Case Study · Fictional teaching example

SaaS Release Assessment

One release, three changes, and three different evidence decisions for presentation, workflow, and signature behavior.

Author
Sandip Thorat
Published
12 September 2026
Last reviewed
12 September 2026
Version
1.0
Content type
Practitioner guidance
Primary references
See related regulations, guidance, and approved procedures

Standard case study record

Scope and decision fields

Read these fields before the detailed worked case. All organizations, identifiers, test outcomes, and decisions are fictional teaching material.

GxP Assessment
The SaaS eQMS supports controlled CAPA records and electronic approvals. Release impact differs for presentation-only change, configured routing logic, and electronic-signature association.
Change or Issue
One supplier release includes a dashboard color change, a CAPA-routing engine change, and an exported electronic-signature change.
Functions Affected
  • Dashboard status presentation
  • CAPA approval routing
  • Electronic-signature display and record association
Potential Impact
The dashboard change has low direct GxP impact; routing could bypass approval; signature change could misrepresent who approved which record revision.
Deviations / Known Issues
No dashboard deviation occurs. A legacy blank site value bypasses routing and the export initially omits signature meaning in the fictional execution; both require correction and retest.

Situation

A multi-tenant eQMS release changes dashboard colors, the CAPA-routing engine, and the signature block used in exported approved records.

Intended Use

Users create, investigate, route, approve, sign, retain, retrieve, and export controlled CAPA records. The dashboard supports prioritization; the workflow and signed export preserve required approval meaning.

Failure Scenarios

The color change could make status harder to distinguish. The routing change could bypass Quality approval for a legacy blank site value. The export change could omit signature meaning or associate the signature with the wrong revision.

Existing Controls and Evidence

The supplier provides release notes, known defects, automated regression results for the standard platform, and rollback information. The customer maintains a configuration inventory, local workflow specification, representative open records, monitoring, and prior protocol results.

Testing Approach

Perform an accessibility and usability confirmation for the dashboard rather than broad regression. Script each material CAPA routing branch, unauthorized transitions, open-record state, and legacy data condition. Script signer identity, meaning, time, record association, revision, accurate copy, and export retrieval. Explore interruption and concurrent-review paths around the critical controls.

Deviations and Validation Conclusion

The dashboard check passes. The fictional blank site value bypasses routing and the first export omits signature meaning. Release is restricted until both are corrected and targeted retest passes. One release does not require one uniform regression scope.

Reassessment Criteria

Reassess shared-service changes, new workflow configuration, identity or signature changes, supplier incidents, monitoring signals, or undocumented behavior.