Skip to main content
The Attachments / evidence panel is available when the attachments feature is enabled for your organization. The current UI supports document versions, deviations and change controls. Where they are enabled, OOS records, equipment and employee certificates have their own evidence upload; see OOS Records, Equipment Register and Training Management.

Add evidence to a deviation

  1. Open the deviation detail page.
  2. In Attachments / evidence, choose a file no larger than 25 MB.
  3. Select Upload and confirm that the file appears in the panel.
  4. Review the displayed file name, type, size, uploader, timestamp, and SHA-256 digest.
Invariant computes the SHA-256 digest on the server. The attachment record and its add event are written together, binding the server-computed digest into the tamper-evident audit trail. Adding a new attachment does not require a reason for change.

Download and verify evidence

Select Download beside an attachment. The download requires an authenticated session in the same organization. Before serving the file, Invariant recomputes its SHA-256 digest and rejects the download if the stored bytes differ from the digest bound to the attachment and audit event.

Add evidence to a change control

  1. Open the change-control detail page.
  2. In Attachments / evidence, choose a file no larger than 25 MB.
  3. Select Upload and confirm that the file appears in the panel.
Files cannot be added once the change control is implemented, rejected or closed. Raise a new change control if more work is needed. Where assigned approvals are enabled, files are also frozen while a submitted review is in progress.
The CAPA detail page does not yet expose this upload panel. Do not rely on CAPA file upload until that UI is available.
End-user deletion and retention-policy controls are not available in this release. Apply your approved retention and evidence-handling procedures outside this workflow where required.
See Deviations for the surrounding investigation workflow and Audit Trail for reviewing covered events and chain integrity.