What the checklist covers
The workbook has two tabs. An Instructions tab explains the Pass / Gap / N-A scoring and how to read your result. The checklist tab walks 28 controls across the whole of 21 CFR Part 11 — every operative clause from §11.10(a) to §11.300(e), including the biometric-signature clause §11.200(b) — each with the requirement in plain language, a Status dropdown, and columns for the evidence you would show an investigator and the owner responsible.
Totals count themselves: the workbook tallies your Pass, Gap, and N/A counts automatically, so you can see your readiness at a glance and re-run it before each inspection or major system change.
- §11.10(a)–(k) — validation, record copies, retention, access and authority checks, the audit trail, training, and documentation control
- §11.50 signature manifestation and §11.70 signature-to-record linking
- §11.100–§11.300 — electronic-signature uniqueness, two-component controls, and password/credential controls
- A Pass / Gap / N-A dropdown, plus evidence and owner columns, on every control
- Automatic Pass / Gap / N-A totals
Why a Part 11 self-audit matters
21 CFR Part 11 is where FDA inspections of computerised systems begin, and the findings cluster in the same places every time — audit trails that are not reviewed, signatures that do not carry their meaning, access that is not truly restricted, and passwords managed without controls. A structured self-audit surfaces those gaps while you can still fix them, rather than in a 483.
Working the checklist also builds the muscle memory of evidence: for each control, can you actually produce the record that proves it? That is the question an investigator asks, and the Evidence column is where you answer it in advance.
From a checklist to a governed Part 11 system
A checklist tells you where the gaps are; a validated system closes them. Complere is built for 21 CFR Part 11 work: an immutable, time-stamped ALCOA+ audit trail on every record (§11.10(e)); re-authenticated electronic signatures that carry the signer, time, and meaning and stay bound to their record (§11.50/§11.70/§11.200); role-based access and authority checks (§11.10(d)/(g)); and controlled documents with version history and retention (§11.10(b)/(c)).
The result is that most of the checklist stops being a manual effort — the controls are enforced by the workflow, and the evidence is one export away.
