Electronic signatures and audit trails in AI workflows
How Part 11 applies when an AI agent prepares the work and a person signs it.
- Regulation
- 21 CFR Part 11
- Subject
- Electronic records; electronic signatures
- Ovada status
- Compliant · validation package included
21 CFR Part 11
21 CFR Part 11 compliance software for controlled AI quality workflows
Ovada is 21 CFR Part 11 compliant. Electronic records, electronic signatures, audit trails, access controls, and traceability are built into every regulated workflow, and a validation package comes with the system.
Material disposition · RM-24-117Every action recorded
Release, reject, or hold this lot?
Microcrystalline cellulose · Lot RM-24-117 · Castellan Excipients
Ovada recommends release
All 19 parameters within specification. Microbial limits confirmed on the revised COA. The call is yours.
Evidence
- Certificate of analysis · rev 2Open ↗
- Approved specification · RM-SPEC-0142 v3Open ↗
- Supplier qualification · Castellan ExcipientsOpen ↗
- Correspondence · 4 messages, 2 checksOpen ↗
✓
Approved for releaseSigned by Dana Reyes, QA manager · Meaning: approve for release · 18 Sep 2026, 14:42 UTC
21 CFR Part 11Audit trail
- 16 Sep 09:02 · COA, spec v3 and supplier approval linked
- 09:03 · Gap: microbial limits missing from COA
- 16 Sep · Request sent to Castellan Excipients
- 17 Sep · Reply checked: same COA
- 17 Sep · Follow-up sent
- 18 Sep · Revised COA verified, within specification
- 18 Sep · Routed to Dana Reyes · responsibility matrix
- 18 Sep 14:42 · Part 11 e-signature · Dana Reyes · approve for release
Section by section
How Ovada meets each Part 11 control for electronic records and signatures
AI changes how the work gets done, not what Part 11 requires. Every regulated Ovada workflow is built to meet the same controls as any other system that creates and signs electronic records.
| Section | Requires | How Ovada meets it | Evidence you get |
|---|---|---|---|
| 11.10(a) | Validation for accuracy, reliability, and consistent performance | A validated system, with models, prompts, and knowledge version-pinned and change-controlled | IQ/OQ/PQ documentation, URS, and FRS |
| 11.10(b), (c) | Accurate, complete copies, and records protected through retention | Each output is kept with its evidence, review history, and signature | Exportable record packages |
| 11.10(d) | System access limited to authorized individuals | Role-based access, with permitted actions set per workflow | Role and access records |
| 11.10(e) | Secure, computer-generated, time-stamped audit trails | An append-only audit trail of every action, review, and approval | Audit trail export |
| 11.10(f), (g) | Operational sequencing and authority checks | Workflow steps enforced in order, with sign-off limited to authorized roles | Workflow definitions and authority matrix |
| 11.50, 11.70 | Signature manifestations, permanently linked to the record | Signer name, date and time, and meaning shown on every signed record | Signed records with their manifestations |
| 11.100 to 11.300 | Unique signatures and verified signer identity | A unique identity per signer and re-authentication at the moment of signing | Signature and authentication logs |
Signatures stay with qualified people
Part 11 controls make electronic records and signatures trustworthy. They do not move judgment to AI. Ovada prepares the work; the qualified person reviews it, decides, and signs. The agent never signs.
Ovada provides
- The validated system and its validation package
- Audit trails, access controls, and electronic signature controls
- Change control for models, prompts, and knowledge
- Evidence gathered and cited for every output
Your team owns
- Intended use and the scope of each workflow
- Training and written accountability policies
- Review, decisions, and every signature
- Your validated QMS as the system of record
A validation package, ready for your quality unit
Electronic records and signatures are addressed as part of Ovada’s validated system.
Validation package5 items
- IQ/OQ/PQ documentation
- User requirements specifications (URS)
- Functional requirements specifications (FRS)
- Traceability matrix
- Supporting validation evidence
Additional validation support is available based on your implementation. See security and validation for how Ovada fits a validated environment, and GxP compliance software for how the GMP work itself stays controlled.
Go deeper on Part 11
21 CFR Part 11 checklist
The controls for electronic records and signatures, as a working checklist.
GAMP 5 and computer system validation
A practical guide to validating computerized systems, AI workflows included.
Frequently asked questions about 21 CFR Part 11 compliance software
01What is 21 CFR Part 11 compliance software?
+
It is software used to create, manage, and sign regulated electronic records in a way that meets FDA Part 11 requirements for validation, audit trails, access controls, and electronic signatures.
02Is Ovada 21 CFR Part 11 compliant?
+
Yes. Ovada is 21 CFR Part 11 compliant. Electronic records, electronic signatures, audit trails, access controls, and traceability are addressed as part of Ovada’s validated system, and additional validation support is available for your implementation.
03How can an AI workflow be validated if model outputs vary?
+
Each workflow defines the evidence it must gather, the deterministic checks it must run, the outputs it must produce, and the human authorization required. Models, prompts, and knowledge are version-pinned and change-controlled, so the workflow behaves the way it did when it was validated.
04Does Ovada support electronic signatures and audit trails?
+
Yes. Ovada supports 21 CFR Part 11 electronic signatures and maintains append-only audit trails for regulated workflows, backed by a validation package that includes IQ/OQ/PQ documentation, requirements specifications, and a traceability matrix.
05Does Ovada replace our validated QMS?
+
No. Your validated QMS remains the system of record. Ovada works across your connected systems within the approved workflow scope.
Put controlled AI to work in regulated quality
Bring one regulated workflow and see how Ovada structures the evidence, review, signature, and record around it.