Platform
Answering the auditor should not be a project
Every quality system claims an audit trail. The question is whether it was designed in or bolted on, and there are three specific places where you can tell.
One — who
A person exists once. The welder on the shop floor, the inspector on site, the coordinator who signs the continuity confirmation and the examiner at a certification body are entries in one register, with their qualifications, their validity windows and their authority attached.
When identity is duplicated across modules, the same person ends up qualified in one place and expired in another, and nobody finds out until the two records are put side by side in front of somebody from the notified body.
Two — which rule
Every record points at the edition of the standard that governed it, and editions are immutable. Revising a code creates a new edition; it does not alter the old one.
This is what makes a five-year-old record defensible. The auditor is not asking what the standard says today. They are asking what it said then, and whether you followed it.
Three — the seal
Issued documents — certificates, reports, dossiers — are sealed. The seal is verifiable by a third party who has no access to your systems, through a QR on the document itself.
Sealed also means immutable. A correction is a new revision that supersedes the previous one and says so; the superseded document remains readable. A quality system in which an issued document can be edited in place has no audit trail worth the name, whatever its log file says.
What follows from these three
- Every action carries who did it, when, and under which rule edition
- Approvals record the authority the approver held at that moment, not today
- Superseded documents stay retrievable, with the chain visible in both directions
- Third parties verify without contacting you
The honest limitation
None of this makes a record true. A system can only capture what somebody entered; if a weld is recorded against the wrong welder, the audit trail will faithfully preserve the wrong welder. What it removes is the second category of problem — the records that are correct but cannot be found, reconstructed or defended.