Should you use Microsoft software to build your own digital QMS?

Microsoft to build QMSSMEs creating a digital Quality Management System (QMS) will often reach for the most familiar tools to build out their solution quickly and efficiently. And using the Microsoft suite of software often seems like the cheapest and most straightforward option. Can it work?

DIY QMS solutions range from using a mix of Excel and Word, to the more structured OneDrive for Business approach or a full-blown SharePoint project. But can they deliver on complex quality challenges?

Can you use Excel, Word, Outlook and a shared drive?

The most basic DIY solution. Those starting work creating a digital quality management system for their business will often begin managing their documentation using this kind of approach:

  • Documenting required processes and procedures using Word or PPT
  • Filing them in shared folders accessible to the whole business
  • Using Outlook to email and gather feedback from colleagues
  • Collating any required changes through tracked changes
  • Locking documents for editing
  • Curating the system using an Excel sheet with descriptions and links to each document
  • Managing dates for required reviews via Excel

The limitations here are obvious:

  • It’s difficult to manage and control the multiple drafts of documents that spring up as you iterate towards final versions of each document
  • It’s easy to miss vital feedback when many people are contributing to a shared Word document
  • You can end up with an Excel sheet full of broken links as files are moved around and names changed over time
  • Managing a process of mandatory reviews from a column of dates in an Excel sheet will definitely prove challenging

Why not just use Google Drive as a Document Management System

Should you use OneDrive for Business?

OneDrive For Business is Microsoft’s commercial file-sharing and collaboration offering, which competes with the likes of Dropbox and Box for the business dollar. It’s a better option for a QMS than stitching together a solution with only the standard MS Office tools, but still not perfect.

  • OneDrive is good for seamlessly sharing files with multiple colleagues across different devices and on the move.
  • OneDrive can help you set up a controlled and searchable system of files to document your SOPs and other quality processes
  • Administrators and users with privileges can restrict and control access to that content within teams and organisations
  • OneDrive can share real-time notifications telling selected individuals whenever a file is viewed or edited
  • Documents in OneDrive do have a version history showing who has created or modified them and when - but this may not be enough for future auditors
  • Basic workflows can be set up in OneDrive so that documents can be reviewed and approved in a particular, repeatable order

Clearly, many of these features would be useful (and are a fundamental requirement) for a Quality Management System. But when you compare them to quality requirements specified by ISO or demanded by a regulator (like the FDA) the controls over documentation that OneDrive offer begin to seem pretty weak.

Here, for example, is the FDA’s requirements for a change control procedure:

“Document changes. Changes to documents shall be reviewed and approved by an individual(s) in the same function or organization that performed the original review and approval, unless specifically designated otherwise. Approved changes shall be communicated to the appropriate personnel in a timely manner. Each manufacturer shall maintain records of changes to documents. Change records shall include a description of the change, identification of the affected documents, the signature of the approving individual(s), the approval date, and when the change becomes effective.”

Workflows in OneDrive can be set up that cover some of these requirements, but not all. And when it comes to integrating unforgeable digital signatures that can be associated with specific individuals, it would require a lot of workarounds to bring OneDrive up to scratch.

Why not just use SharePoint as a Document Management System


If OneDrive (or an equivalent file sharing product) is not powerful enough to answer your quality management needs, teams often turn to SharePoint as the ultimate DIY solution.

It’s true that SharePoint can be built out to meet the specific quality management requirements that are found in ISO 9001 or ISO 13485.

  • You can create bespoke repositories for quality documentation where documents of all types can be stored and locked down for editing with a version history attached to each file
  • You can manage and control a hierarchy of access to documentation
  • Customisable metadata can help you build an indexed, searchable database
  • Complex, bespoke workflows can be created to meet specific regulatory demands
  • You can automate annual/periodic reviews of SOP documents
  • Digital signatures and a variety of other features can be integrated into workflows exactly as required

Still, if you go down this route, there’s a huge amount of work to do and associated costs. You’ll likely need a consultant to come in and configure the system.  You’ll also need to pay for enough seats in the software and, probably, a full time staff member to troubleshoot and maintain the system once it’s up and running.

