Platform transparency
Governance
How CoderCoach manages AI, coding standards, security, and data. Written for hospital privacy officers, HIM managers, and institutional procurement teams.
AI Governance
How AI is used
CoderCoach uses AI to support coding guidance, quality improvement and professional development. Every response is grounded in licensed CIHI source material — the system retrieves relevant ICD-10-CA, CCI and Canadian Coding Standards content before generating any answer. Responses are labelled as AI-generated guidance, with the source standards and version displayed.
AI disclosure
What AI does and does not do
- Retrieves relevant content from licensed CIHI standards before generating a response
- Suggests codes and rationale — it does not make final coding decisions
- Highlights potential documentation gaps — the coder verifies and decides
- Does not process patient-identifiable information in Q&A or case-based learning
- For CoderCoach RT, cases are redacted before submission — no identifiable patient data is required
- User inputs are not used to train AI models
Human oversight
CoderCoach is designed around the principle that qualified coding professionals retain final authority over every coding decision. AI guidance is advisory. The platform supports coders — it does not replace them. All responses carry an explicit AI advisory label and cite the source standard and version used.
Standards Governance
Standards used
| Standard | Version | Owner | Licence |
|---|---|---|---|
| ICD-10-CA | 2024 | CIHI | Licensed |
| CCI | 2024 | CIHI | Licensed |
| Canadian Coding Standards | 2022 | CIHI | Licensed |
| ICD-10-CM | 2024 | CDC / CMS (US) | Public domain (US) |
| ICD-10 WHO | 2019 | WHO | WHO licence |
Standards version transparency
The standards version in use is displayed on all guidance responses. CIHI releases ICD-10-CA and CCI updates annually. The platform is updated when new versions are released, and users are notified of updates.
CIHI disclaimer
Security & Data
Data handling
- Q&A and case-based learning do not involve real patient data
- CoderCoach RT accepts redacted cases only — no identifiable patient information is required or stored
- All data is encrypted in transit and at rest
- User activity is logged for quality improvement and development tracking
- User inputs are not used to train AI models
Infrastructure
- Hosted on enterprise-grade cloud infrastructure
- All data encrypted in transit (TLS 1.2+) and at rest
- Access controls enforced at the platform and data layers
Enterprise and hospital deployments
Organizations deploying CoderCoach RT or integrating CoderCoach into clinical workflows will work with Brookscroft on a documented privacy, security and licensing review prior to deployment. Please contact us to discuss your organization's requirements.