Written by Dr. Richard Soltero, President, InstantGMP, Inc.

Your System Is Now the Evidence

Most quality directors I have spoken with over the past year understand that FDA’s Quality Management System Regulation represents a real shift. Fewer have fully reckoned with what that shift means for their electronic QMS, their Electronic Device Records, and their inventory systems. The QMSR is not simply a rebranding of the old Quality System Inspection Technique framework. It is a fundamental change in what inspectors examine and how they follow the evidence.

Under the previous QSIT model, inspectors generally moved through known subsystems. Companies could prepare for predictable inspection paths. That predictability is gone.

Under QMSR, investigators follow process flow and risk signals. That means your EBR, inventory, CAPA, and quality processes must be fully connected and demonstrably functional in real time. If your digital infrastructure cannot show that linkage quickly and clearly, that absence of demonstrable connection becomes a compliance risk in itself.

From Recordkeeping to Evidence of Control

The shift in how FDA approaches Electronic Device Records is worth examining carefully, because it represents one of the most significant practical changes in inspection expectations.

Under 21 CFR Part 211, the obligation was to maintain accurate and complete records. That obligation has not disappeared. What has changed is the expectation layered on top of it. Inspectors now expect your Electronic Device Records system to show real-time enforcement of specifications, not simply documentation of what occurred after the fact. They expect evidence that the system prevents errors before they occur. And they expect full traceability across materials, equipment, personnel, and process steps in a form that can be demonstrated immediately during the inspection.

This is a meaningful distinction. Documentation tells an inspector what happened. Control evidence tells an inspector that your system was designed and validated to make the right outcome the only likely outcome. InstantGMP’s Electronic Device History Record platform is built around this principle. The system enforces process logic at the point of execution, not at the point of review.

Inventory Is Now a Quality Function

Inventory management used to be treated as an operational concern separate from the quality system. QMSR’s alignment with ISO 13485 has changed that positioning entirely.

Inspectors will expect lot-level traceability across the full product lifecycle, from incoming material through production, distribution, and any complaint or recall scenario. They will look for tight integration between inventory status control and Device Records. A lot that is in quarantine must not move. A lot that fails specification must be traceable forward to any downstream use and backward to its origin.

The practical test is straightforward. If a recall scenario takes hours to reconstruct rather than minutes, that lag becomes a finding. The systems must support immediate, complete traceability without manual reconstruction.

Risk Management Embedded in Operations

Under QMSR, risk management is not a standalone document exercise. Investigators may begin an inspection by examining your risk files and then trace directly to how your system controls that risk in actual production operations.

That means risk visibility must exist within workflows, not parallel to them. If a high-risk process step is identified in your risk documentation, your electronic device history record system  should enforce the controls associated with that step. Your inventory system should prevent use of nonconforming materials. Your CAPA process should connect to effectiveness verification. The chain of evidence must be traceable end to end.

Companies that built their quality systems as a collection of point solutions will feel this requirement most acutely. Risk management embedded in a document is not the same as risk management embedded in operations.

Internal Audits and Management Review Are Now Inspectable

This is one of the changes that surprises quality directors most when I describe it. FDA can now review internal audit results, supplier audit findings, and management review outputs. That scope was not part of the traditional QSIT framework in the same way.

Your system must store these records centrally, show trends over time, and demonstrate that actions were taken and followed up. Under 21 CFR Part 211, management oversight is an obligation. QMSR makes that oversight visible and inspectable. Inspectors are now evaluating how your leadership actually uses your quality system, not simply whether a management review meeting occurred.

What a QMSR-Ready Platform Needs to Demonstrate

When I think about what QMSR readiness looks like in practice, the operational requirements resolve into a short list. Your digital systems must support all of the following without manual workarounds:

• Full traceability from raw material receipt through finished good release, distribution, complaint receipt, and CAPA closure
• Real-time enforcement of specifications within the batch record, not post-execution review
• Immediate retrieval of audit, supplier qualification, and management review records with trend data visible
• Integrated risk visibility within production and quality workflows
• Status control in inventory that prevents use of nonconforming or unreleased materials at the point of execution

This is why InstantGMP was built as an integrated platform rather than a collection of modules. Inventory management, Electronic Device Records, and quality processes share a single data environment. A deviation in production creates a visible record that connects to investigation, CAPA, change control, and the updated batch record. That linkage is not a configuration exercise. It is the architecture.

The Question Has Changed

FDA is no longer asking whether you have records. The agency is asking whether your system controls risk and consistently produces quality outcomes. The evidence for that question is your digital infrastructure.

If your systems are disconnected, manual in critical areas, or reactive rather than preventive, that will become apparent during inspection. The good news is that the path forward is well defined. The companies that will navigate QMSR inspections with the least friction are the ones that invested in integration before the inspection arrived, not during it.

For a deeper look at how InstantGMP positions manufacturers to meet QMSR inspection expectations, visit us at InstantGMP.com.