qms-audit

Audit Management

Plan. Execute. Remediate.

Monday: FDA calls. Wednesday: they arrive. 48 hours to find the response letter with five commitments. Did you complete them? Audit readiness shouldn't be periodic panic.

Monday: FDA calls. Wednesday: they arrive.

You have 48 hours. The QA director pulls up the spreadsheet of open CAPAs. Is it current? Someone digs through email to find the response letter from the last inspection—the one with five commitments you said you'd complete. Did you complete them? You're not sure.

This is how most companies experience regulatory inspections. Audit readiness is a periodic panic.

Audit Lifecycle

The auditor who found what you already knew

The auditor opens a deviation from six months ago. Investigation was inconclusive. No root cause identified. No corrective action. The deviation just sat there.

Your internal audit program was supposed to catch this. But the checklist said "verify deviations are closed within 30 days" without anyone actually looking at what that meant.

Internal audits that confirm compliance without verifying effectiveness are theater.

"Show me your overdue CAPAs."

Inspection Readiness

In most organizations, this requires exporting data from one system, cross-referencing with another, and hoping the report is accurate.

In Seal, the answer is instant. Dashboard shows open CAPAs, aging distribution, escalation status. Prior inspection commitments tracked to completion with evidence attached.

Auditor independence

Independence is a regulatory requirement. Auditors shouldn't audit their own work. When you schedule an audit in Seal, the system shows qualified auditors who don't have conflicts. If you try to assign someone who isn't independent, the system blocks the assignment.

The pattern nobody saw

Manufacturing audit found a deviation investigation that took 90 days. QC audit found another—78 days. Packaging found a third—65 days. Each auditor documented their finding. None of them saw the pattern.

Seal trends findings across audits. Three findings about investigation delays aren't three separate problems—they're one systemic issue requiring one CAPA.

Commitment tracking

The FDA inspector left three months ago. The response letter promised five improvements. Are they done?

Each commitment has an owner, a deadline, and evidence requirements. Progress is visible on dashboards. When the inspector returns: "Three complete, two in progress, here's the evidence."

Capabilities

01Risk-Based Scheduling
Audit frequency based on regulatory impact, historical performance, and business criticality. Focus resources where they matter.
02Auditor Qualification
Track training, independence, and qualification expiration. System prevents unqualified or conflicted auditors from assignment.
03Structured Checklists
Area-specific audit protocols with objective evidence requirements. Consistent execution across auditors and over time.
04Finding Management
Capture observations with evidence. Classify by severity. Track response, implementation, and verification to close-out.
05CAPA Integration
Major findings trigger CAPAs automatically. Full traceability from audit finding to corrective action to verification.
06Inspection Readiness
Real-time view of open findings, prior inspection history, and commitment status. Know your readiness at a glance.
07Finding Trends
Aggregate findings across audits to surface systemic issues. Spot patterns that individual audits miss.
08Commitment Tracking
Track promises to regulators with deadlines, owners, and evidence. Never lose a commitment in email.
01 / 08
Risk-Based Scheduling
Risk-Based Scheduling

Entities

Entity
Description
Kind
Audit
Internal audits should find what FDA would find. If the auditor found something you already knew, your program failed.
type
Internal Audit
Find it before the regulator does. Audits that confirm compliance without verifying effectiveness are theater.
template
Mock Inspection
Simulate the real thing. Findings flow into the same system—treated as seriously as real ones.
template
Regulatory Inspection
FDA, EMA, notified body. Log findings, track commitments, show the response trail when they return.
template
FDA-2023-PAI
Pre-approval inspection. Five commitments in response letter. Three complete, two in progress. Status instant.
instance
Finding
Observation requiring response. Complete cycle: finding → response → implementation → verification. Only then does it close.
type
Major Finding
Triggers CAPA automatically. Significant non-conformance. Can't close without verified correction.
template
FND-2024-001
Deviation from six months ago. Investigation inconclusive. No corrective action. Internal audit should have caught it.
instance
Observation
Area for improvement. Still tracked, still visible, still addressed.
template
Commitment
Promise to regulators. Owner, deadline, evidence. 'Did we complete the five commitments?' should be instant, not a scramble.
type
Inspection Readiness
The call comes Monday, FDA arrives Wednesday. Know your status in seconds: open CAPAs, prior findings, commitment status.
type
Auditor
Independence is required. The system blocks assignment of auditors who work in the area being audited.
type
Finding Trend
Manufacturing found a 90-day investigation. QC found 78 days. Packaging found 65 days. Three auditors, one systemic issue.
type
Audit Schedule
Risk-based planning. Critical processes get more attention. Areas with frequent findings get audited more often.
type

FAQ

The system knows who works in each area and who performed previous audits. When you schedule an audit, it shows only qualified auditors who don't have conflicts. If you try to assign someone who isn't independent, the system blocks the assignment.