Raf score calculator

RAF Score Calculator
Terms of Service & Privacy Policy

Effective Date: March 18, 2026

https://www.rafscorecalculator.com


Welcome to RAF Score Calculator ("https://www.rafscorecalculator.com"), operated by VBC Risk Analytics Inc., located at 2844 Livernois Road, Suite 99553, Troy, MI 48099. This document contains both our Terms of Service and our Privacy Policy. By using our website or creating an account, you agree to everything described below. If you do not agree, please do not use our service.

We have written this document in plain English so you can understand exactly what you are agreeing to. If anything is unclear, please contact us.

RAF Score Calculator is intended for use by individuals and organizations in the United States. We do not intentionally target or collect data from individuals outside the United States.

Part 1 — Terms of Service

1. Acceptance of Terms

By accessing or using RAF Score Calculator, you agree to be bound by these Terms of Service. If you are creating an account, you must explicitly accept these terms before completing registration by checking the "I agree" checkbox.

For anonymous users (no account), your continued use of the service after being presented with a notice linking to these Terms constitutes your acceptance. A link to these Terms is prominently displayed on the website. If you do not agree to these Terms, you must stop using the service immediately.

2. Description of Service

RAF Score Calculator is a web-based tool that calculates Risk Adjustment Factor (RAF) scores used in Medicare Advantage and related healthcare reimbursement models. The service allows users to enter diagnosis codes and patient demographic information to generate RAF scores across multiple CMS-HCC models.

The service is marketed under the product name Precise Health Risk Compass™ SCORE and consists of three components:

2.1 Web Calculator

The interactive web calculator at https://www.rafscorecalculator.com allows users to enter diagnosis codes and demographics directly in the browser to generate RAF scores. No patient-identifiable information is required or should be entered.

2.2 RAF Score API

The RAF Score API enables programmatic access to RAF score calculations. API sign-up and documentation are available at https://www.rafscorecalculator.com/raf-score-api. The actual API endpoint is hosted at https://restapi.npidataservices.com/raf, which is owned and operated by VBC Risk Analytics Inc.

The RAF Score API does not require or accept any Protected Health Information (PHI). Input consists solely of diagnosis codes and demographic parameters. No patient identifiers, names, dates of birth, or other identifiable information should be submitted to the API.

2.3 RAF Batch Processing

The RAF Batch service enables bulk RAF score calculations for multiple patients. Batch sign-up and documentation are available at https://www.rafscorecalculator.com/raf-score-batch. The actual batch processing endpoint is hosted at https://www.vbcriskanalytics.com/raf-batch-api, which is owned and operated by VBC Risk Analytics Inc.

The RAF Batch service requires a patient/member identifier for each record. You must use only de-identified IDs (such as internal system-generated IDs, sequence numbers, or pseudonymized identifiers). Do NOT submit real Medicare Beneficiary Identifiers (MBIs), Social Security Numbers, names, dates of birth, or any other information that could directly identify a patient.

You are solely responsible for ensuring that all IDs submitted to the RAF Batch service are properly de-identified before submission. If you submit identifiable patient information, you do so at your own risk and are solely responsible for compliance with HIPAA, HITECH, and any other applicable privacy regulations.

2.4 Important: Not a HIPAA-Covered Service

RAF Score Calculator, the RAF Score API, and the RAF Batch service in their standard configuration are not HIPAA-covered entities and are not designed to store or process Protected Health Information (PHI). The web calculator and API do not require any patient-identifiable information. The batch service requires only de-identified IDs. If you choose to enter data that could be considered PHI in any of these services, you do so at your own risk and are solely responsible for compliance with HIPAA and any other applicable privacy regulations.

2.5 HIPAA-Compliant Hosting Option

If your organization requires HIPAA coverage for RAF score calculations — for example, if you need to process Protected Health Information (PHI) or real patient identifiers — we can host a separate, dedicated instance of the service on our HIPAA-compliant and ISO 27001 certified AWS infrastructure.

