Traceability & change

Every change, every consequence, one timeline.

Every item in Avera is versioned on one project timeline. Nothing is ever overwritten; every state your program was ever in can be read back, cited, and audited.

Versions & history

History that's complete by construction.

Nothing is overwritten

Every edit appends a version. History is complete by construction, not by discipline.

Revisions where they belong

Controlled artifacts release at approved change levels (Rev A, Rev B); working items are tracked by version and baseline.

Read any moment

Ask what the program looked like at any point: for an audit, a submission, or an investigation.

Find anything

Full-text and faceted search over every item, document, and link, scoped to the branch and moment you're looking at.

Traceability & impact

Links are first-class, not an export.

Links are first-class

Every trace link is versioned and attributable, with its own history: what regulated traceability actually requires.

Links survive edits

They bind the thing, not the version, so editing an item never orphans its trace.

Stale is visible

When something upstream changes, every dependent link flags itself for re-verification; nothing silently rots.

Impact is a query

"What does this change affect?" and "which fielded units does this touch?" are answers, not investigations.

Standards as clause trees

Load the standards you own as clause trees; clauses link to the requirements, hazards, and tests that address them, with coverage per clause, live.

The formula engine

Calculated from the graph. Frozen when you sign.

Formulas don't just compute over a row; they traverse your links. A risk priority resolves through the hazardous situation it belongs to; coverage and effectiveness roll up across whole chains.

A calculated field at work

severity 4 occurrence 2 via hazardous situation ƒx rpn 8 · always current

Formulas traverse links

Scores, roll-ups, and coverage are computed across connected items, not typed into cells: a value no one entered is a value no one forgets to update.

Live until released

Change an input anywhere in the chain and every dependent value is current. Dashboards and worksheets never show yesterday's number.

Frozen, character for character

At release, calculated values freeze into the signed version, exactly as shown. The live number and the signed number can never quietly disagree.

Scoring and coverage, built in

ISO 14971 risk scoring, verification coverage, effectiveness roll-ups: the worksheets a program runs on, driven by the graph.

The worked example

One field signal, end to end.

A field signal arrives

A complaint on unit S/N 10412, or a market need worth a next version. Its lot, BOM revision, and design version are one query away.

CMP-0042LOT-2311PCB-104 · Rev C

Branch the whole device from Rev C

Requirements, hardware design, BOM, risk file, documents, not just software. Next-gen work continues on main. Branching & variants →

See every consequence, by lane

Two risks to reassess, five verifications to re-run, the BOM revision, process risk and line validation, the work instruction, the submission per market, the affected units.

RiskRSK-0017RSK-0022V&VVER-0231…0235
MfgBOM-104pFMEA-031IQ/OQ/PQWI-220RegSUB-US-510KField412 units

Update the BOM, the line validation, the submission, in the same system

No to-do list for four other tools: the updated BOM revision, the line-revalidation protocol, the work-instruction update, and the submission section are the same items the impact pointed at, with AI drafting the volume work as proposals a named human approves. The impact list is the work list.

Release, with the regulatory decision on record

Rev D releases with its updated BOM and revalidated line. Each market's authorization record carries the decision: letter-to-file here, a new filing there. The updated submission content is ready, and release is gated where approval must come first.

PCB-104 · Rev DAUTH-US · letter-to-fileAUTH-EU · new filing

Close the loop in the field

The trace enumerates the affected units; the retrofit is recorded against each unit's device history; the complaint closes against the fix, or the market need ships. Nothing was rebuilt, re-keyed, or reconciled; it never left the system of record.

FA-0007412 units retrofitted

That loop is where device companies slow down and burn out. In one system of record, it's days.

Walk this chain live, end to end.

Book a 30-minute, founder-led demo.

Book a conversation