When the auditor arrives, hand them the link.

AssetOS provides the core technical controls for Part 11–aligned operations — unique user IDs, role-based access, operation-level audit trails capturing every edit, archive, and deletion with user identity and timestamp, and optional dual-approval workflows for destructive actions. Full compliance also depends on your SOPs and validation work; we provide the IQ/OQ/PQ templates customers use.

Every action — from field edits to record deletion — is logged with user identity, timestamp, and the nature of the change. Deletions require dual approval when enabled. No log entry can be removed. Admins can export a full audit package for any asset or time window.

Yes — the Auditor role is read-only, scope-limited (by site, by framework, by date range), and time-boxed (defaults to 30 days, configurable to 1–180). Every page view is logged with a watermark. No credentials are shared; auditors get their own SSO-backed accounts.

You keep it. Export an encrypted archive of every record, document, and log — in open formats (CSV, PDF, JSON) — at any time, including up to 90 days after cancellation. Hard-deletion is enforced after the retention window you set at signup.

US, EU, or APAC — your choice at signup. Data stays in-region; cross-region replication is opt-in. AWS-hosted, encrypted at rest (AES-256) and in transit (TLS 1.3).

Yes. Any checklist step, WO status transition, or PM completion can require evidence (photo, video, document, signature, co-sign). Enforcement is server-side — the WO cannot close without it — and defined per asset class, per framework, or per site.