CompStack links requirements, scope, controlled documents, evidence, audits, findings, CAPA, risk and management review across multiple standards and sites — so compliance becomes an operating rhythm, not a once-a-year scramble.
Used by quality teams across manufacturing, water & beverages, pharma and healthcare in East Africa, the Gulf, and the EU.
ISO families, country packs and sector schemes — installable as versioned modules. Cross-mapped at the requirement level.
Browse module storeEvery entity is linked: requirements ↔ controls ↔ documents ↔ evidence ↔ audits ↔ findings ↔ CAPA ↔ risk. Change one, the audit trail follows.
Each stage produces the inputs the next one needs. Nothing waits for a spreadsheet. Nothing arrives at the auditor unsupported.
Mark requirements applicable, not-applicable (with justification), or deferred. Lock the scope baseline by site, by standard.
Drafts move through review and approval with segregation of duties. Distribute, track acknowledgements, retire on schedule.
Owners run the control. Frequency, evidence type, and linkage to requirements are pre-defined. Nothing slips silently.
Files, certificates, screenshots, and links flow into the evidence library — validated, expiry-tracked, audit-linkable.
Generate checklists from real scope. Capture verdicts. Convert findings to CAPA. Verify with a different person. Close.
Install ISO families, country packs, sector schemes, and template sets as versioned modules. Upgrades show a structured diff so your team can review what changed before it hits the audit.
Calibration cadence for metal detectors on Line 3 is monthly, per QMS-PROC-008 §4.2 and the FSSC 22000 prerequisite program. Next due: Apr 18.
Answers cite the underlying clauses, documents, evidence and prior findings. Anything that changes data is staged as a proposal — and a human approves before it lands in your records.
We stopped preparing for audits. The platform is the preparation. When KEBS arrived, we opened a tab.
The same primitives that protect your data also stand up under a certification body's scrutiny — and an internal investigation.
Per-organization row-level isolation across requirements, documents, evidence, audits, CAPA, and AI context.
Admin · manager · auditor · viewer. Plus site-level access boundaries for groups managing many sites under one tenant.
Authors cannot approve their own documents. Verifiers cannot be the CAPA owner. Enforced, not advisory.
Every scope change, approval, evidence acceptance, and AI action is recorded with actor, time and prior state.
Encrypted at rest and in transit. Time-limited signed URLs for evidence. No public file links, ever.
Choose a region for your tenant. EU, US, or Africa. Cross-region replication is opt-in, not default.
Bring three pages of policy, a recent audit report, and one stuck CAPA. We'll show you the same workflow your team will run on Monday — not a demo tenant with mock data.
