Summary
- The problem
- A passing certificate describes the instrument after adjustment. It does not say what the original failure meant for the batches, tests and qualification runs measured before it was found.
- Seal’s approach
- Each calibration point keeps its as-found and as-left observations, recorder, procedure and reference standard. The event links to the recorded uses of the instrument, so an out-of-tolerance result opens an assessment of the work it may affect.
- What changes
- The original result stays beside the final condition instead of being overwritten. Use permission, the passing check and the impact on earlier work remain separate, reviewable decisions.
- Where to start
- One critical instrument, taken from master data and risk through execution, an as-found failure and its impact assessment. Book a demo.
Calibration belongs with the work that relies on it. A certificate can describe an instrument at one point in time; the operating record also needs its intended use, range, procedure, current restrictions and the measurements it supported.
The TT-204 example follows a shelf-temperature instrument through five calibration points. Its low-end error changes from −0.8°C to −0.1°C after adjustment. That answers one question about its final condition. It does not settle what happened during earlier freeze-dryer cycles.
Seal records each point with both observations, timestamps, recorder, procedure and reference standard. The event connects to an assessment of two batch cycles and a qualification run. Open the views in Figure 1 to follow those records; compare the same measurements below.
One adjustment. Two retained datasets.
TT-204 / temperature indication. Inspect a point to compare the original reading with the post-adjustment check.
-40°C reference point
-0.8 °C errorOutside the assigned ±0.5°C limits
Recorded indication: -40.8°C.
Keep this original result with the investigation. Later adjustment does not establish when the error began.
Inspect all recorded values
| Reference °C | Before °C | After °C |
|---|---|---|
| -40 | -40.8 | -40.1 |
| -20 | -20.3 | -20.0 |
| 0 | -0.1 | 0.1 |
| 20 | 20.1 | 20.1 |
| 40 | 40.2 | 40.1 |
Illustrated temperature example, not a product screenshot. Dashed lines show assigned limits; hollow points retain the original error. Uncertainty is not depicted. The procedure defines the applicable decision rule.
1Define the measurement hierarchy before the schedule.
Sites, systems, equipment, loops, instruments, channels and measurement points form a controlled hierarchy. A transmitter can serve a control loop, an instrument can contain several ranges or channels, and a portable device can move between areas. Each keeps its own identity, tag, location, range, resolution and parent equipment, and replaced assets retain their lineage.
1.1Criticality comes from intended use.
The criticality assessment links the instrument to the process parameters, methods, alarms, interlocks, release tests and safety functions that depend on it, with the failure effect, detectability and independent checks. Criticality then drives calibration frequency, procedure, tolerances, review, overdue behaviour and impact assessment. A utility pressure gauge and a release-assay balance should not inherit the same controls because they share an asset class.
1.2Range and tolerance are use-specific.
The master record distinguishes manufacturer, calibrated and operating ranges, resolution, acceptance tolerance and the process or method requirement. Multi-range instruments retain separate points and criteria.
Configure the use workflow to check the relevant range and requirements. A device can be within its calibration acceptance yet inappropriate for the precision required by a particular method. Retain the reason for the eligibility decision with the work, including any missing prerequisite or restriction.
The certificate is one link. The work is the rest.
PRT-009
- Evidence
- Certificate 26-188
- Check at event time
- Range, uncertainty, validity and condition
- Retain
- Traceability and any corrections applied
CAL-0882
- Instrument
- TT-204 / SN 77142
- Procedure
- CAL-TEMP-014 v08
- Retain
- Standards, environment, points and both datasets
Cycles and qualification
- Candidate records
- BFR-071, BFR-072, OQ-118
- Check in context
- Time, range, decision margin and independent evidence
- Retain
- Assessment, rationale and authorised disposition
Follow where the standard was used, then the work performed with those instruments. Record what is known, what is missing and which uses need assessment.
Illustrated record relationships, using fictional identifiers. No product-impact conclusion or approval is represented.
