Skip to main content

CertEquip articles

Explainer

What a calibration record audit trail shows

Key takeaways

  • A calibration record audit trail is the change history behind each record: who created it, when, and what the record said before any correction.
  • The trail is what separates a record from an assertion. If an entry can be edited without leaving a mark, an auditor has no way to tell a correction from a rewrite.
  • Under FDA 21 CFR Part 11 the defining property is that previously recorded information cannot be obscured or deleted, and that principle travels well beyond regulated industries.
  • Most audit findings about calibration are not about the trail at all. They are about equipment that never made it into the register in the first place.

A calibration record audit trail is the chronological history behind each calibration entry: who recorded it, when, and what the record said before any later change. Auditors read it to confirm the entry was made when the work happened and was not quietly rewritten later. Under FDA 21 CFR Part 11 it is "a secure, computer-generated, time-stamped record" of the creation, modification, and deletion of electronic records (simplerQMS).

What does an audit trail have to show?

Four things, in most schemes. Who did the work and who entered the record, so each entry is attributable to a named person. When it was recorded, ideally while the task was being performed rather than reconstructed later. What changed, if anything, and why: eMaint's account of what inspectors expect puts it plainly, that when correcting an error an authorized reviewer must "review, re-sign, and list the reason for changes" (eMaint). And the prior state, because the Part 11 principle worth borrowing everywhere is that previously recorded information "cannot be obscured or deleted."

That last one is where spreadsheets fail. Overwrite a due date in a cell and the old value is gone, along with any evidence there was ever a correction. The trail is not an extra artifact you produce at audit time. It is a property of how the record is stored.

Do you need this outside a regulated industry?

The regulation may not reach you, but the question does. An auditor in any scheme is deciding whether to trust your records, and a history that could have been edited invisibly is weaker evidence than one that could not.

It is also worth keeping the trail in proportion. The most common ISO 9001 audit finding is not a suspicious edit; it is "incomplete or missing calibration records for monitoring and measuring equipment (Clause 7.1.5)" (GloCert), often because a schedule lapsed or new equipment was never added to the programme. Getting every asset into the register comes first. What ISO 9001 expects calibration records to contain covers the fields; this page covers their history.

How CertEquip holds the history

Certification history in CertEquip is append-only. Recording a new certification, inspection, or calibration against an asset never deletes an earlier one, so the superseded record stays readable alongside the current one with its dates and performer intact. Compliance status is computed from those records rather than looked up anywhere, and every reminder dispatch lands in an immutable delivery ledger visible on the asset, which answers the follow-up question of whether anyone was actually told. When an auditor asks, the asset's or the fleet's full history exports as an audit binder PDF, shareable through a time-limited, revocable link.

The binder reports recorded facts. Whether the equipment meets a requirement is the regulator's and the operator's determination, which is the same line equipment certification tracking draws throughout.

Is a calibration audit trail the same as a calibration log?
No. The log is the list of calibrations and their dates. The audit trail is the history of the log itself: who entered each line, when, and what it said before any correction. A log can be perfectly complete and still have no trail behind it.
Does a paper system have an audit trail?
It can, if corrections follow the old discipline of a single line through the original value, the new value beside it, and the corrector's initials and date. What paper cannot do is prove nothing was rewritten on a page nobody has seen since.
How long does the audit trail need to be kept?
As long as the records themselves, which varies by scheme and by contract. The practical default is to keep the whole history rather than the latest state, because a superseded [calibration certificate](/articles/what-is-a-calibration-certificate) is often what proves a measurement taken years ago was made with an instrument in calibration at the time.

A history nobody can quietly rewrite

Contact sales