Security

The Ninsaúde Toro platform features scalable and secure technological infrastructure. All requests have end-to-end security with a Lets Encrypt Authority X3 2048-bit security certificate. Vulnerability scanners are occasionally used to track potential security flaws.

The infrastructure is also certified by SSAE16 / ISAE 3402 Type II, ISO 27001, ISO 27017, ISO 27018, FedRAMP ATO, PCI DSS v3.2, and HIPAA.

The tokens used adhere to OAUTH2 authentication standards. The use of Refresh Tokens replaces sharing account, username, and password with applications. The Access Token used in platform requests has a validity period of 15 minutes.

Authentication

The Ninsaúde Toro development platform authentication has two tokens: the Refresh Token and the Access Token.

The Refresh Token is used solely to obtain new Access Tokens. This token has no expiration and should be securely stored.

On the other hand, the Access Token is used in all request headers. It has a 15-minute validity and is similar to a user session.

Build feature-rich Web or mobile applications with your brand

The Ninsaúde Toro development platform provides a RESTful API for building rich experiences with web, mobile, and desktop applications, incorporating all the features your clinic requires.

RESTful API

To facilitate the integration of your advanced applications, the Ninsaúde Toro platform was created following the RESTful standard and uses OAuth2 authentication. It also has extensive documentation with thousands of available routes.

Read documentation

Triggers

Triggers, also known as Webhooks, allow external applications to be notified of additions, changes, or deletions of records, providing the corresponding JSON object. Additionally, we provide monitoring logs for activity tracking.

Build applications and rich solutions for over 2,000 healthcare users in 10 countries.

Do you have an idea or complementary solution? Share it with over 2,000 healthcare users in an exclusive portfolio of technology partners.