This dedicated instance is subject to:

The HIPAA-compliant dedicated instance may include:

Additional charges apply for setup, monitoring, and ongoing support of a standalone HIPAA-compliant infrastructure. Pricing will be determined based on the scope of your requirements as defined in the SOW.

To inquire about HIPAA-compliant hosting, please contact us at contact@vbcriskanalytics.com.

3. User Tiers & Account Types

We offer the following service tiers. Features, limits, and pricing may be updated from time to time; the current details are always shown on our pricing page.

3.1 Anonymous Users (No Account Required)

3.2 Free Trial (7 Days)

3.3 Pay As You Go

3.4 Standard (Annual Subscription)

4. User Accounts

To access features beyond anonymous usage, you must create an account. You agree to provide accurate information and keep your login credentials secure. You are responsible for all activity under your account. A valid business email address is required; free consumer email providers (such as Gmail, Yahoo, AOL, and MSN) are not accepted for registration.

All accounts are single-user accounts. You may not share your account credentials with other people or allow multiple individuals to use a single account. Each user must have their own account. Sharing accounts is a violation of these Terms and may result in account suspension or termination.

5. Payment & Billing

All payments are processed securely through Stripe (https://stripe.com). We do not collect, store, or have access to your full credit card number, debit card number, or bank account details. Stripe handles all payment data in accordance with PCI-DSS standards.

Prices are listed on our website and are subject to change. Any price changes will not affect active subscriptions until their next renewal period.

6. Refund Policy

All purchases are final. We do not offer refunds for Pay As You Go credit purchases or Standard subscription payments. We encourage you to use the free trial to evaluate the service before purchasing.

7. Cancellation

You may cancel your Standard subscription at any time through your account settings or by sending an email to support@vbcriskanalytics.com. Upon cancellation, your subscription will remain active until the end of the current billing period. After that date, your account will revert to anonymous access levels. No partial refunds are provided for unused time within a billing period.

Pay As You Go credits are non-cancellable; purchased credits remain available until their 1-year expiration date.

8. Acceptable Use

You agree not to:

9. Termination

We reserve the right to suspend or terminate any account, or restrict access to the service, at our sole discretion, if we reasonably believe that:

Where practicable, we will provide notice before or at the time of suspension or termination. If your account is terminated for a violation of these Terms, no refund will be provided for any unused credits or remaining subscription period.

10. Indemnification

You agree to indemnify, defend, and hold harmless VBC Risk Analytics Inc., its officers, directors, employees, and agents from and against any and all claims, losses, damages, liabilities, costs, and expenses (including reasonable attorneys' fees) arising out of or related to:

For registered users who have accepted these Terms by creating an account, this indemnification obligation is binding. For anonymous users, by continuing to use the service after being presented with a link to these Terms, you acknowledge and agree to this indemnification obligation to the extent enforceable under applicable law.

11. Intellectual Property

RAF Score Calculator, the product known as "Precise Health Risk Compass™ SCORE", and all content, features, design, and functionality of the service are the exclusive property of VBC Risk Analytics Inc. and are protected by United States and international intellectual property laws. "Precise Health Risk Compass" is a trademark of VBC Risk Analytics Inc. "Precise Health Risk Compass™ SCORE" is a product name under the "Precise Health Risk Compass™" trademark. The Precise Health Risk Compass™ SCORE product includes the RAF Score Calculator (web application), RAF Score API, and RAF Batch API. You may not copy, reproduce, distribute, or create derivative works from any part of the service without our prior written consent.

The RAF scores and calculation results generated by the service are provided for your internal use only. You may download and use your own results, but you may not resell or redistribute them as a competing service.

12. Disclaimers

RAF Score Calculator is provided "as is" and "as available" without warranties of any kind, either express or implied. We do not guarantee that the service will be uninterrupted, error-free, or completely secure. While we implement industry-standard security measures, the service is NOT completely secure — no internet-based service can guarantee absolute security.

