The current guidance frames confidence in production and quality-system software around intended use, risk, appropriate assurance activity, issues, and retained evidence—not documentation volume.
The guidance connects complete data to metadata, audit trails, access, processing, review, investigation, and retained records across instruments and applications.
The official annex connects risk, suppliers, validation, operation, change, security, incidents, continuity, and archiving in one computerized-system lifecycle.
The standard places software-supported records inside a wider system of impartiality, competence, resources, methods, equipment, sampling, handling, technical records, reporting, and improvement.