100% Traceability: The Role of the Activity Auditor in Environmental Health Inspections

1. What traceability really means in a water laboratory

When an environmental health inspector requests the PFAS analysis results for a drinking water sample, they are not looking for just the final number. They want the complete chain of custody: from sample collection in the field to the report delivered to the water operator — and they need every link in that chain to be reconstructable.

Traceability, in the context of ISO/IEC 17025, spans three complementary dimensions. The first is metrological traceability: linking a measurement result to a recognised reference (national or international standard) through an unbroken chain of calibrations. The second is documentary traceability: demonstrating that the procedure used was the current approved version, that the analyst was authorised, and that the instrument had a valid calibration at the time. The third is data traceability: reconstructing how a result was generated, whether it was modified, by whom, and with what justification.

All three dimensions converge at a single point: the audit trail — the chronological, unalterable record of everything that takes place within the system.

2. The ALCOA+ principle and its practical application

ALCOA+ is the acronym coined by the FDA to define the attributes that laboratory data must meet to be considered integral. Although it originated in the pharmaceutical industry, it has become the universal reference standard for data integrity in accredited laboratories. Bodies such as UKAS, A2LA, ENAC and DAkkS apply it implicitly when evaluating clause 7.11 of ISO/IEC 17025.

A — Attributable: Every data point must be linked to the person who generated or modified it. In a LIMS, this is achieved through user authentication with unique, non-transferable credentials. The Zendo LIMS Activity Auditor automatically records the user, date, time and action performed on each record.

L — Legible: Data must be readable throughout the entire retention period. A LIMS eliminates the risk of paper record degradation and ensures data is stored in digitally searchable formats for the long term.

C — Contemporaneous: Data must be recorded at the moment it is generated, not hours or days later. Zendo LIMS’s automatic data capture from instruments meets this requirement natively: the result is logged the instant the analyser produces it.

O — Original: Original data must be preserved. A LIMS always retains the primary data (raw data) and records any modification as a separate audit trail entry, without overwriting the original value.

A — Accurate: Data must be correct and complete. Automatic result validation with configurable rules reduces the risk of human error. Calculations are executed by the system, eliminating the transcription and formula errors that plague spreadsheets.

+ Complete, Consistent, Enduring, Available: Data must be complete (no selective omissions), consistent (same procedures applied uniformly), enduring (stored securely for the required retention period) and available (accessible when needed, especially during inspections).

3. The Zendo LIMS Activity Auditor: anatomy of a critical tool

The Activity Auditor is the audit trail module built into Zendo LIMS. Its function is to record, automatically and unalterably, every action performed by any user within the system.

3.1 What the Activity Auditor records

Each audit trail entry contains a minimum set of information: user identity (who), exact date and time with server timestamp (when), action performed (what), affected record (on what), previous value and new value (what changed), and the justification when the system requires it (why).

Recorded actions include, among others:

Sample management: Creation of sample records, entry and modification of results.

Validation and reporting: Result validation and approval, report generation and issue.

System configuration: Changes to method or parameter settings, user additions and removals, permission and role modifications.

System access: Login, logout and failed access attempts, all with server-side timestamp and user details.

3.2 Immutability of the record

The Zendo LIMS audit trail is append-only: new entries can only be added, never modified or deleted. Not even a user with administrator rights can alter the audit history. This characteristic is fundamental to the credibility of the record before auditors and inspectors.

3.3 Search and filtering

During an inspection, an auditor may need to consult the history of a specific sample, a particular analyst, or a defined time period. The Activity Auditor allows filtering by user, date, action type, module and affected record. What in a manual system might require hours of searching through laboratory notebooks, Zendo LIMS resolves in seconds.

4. How the audit trail works during an environmental health inspection

Environmental health inspections and accreditation evaluations follow a predictable pattern. The auditor selects a random sample from the register and then reconstructs the entire chain backwards.

Typical inspection scenario

The auditor requests the analysis report for a drinking water sample processed three months ago. They then ask: who received the sample? Which analyst processed it? Which instrument was used? Was it calibrated that day? Was the method used the current approved version? Who validated the results? Was the original result modified at any point?

With a LIMS like Zendo, every one of these questions is answered with a single query to the Activity Auditor — no searching through notebooks, spreadsheets or physical archives.

What auditors look for and cannot find in spreadsheets

In a laboratory that manages its data with Excel, a result modification overwrites the previous value without leaving any trace. There is no way to know who changed the data, when, or why. This opacity is precisely what ALCOA+ principles are designed to prevent, and it is one of the most frequently cited observations in accreditation evaluations worldwide.

5. Traceability requirements across international regulatory frameworks

5.1 ISO/IEC 17025:2025 — New digital requirements

The updated edition of the standard introduces, for the first time, specific requirements for computer systems. These include software validation, protection of data in transit and at rest, and the ability to demonstrate that the audit trail is integral and unalterable. For laboratories still managing data with unvalidated tools, this regulatory change significantly raises the risk of a non-conformity finding at the next accreditation evaluation.

5.2 European Union — Drinking Water Directive 2020/2184

The EU Drinking Water Directive requires member states to ensure that water quality monitoring results are documented and traceable. Laboratories operating under national transpositions of this directive — including Spain’s RD 3/2023, Germany’s TrinkwV, and France’s Code de la santé publique — must maintain complete records of every analysis performed, with audit-ready traceability from sample receipt to final report.

5.3 United States — Safe Drinking Water Act and NELAP

In the United States, laboratories certified under the National Environmental Laboratory Accreditation Program (NELAP) and accredited by bodies such as A2LA must demonstrate data integrity consistent with ALCOA+ principles. EPA Method requirements and TNI standards specify that any modification to a reported result must be documented with the original value, the new value, the reason for the change, and the identity of the person who made it — requirements that a LIMS audit trail fulfils automatically.

5.4 Legionella and environmental monitoring

Legionella Prevention and Control Plans require a documented record of every sampling event, analysis and corrective action. LIMS traceability links each Legionella result to the sampled installation, the sampling point, transport conditions, the analytical method and the resulting action — providing the complete chain required by inspectors in all jurisdictions.

6. The hidden cost of missing traceability

Laboratories without a robust audit trail face concrete risks that extend well beyond a non-conformity finding in an audit.

Regulatory risk: A drinking water analysis result that cannot demonstrate its traceability may be invalidated by the health authority. If that result determined that the water was safe, its invalidation can trigger a public health crisis.

Reputational risk: Loss of accreditation due to data integrity deficiencies is a devastating blow for any laboratory. In a sector where trust is the currency of business, rebuilding credibility can take years.

Operational risk: Without digital traceability, reconstructing incidents consumes hours of technical staff and quality manager time. Every inspection becomes a search operation through physical archives, with the added risk of failing to locate the required information.

7. Conclusion: the audit trail as both shield and competitive advantage

100% traceability is not a theoretical ideal — it is a regulatory requirement, a market expectation and a competitive advantage. The Activity Auditor in a LIMS like Zendo transforms every inspection into a demonstration of technical competence, not a desperate search through filing cabinets.

With the new ISO/IEC 17025:2025, the question every laboratory director must ask is not whether they need a digital audit trail. It is whether their current system can demonstrate to an accreditation auditor that their data meets ALCOA+. If the answer is not an unequivocal yes, it is time to act.

---