Decision support. ChironAI OM drafts and structures every WC artifact for the treating physician. The physician edits, attests, and signs every report, analysis, and form before it leaves the practice. ChironAI does not make a regulatory clearance claim; see Disclosures.

ChironAI OMFull capabilities inventory

Everything ChironAI OM does, in production.

This is the whole system, counted from the source. Causation, treatment and UR, impairment, DWC reporting, QME/AME, IMR, billing, closure — reasoned and drafted by a Round Table of specialist Digital Employees running on Eve-Healthcare™ F5/reasoner, decided where the law requires certainty by deterministic engines, and signed by the physician on every claim. Thirteen groups, one system — the full inventory is below, and published in full for machines so you can ask Eve about any of it.

Counted from the codebaseFull-read census 2026-08-16 · features re-derived 2026-08-27 · AI layer re-derived 2026-08-28
700+
customer-facing capabilities
600+
user-facing features
75+
AI / agentic capabilities
25+
background automations

Underneath the 700+ customer-facing capabilities sit 145 domain entities under fail-closed row-level security, 90 compliance, security and integrity controls enforced in code (shown as posture, not a catalog), and 40+ California Labor Code / DWC / 8 CCR provisions encoded across the workflow. Every figure is code-truth, re-derived from a full read of the live system — a floor, not a rounded-up headline.

01Agentic AI & reasoning75+ capabilities

The reasoning is visible, verified, and never trusted blind.

  • The Round Table — five specialist Digital Employees (Chiron, Issac, Justine, Eli, Theo) convened conditionally per case, in parallel, with graceful degradation
  • Eve-Healthcare™ F5/reasoner — a compound five-component reasoning architecture, not a single model behind a prompt
  • Chain-of-Verification — every specialist self-critiques (did I invent anything? what would opposing counsel argue?) before a physician sees the output
  • Honest reasoning stream — a live, step-by-step trace of the real work, engineered to never fake a progress bar; the chain-of-thought never leaks to the transcript
  • Ask the Case — grounded Q&A over the record and guideline corpus, inline citations, a hard guardrail that deletes any citation the reasoning did not retrieve
  • Defend This — the system argues against its own determination as the defense QME, UR reviewer and carrier, then assembles a submit-ready defense packet
  • Record digest — reads 1,000–3,000-page files whole (split-not-slice), segregates §4062.3 admissibility, then adversarially refutes every chronology entry
  • Fail-toward-unverifiable verification — the schema cannot express "confirmed" on a failed check; unsupported claims are flagged, never deleted
  • §4628 report drafting — 12 statutory sections, per-section specialist routing, page-anchored citations built from real anchors and verified back against source
  • Apportionment legal-sufficiency engine — encodes Escobedo, Brodie/Strait §4664(b), Hikida, Almaraz-Guzmán against a registry that rejects invented authorities
  • Glass-box tool-calling — one visible activity step per real operation (retrieval, compute, compose, persist), never a fabricated timer, never a model name
  • Grounded RAG with citation verification, ICD-10 hallucination guard, and apportionment-citation validation
  • One outbound compliance choke point — foundation-model-name suppression, AB-489 licensure-rewrite, PHI-minimization, reasoning-scaffolding scrub
  • Shipped prompt-injection scorer — PHI-never-echoed, quarantine-vs-served discrimination, run live in-VNet weekly
  • Human-in-the-loop by architecture — physician review/override on every determination; deterministic engines own every number the law requires exact
02Clinical & EMR60+ capabilities

A real occupational-medicine chart, not a claims wrapper.

  • Patient chart — demographics, problem list, medications, allergies, vitals (with BMI), each with add/edit/resolve lifecycles
  • Encounters & visits — typed encounter intake, visit context, completion evaluation
  • Medical records — blob-backed upload, AI extraction (diagnoses, findings, work-status, treatment history), amendment under 45 CFR 164.526
  • Imaging analysis — AI medical-image analysis with modality-appropriate framing, radiologist-attested
  • Treatment plans — plan + line-item authoring, revision, completion, per-item authorization requests
  • Physician determinations — versioned, attestable, amendable
  • Predesignation of personal physician — single-valid enforcement
  • Medical Provider Network — §4616 verification, weekly refresh from the California DWC open-data feed
  • Voice — dictation transcription and a realtime voice mode over the case
03Case lifecycle & operations70+ capabilities

One system runs the whole file, intake to close.

