ALCOA+Data integrity principles

ALCOA+ data integrity, one control for every letter.

ALCOA+ data integrity is the shared language of FDA, MHRA, PIC/S and WHO guidance. Swat iQua Suite follows ALCOA+ data-integrity principles: each of the nine attributes is backed by a control the platform enforces, so good data is the default rather than a matter of discipline.

  • Attributable: every action tied to a named user
  • Contemporaneous: trusted, central time-stamps
  • Original: raw files kept unaltered
  • Enduring: controlled copies, backups and archiving
Scientist pipetting a sample in a QC laboratory

The principles

What ALCOA+ means — ALCOA plus principles explained.

ALCOA is an acronym regulators have used for decades to describe the attributes of reliable GxP data. ALCOA+ extends it with four more attributes. Together they describe data you can trust years after it was recorded.

The original five attributes are attributable, legible, contemporaneous, original and accurate. Later regulatory guidance added complete, consistent, enduring and available — the “plus”. The FDA’s data integrity guidance, the MHRA GxP data integrity guidance, PIC/S PI 041 and WHO’s data integrity guideline all describe data integrity in these terms, so ALCOA+ is effectively the common standard across markets.

The nine attributes

  1. Attributable — it is clear who performed an action or recorded data, and when.
  2. Legible — data is readable and permanent, throughout the retention period.
  3. Contemporaneous — data is recorded at the time the work is done.
  4. Original — the first capture of the data, or a verified true copy, is preserved.
  5. Accurate — data is correct and truthful, with any changes documented and justified.
  6. Complete — all data is present, including repeats, reprocessing and metadata, with nothing deleted or hidden.
  7. Consistent — data follows a consistent sequence, with dates and times in order and processes applied the same way.
  8. Enduring — data is recorded on durable, controlled media and lasts for the retention period.
  9. Available — data can be accessed for review, audit and inspection whenever needed, for its whole lifetime.

ALCOA+ is a set of principles, not a certification. No system is “ALCOA+ certified”. What matters is whether your records — paper, electronic and hybrid — show these attributes when an inspector looks at them, and whether your controls make failures unlikely and detectable.

Attribute → control

How Swat iQua Suite supports each ALCOA+ attribute.

  • Attributable

    Named accounts only; every write records the user and operating site. Only internal users can perform GMP actions, and signers’ designations are frozen at signing.

  • Legible

    Structured fields instead of handwriting; controlled A4 PDFs with the historical signature block; audit trail reports in an intelligible form.

  • Contemporaneous

    Every entry time-stamped centrally and shown in the local time of the site; step-by-step batch execution records the work as it happens.

  • Original

    Instrument and spreadsheet files are stored unaltered as raw data with a SHA-256 hash; supersede, never replace; downloads are controlled and logged.

  • Accurate

    Readings checked against limits; results reviewed by a second person before they count; corrections supersede the original value with a reason and e-signature.

  • Complete

    Every change keeps old and new values with a reason; deletions and voids are flagged in audit trail review; reference numbers are never reused.

  • Consistent

    Workflows enforce sequence — hold points, review before approval — and every record freezes the master version (specification, formula, limit) that applied.

  • Enduring

    Approved records and controlled copies cannot be altered; scheduled backups and automatic log archiving on secure cloud hosting.

  • Available

    Cross-module audit trail search by site, module, user and date; PDF and Excel exports; inspection evidence packages in minutes.

ALCOA+ in one result

From instrument file to approved result.

A typical laboratory result touches most of the nine attributes. Here is how controlled result import keeps them intact.

  1. Original.csv

    File imported

    Only through an approved import profile; previewed with nothing saved.

    Preview
  2. AttributableCommit

    Committed with a reason

    Who imported what, when and why — the original file stored unaltered.

    Recorded
  3. AccurateReview

    Second-person review

    The reviewer cannot be the analyst; values count only after review.

    Reviewed
  4. AvailableCoA

    Approved and reported

    Result, raw file and audit trail retrievable together, years later.

    Approved

Data integrity from day one — without a long instrument-integration project.

Shared responsibility

ALCOA+ is a culture, not just a configuration.

Swat iQua Suite makes the ALCOA+ attributes the default for electronic records. Some parts of data integrity can only come from your organisation.

  • Paper records that remain — logbooks, instrument printouts and forms outside the system — need their own ALCOA+ controls.
  • Instrument software and standalone systems that generate raw data before import must be controlled and validated in their own right.
  • Procedures for data review, audit trail review and true-copy verification.
  • A culture where people report data integrity problems without fear, and managers act on them.
  • Validation of your installation of Swat iQua Suite — supported by requirements traceability and our team.

Swat iQua Suite is designed to comply with 21 CFR Part 11, EU GMP Annex 11 and Annex 1, WHO GMP and Revised Schedule M, following ALCOA+ data-integrity principles and a GAMP 5 risk-based validation approach.

FAQ

Frequently asked questions

Can’t find your answer? Talk to our team — we reply within one business day.

What does ALCOA+ stand for?

Attributable, legible, contemporaneous, original and accurate — plus complete, consistent, enduring and available. Together they describe GxP data that can be trusted throughout its lifecycle.

Is Swat iQua Suite ALCOA+ certified?

There is no ALCOA+ certification for software. Swat iQua Suite follows ALCOA+ data-integrity principles: each attribute is supported by a control the platform enforces. Your records demonstrate ALCOA+ at inspection.

How does Swat iQua Suite keep original data?

Instrument and spreadsheet files enter through approved import profiles and are stored unaltered as raw data with a SHA-256 hash. A newer file supersedes rather than replaces the old one, and downloads are controlled and logged.

What happens when a result has to be corrected?

Corrections never overwrite. The original value is kept, the new value supersedes it, and the correction needs a reason — and an e-signature where configured. Both appear in the audit trail and on the printed record.

Which regulators use ALCOA+?

The FDA, the MHRA, PIC/S and WHO all describe data integrity in ALCOA+ terms in their guidance, and EU GMP inspectors apply the same expectations under Annex 11.

Ready to see Swat iQua Suite in action?

Book a free, personalised demo and see how Swat iQua Suite takes your plants, labs and quality teams from paper to inspection-ready.

Download the brochure →