MedQraft
← All insights
QMS / ISO 13485

Latest Files and On-Site Usage: What to Verify After Document Revisions?

Just because a file is labeled as final does not mean it is the document you can use right now.
This outlines how to distinguish between approval status and implementation timing, the target processes and field copies, and how to check the actual application of revised operational work standards.

Last regulatory review: 2026-09-13 Rev. 1.0 5 min read

Why Recheck When the File Name Contains Final?

There is a revised operational standard uploaded in the shared folder.

However, the workstation still has previous outputs, and another responsible person is opening a copy saved on their personal PC.

There is a mismatch between the fact that the document has been revised and the actual standards being used.

The starting point of document management is finding the latest file, but in operation, it is necessary to confirm whether the document can currently be applied to this task.

The most recently modified file may be a draft under review, and even if it has been approved, its implementation date might not have arrived yet.

Below, we provide practical suggestions from MedQraft to check operational document handling for medical device quality work.

This does not replace the full requirements of specific specifications or legal forms.

Please first confirm the procedures and application criteria set by the company.

Distinguishing Between Approval Status and Implementation Status

Approval is information on who reviewed and approved what contents.

Implementation is information on what target will use the standard and when.

The two timings may coincide, but one cannot assume they are always the same.

For example, revisions that change the order of operations may require training for workers or a transition of related forms.

It is better to check the conditions for implementation and readiness rather than simply using the approval date.

Not all revisions necessarily require the same training or transition procedures.

Determine the necessary actions according to the changes and the company’s procedures.

If there is only approval status in the document list, check where you can find the implementation date, target, and preconditions.

Rather than creating a new separate table, first check if it can be verified from existing management information.

The Target of Application Should Be More Specific Than the Document Name

Even if there are operational standards with the same title, the application model or process may differ.

When common operational standards and product-specific annex documents are used together, it is also important to know which combination should be used.

Information to Check Practical Question
Document Identification Information Is it distinguishable by number and version even if the title is the same?
Target of Application For which products/models/processes is it used?
Implementation Timing From which date or under what conditions is the transition made?
Related Documents Are there forms, inspection standards, or training materials that change together?
Responsibility for Verification Who confirms readiness and actual usage status?

This information can be found in the main text of the revised document, the change record, or a list managed by the company.

If multiple locations contain this information, it is crucial to check if the contents match each other.

When the application scope is ambiguous, rather than allowing the worker to assume based on the file name, confirm with the responsible reviewer.

Verification Leads to the Actual Documents Opened on the Ground

Even if the original storage location is organized, users may access via different paths.

Check the actual usage paths like output copies, downloaded copies, email attachments, and existing shortcuts.

If you ask a field representative to open a document as they usually do, you can find differences that might not be revealed just by looking at the original list.

Compare the approval/application information with the identification information on the screen or output.

It is more specific to look at the actual materials used rather than just asking for the version remembered.

The goal is not merely to eliminate all copies.

If a copy is needed on-site, establish identification, updating, retrieval, or misuse prevention methods in accordance with the company’s procedures and verify that these methods are functioning.

Hypothetical Case: Verifying the Application of Revised Operational Standards

This is a hypothetical example for explanation.

The operational standard for a model has been revised, and the company has decided to implement it on a specified date after training.

A new document is on the server, but the workstation still has existing outputs.

This is not an actual customer case.

First, verify if the new document applies to the model and process concerned.

Next, review if the implementation date and prerequisite actions have been completed.

Then, compare what document is actually used at the workstation.

Verified Situation Follow-Up Verification Example
The new version is approved, but the training status is unclear Review the location for necessary training and completion confirmation prior to application
Previous outputs remain on the workstation Check the actual usage and scope of use after the implementation date
Related inspection forms have not changed Review whether form changes are necessary along with the revision contents
Separate copies are used on personal PCs Verify the consistency with the managed original and check the future updating path

One cannot conclude that all results are incorrect just because previous outputs exist.

It is crucial to separate when and for what tasks they were actually used and what impact the revisions might have on the results.

The necessary review of product/process impacts and follow-up actions should be determined according to the relevant procedures and responsibility framework within the company.

