Go to:
Last updated: 11 December 2025
These Terms and Conditions (the “Terms”) govern the use of software, hosting and professional services provided by Bluesquare SA/SPRL (“Bluesquare”, “we”, “us”) to any customer (“Customer”, “you”).
They apply to all Bluesquare products and services, including but not limited to:
- IASO – data collection and geospatial data management platform
- OpenHEXA – data processing and integration platform
- DHIS2 hosting – secure cloud hosting and maintenance for DHIS2 instances
- On-premise hosting – installation and maintenance of Bluesquare solutions on Customer-owned infrastructure
- Service Packs – prepaid expert support, configuration, integration and training services
By subscribing to, purchasing or using any Bluesquare product or service, you acknowledge that you have read, understood and agree to be bound by these Terms.
1. About Bluesquare
1.1 Legal identity
Bluesquare SA (VAT: BE0501535431) is a company incorporated under Belgian law, headquartered at Hive5, Rue des Francs 79, 1040 Brussels, Belgium.
It designs, deploys, and maintains digital solutions and data infrastructures supporting health and development programmes worldwide.
1.2 Products and services
BBluesquare offers a portfolio of software, hosting and professional services, including but not limited to the products listed above.
Each product and its plans, resource limits and features (e.g. storage, submissions, environments, included support) are described in the Bluesquare Product Catalogue and on the relevant pricing pages, including for example:
These pages are incorporated by reference into these Terms (collectively, the “Product Catalogue”).
1.3 Open-source position
Bluesquare develops and contributes to several open-source projects, including IASO and OpenHEXA.
While these tools are released under their respective open-source licences, Bluesquare provides commercial hosting, maintenance, and integration services for them.
Subscriptions grant access to Bluesquare-managed environments and related services but do not confer ownership or exclusive rights over the underlying software code.
1.4 Role and data responsibility
Depending on the service:
- Bluesquare acts as software publisher and service provider for its tools;
- Bluesquare acts as technical operator and Data Processor for hosted environments;
- The Customer acts as Data Controller, responsible for lawful collection and use of data processed through Bluesquare systems;
- For on-premise deployments, the Customer is also the infrastructure operator and host of all data.
Bluesquare enables Customers to meet their legal and regulatory obligations by providing secure technical environments and good-practice guidance, but the Customer remains responsible for ensuring that data processing is lawful and compliant.
1.5 Service delivery principles
Bluesquare performs its services with due skill, care and diligence consistent with professional standards.We do not guarantee uninterrupted or error-free operation but commit to commercially reasonable efforts and a best-effort service level as described in section 5.
2. Scope, product catalogue and pricing
2.1 product catalogue and pricing evolution
- Product descriptions, plans, resource limits and pricing are defined in the Product Catalogue and on the applicable pricing pages on Bluesquare’s website.
- Bluesquare may update the Product Catalogue, including pricing and plan features, at any time.
- Unless otherwise agreed in writing:
- Updated prices apply to new subscriptions and renewals only;
- Price changes do not retroactively affect fees already paid for a current, fixed subscription term.
2.2 non-refundable nature of fees
Unless explicitly stated otherwise in a signed agreement or where mandatory law requires, all fees are:
- Payable upfront for the selected term or package;
- Non-refundable, non-creditable and non-transferable, even if services are not fully used, are terminated early by the Customer, or are suspended due to Customer breach (including non-payment).
3. use of bluesquare products
3.1 subscriptions (SaaS and hosting)
A Subscription is paid access to a hosted Bluesquare product or hosting service (e.g. IASO, OpenHEXA, DHIS2 hosting), limited to the selected plan and duration.
- Subscriptions are usually monthly or annual and may renew automatically unless otherwise specified.
- The Product Catalogue defines what is included (e.g. capacity limits, onboarding, included Helpdesk hours).
3.2 on-premise setup and maintenance
For on-premise deployments, Bluesquare installs and maintains its software on Customer-owned infrastructure.