1.3Why teams choose Seal for calibration
An as-found failure matters because of the tests and batches that relied on the instrument, yet a metrology or maintenance system holds only certificates and due dates, and those uses sit in LIMS, batch records and logbooks. Seal records the calibration event against the recorded uses of the instrument, so an as-found failure opens an assessment of the work it may affect. Neil can look across calibration history for drift and propose a changed interval or procedure for people to verify and approve.
2Procedures are executable measurement designs.
An approved procedure defines prerequisites, environmental conditions, reference-standard requirements, calibration points, repetitions, calculations, uncertainty treatment, tolerances, adjustment rules and exception behaviour. For automatic, mechanical and electronic equipment in US drug manufacturing, routine calibration follows a written program.¹ An event instantiates the effective procedure against the exact asset, range, location, standards and due requirement.
2.1Keep the reference evidence with the event.
Reference and working standards retain their range, uncertainty, certificate, traceability source, drift, expiry, status and use history. A standard needs to be suitable at event time, not merely current when someone later opens its record. Configure validity and suitability checks for the procedure, and retain the certificate, corrections and standard version used. If a standard later fails, its recorded uses provide the starting population for investigation; missing or unrecorded uses need to remain explicit.
2.2Schedule around the measurement and the work.
Time-based, usage-based, campaign, before-use and condition-triggered strategies can coexist. Due dates account for grace policy, production windows, access, cleanroom state and dependent maintenance, and forecasting groups work by location, standard set and technician qualification. Deferral is a governed decision with risk, duration, conditions, approval and revised due state, not a changed date.
The date works. Does the reference?
Two proposed events, one reference standard. Its certificate validity must cover the actual work—not just the day the jobs were planned.
TT-204
7 September / proposed event
- Reference
- PRT-009
- Check at event date
- Certificate valid through 7 September
TT-205
8 September / proposed event
- Reference
- PRT-009
- Check at event date
- Certificate expires before this event
Illustrative schedule, September 2026. Certificate validity is only one prerequisite; scope, uncertainty, condition, personnel and access also need review. Neither event is shown as authorised.
3Keep the original result beside the final condition.
The technician confirms asset identity, procedure, standards, conditions and configuration before collecting as-found data. Each point retains its reference value, observed value, error, tolerance, pass state and actual time.
Preserve as-found data before adjustment, repair or configuration change. Use attributable correction and version history to retain what was recorded and why it changed; do not overwrite the discovery state with a passing final result.²
3.1Adjustment creates a new dataset.
When permitted, adjustment records what was changed, why, by whom and under which authorisation. As-left testing demonstrates the final condition with a complete new data set.
Seal distinguishes calibration without adjustment, adjustment, repair, limited-use return, failure and inability to calibrate. A passing as-left result cannot hide a failing as-found condition.
In the TT-204 example, the indication at −40°C is initially −40.8°C. After adjustment it is −40.1°C. The comparison at the start of this page shows both datasets; the native point record retains their separate observation times and source references. The new result is within the example’s assigned limits, while the original failure still needs its own impact assessment.
3.2Record the uncertainty model and decision rule.
Where required, the event records uncertainty contributors, the calculation, coverage factor and decision rule, with versioned budgets and formulas.
Guard banding and statements of conformity are configured deliberately. Do not claim more precision than the model supports, or imply that all GMP calibrations require the same metrology model.
4Follow the failure into the work it may affect.
An OOT calibration identifies the last known acceptable point, discovery time, potential failure start, maximum observed error, direction, affected range or channel, and immediate equipment state. The initial interval is conservative and can be narrowed only with evidence.
The investigation distinguishes standard failure, instrument drift, damage, environment, procedure, technician, data and use-related causes. Retesting or adjustment does not erase the discovery condition.
4.1Use history identifies a population to assess.
Where identity and time are captured with the use, follow the instrument into batches, process phases, samples, tests, environmental observations, alarms, qualification tests, cleaning records and decisions during the review window. Check completeness before treating that population as exhaustive.
