Physician Code of Conduct

Beema Health seeks to make appropriate, high-quality healthcare easier to access and navigate. This Code establishes baseline conduct expectations for physicians who provide care through Beema Health-branded services using the Bask technology platform (the "Platform").

This Code supplements, and does not replace, applicable federal and state law; licensing-board rules; the policies, protocols, and agreements of the applicable licensed medical group; payer or pharmacy requirements; and generally accepted standards of medical practice. When requirements differ, physicians must follow the stricter applicable standard and promptly seek guidance from the designated Medical Operations Team.

For this Code, "Medical Operations Team" means the clinical operations contact designated by the physician's contracting medical group and/or Bask for the applicable program. Beema Health support may assist with nonclinical platform and customer-service matters but does not direct clinical care.

• Be patient and respectful. Telemedicine may be unfamiliar to patients. Explain processes and options in plain language, invite questions, and respond without ridicule, hostility, or judgment.
• Explain each decision. Give the patient a clinically meaningful explanation when recommending, modifying, or declining treatment. Do not promise a diagnosis, prescription, refund, outcome, or delivery date outside your authority.
• Practice without discrimination. Provide professional care without discrimination on a legally protected or clinically irrelevant basis. Use respectful language and accommodate disability, language, and health-literacy needs when reasonably available.
• Maintain boundaries. Keep communications professional and clinically relevant. Do not harass, exploit, retaliate against, or pursue an inappropriate personal, romantic, financial, or social relationship with a patient.

• Check assigned work and messages. When scheduled or responsible for coverage, review assigned patient messages and work queues at least once each business day and as otherwise required by the applicable service-level, clinical, or on-call policy.
• Arrange coverage. Provide notice of planned absences as early as practicable and in accordance with contractual requirements. For illness or emergency, notify the Medical Operations Team as soon as reasonably possible so safe coverage can be arranged.
• Use clinical priority. Process routine consultations in chronological order unless urgency, patient safety, continuity of care, an active adverse event, or an authorized queue instruction requires a different priority.
• Avoid conflicting care. Do not take over an active consultation assigned to another clinician unless a handoff, coverage need, escalation, or second opinion has been authorized. Complete one substantive consultation at a time and give it your full attention.
• Document handoffs. Record the reason, status, pending actions, and responsible clinician whenever care is transferred.

• Verify the patient. Before providing care, confirm the patient's identity using the Platform's required process. Compare the live or submitted photo with government-issued identification and confirm that name, date of birth, and other required demographics match. Automated verification assists but does not replace physician review. Pause and escalate material discrepancies.
• Confirm the patient's current physical location. Confirm and document the jurisdiction in which the patient is physically located for the encounter or asynchronous episode before diagnosing, treating, or prescribing. Do not assume that residence, shipping address, or prior location is current.
• Identify yourself. Make your name, professional role, relevant credentials, and state of practice available to the patient as required by law and medical-group policy.
• Confirm authority to practice. Provide care only when appropriately licensed, registered, credentialed, privileged, and covered for the patient's location and the services provided. Maintain all required professional liability coverage, DEA registration, and controlled-substance authority, as applicable.
• Establish the relationship and obtain consent. Do not provide medical advice, diagnosis, treatment, or prescriptions until the physician-patient relationship and any required telemedicine and treatment consents have been established and documented under the law of the patient's location.

• Use the same standard of care. Telemedicine does not lower the standard of care. Obtain a relevant history, review available records, ask follow-up questions, and obtain or arrange examination, laboratory testing, vital signs, imaging, or other information when clinically indicated.
• Do not rely on an inadequate questionnaire. A questionnaire may support an evaluation but may not substitute for the individualized clinical assessment needed to meet the standard of care. If the modality or available information is insufficient, pause, request more information, arrange synchronous or in-person evaluation, or refer the patient.
• Review medications and risks. Review allergies, reported medications and supplements, relevant diagnoses, prior Platform treatment plans, contraindications, and clinically significant interactions before making a treatment decision.
• Prescribe independently and lawfully. Prescribe only when medically indicated and permitted by applicable federal and state law, medical-group policy, and the current standard of care. Check the applicable prescription drug monitoring program when required. Never prescribe when safety or legal authority is uncertain; seek clinical review or refer instead.
• Remain within competence and scope. Do not diagnose or treat beyond your training, experience, scope, or the approved program. Refer for in-person, urgent, specialty, or primary care when the patient's needs exceed what telemedicine or the program can safely provide.

• Create a complete, timely record. Document the relevant history, identity and location verification, evaluation modality, assessment, clinical reasoning, consents, orders, prescriptions, patient instructions, communications, follow-up plan, referrals, and disposition. Use objective, respectful language and never alter or backdate a record improperly.
• Explain exceptions and flags. When approving treatment despite a Platform flag, potential contraindication, or apparent inconsistency, document the additional information obtained, how it was obtained, and the clinical rationale for the decision.
• Provide appropriate follow-up. Use the program's configured follow-up workflow and add earlier or additional follow-up when clinically indicated. Do not rely solely on automated outreach when the standard of care requires clinician action.
• Support continuity of care. Give patients clear instructions for questions, worsening symptoms, adverse effects, and follow-up. Coordinate or share records with the patient's authorized care team when permitted and clinically appropriate. Avoid abandonment and arrange an appropriate transition when ending care.
• Track unresolved items. Follow through on ordered tests, referrals, medication issues, adverse events, and patient messages until responsibility is transferred and the transfer is documented.

