EDocM – The Electronic Document Management Software

EDocM by goPLIMS is a centralised, access-controlled Electronic Document Management System hosted on a dedicated cloud infrastructure and seamlessly integrated into the goPLIMS project and work management platform. Unlike SharePoint, generic shared drives, or email attachments — which quickly become disorganised, lack governed access control, and create multiple conflicting versions of the same document — EDocM provides a structured, role-governed document repository specifically designed for the way pharma and regulated project teams actually work. Access is controlled at the folder level based on project management roles, meaning each team member — internal or external — sees only the documents relevant to their workstream and responsibilities. Documents are not scattered across email inboxes or personal drives; they are retained centrally in a single, governed, searchable platform. Critically, EDocM is hosted on a dedicated cloud — not a shared public server — providing the data isolation, security, and availability that regulated industries require and that generic cloud storage solutions do not reliably offer.

EDocM is built around three core pillars that reflect the complete lifecycle of document management from initial configuration to day-to-day operation. Setup: the document repository is configured to match the structure of the project or organisation. Multiple folders are created — up to four levels deep — with a customised folder structure defined per workstream. Access controls are assigned at each folder level, and individual access privileges are defined for every user — ensuring that the repository is correctly governed from the first document uploaded. Integrate: EDocM becomes the central document hub for all internal and external teams on the project. Internal engineers, quality teams, and project managers work alongside external contractors, vendors, and consultants within the same platform — with each party’s access precisely scoped to their role and workstream. The central platform is maintained up to date as the single source of truth for all project documentation, eliminating the version control failures and duplication that occur when teams maintain separate local copies. Manage: day-to-day document management is conducted centrally — uploading, moving, organising, and controlling files and folders — with documents protected from misuse and all team members working from a single, current, governed repository at all times.

For pharmaceutical organisations, the choice of cloud hosting model is not a technical detail — it is a data governance and compliance decision. EDocM is hosted on a dedicated cloud environment, meaning each organisation’s document repository is isolated on its own cloud instance rather than co-hosted on shared public infrastructure with other organisations’ data. This dedicated model provides several critical advantages for pharma. Data isolation means that your controlled documents, validation protocols, qualification reports, batch records, and regulatory submissions are not stored in a shared environment where misconfiguration or security incidents affecting other tenants could expose your data. Availability and performance are not degraded by the activity of other organisations on the same infrastructure. The dedicated environment also supports the data residency and sovereignty requirements that increasingly apply to regulated industries operating across multiple jurisdictions.

EDocM provides access control at the folder level — not just at the system level — which means that a user’s permissions can vary depending on which folder or subfolder they are accessing within the same document repository. A Document Controller may have full upload and edit rights to the Validation Documentation folder but read-only access to the Engineering Drawings folder. A vendor’s project team may have access to the specific Technical Submissions folder relevant to their equipment package but no visibility of any other part of the repository. A contractor site team may be able to upload construction records to their designated workstream folder but be prevented from downloading controlled qualification documents from other areas of the project. This granular, folder-level access model is particularly important in pharma projects where document confidentiality, data integrity, and segregation of duties are all regulatory expectations. It ensures that the right people have access to the right documents — and critically, that the wrong people cannot accidentally or maliciously access, modify, or download documents they are not authorised to touch.

One of the most persistent document management challenges in pharma projects is the secure, controlled sharing of project documentation with external parties — equipment vendors, engineering contractors, construction firms, CROs, regulatory consultants, and others — without exposing the broader project repository to parties who should not have access to it. EDocM resolves this by enabling external team members to be assigned precisely scoped access to specific folders and workstreams within the central repository. A vendor reviewing technical submissions sees only their designated folder. A CRO accessing clinical trial documentation sees only the folders relevant to their scope of work. A regulatory consultant reviewing submission-ready documents can be given read-only access to the relevant folder without any risk of accidentally accessing batch records, commercial contracts, or other sensitive documents in adjacent areas of the repository. All external access is governed by the same role-based access control framework as internal access — with full auditability of who accessed or uploaded what, and when. This structured external collaboration model is significantly more secure and traceable than the email attachment chains, FTP sites, and uncontrolled shared drives that most project teams currently rely on for external document exchange.

In pharmaceutical environments, documents are not simply files — they are GMP records, regulatory evidence, and quality artefacts that must be managed with the same rigour as the processes they describe. EDocM provides the infrastructure to manage the full range of pharma project documentation in a centralised, governed, and audit-ready environment. Validation protocols, qualification reports, and summary validation reports can be stored in workstream-specific folders with access restricted to the CQV team and QA reviewers. Controlled engineering documents — P&IDs, process flow diagrams, equipment datasheets, and FAT/SAT reports — can be managed with version control to ensure that only the current approved version is accessible to the team. Regulatory submission documents — CMC sections, site master files, and product dossiers — can be maintained in a secured folder accessible only to Regulatory Affairs and senior management. For organisations subject to FDA, EMA, or HPRA inspection, EDocM provides a centralised, access-controlled, and auditable document repository that demonstrates the organised, governed approach to documentation that regulators expect.

