The eQMS platform where every quality record connects
Every quality process, in one connected system. QMSdesk™ links your documents, events, CAPAs, changes, training, risks, audits and suppliers as records, so any issue can be followed from the first signal to the proven fix.
DEV-001
Temperature excursion during storage, batch BT-4201
Related records
Every link is typed and attributed: who made it, when and why.
Eight quality objects, all connected
At the heart of the QMSdesk platform are eight kinds of quality record, and each one links to the others in the database, not as files in folders.
Document
Controlled documents you author, review and approve, and reference documents such as external standards and agreements.
Event
Something that happened, such as an incident, deviation, nonconformance, complaint, out-of-specification result or supplier issue.
CAPA
Something your organization commits to do: plan, implement, verify and prove effective.
Risk
A scored assessment with controls, verification and review.
Change
Change control, with its own actions.
Audit
Planned audits and inspections, with their findings.
Training
Assignments and the evidence of competency.
Supplier
Your qualified suppliers, their qualifications and their corrective-action requests.
Management review sits above all eight, working from a frozen snapshot of the whole system.
One closed loop
A deviation leads to its CAPA. The CAPA raises the change control and training it needs. An effectiveness check follows, and the risk is re-assessed. Every step is a typed, attributed link that records who made it, when and why, and a removed link is kept, not erased. Every record shows its related records, so the whole chain is visible from any point in it.
Every module, one platform
Every module is included in every tier.
Quality events
Quality eventsOne workflow for each event type, routed by severity.Deviation and nonconformance managementContainment, investigation, disposition and a signed CAPA decision.Complaint managementAcknowledgment tracked, a signed reportability review and a customer response.OOS and OOT investigationsA two-phase investigation you follow in order, with lab-error trending.Corrective action, change and training
CAPAA record in its own right, from any source, proven effective.Change controlRisk-based routing, with the right eyes on every change.Training and competencyAssigned automatically when something changes, and completed four ways.Risk and audit
Risk managementThe proactive layer that connects every module.Audit managementIndependent auditors, findings that go somewhere, and read-only access for inspectors.The platform services behind every module
Audit trail and e-signatures
A SHA-256 hash-chained audit trail that the database keeps insert-only, re-verified daily. Every signature records its meaning.
Regulatory profiles
Twelve profiles configure the platform from the regulations you hold. The strictest rule wins, and a profile can be added at any time.
Workflow engine, implementation and go-live
Versioned, locked workflows checked daily, a guided Configuration Runway in your real tenant, and a go-live gate with two signed attestations.
Access and governance
Nine core roles plus the roles each profile adds, permissions checked by key, segregation of duties with time-bound waivers, delegations, access reviews and break-glass access. The Administrator holds no quality approvals.
Records and retention
Retention floors set by your profiles, up to 30 years, with records archived and never hard-deleted. A module you manage elsewhere reads "managed outside QMSdesk", and a signed System Boundary Statement is available.
Integration
SAML 2.0 single sign-on (Okta, Microsoft Entra, Google Workspace or custom SAML), and a REST API with OAuth client credentials for system-to-system access. Records are scoped by site for multi-site organizations.
How the platform thinks
Proactive and risk-based
Risk opens the right work: an expired certificate, a late review or lapsed GxP training each opens a risk, and a critical risk raises its CAPA.
Built from the regulations up
A regulation is the smallest building block. Your profiles decide what the system requires.
Enforced as code
Steps, signatures and deadlines are part of every workflow's definition, and an administrator can't delete a mandatory step.
Closed-loop by design
Every record links to the records that caused it and the records it caused.
Questions buyers ask
Is every module included, or are some add-ons?
Every module is included in every tier. Tiers differ only by organization size: 1–25, 26–250 or 251+ users.
Can we start with one process and add more later?
Yes. Many teams start with one workflow, such as document control or CAPA, and expand once it's adopted. A module you run in another system can be marked "managed outside QMSdesk" and still stay part of your quality system record.
Does QMSdesk work across multiple sites?
Yes. Events, risks, changes and CAPAs are scoped by site, and search results respect each person's site access.
Can QMSdesk connect to our other systems?
QMSdesk offers SAML 2.0 single sign-on and a REST API with OAuth client credentials, with OpenAPI documentation for system-to-system access.