Decision support. Each capability below is decision support for the clinician using ChironAI. The clinician evaluates, decides, and signs every output that enters the chart. ChironAI does not make a regulatory clearance claim; see Disclosures.
ChironAI CDSFull capabilities inventory
The capabilities Chiron reaches for, by workflow.
275+ customer-facing capabilities, counted from the live codebase — 220+ user-facing features, 40+ AI capabilities, and 15+ background automations. Not a menu you operate by hand, but the toolkit Chiron reaches into as it runs the encounter — calling each through a visible, named tool-call on Eve-Healthcare™ F5/reasoner and drafting the result for attestation. The deep-dives below are the curated highlights, grouped by where they live in the consultation workflow, and the full inventory is published in full for machines so you can ask Eve about any of it. For specialty-depth treatment of any group, follow the specialty link in that section. The clinician remains the decision-maker on every output.
Counted from the codebaseVerified 2026-08-16
275+
customer-facing capabilities
220+
user-facing features
40+
AI / agentic capabilities
15+
background automations
Underneath the 275+ customer-facing capabilities sit 44 domain entities under deny-by-default tenant row-level security, 309 API endpoints behind the tenant-isolation and RBAC kernel, and 20 compliance and security controls enforced in code (shown as posture, not a catalog). Every figure is code-truth, re-derived from a full read of the live system — a floor, not a rounded-up headline.
The inventoryEleven groups
Eleven groups, one system.
The full inventory organizes into eleven groups — the same taxonomy the machine-readable corpus publishes. Group counts are per-group floors. The workflow deep-dives that follow walk the highlights of these groups through the consultation, intake to signed chart.
01
Clinical intelligence & conversational reasoning
The reasoning is visible, grounded, and never trusted blind.
37+ capabilities
02
Consultation workspace
One workspace runs the encounter, intake to signed plan.
40+ capabilities
03
Radiology & imaging
The vision route reads the study — the radiologist signs the impression.
30+ capabilities
04
Labs & diagnostics
The values are extracted, not invented — then read for pattern.
18+ capabilities
05
Prescribing & drug-interaction
Coded to the pharmacology. Checked before it is signed.
20+ capabilities
06
Patient management & longitudinal memory
The whole history, reasoned over in a single thought.
25+ capabilities
07
Patient intake & self-service portal
The intake is done before the clinician walks in.
18+ capabilities
08
Documentation
Every line of the note traces to where it came from.
15+ capabilities
09
Analytics & workflow insights
Purpose-built clinical views — that refuse to draw a false picture.
15+ capabilities
10
Org & super-admin consoles
Run the organization, not just the encounter.
22+ capabilities
11
Trust, security & verification
Every signature is provable. Every tenant is isolated.
The reasoning is visible, grounded, and never trusted blind.
—Eve-Healthcare™ F5/reasoner — a compound five-model reasoning architecture augmented by a dedicated vision route, not a single model behind a prompt
—The Round Table — specialist Digital Employees (Chiron leading clinical reasoning; Eli on pharmacology, Issac on imaging, Justine on causation framing, Theo on bioethics) convened per case
—Conversational clinical reasoning over the record — grounded question-and-answer with inline citations and a hard guardrail that deletes any citation the reasoning did not retrieve
—Differential diagnosis support — Bayesian confidence with qualitative tiers, discriminating features named per differential; the clinician evaluates and selects
—Risk stratification — Wells, GRACE, MELD, CHA₂DS₂-VASc, TIMI, HEART and more, each with the reasoning that justifies the score shown
—Confidence calibration — a six-tier qualitative scale plus quantitative Bayesian percentages, with "cannot exclude" as a first-class state when data is insufficient
—Clinical evidence synthesis — live synthesis of canonical guidelines and peer-reviewed literature, source-grounded with explicit guideline anchors
—Honest reasoning stream — a live, step-by-step trace of the real work, engineered never to fake a progress bar; the chain-of-thought never leaks to the transcript
—Glass-box tool-calling — one visible activity step per real operation (retrieve, reason, compose, persist), never a fabricated timer, never a foundation-model name
—Must-review-before-final gate — every AI-drafted artifact carries a non-dismissible CA AB-489 review banner; the clinician attests and signs
—Human-in-the-loop by architecture — decision support only; the clinician is the decision-maker on every output, and no regulatory-clearance claim is made
02 — Consultation workspace40+ capabilities
One workspace runs the encounter, intake to signed plan.
