metroliq
Compliance · ISO/IEC 17025 · 21 CFR Part 11 · Annex 11 · ISO 13485

Built for the assessor, the auditor and the inspector.

Metroliq does not have a compliance module. Compliance is how the record works: the hash-chained audit trail, two-component signatures bound to meaning, computed verdicts, amend-only certificates and supplier verification that runs itself.

This page maps the clauses labs and regulated plants are assessed against to the mechanisms in the platform. Every mapping points at a module page where the screens and capabilities are shown. Nothing here is a roadmap item.

What the platform is built to satisfy

The standards, and what they mean in the product

ISO/IEC 17025:2017

Competence of testing and calibration laboratories. Authorization per discipline (§6.2.5), equipment and traceability (§6.4, §6.5), uncertainty (§7.6), decision rules (§7.8.6), reporting (§7.8), amendments (§7.8.8), nonconforming work, CAPA, internal audit, management review.

21 CFR Part 11

Electronic records and electronic signatures. Validation, accurate copies, retention, access control, secure time-stamped audit trails, operational sequencing, authority checks, two-component signatures, signature/record linking, password controls.

EU GMP Annex 11

Computerised systems: validation, data storage, audit trails, security, electronic signatures, archiving — the European counterpart to Part 11 for pharmaceutical manufacturers.

ISO 13485 · ISO 9001

Control of monitoring and measuring equipment, control of records, CAPA and management review for medical-device and general quality systems.

ILAC-P14 · ILAC-G8 · ILAC-G24

How uncertainty is reported on certificates (two significant figures, coverage factor and probability), how conformity is decided with guard bands, and how calibration intervals are reviewed from evidence.

GUM · JCGM 101 · JCGM 106 · Z540.3

Uncertainty propagation, Monte Carlo evaluation, conformity assessment risk (PFA/PFR), and the ANSI/NCSL Z540.3 false-accept target.

DCC (Digital Calibration Certificate)

The PTB-led XML schema for machine-readable certificates with D-SI units, coverage factor and probability, influence conditions and conformity.

ALCOA+

Attributable, legible, contemporaneous, original, accurate, complete, consistent, enduring, available — the data-integrity expectations regulators apply to every record.

Try it · clause explorer

Which clause, which mechanism, which module.

Filter by standard or search a word. Each row names the requirement, the mechanism that meets it in the platform, and the module page where you can see it.

Try it · certificate anatomy

Hover any part of a certificate. Read the clause it satisfies.

An annotated certificate as the platform prints it. Every block maps to the clause that requires it and the module that produces it. Download a real sample below in all three formats.

In the product

Where compliance lives in the app

Hash-chained audit trail
The audit trail with facets, export, verify and periodic review.
Try it · the audit trail

Edit history. Watch the chain break.

The audit trail is a SHA-256 hash chain over canonically serialised entries. This demo computes real hashes in your browser: change any detail and every later entry stops matching its stored hash.

Data integrity

ALCOA+, mechanism by mechanism.

Electronic signatures

What a signature is here

Two parts

Identity plus password, every time or per session.

A signature re-enters the password. A signing session of up to thirty minutes can be configured; zero means a password for every act.

Meaning

Bound to what it signs.

Performed, approved, reviewed, released — the meaning is part of the signature and prints with the name and the timestamp.

Linked

Hashed with the record.

Edit a signed record and the signatures are rescinded, visibly, with an audit entry saying so.

Separated

Independent approval.

When the policy is on, the person who performed cannot approve; the API refuses it.

Never a model

Nothing is signed by the AI.

Every AI output is a draft in the provenance ledger until a qualified person signs it.

Try it · readiness

Twelve questions an assessor will ask.

Answer honestly. The score is yours; the list underneath says which module closes each gap.

Beta · free while we build it with the first labs and plants

Bring one lab and your real history.

The tour runs the working platform, not a mockup. Pilot on your own instruments with your own imported history — we set it up with you, and fixes ship in hours and days, not release cycles.