  • Eligibility & §3600 classification — industrial / denied / delayed / first-aid / non-industrial, versioned as the record develops
  • Case intelligence dashboard — aggregated case detail, med-legal designation, determination summaries
  • Case management — timeline, clinical-phase rail with adjacent-only transitions, MMI readiness, drift board
  • Case Drift — flags cases lagging their predicted recovery trajectory before the file goes stale
  • Signals — acknowledge / resolve / dismiss lifecycle with required-note discipline
  • Morning Rounds — an overnight-worked worklist: what the system read, flagged and drafted while the practice was closed
  • Records that react — a new document re-reads the case and refreshes the affected determinations
  • Work queue — merged obligations and RFA work, board and list views, next-best-action
  • Non-industrial redirection — care redirection with letter generation and referrals
  • What-If scenario modeling — deterministic dollar-impact on the case’s own findings and the Labor Code constants that govern the number
  • Case closure — settlement (C&R vs Stipulated Award), future-medical/MSA pathways, transition of care, guardrails that can only be overridden not "cleared"
  • Closure & §5410 reopening — five-year reopen window computed and tracked so a case never closes blind to its reopen date
  • Appointments — recurring series, status lifecycle, check-in, no-show detection
  • Plateau assessment — the physician asks Chiron to weigh a plateau signal against the record; the clinician asks, and the clinician decides
  • MPN membership and employer-to-MPN mappings kept current, so an eligibility answer is not quietly based on a stale mapping
04Causation & forensic30+ capabilities

The causation math is code, not a guess.

  • AOE/COE causation analysis under Labor Code §3600, drafted from the full record and versioned first-draft to final
  • §4663 apportionment — multi-factor analysis with normalization and fail-safe defaults
  • §4664 prior-award offset — a deterministic engine on the Brodie/Strait three-prong test: exact, reproducible, versioned
  • Impairment engine — Whole Person Impairment under AMA Guides 5th, DRE/ROM selection, Combined Values math, into a 2005 PDRS calculation
  • Case-law grounding on every narrative — Escobedo, Brodie, Strait, Hikida, Almaraz/Guzmán
  • Defensible narratives — every statement traces to the field in the record that produced it; reconstructable years later for deposition
05Treatment, UR, IMR & appeals45+ capabilities

It scores the denial before the payer does — and builds the appeal.

  • MTUS / ACOEM alignment — plans checked against two dozen authentic California DWC guideline documents at the point of care, with citations
  • UR Survival Score — denial and IMR-appeal risk scored before the RFA goes out, with the evidence to attach named
  • RFA lifecycle tracking end-to-end; §4610(g)(2) auto-authorization detection; denial-risk drivers surfaced inline
  • Dubon / Bodam denial classification gating IMR eligibility vs a straight appeal
  • IMR packet assembly under §4610.5, timed against the 30-plus-5-day mail clock, with exhibit auto-proposal
  • UR decisions capture and classification; treatment authorization insights (suggest-MTUS, UR-insights) with glass-box reasoning
  • IMR determination captured from the letter itself — upload the PDF rather than retyping the outcome, so the record holds the document the decision came in
06QME / AME / med-legal120+ capabilities

The panel process runs like a state machine, not a spreadsheet.