Bluesquare provides expertise on the software and best practices, but does not act as an infrastructure manager. The Customer owns and operates the underlying servers, OS, networks and storage.
3.3 service packs
Service Packs are prepaid packages of expert time for configuration, integration, training, hosting maintenance or other professional services across Bluesquare products.
The Product Catalogue describes available sizes, rates and possible uses.
4. helpdesk, service packs and boundary between them
4.1 included helpdesk
Certain subscription plans include Helpdesk support, typically via an online portal or email. Unless otherwise stated, included Helpdesk covers:
- Confirmed software bugs that prevent normal use;
- Incidents or outages in Bluesquare-managed environments;
- Clarifications on standard functionality that are not resolved by documentation, FAQs or training materials.
Helpdesk operates during Bluesquare Business Days and hours as defined in the Product Catalogue (usually Monday–Friday, 9AM to 6PM, CET/CEST, excluding Belgian public holidays).
4.2 service packs (expert services)
Service Packs are used for value-adding work, such as:
- Helpdesk (expert guidance): access to Bluesquare experts for functional and usage support (excluding bug fixing)
- Software configuration: setup of IASO, OpenHEXA, or DHIS2 to match your project’s needs
- Dashboard design: creation of custom visualizations and KPIs for analysis and monitoring
- Hosting maintenance: troubleshooting, technical advice, server updates, database backups, and custom scripts
- Implementation advice: guidance on how to configure and deploy your system efficiently
- Training: capacity-building sessions to help your team understand and use the tools effectively
- System analysis: review of your setup to identify strengths, weaknesses, and areas for improvement
- Historical data import: integration of existing data to track trends over time
- Data cleaning: improvement of data quality through deduplication, validation, and corrections
- Data integration and automated pipelines: connecting systems for automated data exchange and processing
Exclusions:
The following activities are not included unless explicitly agreed upon in writing:
- Custom software development or feature creation
- Tasks requiring third-party licenses or systems outside the agreed technology stack
- Ongoing bug fixes or troubleshooting covered under the Helpdesk included in product subscriptions
Service Pack hours are:
- Prepaid,
- Tracked in increments of 30 minutes,
- Valid for a limited period – 12 months from purchase
- Non-refundable and non-transferable.
4.3 boundary between helpdesk and service packs
To avoid ambiguity:
- Subscription Helpdesk = bug fixing and incident response necessary to ensure the platform functions as documented.
- Service Pack work = advisory and implementation work, even if delivered via the same channel (e.g. “How do I configure a new form?”, “Can you build this dashboard?”, “Please integrate with our DHIS2 instance?”).
If a support request falls outside the scope of included Helpdesk, Bluesquare may ask the Customer to use or purchase a Service Pack to address it.
5. hosting: infrastructure, monitoring and SLA
This section applies to Bluesquare-hosted environments for IASO, OpenHEXA, DHIS2 hosting and similar services.
5.1 infrastructure and security
Bluesquare:
- Hosts customer systems on reputable cloud providers (e.g. AWS, OVH or equivalent);
- Uses modern deployment practices (containers, orchestration, managed databases) as appropriate;
- Applies:
- Encryption in transit (HTTPS/TLS);
- Encryption at rest where supported;
- Firewalling and controlled network access;
- Restricted SSH access for authorized staff only;
- Regular application and OS security updates.
5.2 monitoring and incident management
- Hosting environments are monitored for availability and core performance metrics (CPU, memory, disk, service health).
- Alerts are sent to Bluesquare’s operations team for investigation.
- In case of incident, Bluesquare will use best efforts to identify the issue and restore normal operation.
5.3 backups and disaster recovery
- Bluesquare performs automated backups of databases (and, where relevant, application storage) at least daily, with a minimum retention of 7 days, or longer where specified in a particular plan.
- In case of data loss or corruption caused by technical failure within Bluesquare-managed infrastructure, Bluesquare will use commercially reasonable efforts to restore from the most recent valid backup.
