jump to content

Document management

See how the platform documents move through draft versions, approval quorums, electronic signatures, publication, archival, and PDF export.

View as Markdown

the platform documents are controlled records for policies, procedures, reports, and other compliance material. A document has a lifecycle; its versions preserve the content and decisions that were current at a point in time.

stateDiagram-v2
  state "Draft version" as draft
  state "Approval quorum" as review
  state "Published version" as published
  state "Signature requested" as signing

  [*] --> draft: Create a version
  draft --> review: Request approval
  review --> draft: Rejected
  review --> published: Approved and published
  draft --> published: Publish
  published --> signing: Request signatures
  signing --> published: Signed, cancelled, or voided
  published --> [*]: Superseded by a new version
Lifecycle of a single document version. Archiving applies to the document, not to one version.

Edit work in a draft version. Publishing creates the version intended for use or review. Archived documents remain part of the record but are removed from active use. Avoid editing a document merely to change its approval history; create a new version when the controlled content changes.

An approval quorum defines who must decide before a document can proceed. Decisions are recorded against a specific version so later revisions do not rewrite the history of an earlier approval.

Signature requests also belong to a document version. A request can be completed, cancelled, or voided according to its state. Confirm the signer identity and intended document version before requesting signatures.

Documents can be exported as PDF and linked to controls and measures. A controlled document explains what the organization intends to do; evidence demonstrates that a measure operated. Keeping those roles distinct makes audit review clearer.

Access to drafts, approvals, and signatures follows organization authorization. Use the audit log when investigating changes to controlled records. See Roles and permissions.

Ultima actualizare: