Deviations and nonconformances
Record what happened, its severity and where it was found. A rule can open a linked CAPA automatically when a deviation is serious enough, and the board shows what is open, under investigation and closed.
Run deviations, nonconformances, CAPA and change control next to the documents and training they affect, so each decision sits beside its evidence. Every approval is a signature, and every change is on the record.
Each one is an ordinary table with a page and a workflow you can change. The starting templates give you a working process on day one.
Record what happened, its severity and where it was found. A rule can open a linked CAPA automatically when a deviation is serious enough, and the board shows what is open, under investigation and closed.
Actions with an owner, a due date and a status, tied to the event that caused them. Changes go through an impact assessment and signed approvals before they take effect.
SOPs with versions, review and approval, locked once published. Training records are related to the documents people must read, so each person's reading list follows the document.
A deviation links to its CAPA, the CAPA to the change it needs, and the change to the SOP it updates. Reviewers see what is waiting for their signature in one place, oldest first, so nothing sits unnoticed.
The author of a record can't approve it. The approver signs with a fresh password or single sign-on check, the signature records its meaning, and the approved version is locked. A change means a new version, and the old one stays on record with an append-only audit trail beside it.
Qualsted gives you the controls and the records; your procedures, training and validation of your own configuration complete the picture.
| Requirement | How Qualsted helps |
|---|---|
| 21 CFR 11.10(e) · Annex 11 §9 | Audit trail. Who created, changed or signed a record and when, recorded by the server and impossible to edit. |
| 21 CFR 11.50 · 11.70 | Signatures linked to records. Each signature shows the signer, the time and its meaning, and stays attached to the exact version it approved. |
| ISO 9001 §7.5 · ISO 13485 §4.2.4 | Control of documents. Versions, review and approval, and a published version that can't be edited in place. |
| ISO 9001 §10.2 · ISO 13485 §8.5.2 | Nonconformity and corrective action. Events, investigations and actions linked together, with owners, due dates and a signed closure. |
Working processes with signatures, reminders and views set up, as ordinary tables and pages you can change.
Record deviations, assess their impact, and open a corrective and preventive action when one is needed. CAPAs are reviewed and approved, with reminders before they fall due.
21 CFR 211.192 · FDA QMSR (21 CFR 820) · ISO 13485 §8.5.2 · ISO 9001 §10.2 · EU GMP Ch. 1
Product or material that doesn't meet requirements: identify it, decide its disposition, and get it approved.
ISO 9001 §8.7 · ISO 13485 §8.3 · FDA QMSR (21 CFR 820) · AS9100 §8.7 · IATF 16949 §8.7
Propose, assess and approve changes to processes, equipment, materials or documents before they're made.
FDA QMSR (21 CFR 820) · ISO 13485 §7.3.9 · ISO 9001 §6.3 · EU GMP Annex 15 · ICH Q10
Controlled documents with versions, review and approval. Each document gets a periodic review date two years ahead, and its owner is reminded a month before it's due.
21 CFR 211.100 · FDA QMSR (21 CFR 820) · ISO 9001 §7.5 · ISO 13485 §4.2.4 · ISO/IEC 17025 §8.3
Who was trained on what, when, and by whom, with trainee and trainer sign-off and reminders when training falls due.
21 CFR 211.25 · FDA QMSR (21 CFR 820) · ISO 9001 §7.2 · ISO 13485 §6.2 · ISO/IEC 17025 §6.2
Customer complaints from receipt to closure: investigation, reportability decision, response, and QA approval.
21 CFR 211.198 · FDA QMSR (21 CFR 820) · ISO 13485 §8.2.2 · ISO 9001 §9.1.2
Yes. Import records from CSV or Excel files and attach the documents themselves; large imports run in the background while people keep working.
No. They are ordinary tables, columns, views and pages. Rename a stage, add a field, or build the process from scratch, and keep the signatures and audit trail.
Documents, deviations, CAPA, change control and training live in the same workspace and link to each other, so a decision sits beside its evidence instead of in a separate tool.
You decide who may approve each kind of record. The system won't let the author of a record approve it, and every signature needs a fresh password or single sign-on check.
Yes. Every release comes with a validation package: requirements, test evidence and an installation check you can run in your own environment. See the compliance page.