Connecting a new tool to Animana? Watch for this red flag

3 mins

When a tool claims it can integrate with Animana, it can sound like an easy way to improve workflows in your practice.

But if you are asked to provide your Animana username and password to set it up, stop. That is a warning sign that the integration is not using approved methods, and it could put your practice data at risk.

Why credentials should never be part of an integration setup

Official Animana integrations do not require your login credentials.

IDEXX provides an Application Programming Interface, or API, that allows approved third-party partners to connect to Animana in a secure and controlled way. This process includes certification, security review, and formal approval.

When integrations follow this process:

• They connect through the approved API, not through your personal account.
• Access is controlled and auditable.
• Permissions are defined and limited.

There is no valid technical reason for an approved integration to request your Animana username or password. If credentials are required, the integration bypasses these controls.

What happens when credentials are shared

When you provide your login details to a third party, you effectively give them the ability to act on your behalf within Animana.

Depending on your account permissions, this may include access to:

• Client and patient records.
• Clinical histories.
• Financial and billing data.
• Employee or practice information.

This creates several risks:

• Loss of control. You may not be able to see how your account is being used, when it is being accessed, or what actions are being taken.
• Data exposure. Practice data may be stored, transferred, or processed outside approved systems, increasing the risk of security or GDPR issues.
• Data integrity issues. Changes may be made under your account without clear visibility, making errors difficult to identify or trace.
• Wider security compromise. Credentials may be stored insecurely or reused across systems, increasing the risk of broader account compromise.
• Limited support. Problems caused by unauthorised integrations, such as missing data, incorrect records, or unexpected changes, may not be recoverable through standard support processes.

Browser extensions: a less obvious risk

Not all unsanctioned integrations ask for credentials directly. Some operate through browser extensions installed in Chrome, Firefox, or another browser.

These tools may appear helpful. They might promise shortcuts, automation, or easier ways to work with information already displayed in Animana. However, browser extensions can carry similar risks.

Depending on their permissions, a browser extension may be able to:

• Read the contents of pages you open, including sensitive practice data.
• Interact with fields or information displayed in Animana.
• Run in the background without clear visibility.

If an extension is not an approved Animana integration, it has not gone through IDEXX security review, regardless of how it is presented.

For devices used to access Animana, keep browser extensions to a minimum. Review installed extensions regularly, and remove anything you do not recognise, trust, or actively use.

Why this risk is easy to overlook

In practice, these situations do not always look obviously unsafe.

Tools are often presented as:

• Workflow shortcuts.
• Time-saving automations.
• Helpful enhancements built for veterinary teams.

In some cases, the provider may not intend harm. However, good intent does not replace secure design.

Without formal approval, there is no reliable way to confirm how your data is handled, whether appropriate security standards are met, or whether the integration will continue to behave as expected over time.

How to check whether an integration is approved

Before connecting any tool or service to Animana:

1. Check whether it is listed in the Animana help hub or the in-platform Integrations Hub.
2. Confirm that the setup process does not involve sharing your Animana login credentials.
3. If you are unsure, contact Animana Customer Support before proceeding.

If an integration is not listed or requires your credentials, treat it as unapproved until confirmed otherwise.

A simple rule to remember

No approved Animana integration should require your username or password.

If you are asked to provide your Animana credentials to connect to another tool, pause and verify before proceeding.

Protecting your practice data starts with recognising these warning signs early. For questions about integrations, approved partners, or the security of your Animana account, contact Animana Customer Support or visit the Animana help hub.