Actual Seal interface, fictional TT-204 records. Three recorded uses are shown; completeness and impact remain under review. Published is a saved version, not an impact approval. View full size
For each use, reviewers compare the affected range and observed error with process limits, independent measurements, control-system redundancy, product data, method tolerance and decision margin. Retain inclusion and exclusion rationale, unresolved evidence and the required decisions. Finding a linked batch is not proof that it failed; passing an as-left check is not proof that earlier batches were unaffected.
5Keep use permission separate from a passing check.
A label can show tag, status, due date, restrictions and a verification code, and scanning it resolves the live record, which catches replaced, quarantined, overdue or range-restricted assets. A label does not override the system state.
5.1External calibration remains under site control.
Vendor capability, scope, accreditation where required, procedures and adjustment authority are assessed, and shipments preserve chain of custody. Incoming review reconciles the serial number, ranges, points, as-found and as-left data, tolerances, standards and adjustments. A PDF certificate alone does not release the asset.
A certificate received is not a review completed.
Check the supplied evidence against the ordered scope and the actual instrument.
Requested scope
- Identity
- TT-204 / SN 77142
- Range
- Five points / −40 to +40°C
- Evidence
- Original readings before any adjustment
Incoming review
- Identity
- Serial number reconciled
- Range
- Low-end point absent
- Evidence
- Only post-adjustment readings supplied
Illustrated certificate exception, not a product screenshot. Reconcile the raw data, standards, decision rule, adjustments and required approvals before the site’s return-to-use decision.
5.2Check the relevant function before use.
Manufacturing, laboratory, maintenance and qualification workflows can check eligibility before use, and the response gives the range or function, current status, restrictions and reason. Continuity rules define what happens during an interface outage: cached status, independent checks, controlled override and later reconciliation.
5.3Change and replacement preserve measurement lineage.
A range change, move, firmware update, tolerance change or instrument swap identifies the affected schedules, open work, methods and validated uses. Replacement records predecessor, successor, equivalence assessment and baseline calibration, and historical use remains tied to the actual serial number.
6Ask Neil to investigate and configure the improvement.
Bring a failed standard, a calibration procedure or an instrument family’s drift history. Neil can analyse the records the requester is permitted to see, follow their relationships and author the assessment, workflow or controlled change needed for the next step. The useful output is linked work and inspectable configuration, not just a summary to copy elsewhere.
“This reference standard failed its check. Find the calibrations that used it and the work that may need assessment.”
A candidate use is not a failed batch. Your team assesses the evidence and records the disposition.
A linked investigation package
Inspect package contents
- Standard history and a proposed review window, with source references
- Calibration events grouped by instrument, range and procedure version
- Candidate batches, tests and qualification uses—with missing links flagged
- Ranked hypotheses, evidence for and against, and proposed follow-up checks
Illustrative work products—not a live agent run. Neil works within the operator’s permissions; technical decisions, verification and approval remain with authorised people.
For a new procedure, Neil can author instrument and measurement templates, capture fields, calculations and review states. It can prepare verification cases for an expired standard, a missing point, an out-of-range result, a changed formula or an unauthorised completion attempt. Where a script is needed, Neil can write and lint it for operator-run testing. Metrology specialists review the model and decision rule; authorised people execute verification, approve and publish the change.
Keep requirements, risk assessment, configuration versions and verification evidence with the change. Review the effect on open work, validated uses, training, labels and interfaces before cutover. Existing events retain their recorded procedure and source evidence.
6.1Measure whether the change helped.
Useful measures include overdue critical assets, as-found failure rate, drift by family, repeat failure and impact-assessment age. Completion counts alone can reward unnecessary work. Interval optimisation uses stable history, risk, use, environment and failures under approved change, not automatic schedule extension.
7Start with one instrument. Prove the whole chain.
Take one critical instrument from master data and risk through procedure, standards, execution, an as-found failure, adjustment, as-left pass, quarantine, use-history extraction, batch and test impact, and interval review.
Include a multi-range instrument, overdue standard, external certificate mismatch, mobile asset location gap, interface outage and successor replacement. The implementation is ready when each measurement decision can show its traceability and suitability.
