Is Integra.ai safe?

Question

Is Integra.ai safe?

Accepted Answer

Integra.ai is high risk. When the extension's EHRRunner data flow is invoked, it requests an access token from the IPES token endpoint using an embedded Basic client credential. That token is then used for the EHRRunner FHIR request tied to the supplied CPF, exposing a reusable service credential in the extension package. Integra.ai includes a HMAC signing credential and API key used for requests to the violence-monitoring API. When the related risk workflow is triggered by a user action, the service worker signs and sends a POST request to api.monitoramento.violenciaesaude.org with those credentials.

Is Integra.ai safe?

Findings