Part 11 requires attributable, legible, contemporaneous, original, and accurate records with secure audit trails. Enable mail.thread tracking on governed models, restrict write access with groups, use electronic signature modules for approvals, and validate server time sync. Pair Odoo chatter history with exported change logs and documented validation IQ/OQ/PQ—not a checkbox setting alone.
Steps
- Inventory regulated models (BOM, MO, quality.check, lot release) and enable tracking on fields that matter.
- Configure res.groups so only authorized roles edit validated records; use record rules for segregation.
- Deploy electronic signature workflow on approvals (quality, batch release) with user re-auth.
- Disable direct SQL and ORM shell access in production; enforce Git change control for custom code.
- Map each requirement to SOP: password policy, session timeout, and backup restore tests on Odoo.sh or on-prem.
- Export mail.message and tracking values periodically to immutable storage for inspections.
- Run validation protocol documenting intended use, risk assessment, and periodic review.
Common mistakes
- Assuming Odoo chatter alone satisfies all Part 11 controls without procedures.
- Letting administrators edit posted manufacturing or quality records without audit justification.
- Shared user logins on shop floor tablets breaking attribution.
- Skipping time synchronization on application servers.
- No periodic access review on superuser accounts.
Odoo version notes
Odoo Community and Enterprise provide mail tracking and access rights in 16–18 but not a certified Part 11 mode. Enterprise Quality and Sign may help signatures; life sciences teams add GAMP-validated extensions. Cloud hosting on Odoo.sh still requires customer validation documentation. Compare vendor claims on 17 vs 18 signature APIs before upgrading regulated workflows.
When to bring in help
If the fix touches custom modules, regulated traceability, or production outages, a focused rescue sprint beats months of trial and error. See our Odoo service.
See our industry practice