• Clarify uncertainty. If information is unclear, incomplete, contradictory, or suggests elevated risk, contact the patient or obtain additional records before proceeding. Seek a qualified second opinion when appropriate.
• Recognize urgent and emergent conditions. Follow the current emergency and escalation protocol for severe symptoms, suicidality or self-harm risk, acute mental-status change, serious adverse reactions, suspected overdose, or other urgent concerns. Confirm the patient's location and direct the patient to the level of local care appropriate to the severity; do not use a blanket emergency-department referral when individualized triage is feasible and safe.
• Escalate adverse events. Promptly report suspected serious adverse events, medication errors, safety events, and urgent patient complaints through the designated clinical channel, while taking immediate steps necessary to protect the patient.
• Review current protocols. Use the current condition-specific protocols, emergency plan, and formulary guidance as continuing references. Protocols support but do not replace independent clinical judgment or the standard of care.

• Use only approved systems. Create, access, transmit, and store protected health information (PHI) only through systems and workflows expressly approved by the applicable medical group and Platform privacy/security teams. Do not send PHI through personal email, ordinary SMS, personal cloud storage, consumer file-sharing tools, unapproved project-management tools, or unapproved artificial-intelligence services.
• Apply the minimum-necessary principle. Access and share only the information reasonably necessary for your assigned role and the permitted purpose. Do not access a chart out of curiosity or discuss a patient with anyone who lacks a legitimate need to know.
• Protect credentials and devices. Never share passwords, authentication codes, sessions, or accounts. Use required multifactor authentication, device encryption, security updates, screen locks, and other mandated safeguards. Do not leave an authenticated device unattended.
• Maintain a private environment. Work where unauthorized people cannot see the screen, overhear conversations, or view records. Use headphones or a privacy screen when appropriate and avoid unsecured public networks unless an approved secure connection is in use.
• Do not make unauthorized copies. Do not photograph, screenshot, print, download, locally store, or transfer patient information except through an approved workflow for a legitimate care or operational purpose.
• Report incidents immediately. Immediately report suspected phishing, credential compromise, misdirected messages, unauthorized access or disclosure, lost or stolen devices, malware, and other privacy or security incidents through the designated incident-reporting process. Do not investigate, delete evidence, or contact affected patients unless directed by the authorized response team.

• Put the patient first. Clinical recommendations must be based on the patient's interests and medical needs. Compensation, business metrics, prescription volume, pharmacy utilization, patient demand, or a desired outcome must not influence clinical judgment.
• Avoid improper self-referral and solicitation. Do not steer Platform patients to your own practice, a business in which you or an immediate family member has a financial interest, or another service for personal gain. Any permitted referral involving a potential conflict must be clinically appropriate, lawful, fully disclosed, and handled under medical-group policy.
• Decline improper benefits. Do not request or accept a kickback, fee split, gift, or other benefit intended to influence prescribing, referrals, or patient care.
• Practice only when fit for duty. Do not provide care while impaired by alcohol, cannabis, controlled or mind-altering substances, medication effects, illness, fatigue, or any physical or mental condition that could compromise safe judgment. Arrange coverage and seek assistance when needed.
• Protect patient trust. Do not reveal patient information in public reviews, social media, teaching, marketing, or informal discussion without lawful authority and any required written authorization. Do not retaliate against a patient who complains, requests records, declines treatment, or exercises a legal right.

• Keep credentials current. Complete required onboarding, training, attestations, and continuing education, and promptly update licensure, credentialing, DEA, malpractice coverage, contact, and availability information.
• Report professional actions. Promptly notify the contracting medical group and designated Medical Operations Team, as required by agreement and law, of a license restriction or lapse; DEA action; board complaint or investigation; hospital or payer action; malpractice claim, suit, or judgment; exclusion or debarment; or criminal charge or conviction that may affect credentialing, patient safety, or the ability to practice.
• Cooperate with quality and compliance review. Participate honestly and promptly in authorized chart review, safety review, audit, complaint investigation, remediation, and peer review. Preserve records and confidentiality throughout the process.
• Raise concerns. Report suspected unsafe, unlawful, unethical, discriminatory, fraudulent, or privacy-compromising conduct through the designated channel. Nothing in this Code prohibits a report to a regulator, licensing board, law-enforcement agency, or other authority as protected or required by law.

Physicians are responsible for reading and following the current version of this Code and all applicable clinical and operational policies. Questions about clinical, licensure, prescribing, or patient-safety requirements should be directed to the designated Medical Operations Team. Questions about nonclinical Beema Health access or support may be sent to support@beemahealth.com.

A suspected violation may result in review, remediation, suspension of Platform access or assignments, reporting when legally required, or other action permitted by the physician's agreements and applicable law. Nothing in this Code alters the physician's independent professional obligations or creates an employment relationship where none otherwise exists.

Beema Health may update this Code as laws, clinical standards, technology, and program requirements change. Material updates should be communicated through the applicable policy or contracting process.

Organization / Support

Beema Health LLC
2510 Summit Drive
Colorado Springs, CO 80909
Phone: +1 303-351-4505
Email: support@beemahealth.com
Website: beemahealth.com

Platform and medical-services notice. Beema Health-branded services use technology supplied by Bask Health, Inc. Medical services are provided by the physician and the applicable licensed medical group identified in patient-facing disclosures, consent materials, and treatment records. Physicians must also follow that medical group's policies and protocols.