  • §4628 QME report — twelve required sections drafted, section-locked until prior sections are physician-approved, checked against a compliance checklist
  • §4062.1 / §4062.2 panel process — QME and AME panels as a state machine, strike tracking, the Vázquez good-cause exhibit generator (byte-stable)
  • PTP/QME reconciliation — treating-physician determination reconciled line-by-line against QME/AME findings, disagreement surfaced not overwritten
  • QME intake questionnaire — worker pre-evaluation intake feeding report prefill; §4664 prior-claim flagging as unconfirmed candidates
  • §4628 admissibility — §49 time itemization with specialty face-to-face minimums, service-performer disclosure, records-reviewed exhibit with §9795(c) page reconciliation
  • Information exchange (§4062.3 / §35) — package service, 20-day clocks, objection and WCALJ-order handling, ex-parte classification (Suon en banc)
  • Report service (8 CCR §36) — recipient matrix by case shape, §38 30-day clock, declaration of service, serve-by-fax
  • DEU rating (§4061) — 20-day rating and 30-day reconsideration clocks; factual corrections (DWC Form 37, §4061.5)
  • Sub-rosa (ML205) and testimony (ML204) — §35 information-gate, quarter-hour billing, §35.5(f) deposition-notice deadlines
  • AME agreements; secondary-provider report integration with 20-day clocks; case-party (adverse-party) register
  • On-demand DWC / DEU / CMS form rendering — 21 forms scoped to case, panel, evaluation and billing
  • Evaluations move between stages with a recorded reason for rework, so a report sent back is a fact on the file rather than a conversation nobody logged
  • Supplemental reports and their 60-day clock tracked from the request that triggered them
  • Disputed issues recorded per evaluation — the section §4628(e) makes inadmissible if it is left unanswered
07DWC reporting & deadlines35+ capabilities

Every DWC clock, tracked to the business day.

  • Form 5021 — Doctor’s First Report, drafted against the 5-business-day deadline
  • PR-2 progress reports — auto-drafted on the 45-day cadence or on a material change; the physician edits every section
  • P&S / MMI under §4061 — triggered by the clinical milestone, deadline-tracked, physician-attested
  • Deadline engine — every statutory clock encoded and holiday-aware against the California calendar; a daily 07:00 sweep surfaces every approaching and overdue report
  • Reporting-obligation service matrix; secondary-report obligations; transmission-gap alerts
  • AB 3030 attestation on every AI-drafted report — non-dismissible, persists through the signed PDF
  • Proof of service recorded on a regulatory report — who it went to, how, and when, which is the part a dispute turns on
  • Form 109 filed when an objected disclosure is replaced, linking the replacement to what it supersedes
08Billing, revenue & MLFS47+ capabilities

Coded to the fee schedule. Chased to the penalty.

  • OMFS coding on every billable encounter; E/M coding leveled on the CMS 2021 Medical Decision-Making rules
  • Medical-Legal Fee Schedule (8 CCR §9795) — the full ML-200…ML-205 catalog, first-200-page thresholds, $3/page MLPRR excess, §9795(c) perjury page-count verification
  • ML204 testimony billing ($113.75/¼hr, 2-hour minimum, lesser-of usual fee) and ML205 sub-rosa review ($81.25/¼hr)
  • §4603.2 penalty & interest — the 45-business-day pay rule tracked; penalty and interest computed the moment a payer misses it
  • Explanation-of-Review ingestion and structured extraction; the §4622 90-day clock anchored to the EOR date
  • Second Bill Review → Independent Bill Review appeal ladder; CMS-1500 and medical-legal bundle generation
  • Clearinghouse claim submission (X12 EDI); payment events and tracking; immutable billing audit trail; carrier performance analytics
  • Billing identity chosen per claim, so a group practice bills under the right entity without re-keying it
  • Interpreter cancellation billed on the notice actually recorded — an explicitly entered zero-notice cancellation still bills the two-hour minimum; a missing notice period does not
  • A missing fee schedule reports the underpayment as UNDETERMINABLE rather than as a finding, and generates no zero-value dispute letter
09Data visualization & glass-box UX40+ capabilities

Purpose-built clinical and med-legal visualizations — that refuse to lie.

  • §4663 apportionment waterfall — whole-disability reference down to the industrial remainder, refusing to draw an unweighed factor
  • §4062.3 record-chronology timeline — admissible records on a time axis, contested and undated entries handled honestly
  • Work-status restriction bands (DWC-AD 10133.36) on a duration axis
  • QME panel deadline horizon — a diverging statutory-clock axis centred on today, overdue in alarm ink
  • Every chart carries a mandatory text-equivalent and declines to draw on a failed read rather than assert a false picture
  • Glass-box streaming reasoning surface reused across closure, QME drafting, apportionment and PTP-QME
  • Unsaved clinical work is protected — closing a tab mid-note warns first, and a failed action offers a real retry rather than “refresh the page”
10Background automations25+ capabilities

It works the caseload while the practice is closed.

