Credentialing, State Licensure & Professional Liability Addendum
Agreement 04 of 06

RonanRx Inc.

This Addendum is part of the RonanRx Provider Packet. The Provider, Provider Entity, fees, dates, and other particulars are stated on the Packet cover page and are incorporated into this Addendum by reference. This Addendum supplements the Management Services Agreement (the "MSA"). It sets out the credentials the Provider must supply, the compliance commitments the Provider makes concerning licensure, professional liability coverage, telehealth, and prescribing, and the rights RonanRx holds to keep the Marketplace lawful and current.

1. Relationship to the MSA

This Addendum forms part of and is governed by the MSA. Capitalized terms not defined here have the meanings given in the MSA and the shared Packet definitions. In any conflict between this Addendum and the general body of the MSA on the specific subjects of credentialing, licensure, professional liability coverage, telehealth, or prescribing, this Addendum controls. Nothing in this Addendum changes the core division of roles: RonanRx supplies non-clinical MSO and Platform services only and does not practice medicine, and the Provider (through the Provider Entity where one exists) is the sole treating clinician responsible for all clinical judgment.

2. Credentials and Documents the Provider Must Supply

The Provider agrees to give RonanRx, and to keep current, the credentialing information and documents listed in this Section. These particulars are recorded once on the cover page and referenced by the tokens set out below, and the Provider is responsible for their accuracy: (a) active, unrestricted medical license(s) to practice in each state listed at the license states stated on the cover page, with copies or verifiable license numbers for each; (b) the Provider's National Provider Identifier (NPI), the NPI stated on the cover page; (c) state-specific DEA registration details reflected in the license details on the cover page for each state in which the Provider is authorized to prescribe controlled substances, required only if controlled substances come into scope under a service-line rider as described in Section 7; (d) evidence of professional liability (malpractice) coverage with carrier the malpractice carrier stated on the cover page, policy number the malpractice policy number stated on the cover page, and limits at least equal to the malpractice limits stated on the cover page; (e) a completed IRS Form W-9 and Taxpayer Identification Number the Provider TIN stated on the cover page for tax reporting and remittance; (f) where the Provider contracts through a professional entity, formation and good-standing documentation for the Provider Entity stated on the cover page and its entity type the entity type stated on the cover page (for example, a PC or PLLC); (g) documentation of specialty or board certification for the specialty stated on the cover page where the Provider holds herself out in that specialty; and (h) written disclosure of any past or pending licensing-board, hospital, or regulatory disciplinary action, investigation, restriction, surrender, or settlement.

The Provider authorizes RonanRx to verify any of the foregoing through primary-source verification, licensing boards, the NPPES/NPI registry, the DEA, professional liability carriers, and applicable credentialing databases.

3. Licensure and Professional Liability Covenants

The Provider covenants that, throughout the term: (a) she will maintain each medical license listed at the license states stated on the cover page in active, unrestricted good standing; (b) she will maintain professional liability (malpractice) coverage with limits at least equal to the malpractice limits stated on the cover page, naming or covering the Provider and the Provider Entity as applicable, and will provide renewal certificates on request; (c) she will practice, evaluate, and treat patients only where she is legally licensed and otherwise legally permitted to do so, and will decline or transfer any patient she is not authorized to treat; and (d) she will keep her professional entity, NPI, and, if applicable, state-specific DEA registrations valid and current.

4. State-Authorization Covenant (Telehealth)

Providers deliver care to Platform Patients through their own telehealth-capable practices; RonanRx is not a telehealth provider and does not operate a telehealth practice or clinic. The Provider represents that she owns or practices through such a practice and that it satisfies the telehealth practice, registration, and credentialing requirements of each state in which she treats Patients. Because the Provider's care for Platform Patients is delivered via telehealth through that practice, the Provider makes the following covenant (the "State-Authorization Covenant") for every appointment: (a) she will verify the Patient's physical location at the time of each appointment and confirm that she holds an active, unrestricted license and any required telehealth authorization for that location before proceeding; (b) she will obtain informed consent to telehealth from the Patient before the appointment, consistent with the law of the Patient's state, and the Platform will present, capture, timestamp, and store a telehealth-consent record during Patient intake and make it available to the Provider, and the Provider remains responsible for confirming that the captured consent satisfies the law of the Patient's state and for supplementing it where it does not; (c) she will comply with all applicable telehealth laws, including cross-state practice rules, standard-of-care and examination requirements, and modality restrictions in the Patient's state; and (d) if she is not authorized in the Patient's state at the time of the appointment, she will not conduct the visit and will decline or route the Patient appropriately. RonanRx warrants that the Platform workflow captures and records the Patient's self-reported physical location at scheduling and at the start of each appointment and blocks routing where that location fails the state-eligibility check; the Provider remains responsible for confirming the Patient's location at each visit.