The RAF scores produced by this tool are for informational and estimation purposes only. They should not be used as the sole basis for clinical decisions, reimbursement claims, or regulatory submissions. Always verify results against official CMS sources and consult qualified professionals.

13. Limitation of Liability

To the maximum extent permitted by law, VBC Risk Analytics Inc. shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising out of or related to your use of the service, including but not limited to loss of revenue, data, or business opportunities, regardless of whether we were advised of the possibility of such damages.

Our total liability for any claim arising from or related to the service shall not exceed the total amount you paid to us in the 12 months preceding the claim. For anonymous users who have not made any payment, our total liability shall not exceed one hundred dollars ($100.00). Anonymous users use the service at their own risk and acknowledge that their use of the free service is provided as a courtesy.

14. Dispute Resolution & Governing Law

These Terms shall be governed by and construed in accordance with the laws of the State of Delaware, United States, without regard to conflict-of-law principles.

14.1 Informal Resolution First

Before initiating any formal dispute resolution, you agree to first contact us at legal@vbcriskanalytics.com to attempt to resolve the dispute informally. We will make good-faith efforts to resolve the matter within 30 days.

14.2 Binding Arbitration (Primary Method)

If informal resolution is unsuccessful, any dispute, claim, or controversy arising out of or relating to these Terms or the service shall be resolved by binding arbitration administered by the American Arbitration Association (AAA) under its Commercial Arbitration Rules. The arbitration shall take place in the State of Delaware. The arbitrator's decision shall be final and binding and may be entered as a judgment in any court of competent jurisdiction.

For claims under $10,000, arbitration may be conducted by telephone or based on written submissions. Each party shall bear its own costs, and the arbitration fees shall be split equally unless the arbitrator determines otherwise.

14.3 Class Action Waiver

You agree that any dispute resolution proceedings will be conducted only on an individual basis and not in a class, consolidated, or representative action. You waive any right to participate in a class action lawsuit or class-wide arbitration against VBC Risk Analytics Inc.

14.4 Exceptions to Arbitration

The following disputes are exempt from binding arbitration and may be brought directly in court:

14.5 Jurisdiction for Court Exceptions

For any dispute that is exempt from arbitration under Section 14.4, or for the purpose of enforcing an arbitration award, the exclusive jurisdiction shall be the state or federal courts located in the State of Delaware.

15. Changes to Terms

We may update these Terms from time to time. When we make changes, we will update the "Effective Date" at the top of this document and notify registered users by email. Your continued use of the service after changes are posted constitutes your acceptance of the updated Terms.

Part 2 — Privacy Policy

This Privacy Policy explains what information we collect, how we use it, and your choices regarding your data when you use RAF Score Calculator.

16. Information We Collect

16.1 Anonymous Users (No Account)

When you use the calculator without an account, we collect:

We track anonymous user actions on the screen to improve our products, provide usage tips, and prevent misuse of our free service. We do not ask for or collect any personal information (such as name or email) from anonymous users.

Important: Because we track data entered by anonymous users, we strongly recommend that anonymous users do not enter real patient-identifiable information. Data entered by anonymous users should be for estimation and educational purposes only.

16.2 Registered Users (Free Trial, Pay As You Go, Standard)

When you create an account, we additionally collect:

16.3 RAF Score API Users

When you use the RAF Score API, we collect:

The RAF Score API does not collect or accept any patient-identifiable information. No patient IDs, names, or other identifiers are submitted to or stored by the API.

16.4 RAF Batch Users

When you use the RAF Batch service, we collect:

The RAF Batch service requires a patient/member identifier for each record, but this must be a de-identified ID only. We store the de-identified IDs as submitted for the purpose of processing and returning results. We do not attempt to re-identify any patient from the de-identified IDs provided.

16.5 Payment Information

All payment processing is handled by Stripe. When you make a purchase, your payment details (credit card number, expiration date, CVC) are entered directly on Stripe's secure payment form. We never receive, see, or store your full payment card details.