—A ten-section consultation workspace that runs the encounter end to end — chief complaint through assessment and plan
—Ambient scribe — the encounter is transcribed and structured into the note as the clinician talks, lifting only what the conversation actually contains
—A live reasoning surface embedded in the workspace, streaming the specialist reasoning as the case develops
—Realtime voice mode and dictation over the encounter
—Section-by-section drafting with per-section clinician review before the note is finalized
—Encounter context carried across every section, so each draft sees the whole visit
—Red-flag surfacing before the clinician opens the chart, drawn from the pre-visit interview
—Orders, referrals and follow-up captured inline with the consultation
—Every drafted statement traceable to its source at review time
03 — Radiology & imaging30+ capabilities
The vision route reads the study — the radiologist signs the impression.
—A dedicated vision route reads imaging through structured reasoning, streaming the read as the study is analyzed
—Multi-pass structured second-look — structure, pathology, artifacts, missed zones, cross-window correlation — as a named, ordered process; the radiologist drafts and signs the impression of record
—Standardized reporting frameworks — BI-RADS, LI-RADS, PI-RADS, TI-RADS, Bosniak, Fleischner and more — with modality-appropriate selection
—DICOM viewer — 2D, multiplanar reconstruction (MPR) and 3D rendering with annotation tools
—Candidate findings cite the imaging series and slice they were observed on, surfaced for radiologist review
—Cognitive-bias counter-measures against satisfaction of search, anchoring and premature closure, built into the read
—Red-Alert discipline — time-critical findings architecturally separated from routine outputs, on a distinct notification path
—A ten-section structured radiology report assembled from the multi-pass read
04 — Labs & diagnostics18+ capabilities
The values are extracted, not invented — then read for pattern.
—A lab pattern-recognition library — sepsis screen, AKI, thyroid, lipid, diabetic series, hepatic, renal, infectious, oncology and cardiovascular panels and more
—Ground-truth value extraction — lab values read from the source report by a deterministic layer, separate from the reasoning engine; the model may label a value, it cannot invent a digit
—Critical-value cutoffs cross-checked against every recognized pattern before a result reaches the ordering clinician
—Reference-range adjustment for age, sex, pregnancy status and applicable specialty context
—Reflex-testing recommendations surfaced with the guideline anchor that warrants them
—Four-tier interaction severity — critical (contraindicated), major (monitor closely), moderate (caution), minor (informational) — with mechanism disclosure and a recommendation per interaction
—Drug-disease and dose-adjustment checks run against the patient’s own record
—Step-therapy and prior-authorization flags surfaced before a prescription is signed
—Pharmacology evidence anchoring — each interaction cites the canonical source that warrants its severity tier and recommendation
—Eli, the pharmacology Digital Employee, consulted on complex interactions and dosing
—Pre-visit patient interview — structured intake of history, review of systems, social and environmental factors and red-flag triggers, output structured for the consultation
Purpose-built clinical views — that refuse to draw a false picture.
—Practice and clinical dashboards over encounters, throughput and outcomes
—Physician-agreement tracking as an operational trust metric
—Workflow insight surfaces — worklists of what the system read, flagged and drafted
—Documentation and turnaround analytics
—Every chart carries a mandatory text-equivalent and declines to draw on a failed read rather than assert a false picture
10 — Org & super-admin consoles22+ capabilities
Run the organization, not just the encounter.
—Clinic and organization provisioning, user and role administration
—A role-based access-control kernel with session management and MFA reset
—A super-admin console for cross-tenant operations under strict isolation
—Notifications — in-app and email with per-user preferences and deterministic de-duplication
—An in-product support queue
—Tenant configuration — locale, specialty context and feature enablement
—Usage visibility per organization — lab reports and radiology uploads counted for the current month, so a plan is managed against what was actually used rather than what was estimated
—Subscription and billing administration for an organization, with plan and invoice state visible to the people accountable for it
—Clinician profile — credentials, languages and contact detail maintained by the clinician, so what appears on documentation stays current
Every signature is provable. Every tenant is isolated.
—Fail-closed tenant isolation — deny-by-default PostgreSQL row-level security defined at the database layer, independent of the application layer
—AES-256-GCM field-level encryption on PHI; PHI de-identified in the reasoning pipeline, which works on the minimum it needs
—An append-only, tamper-evident audit trail — HMAC plus previous-hash on every clinical action, verified hourly; a database trigger blocks edits and deletes even by the record’s owner
—A deterministic clinical-alert engine — fixed-criteria rules that fire independent of the model’s judgment
—Server-authoritative CA AB-3030 disclosure on every AI artifact, non-dismissible by design
—AI-use disclosure per CA AB-3030 / AB-489 — the clinician attests and no clinical licensure is implied
—Immutable document verification — a SHA-256 hash binds each attestation to the exact rendered PDF
—Automated-decision preferences — a clinician can opt out of automated AI decision-making under California consumer-rights law and require the reasoning to be shown on every output; each preference change is logged for compliance
—In-product help that checks the service before it answers — when part of ChironAI is not responding it says so plainly rather than leaving a clinician to work out whether the problem is theirs
AI-led structured intake with the patient: history, ROS, social and environmental factors, red-flag triggers. Output structured for the consultation context.
