7. Commitments and contingencies

Leases and non-cancelable contractual obligations

The Company leases its facilities and certain equipment under operating leases that expire through September 2024. At December 31, 2018, the minimum aggregate payments due under operating leases and specified non-cancelable contractual obligations, which consist of software license and maintenance agreements, are summarized as follows:

As a result of the MedSupport acquisition, the Company leases a property owned by a related party. Rent expense for the property was $33 and $21 for the years ended December 31, 2018 and 2017, respectively.

Rent expense of $1,638, $1,148 and $1,028 for the years ended December 31, 2018, 2017 and 2016, respectively, was included in the accompanying consolidated statements of comprehensive income.

Purchase obligations

The Company had approximately $61,000 of outstanding purchase orders with its outside vendors and suppliers as of December 31, 2018.

Warranty obligation

The following table identifies the changes in the Company’s aggregate product warranty liabilities for the years ended December 31, 2018, 2017 and 2016:

Legislation and HIPAA

The healthcare industry is subject to numerous laws and regulations of federal, state and local governments. These laws and regulations include, but are not necessarily limited to, matters such as licensure, accreditation, government healthcare program participation requirements, reimbursement for patient services, and Medicare and Medicaid fraud and abuse. Government activity has continued with respect to investigations and allegations concerning possible violations of fraud and abuse statutes and regulations by healthcare providers. Violations of these laws and regulations could result in exclusion from government healthcare programs together with the imposition of significant fines and penalties, as well as significant repayments for patient services previously billed.

The Company believes that it is in compliance in all material respects with applicable fraud and abuse regulations and other applicable government laws and regulations. Compliance with such laws and regulations can be subject to future government review and interpretation as well as regulatory actions unknown or unasserted at this time.

The Health Insurance Portability and Accountability Act of 1996 (HIPAA) ensures health insurance portability, reduces healthcare fraud and abuse, guarantees security and privacy of health information, and enforces standards for health information. The Health Information Technology for Economic and Clinical Health Act (HITECH Act) imposes notification requirements of certain security breaches relating to protected health information. The Company believes that it complies in all material respects with the provisions of those regulations that are applicable to the Company’s business.

Legal proceedings

The Company is party to various legal proceedings arising in the normal course of business. The Company carries insurance, subject to specified deductibles under the policies, to protect against losses from certain types of legal claims. At this time, the Company does not anticipate that any of these other proceedings will have a material adverse effect on the Company’s business. Regardless of the outcome, litigation can have an adverse impact on the Company because of defense and settlement costs, diversion of management resources, and other factors.