From Stripe, we receive only:

17. How We Use Your Information

We use the information we collect to:

We do not sell your data. However, we may share your information (such as name, email, organization, and usage data) with our partner companies to help follow up on your account, provide related services, and offer additional products that may be relevant to your needs. Our partner companies are required to use your information only for the purposes described in this policy and are bound by confidentiality obligations.

18. Cookies & Local Storage

We use the following browser storage technologies:

We do not use advertising cookies or share cookie data with third-party advertisers. You can clear cookies and local storage through your browser settings, but doing so may reset your anonymous usage counter or log you out.

19. Email Communications

We will send you emails related to your subscription, account status, and service updates. These include:

All non-transactional emails (such as product updates and new feature announcements) include an unsubscribe link. You may opt out of these communications at any time. You cannot opt out of transactional emails (payment confirmations, expiration notices, and security alerts) while your account is active, as these are necessary for the operation of your account.

We do not sell your email address to third parties. We may share your email address with our partner companies solely for the purpose of following up on your account and offering related services (see Section 17). You may opt out of partner sharing by contacting support@vbcriskanalytics.com.

20. Third-Party Services

We use the following services:

20.1 Stripe (Payment Processing)

Stripe processes all payments on our behalf. When you make a purchase, you interact directly with Stripe's secure payment infrastructure. Stripe's privacy policy is available at https://stripe.com/privacy.

20.2 NPI Data Services API & VBC Risk Analytics Batch API

Our services use the following internally operated APIs:

Both APIs are owned and operated by VBC Risk Analytics Inc. and are part of the "Precise Health Risk Compass™ SCORE" product suite. They are not third-party services. Data submitted to these APIs is processed in accordance with this Privacy Policy.

21. Data Retention

If you wish to delete your account and associated data, please contact us at support@vbcriskanalytics.com. We will process your request within 30 days, subject to any legal retention requirements.

22. Data Security

We use industry-standard security measures to protect your data, including HTTPS encryption for all data in transit, secure session management, and access controls on our servers. However, no method of electronic transmission or data storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security and do not warrant that unauthorized access, hacking, data loss, or other breaches will never occur. You use the service and transmit data at your own risk.

23. Children's Privacy

RAF Score Calculator is a professional business tool not directed at individuals under the age of 18. You must be at least 18 years old to create an account. We do not knowingly collect personal information from children under 13 in compliance with the Children's Online Privacy Protection Act (COPPA). If we learn that we have collected personal information from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us at support@vbcriskanalytics.com.

24. Your Rights

Depending on your jurisdiction, you may have the right to:

To exercise any of these rights, contact us at support@vbcriskanalytics.com. We will respond within 30 days.

25. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

25.1 Right to Know

You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you. The categories of information we collect are described in Section 16 of this document.

25.2 Right to Delete

You have the right to request that we delete the personal information we have collected about you, subject to certain exceptions (such as data retained for legal compliance, completing transactions, or security purposes).

25.3 Right to Opt Out of Sale / Sharing

We do not sell your personal information to third parties. We may share your information with our partner companies for follow-up and related services as described in Section 17. Under the CCPA, this sharing may be considered a "sale" in certain circumstances. You have the right to opt out of this sharing by contacting us at support@vbcriskanalytics.com. If you opt out, we will cease sharing your information with partner companies while continuing to provide the core service.

25.4 Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights. We will not deny you service, charge you different prices, or provide a different level of quality because you exercised a privacy right.

25.5 How to Submit a Request

To exercise any CCPA right, contact us at support@vbcriskanalytics.com. We will verify your identity before processing your request and respond within 45 days.

26. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be reflected by an updated "Effective Date" at the top of this document. We will notify registered users of material changes by email.


27. Contact Information

If you have any questions about these Terms or our Privacy Policy, please contact us:

VBC Risk Analytics Inc.

2844 Livernois Road, Suite 99553, Troy, MI 48099

Email: legal@vbcriskanalytics.com

Website: https://www.rafscorecalculator.com