Risk-flag surfacing
High-priority flags surfaced from the patient interview before the clinician opens the chart. Red-flag patterns trigger AB 489-compliant clinical attention.
Patient consent capture
Explicit consent capture for AI-assisted workflows, per AB 3030 disclosure. Persisted with the visit record.
Reasoning
Clinical reasoning, structured and auditable.
Differential diagnosis support
Decision-support reasoning over presenting features with Bayesian confidence and qualitative tiers. Discriminating features called out per differential. The clinician evaluates and selects.
Clinical evidence synthesis
Live synthesis of canonical guidelines and peer-reviewed literature. Source-grounded with explicit guideline anchors.
Risk stratification
Wells (DVT/PE), GRACE (ACS), MELD, CHA₂DS₂-VASc, TIMI, HEART, others. The reasoning that justifies each score is shown.
Confidence calibration
Six-tier qualitative scale plus quantitative Bayesian percentages. “Cannot exclude” as a first-class state when data is insufficient.
Architectural AB 489 gate. Every AI artifact carries the non-dismissible review banner. Every PDF export carries the disclosure in the footer.
Interactive · Abductive chainStylised case · 4 steps
A 78-year-old male with palpitations, dizziness, and an irregular rhythm.
Walk the abductive chain the reasoner produces, one step at a time. Use Tab to focus controls, Enter to advance, and Esc to reset. The disclaimer above stays visible at every step.
01Observations gathered
02Hypotheses generated
03Red-flag scan
04Ranked differential
Step 01
Observations gathered
What the system sees, with provenance to its source.
The reasoner gathers structured observations before any inference is drawn. Each row carries its source so the clinician can audit provenance.
Five-pass structured second-look review for radiology — structure, pathology, artifacts, missed zones, cross-window correlation — as a named ordered process. The radiologist drafts and signs the impression of record.
~35 frameworks, nine RADS systems
Around thirty-five named frameworks — BI-RADS, LI-RADS, PI-RADS, Lung-RADS, TI-RADS, ACR-TI-RADS, RECIST, PERCIST, ASPECTS, AO/OTA, and more, including nine RADS systems. Modality-appropriate framework selection.
Cognitive-bias counter-measures
The five-pass read carries explicit counter-measures against satisfaction of search, anchoring, and premature closure — built into the process, then resolved into a ten-section structured report.
Red-Alert discipline
Time-critical findings are architecturally separated from routine outputs. Notification path is distinct from the read.
Image-grounded reasoning
A dedicated vision model routes imaging through structured reasoning, with the reasoning streaming even as the study is read. Candidate findings cite the imaging series and slice they were observed on, surfaced for radiologist review.
Interactive · Vision routeThree modalities · No real imaging
The vision route, framework-aware on three modalities.
Switch between the three modalities to see the framework the reasoner applies, the schematic placement of candidate findings, and the structured impression the F5/reasoner drafts before the radiologist reviews and signs.
Schematic only. Abstract geometric shapes for illustration; not derived from any real imaging study.
Structured impression · F5/reasoner draftBI-RADS
Findings
R breast: 14 mm spiculated mass at the upper-outer quadrant, new since prior. Suspicious morphology.
L breast: stable oval density, benign-appearing on margin and density assessment.
No suspicious calcifications either side.
Framework
Right BI-RADS 4 (suspicious abnormality) · Left BI-RADS 2 (benign).
Recommendation
Recommend image-guided biopsy of the right upper-outer mass. Continue routine annual screening of the left breast.
Draft impression — pending radiologist review and signature.
Radiologist reviews and signs. The reasoner drafts the structured impression; the radiologist of record edits, attests, and signs the impression that enters the chart.
Lab values are extracted by Azure Document Intelligence directly from the source report — a deterministic layer, separate from the reasoning engine. Chiron may label and interpret a value; it cannot invent a digit.
Twenty-two critical-value cutoffs
Every recognized pattern is cross-checked against twenty-two critical-value cutoffs before it reaches the ordering clinician.
Reference-range adjustment
Demographic adjustment for age, sex, pregnancy status, and applicable specialty context. The system does not flag normal pediatric values as adult abnormal.
Reflex testing recommendation
Where a pattern warrants additional testing, the recommendation surfaces with the guideline anchor that warrants it.
Every statement in the generated SOAP note traces to its underlying source field, source value, and source date. Visible to the clinician at review time.
Twelve-locale multi-language output
English, Spanish, French, German, Hindi, Mandarin, Arabic, Tagalog, Vietnamese, Korean, Portuguese, Russian. RTL support for Arabic.
