Trust Built on Standards.Supported by Evidence.

The Standards Behind PATHS.

• HIPAA Compliance

  PATHS maintains a HIPAA compliance program, managed with Rhymetec, a cybersecurity and compliance firm. It covers the administrative, physical and technical safeguards HIPAA requires for protected health information.

• AICPA SOC 2

  SOC 2 is the American Institute of CPAs (AICPA) framework for reporting on a service organization's controls for security, availability, processing integrity, confidentiality and privacy. A SOC 2 examination is performed by an independent CPA firm.

• 2026 DiMe Seal

  The Digital Medicine Society (DiMe) awards its Seal to digital health products that demonstrate performance against a framework of standards in evidence, privacy and security, and usability. In 2026, CMS recognized the DiMe Seal as an evaluation pathway for the Medicare App Library.

• Government Contractor

  PATHS is registered to do business with the U.S. federal government under CAGE code 8XDN2. A CAGE (Commercial and Government Entity) code is the identifier the Defense Logistics Agency assigns to registered government suppliers.

Together, these credentials reflect how PATHS approaches trust: a managed HIPAA compliance program, controls reported under the AICPA's SOC 2 framework, recognition against DiMe's digital health standards, and registration as a federal government contractor.