Avoid Confusing Previous Documents with Historical Records

Transitioning documents to prevent future misuse and preserving records explaining past work are different issues.

It is not appropriate maintenance to overwrite or delete past records simply because they were created in an older version of the form.

There may be a need to track which standards were used at that time.

How to handle previous versions of documents and written records will be in line with the company's regulatory requirements and preservation/management procedures.

Even when corrections are necessary, verify the appropriate correction procedures rather than arbitrarily deleting the original content.

This article does not present a common retention period.

Starting Verification with One Document

Follow these questions for a recently revised document:

  1. Can you distinguish between the approved version and the version currently to be applied?
  2. Do you see the application model/process and implementation date or conditions?
  3. Have you confirmed forms or training materials to review together?
  4. Have you verified the documents the field representatives actually open?
  5. Are the criteria for handling previous versions and historical records distinguished?
  6. Is there a designated person to determine the scope of impact and next actions when differences are found?

The results of the verification are better noted as the items to check, the date of verification, and the discrepancies found along with the subsequent responsible persons rather than just writing "Update Completed."

This allows for distinguishing whether the resolution is solely about organizing files or if distribution paths and responsibilities for implementation also need to be adjusted.

To explore further connections between documents and actual operations, you can read the Article on Quality System Maintenance

If the current system requires adjustment, you can check the QMS Consulting Support Scope.

Reference Scope

The U.S. FDA states that QMSR will be implemented from February 2, 2026, and incorporates ISO 13485:2016 for reference.

This serves as context for companies entering the U.S. market, but it does not serve as the basis for assuming the same requirements apply to all domestic companies.

FDA QMSR Official Announcement, verification date: September 13, 2026.

The tables and verification sequence in this text are our practical suggestions.

It does not replace the most recent specifications’ original texts nor guarantee compliance with specific provisions.

Related Articles

QMS / ISO 13485 Published 2026.09.11: Checking whether quality systems documents align with actual operations when quality system documents exist but do not match actual work,This article suggests practical methods for examining the link between procedures, responsibilities, records, and review outcomes through following a change task.

QMS / ISO 13485 Published 2026.09.12: Even with changes in responsible individuals, quality work continues.
Handing over a folder is not sufficient for transferring quality work.
This organizes methods to connect progress status, judgment grounds, and next actions, along with hypothetical cases of supplier evaluations and handover confirmation questions.

Let's talk

Apply what you have read
to your product.

Tell us your product's current stage and the questions you need to review.

Discuss your questions ↗
MedQraft / Let's talk

Project inquiry

Start with your challenge.
We will work through it together.

Tell us your product's current stage and the support you need.
We will review the questions and define a suitable scope of support.

Contact@medqraft.co.kr ↗
Information: name, company, email, inquiry and service of interest · Purpose: responding to your inquiry · Retention: until the inquiry is resolved Read the privacy policy
Privacy policy

MedQraft / Privacy

Privacy policy

MedQraft processes only the information needed for website inquiries.
We delete the collected inquiry information when the inquiry is resolved.

Effective date: September 18, 2026

1. Scope and purposes of processing

This policy applies to visits and business inquiries at www.medqraft.co.kr.
We process personal information to review and respond to inquiries, discuss the scope of support, and operate the website reliably.
Customer business data stored in Q-Atelier is governed by the relevant service agreement and separate notices.

2. Information collected and retention

Required information
Name, email address and inquiry
Optional information
Company, selected service of interest, and contact or business details you provide in your inquiry
Collection methods
Website inquiry forms and email inquiries
Basis for processing
Consent to collection and use provided through the inquiry form.
Where necessary to fulfill a request relating to the formation or performance of a contract, we process information on the applicable legal basis.
Retention period
We retain inquiry information until the inquiry is resolved, then delete it without delay.
If information becomes part of a separate contract, we separately explain the required information and retention period.
Where retention is legally required, only the relevant information is stored separately.

You may decline to provide required information, but this will prevent submission of the website inquiry form.
You can make an inquiry without providing optional information.
Do not submit sensitive information unnecessary for the inquiry, such as national identification numbers or patient information.