References
- 121 CFR 211.68, Automatic, mechanical, and electronic equipment: computerised and automated equipment must be routinely calibrated, inspected or checked under a written program; changes to master production and control records may be made only by authorised personnel, input and output must be checked for accuracy, and backup data maintained. eCFR
- 2EudraLex Volume 4, Part I, Chapter 4, Documentation (2011), sections 4.8 to 4.10: records should be made at the time each action is taken, alterations should be signed and dated and permit reading of the original information, and secure controls must ensure record integrity throughout the retention period. European Commission
ACapabilities
| Capability | What it covers |
|---|---|
| Instrument master and criticality | Keep identity, measurement function, range and restrictions with the asset. TT-204 connects the shelf-temperature channel to its use in cycles and qualification. |
| Reference standard control | Retain range, uncertainty, certificates, corrections, condition and recorded uses. Review suitability at the event date, and follow a failed standard into the work it supported. |
| Risk-based scheduling | Coordinate due work with reference-standard validity, personnel, service access and production windows. Keep deferral rationale and the original commitment. |
| Digital calibration execution | Keep points, standards, environment and the calculation rule with the event. Preserve original and post-adjustment datasets separately. |
| Out-of-tolerance impact | Follow the review window into actual instrument uses. Retain the assessed population, source evidence, missing links and the rationale for each decision. |
| Use eligibility | Check the relevant range, status and restrictions before work. CAL-0882 retains five in-range final readings alongside an open technical review and restricted use. |
| Vendor calibration control | Reconcile the supplied certificate and raw evidence with the instrument and ordered scope. Missing points or original readings remain visible before site review. |
| Metrology analytics | Ask Neil to compare as-found drift, recurrence and use history, then stage a justified procedure or interval change with verification and effectiveness review. |
BConnected records
CQuestions and answers
What is pharmaceutical calibration management software?
It manages GMP measuring instruments with their criticality, ranges, procedures, reference standards and schedules. It records each calibration’s as-found and as-left data, handles out-of-tolerance events and determines whether an instrument may be used for a given measurement.
How is calibration different from maintenance?
Maintenance preserves or restores an asset’s function. Calibration establishes the relationship between an instrument’s indication and reference values for defined ranges and acceptance. The workflows interact but retain distinct evidence and decisions.
Can one instrument have several calibrated ranges?
Yes. Channels, ranges, operating uses, points, tolerances, procedures and status can be controlled separately while staying attached to the physical asset.
Does Seal support as-found and as-left results?
Yes. As-found data are recorded in full before any adjustment or repair. As-left testing records the final condition as a separate dataset and cannot replace the as-found state.
How are reference standards controlled?
Each standard keeps its scope, range, uncertainty, traceability, certificate, storage, drift, status and use history. Its suitability is checked for the procedure and the date of the event.
Can Seal calculate measurement uncertainty?
Seal can execute approved, versioned uncertainty budgets and conformity rules where required. The metrology function defines appropriate contributors, assumptions, coverage and interpretation.
What happens after an out-of-tolerance calibration?
The instrument’s use is restricted and the potential failure interval is established. The cause is investigated, and the use history identifies the batches, tests, records and decisions that need impact assessment before closure.
Can the system identify every batch measured by a failed instrument?
It identifies recorded uses; completeness must be checked. Where instrument identity is captured at use, Seal traverses the event interval to MES, LIMS, environmental, qualification, cleaning and maintenance records and preserves the assessed population.
Does Seal support external calibration vendors?
Yes. Vendor work, custody, authorisation, procedures, standards, data and certificates can remain under site control. Supplied certificates and raw data are reconciled with the instrument and ordered scope before site review and release.
Can calibration status block equipment or laboratory use?
Yes. Range-specific eligibility can be configured to gate MES steps, LIMS tests, qualification work or maintenance checks. The approved continuity procedure defines what happens during an interface outage.
How are calibration intervals optimised?
Stable as-found history, drift, risk, use intensity, environment, failures and independent controls can support an approved interval change. The schedule does not change on its own because an average looks favourable.
What should the first implementation prove?
Take one critical multi-range instrument through master data, procedure, standards, schedule, as-found failure, adjustment, as-left pass, use-history impact, product decision, label update and interval review.


