AI tools are increasingly being used to analyze information, prepare content, and automate routine processes. At the same time, more and more third-party AI agents are emerging that can work independently in a browser, log in to services, and perform actions on behalf of a user.
You may use such tools at your own discretion. However, if you give a third-party AI agent access to your Cliniccards account, you are responsible for granting that access and for the risks associated with it.
This includes situations where a third-party service is given:
Why does this matter?
Cliniccards is responsible for protecting data within our system and within the access mechanisms provided by the platform.
However, when a user independently gives a third-party AI agent access to Cliniccards, that agent effectively receives the same permissions as the user.
It may read information available to your account, modify data, perform actions on your behalf, or transfer the information it receives to a third-party service.
We do not know how every third-party AI agent is built, where and how it processes the data it receives, whether it stores that data, which third-party services it uses internally, or who else the data may be shared with.
Therefore, once access has been provided to a third-party service, Cliniccards cannot control how that data is used afterward and cannot guarantee its security outside the Cliniccards system.
Automated actions are another separate risk.
An AI agent may:
If these actions are performed through a user’s account, Cliniccards treats them as actions performed with that user’s permissions. For this reason, we cannot guarantee the accuracy of actions performed by a third-party AI agent or guarantee that the consequences of incorrect actions can be reversed.
Where responsibility lies
If you or your employee access Cliniccards through the mechanisms provided by the system, the standard Cliniccards security measures apply.
If you independently provide that access to a third party, service, or AI agent, the user is responsible for the decision to grant access, for the actions performed by that service, and for any further use of the data it receives.
That is why we recommend not giving AI agents direct access to Cliniccards unless you are confident about how the provider of that service handles your data.
This does not mean you should avoid using AI. Use it for tasks that do not require access to your Cliniccards account or confidential patient data.
We also recommend following the basic Cliniccards security practices:
Data security is a shared responsibility between Cliniccards and system users. We protect data on the Cliniccards side, while proper access management helps maintain that protection on the clinic’s side as well.
We also recommend reviewing the detailed Cliniccards security guidelines.