3. Service providers and external services

Inquiries are forwarded from the website server through an email delivery service to our company mailbox.
We do not maintain a separate inquiry database in this processing workflow.

Vercel Inc.
Website hosting, server-side inquiry processing, operations and security.
Technical information such as IP address, request time, browser and request details may be processed.
Plus Five Five, Inc. (Resend)
Delivery of inquiry notification emails containing name, email, company, service of interest and inquiry details, and management of delivery logs
Gabia Hiworks
Receipt, storage and replies to inquiries in our company mailbox

We do not sell inquiry information or provide it for advertising purposes.
We do not disclose it for an independent third party's purposes unless there is a lawful basis, such as a legal requirement or separate consent.

4. Overseas processing and storage

Overseas cloud services are used to process website requests and deliver emails.
Information entered in an inquiry is transmitted over an encrypted connection upon submission.

Vercel Inc. / United States
Information is transmitted for inquiry request processing and hosting.
Privacy contact: privacy@vercel.com.
Operational records are subject to the retention periods of the services and settings used and Vercel's processing policies.
Vercel data processing information
Plus Five Five, Inc. (Resend) / United States
Information is transmitted upon submission to deliver the inquiry email and manage delivery records.
Privacy contact: privacy@resend.com.
Resend's published default retention period for emails and logs on its standard plans is 30 days.
Earlier deletion may be requested from the provider.
Resend retention and deletion information

Deleting inquiry emails from our mailbox and deleting technical records held by external providers involve different processes.
You may contact the person listed below about deletion, restriction of processing or overseas processing.
If you do not wish to use overseas processing through the website form, you may email us directly.
The processing policies of the email services used will still apply.

5. Deletion and safeguards

After confirming that an inquiry has been resolved, we delete the email and separately saved copies.
Printed materials, if any, are destroyed by shredding or another method that prevents reuse.
Where deletion of information held by an external processor is necessary, we submit a request through that provider's deletion procedure.

Access to personal information is restricted to staff who need it for their work.
We protect information through HTTPS transmission and account access controls.
We do not publish materials containing personal information in public repositories or on public pages.

6. Your rights

You may request access, correction, deletion, restriction of processing or withdrawal of consent by contacting the designated email address.
We will verify your identity to the extent necessary, process the request under applicable law, and notify you of the result.
If we cannot fulfill a request, for example because of a legal retention obligation, we will explain the reason.
For requests made through a representative, we may verify their authority.

7. Access information and external content

We use Naver conversion tracking to measure visits and completed inquiries attributable to Naver search advertising.
Technical information such as the visited URL, referring page, browser and cookies, and whether an inquiry was completed, may be processed.
The name, email, company and inquiry text entered in the form are not included in conversion events.
You can block or delete cookies in your browser.

Server access information may be processed for website delivery and security.
Vercel Web Analytics is used for anonymous visitor statistics on the introduction page and Insights.
Insights statistics aggregate article views, referral sources, countries and device types.
Visitor analytics do not use analytics cookies.
Names, emails, companies and inquiry text from the consultation form are not included in analytics events.
Instagram-specific links use UTM parameters to identify referral sources.
Loading external video or fonts on the website may transmit technical information, including IP address and browser details, to the relevant provider.

You can block or delete cookies and site data in your browser settings.
Some features or external content may be restricted depending on your settings.

8. Privacy officer and contact

Business
MedQraft / Representative: Byeonghwi Kim
Privacy officer and inquiry contact
Byeonghwi Kim
Email
Contact@medqraft.co.kr
Postal inquiries
Suite 222, 56 Geumto-ro 80beon-gil, Sujeong-gu, Seongnam-si, Gyeonggi-do, Republic of Korea (Geumto-dong, Widen Tower)

For privacy-related complaints, you may contact the Personal Information Infringement Report Center or the Personal Information Dispute Mediation Committee for assistance.

9. Changes to this policy

Changes to processing purposes, information collected, retention periods or service providers will be published on this page with their effective date.

September 18, 2026: Website inquiry privacy policy first published

October 14, 2026: Added information on Insights visitor analytics and Instagram referral measurement