Is ClickDoc VA-2 safe?
ClickDoc VA-2 sends nurse note text from netsmartcloud pages to OpenAI using a hardcoded API key.
The extension adds AI-enhancement and form copy-paste helpers to a clinical documentation site. When a user enhances a note, the note text is posted to the OpenAI chat completions API with an API key embedded in the extension's content scripts, so anyone who unpacks the package can read the key.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed ClickDoc VA-2 contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- api.openai.comwidely used
ClickDoc VA-2 sends data to api.openai.com. A widely used service: 70 other extensions we have analysed send data here.