- The Customer is encouraged to request exports and maintain additional archives when required for compliance or internal policies.
5.4 service availability and best-effort SLA
Bluesquare operates under a Best Effort Service Level Agreement:
- Target uptime: 99% monthly for production environments under Bluesquare’s control,
- Excluding: scheduled maintenance, third-party provider outages, Customer-side connectivity issues, and force majeure (see section 10).
Indicative response times during Business Days (CET/CEST):
- Blocking issues (system down / major outage): initial response within ½ business day;
- Non-blocking issues: initial response within 2 business days.
These are targets, not guaranteed service credits. Bluesquare does not warrant specific resolution times or uninterrupted availability but will act with professional diligence and keep the Customer informed.
6. on-premise hosting and local environments
This section applies where Bluesquare software is installed on infrastructure owned or controlled by the Customer.
6.1 we help, you own the infrastructure
- Bluesquare provides expertise on configuration, setup and updates of IASO, OpenHEXA, DHIS2 or similar tools on local servers, but:
- Bluesquare is not an infrastructure manager;
- Bluesquare does not host Customer data in on-premise scenarios;
- The Customer is fully responsible for hardware, operating system, network, power, storage and physical security.
- The Customer is both:
- The Data Controller, and
- The operator of the environment where data is stored and processed.
6.2 customer responsibilities
The Customer remains responsible for:
- Providing and maintaining adequate CPU, RAM, storage and disk capacity;
- Ensuring stable electricity and cooling;
- Maintaining operating system patches and security;
- Managing firewalls, network routes, VPNs and internet connectivity;
- Implementing and validating a robust backup strategy for the entire environment;
- Monitoring hardware health (disk usage, temperature, CPU, memory) and reacting to alerts;
- Replacing faulty hardware and expanding resources as required;
- Ensuring compliance with applicable data protection laws (e.g. GDPR).
Bluesquare cannot guarantee service continuity or data integrity if these conditions are not met.
6.3 remote access requirement
To perform setup, updates and troubleshooting:
- The Customer must provide Bluesquare with secure remote access (e.g. SSH, VPN, Portainer or equivalent), with sufficient rights to perform the agreed tasks.
- If such access is:
- not provided,
- withdrawn,
- severely restricted, or
- unreliable,
then:
- Bluesquare may be unable to perform its obligations (e.g. apply updates, diagnose incidents, restore from backups);
- Any resulting unavailability, data loss or degradation is not attributable to Bluesquare;
- Bluesquare’s obligations may be suspended until appropriate access is restored, without any refund or credit.
6.4 operational limitations
Given the diversity of local environments, Bluesquare cannot guarantee:
- The same availability or performance levels as its cloud hosting;
- Successful major OS upgrades done in-place on production servers;
- Recovery when disks are full, backups are missing or corrupted, or logs/monitoring are absent;
- Resolution of incidents caused by third-party changes, local security policies, or incompatible software installed by the Customer.
Bluesquare will use cautious procedures (e.g. backups before major changes when feasible) but cannot be held liable for loss or damage arising from the Customer’s infrastructure state, subject to the global limitation of liability in section 9.
7. data ownership, confidentiality and data protection
7.1 ownership
The Customer retains full ownership and control of all Customer Data uploaded to or processed within Bluesquare products or hosted environments.
Bluesquare does not claim any ownership over Customer Data.
7.2 data controller and data processor
- The Customer is the Data Controller, responsible for defining the purposes and means of processing and for ensuring lawful collection and use.
- When Bluesquare hosts or processes data on behalf of the Customer (e.g. SaaS products, cloud hosting), Bluesquare acts as Data Processor, in line with applicable data protection laws (including GDPR where applicable) and any specific Data Processing Agreement.
- In on-premise scenarios, Bluesquare does not host Customer Data, and data protection compliance remains primarily under the Customer’s responsibility.
