Standards and compliance on the factory floor
Manufacturing software often has to produce evidence for audits. ISO 9001 expects controlled documents and quality records, automotive suppliers working to IATF 16949 need traceability and control of nonconforming parts, and pharmaceutical and medical device makers serving the US must meet FDA 21 CFR Part 11 for electronic records and signatures, with EU GMP Annex 11 playing a similar role in Europe.
Architecture standards help too. The ISA-95 model describes how enterprise systems such as ERP and plant systems such as MES and SCADA should divide responsibilities and exchange data, and the ISA/IEC 62443 series addresses industrial cybersecurity. This is general information, not legal or certification advice; quality and regulatory teams should confirm requirements for each product and market.
In practice, compliance features should be part of the design rather than added before an audit. Record who did what and when for every critical step, prevent edits to approved records except through controlled corrections, and make reports easy to export in the format auditors request.
- Keep audit trails for every change to production and quality records.
- Use electronic signatures with identity checks where regulations require them.
- Link each batch or serial number to materials, machines and operators.
- Control document versions for work instructions and specifications.
- Segment plant networks and restrict remote access.