The Provider understands that Marketplace availability, clinical acceptance, and medication fulfillment are separate legal events, and that being displayed in the Marketplace does not by itself confirm authorization to treat a given Patient in a given state. The State-Authorization Covenant is the Provider's independent responsibility for each visit.

5. Prescribing, Records, and Lawful-Conduct Covenants

The Provider further covenants that she will: (a) comply with all applicable prescribing laws, including state prescribing rules, examination and standard-of-care requirements, and any telemedicine-prescribing conditions; (b) exercise independent clinical judgment on every prescription, refill, dose, and clinical decision, and understand that no compensation under the Packet is tied to whether, what, or how much she prescribes; (c) maintain complete, accurate, and timely medical records and documentation as required by law and professional standards, and retain the legal medical record consistent with the HIPAA and records provisions of the Packet; (d) not use RonanRx, the Platform, or any Packet arrangement for unlawful referrals, kickbacks, bribes, fee-splitting, or any remuneration tied to referrals or to the ordering, prescribing, or purchasing of any item or service, consistent with the anti-kickback and corporate-practice-of-medicine posture of the Packet; and (e) where she prescribes a compounded medication, ensure that the Patient is informed that compounded medications are not approved by the FDA. RonanRx will display a clear and conspicuous "compounded medications are not FDA-approved" disclosure on every Platform surface where compounded medications are described or offered, and the dispensing pharmacy remains responsible for all labeling and disclosure requirements that apply to it by law.

Medication recalls, medication-safety alerts, and the intake and regulatory reporting of medication quality complaints and adverse events are the responsibility of the dispensing pharmacy for the medications it dispenses, as required by pharmacy law. The Platform will promptly relay to the dispensing pharmacy, and to the Provider, any such report that a Patient submits through the Platform, and the Provider remains responsible for the clinical evaluation and follow-up care of her Patients in response to any such event.

The Provider sets her own Provider Fee for clinical services. The amount in effect is stated on the cover page (the Provider Fee stated on the cover page) and is payable entirely to the Provider or Provider Entity, less the payment-processing fees described in the Fee Schedule and Payment Processing Addendum (Section 7 of that Addendum), which the Provider bears. RonanRx charges a separate, flat Platform Fee (the Platform Fee stated on the cover page) for its non-clinical services, and the Patient's Total Monthly Charge (the Total Monthly Charge stated on the cover page) is the sum of the two. The Platform Fee is a fixed, fair-market-value administrative fee: it is not a percentage of the Provider Fee, is not a revenue split, and is never tied to any prescription, refill, medication choice, pharmacy choice, whether a prescription is filled, drug or pharmacy revenue, or referral. RonanRx does not take a margin on, and never shares in, the Provider's clinical Provider Fee. RonanRx uses Stripe, a third-party payment processor, and collects the Total Monthly Charge as the Provider's limited payment-collection agent for the Provider Fee component; Stripe promptly remits the Provider Fee, less those processing fees, to the Provider or Provider Entity, and RonanRx retains only its flat Platform Fee.

6. Prompt-Notification Obligation

The Provider will notify RonanRx promptly, and in any event within a commercially reasonable time, of any of the following, whether occurring in a Marketplace state or elsewhere: (a) any lapse, suspension, revocation, restriction, non-renewal, probation, or surrender of a medical license; (b) any change, lapse, restriction, or surrender of a state-specific DEA registration where controlled substances are in scope; (c) any lapse, cancellation, non-renewal, or material change in malpractice coverage or limits; (d) any actual, threatened, or pending sanction, debarment, or disciplinary or regulatory action, investigation, or settlement; and (e) any change to the credentialing information in Section 2, including NPI, entity status, specialty status, or license states.