7.3 security measures
Bluesquare implements appropriate technical and organizational measures to protect data in its hosted environments, including:
- Encryption in transit and, where supported, at rest;
- Access controls and authentication, with least-privilege principles;
- Restricted administrative access to authorized staff bound by confidentiality;
- Regular security updates and vulnerability remediation;
- Logging and monitoring appropriate to the deployment size and sensitivity.
7.4 confidentiality
Both parties agree to keep confidential all non-public information exchanged during service delivery.
Bluesquare ensures that only authorized personnel access Customer Data for maintenance or support purposes and that they are bound by confidentiality obligations.
7.5 retention and deletion
- Backups are retained for at least the minimum period stated in the Product Catalogue (usually 7 days or more).
- Upon termination of a subscription, the Customer may request export of its data within the period indicated for each product (typically 30 days).
- After that period, Bluesquare may delete or anonymize Customer Data from active systems and backups within reasonable delays, except where longer retention is required by law.
Bluesquare’s general Privacy Policy (available at https://www.bluesquarehub.com/privacy-policy/) describes additional measures and practices; in case of discrepancy, these Terms take precedence for the contractual relationship.
8. third-party dependencies
Bluesquare products and services rely on:
- Open-source components;
- Third-party services (e.g. cloud providers, email gateways, external APIs);
- Customer-supplied systems and integrations (e.g. DHIS2, CommCare, national systems).
Bluesquare is not liable for failures, performance issues, security incidents or unavailability directly caused by:
- Third-party service outages or degradation;
- Changes made by third-party vendors;
- Customer-managed systems or integrations.
Bluesquare will use reasonable efforts to mitigate the impact of such issues where possible but cannot guarantee restoration of services beyond what those third parties provide.
9. limitation of liability
To the fullest extent permitted by law:
- No indirect damages
Bluesquare is not liable for any indirect, incidental, special or consequential damages, including loss of revenue, profit, savings, data, business opportunity or reputation, even if advised of their possibility.
- Aggregate liability cap
Bluesquare’s total aggregate liability arising out of or in connection with the Agreement (including these Terms, the Product Catalogue and any order forms), whether in contract, tort or otherwise, is limited to the total fees paid by the Customer to Bluesquare for the relevant service during the twelve (12) months immediately preceding the event giving rise to the claim.
- Essential purpose
This limitation applies even if any contractual remedy fails of its essential purpose.
Nothing in these Terms excludes or limits liability which cannot be excluded under applicable law (e.g. for death or personal injury caused by gross negligence or wilful misconduct).
10. force majeure
Bluesquare shall not be liable for any delay or failure to perform its obligations due to events beyond its reasonable control, including but not limited to:
- Natural disasters or extreme weather;
- Acts of government or regulatory changes;
- Strikes, labour disputes or civil unrest;
- Widespread internet or power outages;
- Failures of third-party service providers that are not under Bluesquare’s direct control.
In such cases, Bluesquare will use reasonable efforts to resume performance as soon as practicable.
11. service evolution
Bluesquare may improve, modify or discontinue certain features of its products or services from time to time, provided that:
- The core functionality of active, paid subscriptions remains available for the duration of the current term; and
- Any significant change with material impact on usage is communicated to affected Customers in advance where reasonably possible.
Updates to pricing, plan features or new product lines are handled through the Product Catalogue, as described in section 2.
12. amendments
Bluesquare may amend these Terms from time to time.
- The latest version will be published on Bluesquare’s website.
- For ongoing subscriptions, amendments will apply from the next renewal, unless required earlier by law or for security reasons.
- Continued use of Bluesquare products or services after the effective date of updated Terms constitutes acceptance of those changes.
13. governing law and jurisdiction
These Terms and any disputes arising out of or in connection with them are governed by Belgian law, without regard to its conflict of laws principles.
Any dispute shall be submitted to the exclusive jurisdiction of the courts of Brussels, Belgium.
14. governing language
These Terms may be translated into other languages for convenience. In case of divergence or conflict between translations, the English version shall prevail.