generated: '2026-07-19'
method: searched
source: https://kaiahealth.com/legal/security/
standards:
- id: soc2-type-ii
  conforms: true
  evidence: SOC 2 Type II examination completed; report available on request
- id: iso-27001
  conforms: true
  evidence: ISO 27001 certificate available on request
- id: hitrust
  conforms: true
  evidence: HITRUST certified (security & compliance page)
- id: hipaa
  conforms: true
  evidence: Audited annually against HIPAA Privacy and Security Rules
- id: gdpr
  conforms: true
  evidence: Audited annually against GDPR
- id: ccpa
  conforms: true
  evidence: Audited annually against CCPA
- id: iso-13485
  conforms: true
  evidence: ISO 13485 medical-device quality management certification
- id: ce-medical-device
  conforms: true
  evidence: CE-marked medical device
notes: >-
  Compliance posture asserted from the published Security & Compliance page.
  Kaia Health is a regulated digital therapeutics / medical-device provider; no
  public API is published, so these are organizational/product certifications,
  not per-API conformance claims.