  • 16 per-tenant monitors — closure windows, intake retention, case drift, RFA/UR §4610 clocks, reporting-obligation deadlines, IMR filing clocks, QME/AME panel windows, billing deadlines, breach detection (every 5 min), appointment no-show, and more
  • 6 durable queues — document extraction, intake identity extraction, whole-file record digest for QME-scale cases, PTP-QME comparison, QME finding extraction, QME record organization
  • A durable job-run substrate with a replayable glass-box trace you can re-attach to across navigation
  • A weekly in-VNet prompt-injection evaluation that runs the live guardrails against an attack corpus
11Trust, security & verification30+ capabilities

Every signature is provable. Every tenant is isolated.

  • Public cryptographic verification — four no-login, zero-PHI, rate-limited endpoints (IMR, QME, PTP-QME, closure); a SHA-256 hash binds the attestation to the exact rendered PDF
  • Fail-closed tenant isolation — Postgres row-level security under a non-superuser role across ~145 tables, plus tenant-scoped blob storage, plus defense-in-depth explicit filters
  • A four-level per-case access kernel (read-only / consulting / treating / owner) with a billing-only side-channel that can never read clinical data
  • Immutable PHI access log written by decorator, not developer discipline — tamper-evident by construction
  • Breach detection mapped to HIPAA notification triggers — failed-auth bursts, cross-tenant attempts, mass-export patterns
  • AI-use disclosure per CA AB-3030 / AB-489; tenant-wide MFA with break-glass; PHI-safe logging and telemetry throughout
12Platform & administration40+ capabilities

Run the practice, not just the claim.

  • Clinic provisioning, user and role administration, session management, MFA reset
  • Analytics — practice and med-legal dashboards, physician-agreement tracking as an operational trust metric
  • Notifications — in-app and email with per-user preferences and deterministic de-duplication
  • Document intake triage, misfile register, records-request tokenized upload links for outside parties
  • In-app help — a 98-article library with acronym-aware search, shared verbatim with Chiron’s own help tool, plus guided tours
  • Tenant data rights — DSAR export with a verifying manifest and certified destruction (BAA §6.3 / §8.2); compliance/BAA/breach registers; in-product support queue
  • Multi-clinic groups — practices running more than one clinic are administered as a group, access granted explicitly per clinic and denied by default, re-checked on every request rather than once at sign-in
  • Any register exported to CSV or XLSX, generated on the server and streamed, so a large register does not depend on what the browser can hold
  • Bulk ZIP import into incoming documents, so a batch from a provider is one upload rather than fifty
  • Error reports — what has actually broken for the practice, grouped by occurrence with no patient information recorded, and triaged rather than deleted
13Records disclosure & production18+ capabilities

Answer a records demand, and be able to prove what you sent.

  • Document library — the chart’s records organised at patient and case level, grouped by document type with per-group counts, and a preview offered only for formats a browser can actually render
  • Records production — assemble a disclosure packet against a specific request, with the requesting party and the request recorded on the production itself
  • Bates numbering — a per-production prefix seeded from the patient surname, with every produced page numbered and the range recorded per document
  • Honest manifest — the packet declares superseded, duplicate and re-numbered pages rather than presenting a clean-looking set that hides them
  • Withheld log — what was deliberately not disclosed is recorded as withheld with its reason, and stays distinguishable from what was never considered
  • Void a production — a production can be voided and its artifact allowed to expire without destroying the record that the disclosure happened
  • Produced index — every document in the chart shows whether it has already gone out, under which request, and in which Bates range; a document produced only under a since-voided production says so
  • Truncation is stated — a records list that hit its page ceiling says so rather than presenting a partial chart as the whole one
  • Records requested FROM a claims administrator or attorney, and the tokenized upload link an outside party returns them through
Agentic, not autonomous

Seven hundred-plus capabilities. One rule that never bends.

Every capability above takes initiative — convening specialists, scoring risk, drafting reports, computing deadlines — but none of it crosses into deciding. Deterministic engines hold the numbers the law requires to be exact. A must-review- before-final gate sits under every output. And once a physician signs, the document is cryptographically verifiable against a public endpoint — provably unaltered since attestation. That is the bounded agency a defensible workers’ compensation record demands.

Run your next claim with Chiron

See the full arsenal run on your own caseload.

Powered by Eve-Healthcare™ F5/reasoner — a compound reasoning architecture, physician-attested at every step. Read the architecture.