7. Controlled-Substances Rider (Service-Line Specific)

Controlled substances (Schedules II through V) are outside the scope of the Platform: no controlled substance may be prescribed to any Patient via the Platform, and no Platform workflow supports controlled-substance prescribing or fulfillment. If RonanRx later introduces a controlled-substance service line, it will do so only under a service-line-specific rider executed by the parties that addresses the DEA and HHS telemedicine rules then in effect (the current temporary telemedicine flexibilities are, as of the Effective Date, extended through December 31, 2026, and may change, lapse, or be replaced). RonanRx does not control, direct, or participate in any prescribing decision, which remains solely the Provider's clinical responsibility.

8. Attestations of Good Standing

The Provider attests, as of the Effective Date and on each re-credentialing, that: (a) she and, where applicable, the Provider Entity are in current good standing with each applicable licensing board; (b) she and the Provider Entity are not currently suspended, restricted, or otherwise legally barred from providing the clinical services offered through the Platform; (c) she and the Provider Entity have not been convicted of any offense that would prevent lawful participation on the Platform; and (d) the credentialing information supplied under Section 2 is true, complete, and current, and she will promptly correct it if it ceases to be so.

9. RonanRx Compliance Rights

To keep the Marketplace lawful and current, and without assuming any clinical role, RonanRx may: (a) suspend or hide the Provider's profile if a required license, professional liability policy, or, where applicable, state-specific DEA registration lapses, is restricted, or cannot be verified; (b) apply state-based filtering so that the Provider is shown to, and selectable by, Patients only in states where she is eligible, and may remove or withhold the Provider from Patient selection for any state in which she is not eligible; (c) audit basic compliance records relevant to credentialing, licensure, professional liability coverage, telehealth authorization, and good standing, provided that this audit right does not extend to directing clinical care; (d) require updated credentials and documentation, and condition continued Marketplace availability on their timely provision; and (e) re-credential the Provider periodically and re-run primary-source checks.

Suspension or removal under this Section affects only Marketplace availability and does not terminate the Provider's existing provider-patient relationships, which remain the Provider's responsibility to continue, transition, or terminate consistent with the MSA and applicable law.

10. Provider Acknowledgments

I, the Provider (on my own behalf and on behalf of my Provider Entity), acknowledge that:

(a) I have supplied, and will keep current, the licenses, NPI (the NPI stated on the cover page), state-specific DEA registration details if applicable (reflected in the license details on the cover page), malpractice certificate (the malpractice carrier stated on the cover page, the malpractice policy number stated on the cover page, the malpractice limits stated on the cover page), W-9 and TIN (the Provider TIN stated on the cover page), entity documents (the Provider Entity stated on the cover page, the entity type stated on the cover page), specialty and board information (the specialty stated on the cover page), and the attestations required by this Addendum;

(b) I will maintain my license(s) at the license states stated on the cover page in good standing and my malpractice coverage at limits at least equal to the malpractice limits stated on the cover page throughout the term;

(c) I will treat Patients only where I am legally permitted, and for every appointment I will verify the Patient's location and obtain telehealth consent before the visit, as required by the State-Authorization Covenant;

(d) I will comply with applicable prescribing and telehealth laws, exercise independent clinical judgment, and keep proper medical records;

(e) controlled substances are outside the scope of the Platform, and I will not prescribe any controlled substance to any Patient via the Platform unless and until the parties execute a service-line-specific rider as described in Section 7;

(f) I will notify RonanRx promptly of any change to my license, state-specific DEA registration where applicable, malpractice coverage, sanctions, legal eligibility, or disciplinary status;

(g) I will not use RonanRx for unlawful referrals, kickbacks, or fee-splitting, and I understand that I set my own Provider Fee (stated on the cover page), that RonanRx charges only a separate flat fair-market-value Platform Fee for non-clinical services, that the Platform Fee is not a revenue split and is not tied to prescriptions, pharmacies, referrals, or medication revenue, that RonanRx does not take a margin on my clinical fee, and that RonanRx collects the Total Monthly Charge as my limited payment-collection agent, with Stripe promptly remitting my Provider Fee to me or my Provider Entity less the processing fees I bear;

(h) I and my Provider Entity are in current good standing and are not currently barred from providing the clinical services offered through the Platform; and

(i) RonanRx may suspend or hide my profile, apply state-based filtering, audit basic compliance records, require updated credentials, and re-credential me periodically, and these actions affect Marketplace availability only and not my existing provider-patient relationships.

Provider signature, typed name, date, entity, license details, and packet version are completed on the signing screen.