Large pharmaceutical projects — such as greenfield facility builds, multi-system CQV programmes, or multi-site technology transfers — generate documentation across dozens of concurrent workstreams, each with different teams, different document types, and different access requirements. EDocM is specifically designed to accommodate this complexity through a two-layer architecture. At the workstream level, individual document repositories are created for each workstream — Engineering, Quality, Commissioning, Validation, Procurement, Regulatory — each with its own folder structure, access controls, and team membership. This ensures that each workstream team has a governed, focused document environment without being overwhelmed by documents from other areas of the project. At the programme level, a programme layer sits above the individual workstreams, allowing Programme Directors, Quality Directors, and senior management to access and manage overarching programme documentation — governance frameworks, cross-functional reports, steering committee materials, and programme-level regulatory submissions — from a single consolidated view. This two-layer structure scales seamlessly from single-project use to enterprise-wide document management across multiple simultaneous programmes, making EDocM suitable for both focused project delivery and long-duration facility lifecycle management.

One of EDocM’s most practically important security features is the ability to assign read-only access with download prevention to specific users or folders. This means that a user assigned read-only access can view a document within the platform — reading a controlled protocol, reviewing an approved drawing, or checking a current specification — but cannot download the file to their local device, cannot print it, and cannot forward it outside the platform. For pharma organisations, this capability addresses several significant risks that generic document sharing creates. It prevents uncontrolled copies of GMP-controlled documents from circulating outside the platform — ensuring that the version in EDocM is always the definitive, current record and that team members cannot inadvertently work from an outdated downloaded copy. It protects commercially sensitive documents — proprietary formulations, confidential engineering designs, or regulatory strategy documents — from being extracted and shared outside the authorised team. It supports the data integrity principles required by GMP regulation, ensuring that documents can be accessed for review without creating uncontrolled copies that could be altered or misused. For external parties such as vendors or contractors who need to reference documents without retaining them, read-only access with download prevention is the appropriate and compliant access model.

In any regulated project environment, version control is not a convenience feature — it is a data integrity requirement. Working from an outdated drawing, an superseded protocol, or an unapproved procedure is one of the most common sources of GMP non-conformances, and one of the most easily prevented. EDocM provides version control functionality that ensures a clear, traceable history of every document in the repository — tracking who uploaded each version, when it was uploaded, and what changes were made. When a new version of a document is uploaded, it supersedes the previous version in the active repository, ensuring that team members always access the current approved document rather than a stale local copy. Real-time document tracking gives project leads and quality teams immediate visibility of document changes and updates as they occur. This real-time visibility eliminates the delays and miscommunications that arise when teams are not informed of document updates, and ensures that the entire project team is always aligned on the current document baseline.

EDocM is the document management backbone of the goPLIMS Integrated Project Execution Platform, and it is designed to connect seamlessly with every other module in the suite to provide complete document traceability across the project lifecycle.

Yes, EDocM supports the digitalisation of deviation and exception management by providing controlled document workflows, versioning, and traceability for all deviation-related records.

In pharmaceutical and regulated environments, deviations and exceptions are closely tied to documentation—such as SOPs, reports, protocols, and investigation records. EDocM enables teams to manage these documents in a structured, compliant system where every update, review, and approval is tracked.

Using EDocM, organisations can:

• Maintain controlled versions of deviation reports and supporting documents
• Ensure proper review and approval workflows are followed
• Link documents to relevant projects, changes, or actions
• Maintain a complete audit trail for inspections

With role-based access control, only authorised users can create, edit, review, or approve documents—ensuring data integrity and compliance with regulatory standards.

By replacing manual document handling and shared drives, EDocM ensures that all deviation-related documentation is centralised, controlled, and audit-ready, reducing compliance risks and improving efficiency.

Yes, EDocM supports knowledge management by acting as a centralised, structured repository for all project and operational documents, enabling easy access, retrieval, and reuse of critical information.

In pharma projects and operations, knowledge is primarily captured in documents—SOPs, reports, specifications, validation records, and lessons learned. EDocM ensures that this knowledge is not fragmented or lost by organising it within a controlled and searchable system.

This allows teams to:

• Quickly access historical documents and decisions
• Reuse validated templates and best practices
• Maintain consistency across projects and operations
• Support training and onboarding with reliable documentation

With version control, metadata tagging, and role-based dashboards, users can easily find relevant information while maintaining strict control over document access and updates.

By embedding knowledge management into document workflows, EDocM transforms documentation from static records into a dynamic, organisation-wide knowledge asset, supporting compliance, efficiency, and continuous improvement in regulated environments.