Document versioning
Every signed document gets an immutable SHA-256 hash at signature time. Amendments are recorded as new versions; the original signed version stays verifiable.
Multiple documents reviewed and signed in one workflow. Each document still requires individual physician attestation; bulk-sign is a UI optimization, not a compliance shortcut.
Interactive · DocumentationBefore / after
The same visit. Two ways. Twenty-four minutes versus six.
Toggle between the raw, time-stamped notes a clinician types in the moment and the structured SOAP note the F5/reasoner produces — every clause source-grounded back to the intake field, the vital signs, or the ECG that warrants it. Stylised illustration, not a real patient.
With ChironAI™Clinician documentation time: ~6 minutes
With ChironAI™ · structured SOAP draft, source-grounded~6 minutes
Subjective
A 78-year-old male with hypertension, type 2 diabetes, and prior CABG (2018) presents with intermittent palpitations of two-week duration.
from intake question 4
Reports a single pre-syncopal episode standing from a chair the day prior to evaluation.
from intake question 7
Denies chest pain, dyspnoea, fevers, or recent immobilisation.
from intake ROS 2–6
Objective
Vital signs at 11:23: HR 122 irregularly irregular, BP 138/86, SpO₂ 96% on room air, temperature 37.0 °C.
from VS 11:23
12-lead ECG at 11:28 demonstrates an irregularly irregular rhythm with absent P-waves and a narrow QRS complex.
New-onset atrial fibrillation with rapid ventricular response is the leading working diagnosis, consistent with the rhythm-strip morphology and the structural cardiac priors.
from differential rank 01
Atrial flutter with variable conduction is held as a secondary consideration pending full 12-lead review.
from differential rank 02
CHA₂DS₂-VASc score 3 (HTN, DM, age ≥ 75); HAS-BLED 1 — anticoagulation is indicated.
from risk-stratification panel
Plan
Rate control: IV metoprolol if blood pressure tolerates, with continuous telemetry monitoring.
from rate-control protocol
Anticoagulation: apixaban once acute coronary syndrome is excluded; troponin pending.
from anticoagulation guidance
Cardiology consult requested at the time of admission.
from consult request 11:34
Disposition: admit to telemetry, NPO until cardiology evaluates, follow up in the morning.
from disposition field
Draft note, pending clinician review and signature. Every clause traces back to its source field. Document hash captured at signature time.
Indication, mechanism, contraindication, drug-drug and drug-disease interaction, dose-adjustment guidance. RxNorm-anchored.
Four-tier drug interaction severity
Critical (contraindicated), Major (monitor closely), Moderate (caution), Minor (informational). With mechanism disclosure and recommendation per interaction.
Step therapy and prior auth flags
When a prescription would trigger a step-therapy requirement or prior auth under common payer formularies, the system surfaces the flag before the prescription is signed.
Pharmacology evidence anchoring
Each interaction cites the canonical pharmacology source that warrants the severity tier and recommendation.
Patient-facing portal for pre-visit interview, post-visit follow-up, patient education, and consent capture. Mobile-first.
Six reading levels
Patient education output composed at kindergarten, elementary, middle-school, high-school, college, and professional reading levels. The system meets the patient where they read.
Multi-language patient education
Patient-facing content rendered in any of the twelve supported locales. RTL support preserved end to end.
Compliance and audit
The substrate that makes everything else defensible.
HMAC + previous-hash audit log on every clinical action, written append-only. A database trigger blocks edits and deletes — even by the record’s owner — so the trail is tamper-evident by construction.
Ground-truth extraction
Lab values are read from the source document by a deterministic extraction layer, separate from the reasoning engine. The model interprets; it cannot fabricate the underlying fact.
AES-256 encryption + PHI de-identification
Sensitive fields are protected with AES-256 encryption, and PHI is de-identified in the reasoning pipeline, which works on the minimum it needs.
Deterministic clinical-alert engine
A deterministic engine of twenty-five rules fires clinical alerts on fixed criteria — predictable, testable, and independent of the model’s judgment.
Server-authoritative AB 3030 disclosure
Generative-AI authorship is disclosed on every AI artifact, enforced on the server. Non-dismissible by design — a client cannot dismiss its way past it.
ADMT notice and opt-out
AB 375 / CCPA / CPRA Automated Decision-Making Technology notice surfaces on first AI feature use. Opt-out controls in the user-preferences surface.
Architectural tenant isolation
Every database row carries a tenant boundary, and PostgreSQL Row-Level Security policies are defined at the database layer to isolate tenants independently of the application layer.
A note to the reader
See the full clinical workflow from intake to signed chart.
The capabilities above compose into a single end-to-end consultation flow. See how each step renders in the product.