In fact, the question that dogs many development houses as they grapple with the ongoing maintenance of their SharePoint solution is often:

‘Why are we getting distracted delivering a bespoke, digital QMS when we should be delivering our product?’

The problem with Microsoft

It’s understandable that companies will gravitate towards software that seems ‘low cost’ or ‘no cost’ when they’re starting out. But in complex, highly technical projects where new documentation and processes are being continually introduced and updated it’s very easy for a home grown digital QMS to become unwieldy and difficult to manage. And when it comes to enabling audits or publishing required assemblies of documentation (like a Design History File) a DIY solution can really struggle.

Download the eBook: Building a Design History File with Cognidox

It’s also understandable that many smaller businesses try to avoid the financial outlay and disruption of installing a proprietary quality management system that a big tech or pharma company might use.

What’s the alternative?

Modern, cloud based QMS software developed with SMEs in mind can help you build out robust document management and workflow solutions robust quickly and easily. These operate as secure ‘digital frameworks’ in which you can build up, iterate and index key quality documents, all subject to the highest standard of version control.

Most importantly, they are designed to become the secure, yet accessible heart of your operations, making quality simply ‘the way you do things’ and your processes easily auditable by regulators. Crucially, they can deliver scalable and robust Quality Management in a highly cost effective way.

It’s certainly worth exploring your options before you crack open the Microsoft tool box.

Case study compilation

Tags: ISO 9001:2015, quality management system, FDA compliance, Document management and control, New Product Development

Joe Byrne

Written by Joe Byrne

Joe Byrne is the CEO of Cognidox. With a career spanning medical device start-ups and fortune 500 companies, Joe has over 25 years of experience in the medical device and high-tech product development industries. With extensive experience in scaling businesses, process improvement, quality, medical devices and product development, Joe is a regular contributor to the Cognidox DMS Insights blog where he shares expertise on scaling and streamlining the entire product development cycle, empowering enterprises to achieve governance, compliance, and rigour.

Related Posts

Document Control requirements in ISO 9001:2015; what you need to know

Document control is a key part of any Quality Management System (QMS) and, therefore, a requirement ...

ISO 9001 vs ISO 13485. What’s the difference?

ISO 9001 is the internationally recognised standard for quality management used in many sectors ...

What is a document control system and why is it important?

Having a document control system in place is a requirement of quality standards and regulations ...

A short guide to non-conformance reports; what, why and how

How do you log and deal with non-conformities so that faulty products don't end up in the hands of ...

How to build a supplier quality management system in 4 simple steps

How do you transform regular supplier reviews from a box-ticking exercise into a genuinely useful ...

ISO 9001 vs ISO 13485. What’s the difference?

ISO 9001 is the internationally recognised standard for quality management used in many sectors ...

How is Software as a Medical device (SaMD) regulated by the FDA?

Does the fertility tracking app you are developing count as a medical device? What about the ...

What’s the plan? A seamless product realisation process for ISO 13485

So, you’ve had your brilliant idea. You know what kind of medical device you want to build. You ...

What are the FDA's requirements for CAPA (Corrective And Preventive Action)

Having a repeatable procedure for Corrective and Preventive Action (CAPA) is a key FDA requirement ...

Medical Device Technical File requirements: what you need to know

What is the medical device technical file? What should it contain and how should it be structured? ...

Why not just use SharePoint as a Document Management System?

What’s wrong with SharePoint, anyway? Why shouldn’t it be used as a document management system ...

8 Tips for Improving the Document Review Process

How is the quality of your document review process affecting the speed and efficiency of the way ...

The evolution of a Quality Management System

A focus on a quality management system shouldn’t just mean a ‘box ticking’ exercise for an ...

Can Product Innovation Tools help you go 'virtual first?'

Colocation was one of the central tenets of the Agile manifesto, but times have changed. With all ...

Why your QMS needs to be an eQMS

If you want to develop a Quality Management System that meets the regulation and powers your ...