Browse guides

Quality and audits

Understand signed approvals

Understand what Metra freezes when a supported controlled action is signed.

Audit readiness For Owner, Administrator, Quality manager, Calibration manager

Understand signed approvals

An electronic signature supplements an authenticated controlled action. It never grants permission, bypasses separation of duties, or allows arbitrary attachment to a record.

When a signature-enabled workflow presents a confirmation, Metra freezes the exact image revision, signer and membership, printed name and role, controlled statement and version, UTC time, record identity, action, and Metra-calculated SHA-256 content hash.

You must still hold the underlying action permission and may need to reauthenticate within the organisation's configured window. A required organisation policy applies only to workflows that have integrated signature attachment.

Organisation owners and administrators can choose whether supported controlled actions offer a signature or require one under Organisation > Electronic signatures.

When signatures are required, members who do not yet have an active signature see a warning throughout that organisation. Follow Set up electronic signature to open the personal signature workspace, then upload or draw a signature and confirm it. The warning clears after the signature becomes active.

An organisation-wide warning directing a member to set up their required electronic signature.
Set up a required electronic signature
The organisation electronic signature policy with optional and required choices.
Configure electronic signatures for controlled actions

Generated calibration certificate approval always requires an active signature revision, recent authentication, certificate-issue permission, and current technical authorisation. The exact signature image, printed signer details, statement, timestamp, and approved content hash are frozen into the issuance evidence.

Historical evidence always points to the revision originally applied, not the user's current image. Where a generated document supports signed evidence, it should display that revision with the printed name, role, UTC time, action, and verification reference.

Confirming identity without losing your work

The signature panel checks the current authentication window before enabling signature consent. If it has expired, enter your current password in the panel and select Confirm identity. Your pending form stays open. This refreshes your own session and does not approve, sign or submit the record. Review the action, select the signature confirmation again, then submit explicitly. A rejected password leaves the pending action and your session in place so you can retry.

If the readiness check fails, use Retry readiness check. Permissions, separation of duties, current technical authorisation and the authentication window are still checked by the server at submission.