Sign in Start free trial

Capabilities

38+ modules.
One system.

Every module connects to every other. No silos, no spreadsheets, no "we also need to update that in the other tool."

Domain 01 / 06

Control.

The backbone. Documents under version control, changes tracked, approvals signed, and the right revision in front of the right person at the right time.

Spotlight · CTL-01

Documents

Versioning, approval workflows, redlines, retention, external publishing — every document becomes a record, not a file.

  1. ID Module Plan
  2. CTL-02
    E-signatures

    21 CFR Part 11-aligned. Reason for signing, tamper-evident chain.

    Business+
  3. CTL-03
    Knowledge base

    Long-form guidance, embedded references to clauses and records.

    All plans
  4. CTL-04
    Change control

    Impact assessment, affected records, cascading approvals.

    All plans
  5. CTL-05
    Retention policies

    Automatic retention schedules by document type and standard.

    All plans
  6. CTL-06
    External portals

    Supplier & customer portals — share controlled docs safely.

    Business+

Domain 02 / 06

Correct.

When something goes wrong: detect it, trace it, fix it, verify it, and prove you did. End-to-end, with root-cause analysis built in.

Spotlight · COR-01

CAPA

Open, investigate, act, verify, close. Every step has evidence, owners, due dates — and the clause it satisfies.

  1. ID Module Plan
  2. COR-02
    Non-conformity (NCR)

    Detect, classify, disposition. Auto-opens from SPC and complaints.

    All plans
  3. COR-03
    Complaints

    Customer and internal. Routes through triage to CAPA when needed.

    All plans
  4. COR-04
    Root cause

    5 Whys, fishbone, and custom templates, linked to every CAPA.

    All plans
  5. COR-05
    Lessons learned

    Searchable, taggable, surfaced when similar issues arise.

    Team+
  6. COR-06
    Document redlines

    Visual diff between revisions with approval trail.

    Team+

Domain 03 / 06

Measure.

If it isn't measured, it isn't managed. SPC, KPIs, audits, and the evidence chain behind every number.

Spotlight · MSR-03

Business+

SPC & control charts

X̄-R, p-charts, capability studies. Points outside limits open an NCR automatically — no spreadsheets, no calendar reminders.

  1. ID Module Plan
  2. MSR-01
    Internal audits

    Planning, checklists, evidence collection, findings & CAPAs.

    All plans
  3. MSR-02
    External audits

    Host, respond, and package evidence for certifiers.

    All plans
  4. MSR-04
    Objectives & KPIs

    Targets, trends, and ownership against every quality objective.

    All plans
  5. MSR-05
    Management review

    Pre-populated inputs, outputs, and action tracking.

    All plans
  6. MSR-06
    Supplier scorecards

    OTD, quality, and corrective-action performance per supplier.

    All plans

Domain 04 / 06

Defend.

Risk is not a spreadsheet. Every risk is linked to controls, to clauses, to the records that prove the controls work.

Spotlight · DEF-01

Risk register

Clause-linked risks with inherent vs residual scoring and treatment plans. A single heatmap across every standard you operate under.

  1. ID Module Plan
  2. DEF-02
    Controls library

    Reusable control set, mapped across standards (27001, SOC 2).

    All plans
  3. DEF-03
    Clause crosswalk

    One evidence base satisfies clauses in multiple standards.

    All plans
  4. DEF-04
    Asset register

    Information assets, classification, ownership, handling.

    All plans
  5. DEF-05
    Incident log

    Security + quality incidents, with escalation and SLAs.

    All plans
  6. DEF-06
    Legal register

    Regulatory commitments tracked, with review cadence.

    All plans

Domain 05 / 06

People.

Training isn't a PDF sign-off. It's a competency matrix that proves the person doing the work is qualified to do it.

Spotlight · PPL-02

Competency matrix

Role × skill, with evidence and expiry tracking. See at a glance who is qualified, who needs refresh, and who was trained on what revision.

  1. ID Module Plan
  2. PPL-01
    Training programs

    Activate, assign, track completion against roles.

    All plans
  3. PPL-03
    Inductions

    New-hire checklists, signed off and archived.

    All plans
  4. PPL-04
    SoP on-the-job

    Mobile-friendly work instructions, read-and-signed.

    All plans
  5. PPL-05
    Suggestions & ideas

    Continual-improvement intake, routed to the right owner.

    All plans
  6. PPL-06
    Meetings & minutes

    Actions out of meetings become tracked records.

    All plans

Domain 06 / 06

Platform.

Everything the UI can do, a program can do. REST, webhooks, MCP, integrations, SSO, multi-site — built in, not an upsell.

Spotlight · PLT-01

Enterprise

REST API v1

OpenAPI 3.1, typed TS client, cursor pagination, idempotency, scoped keys. Contract-first, so UI, MCP and docs never drift.

  1. ID Module Plan
  2. PLT-02
    Webhooks

    Signed HMAC, retries with backoff, dead-letter handling.

    Business+
  3. PLT-03
    MCP server

    25+ tool groups, Claude-ready. Org-scoped by API key.

    Enterprise
  4. PLT-04
    Integrations

    Google Calendar, Linear, Google Chat, Stripe. Plus anything with a webhook.

    All plans
  5. PLT-05
    SSO / SAML

    Okta, Azure AD, Google Workspace. Role provisioning via SCIM.

    Enterprise
  6. PLT-06
    Multi-site

    Multiple physical sites, aggregate reporting, site-level scoping.

    Enterprise
  7. PLT-07
    Audit trail

    Every change captured, signed, queryable, exportable.

    All plans
  8. PLT-08
    Exports

    PDF, CSV, XLSX. Branded, batched, scheduled.

    All plans

The thesis

A quality system is not a filing cabinet. It's a circulatory system — every module feeding every other.

— the idea behind Q360

See it working on your data

Try Q360 free
for 14 days.

Spin up your organisation in minutes. Bring your standards. We'll bring the system.

Start free trial → See pricing