ]": "{fill_in_value}"
+  "[ # ]": "{breach_notification_number}",
+  "[ insert specific purpose(s), such as \u201cgenerating data analytics for academic research\u201d ]": "{deidentification_purpose}"
 }

package/content/templates/common-paper-business-associate-agreement/selections.json

@@ -0,0 +1,38 @@
+{
+  "groups": [
+    {
+      "id": "designated_record_set",
+      "type": "radio",
+      "options": [
+        { "marker": "Provider maintains PHI in a Designated Record Set", "trigger": { "field": "maintains_designated_record_set", "equals": true } },
+        { "marker": "Provider does not maintain PHI in a Designated Record Set", "trigger": "default" }
+      ]
+    },
+    {
+      "id": "subcontracting_phi",
+      "type": "checkbox",
+      "options": [
+        { "marker": "Provider will not subcontract.", "trigger": { "field": "no_subcontracting" } },
+        { "marker": "Provider will not subcontract unless:", "trigger": { "field": "subcontracting_with_conditions" } },
+        { "marker": "notice has been provided to Company", "trigger": { "field": "subcontract_notice_required" } },
+        { "marker": "with Company\u2019s explicit permission", "trigger": { "field": "subcontract_permission_required" } },
+        { "marker": "Offshoring of PHI and/or Services is not permitted.", "trigger": { "field": "no_offshoring" } },
+        { "marker": "Offshoring of PHI and/or Services not permitted unless", "trigger": { "field": "offshoring_with_conditions" } },
+        { "marker": "Provider will not de-identify PHI.", "trigger": { "field": "no_deidentification" } },
+        { "marker": "Provider will not de-identify PHI unless:", "trigger": { "field": "deidentification_with_conditions" } },
+        { "marker": "doing so for the specific purpose of", "trigger": { "field": "deidentify_for_purpose" } },
+        { "marker": "the following additional requirements for de-identifying PHI", "trigger": { "field": "deidentify_additional_requirements" } },
+        { "marker": "Provider will not aggregate PHI.", "trigger": { "field": "no_aggregation" } },
+        { "marker": "Provider will not aggregate PHI unless", "trigger": { "field": "aggregation_with_conditions" } }
+      ]
+    },
+    {
+      "id": "effective_date",
+      "type": "radio",
+      "options": [
+        { "marker": "Date of last signature on this Cover Page", "trigger": "default" },
+        { "marker": "{custom_effective_date}", "trigger": { "field": "custom_effective_date" } }
+      ]
+    }
+  ]
+}

package/content/templates/common-paper-cloud-service-agreement/README.md

@@ -26,6 +26,24 @@ A cloud service agreement based on [Common Paper's](https://commonpaper.com) sta
 | `jurisdiction` | string | yes | Courts with jurisdiction over disputes |
 | `provider_liability_cap` | string | no | Maximum liability cap for the provider |
 
+
+### Signature Block
+
+| Field | Type | Required | Description |
+|-------|------|----------|-------------|
+| `provider_signatory_type` | enum (`entity` / `individual`) | no | Whether the Provider signatory is an entity or individual (default: `entity`) |
+| `provider_signatory_name` | string | no | Full legal name of the Provider's signatory |
+| `provider_signatory_title` | string | no | Title/role of the Provider's signatory (entity only) |
+| `provider_signatory_company` | string | no | Company name for the Provider signatory (entity only) |
+| `provider_signatory_email` | string | no | Notice email address for the Provider |
+| `customer_signatory_type` | enum (`entity` / `individual`) | no | Whether the Customer signatory is an entity or individual (default: `entity`) |
+| `customer_signatory_name` | string | no | Full legal name of the Customer's signatory |
+| `customer_signatory_title` | string | no | Title/role of the Customer's signatory (entity only) |
+| `customer_signatory_company` | string | no | Company name for the Customer signatory (entity only) |
+| `customer_signatory_email` | string | no | Notice email address for the Customer |
+
+> **Note:** `*_title` and `*_company` are only rendered when the corresponding `*_type` is `entity` (default). When set to `individual`, those cells are left blank even if values are provided.
+
 ## Attribution
 
 Based on the Common Paper Cloud Service Agreement, available at https://commonpaper.com.

package/content/templates/common-paper-cloud-service-agreement/metadata.yaml

@@ -342,6 +342,54 @@ fields:
     type: string
     description: '[Computed] General cap amount text, derived from cap type booleans and amounts'
     section: Liability
+  - name: provider_signatory_type
+    type: enum
+    description: Whether the Provider signatory is an entity or individual
+    options:
+      - entity
+      - individual
+    default: entity
+    section: Signature Block
+  - name: provider_signatory_name
+    type: string
+    description: Full legal name of the Provider's signatory
+    section: Signature Block
+  - name: provider_signatory_title
+    type: string
+    description: Title/role of the Provider's signatory (entity only)
+    section: Signature Block
+  - name: provider_signatory_company
+    type: string
+    description: Company name for the Provider signatory (entity only)
+    section: Signature Block
+  - name: provider_signatory_email
+    type: string
+    description: Notice email address for the Provider
+    section: Signature Block
+  - name: customer_signatory_type
+    type: enum
+    description: Whether the Customer signatory is an entity or individual
+    options:
+      - entity
+      - individual
+    default: entity
+    section: Signature Block
+  - name: customer_signatory_name
+    type: string
+    description: Full legal name of the Customer's signatory
+    section: Signature Block
+  - name: customer_signatory_title
+    type: string
+    description: Title/role of the Customer's signatory (entity only)
+    section: Signature Block
+  - name: customer_signatory_company
+    type: string
+    description: Company name for the Customer signatory (entity only)
+    section: Signature Block
+  - name: customer_signatory_email
+    type: string
+    description: Notice email address for the Customer
+    section: Signature Block
 required_fields:
   - provider_name
   - customer_name

package/content/templates/common-paper-csa-with-ai/README.md

@@ -43,6 +43,24 @@ A cloud service agreement with AI provisions based on [Common Paper's](https://c
 | `ai_policy_reference` | string | no | Reference to AI usage policy (URL or attached) |
 | `ai_additional_terms` | string | no | Additional AI-specific terms |
 
+
+### Signature Block
+
+| Field | Type | Required | Description |
+|-------|------|----------|-------------|
+| `provider_signatory_type` | enum (`entity` / `individual`) | no | Whether the Provider signatory is an entity or individual (default: `entity`) |
+| `provider_signatory_name` | string | no | Full legal name of the Provider's signatory |
+| `provider_signatory_title` | string | no | Title/role of the Provider's signatory (entity only) |
+| `provider_signatory_company` | string | no | Company name for the Provider signatory (entity only) |
+| `provider_signatory_email` | string | no | Notice email address for the Provider |
+| `customer_signatory_type` | enum (`entity` / `individual`) | no | Whether the Customer signatory is an entity or individual (default: `entity`) |
+| `customer_signatory_name` | string | no | Full legal name of the Customer's signatory |
+| `customer_signatory_title` | string | no | Title/role of the Customer's signatory (entity only) |
+| `customer_signatory_company` | string | no | Company name for the Customer signatory (entity only) |
+| `customer_signatory_email` | string | no | Notice email address for the Customer |
+
+> **Note:** `*_title` and `*_company` are only rendered when the corresponding `*_type` is `entity` (default). When set to `individual`, those cells are left blank even if values are provided.
+
 ## Attribution
 
 Based on the Common Paper CSA With AI, available at https://commonpaper.com.