Back to portfolio

Case Study · eLogbooks

Replacing paper logbooks with a GxP-compliant digital system built for the factory floor.

RoleSenior Product Designer (sole designer)
TeamPO · FE Engineer · BE Engineer · QA
ClientGlobal pharmaceutical manufacturer
StandardsGxP · ALCOA+ · GDP · 21 CFR Part 11

A global pharmaceutical manufacturer was running 98 paper logbooks across their site, and every one of them was a possible audit finding. I designed a digital system with two sides: a tablet interface built for gloved hands and speed on the floor, and a self-service builder that let authors set up and publish logbooks without help from engineering.

Logbooks scoped
0
Logbooks scoped for digitisation. We expected the final count to drop once similar ones were combined.
Workshop groups
0
Three workshop groups running at once. Operators on tablets, supervisors and QA on desktop.
Labs in pilot
0
Two labs in a controlled pilot, running paper and digital logbooks side by side before full rollout.
eLogbooks operator interface showing list of available logbooks

Logbook selection screen

eLogbooks operator interface showing logbook entry

Logbook entry view

01Context

A second project built on the trust earned by the first.

eLogbooks came out of a project with a global pharmaceutical manufacturer who was already using ATReview, a compliance product I'd designed for them earlier. That experience had shown them a digital tool could handle the compliance side without getting in the way of everyday work. So they came back with a new problem: replace 98 paper logbooks across their site with something digital that their teams would actually use.

I was the only designer on the project. I owned everything from early discovery through to interaction design and the on-site usability workshop. It kicked off in mid-2025 with a blank slate. No existing product, no legacy system to build on. Just 98 logbooks, a problem statement, and a group of people who doubted we could make anything better than paper.

Most of my earlier work had been on desktop. This project came with a very different set of constraints from day one. The main interface had to work on a tablet, used by people on a factory floor who were often wearing thick gloves and always short on time. That context shaped almost every decision that followed.

AreaMy ownershipType
Discovery & researchStakeholder interviews, on-site observation, logbook inventory, operator workflow analysisMine alone
UX & interaction designTablet-first operator interface, desktop author/builder interface, amendment workflows, version control modelMine alone
On-site usability workshopPlanned and ran a full-day workshop with operators, supervisors, and QA across three groupsMine alone
Compliance designALCOA+ field enforcement, e-signature model, audit trail architecture, amendment justification flowMine alone
Engineering & deploymentFront-end build, back-end integration, tablet provisioning, working with the engineering teamShared

Process notes

Three things about how this got made that don't fit inside the numbered story.

01 / One designer, two very different user groups

I was the only designer across the whole engagement, working with a Product Owner and a Front-End Engineer. The product serves two groups who work in completely different ways: operators on tablets on the factory floor, and authors and supervisors on desktop in the back office. Both interfaces were mine from the first sketches through to the on-site workshop.

02 / GDP as an interaction-level constraint

Good Documentation Practice usually stops well short of the interface. I treated it as a direct design input instead. Every field that couldn’t be skipped, every timestamp that filled in on its own, every justification asked for on save was a GDP rule turned into a specific interaction. The compliance rules didn’t box the design in. They made it clearer what the interface had to do. When the system enforces a complete record by default, there’s less for the operator to keep track of.

03 / Designing for people who already had a working system

Unlike most digital transformation projects, the operators I spoke to weren’t fed up with their current process. Paper worked. It was slow and had its gaps, but it was steady and people trusted it. So the challenge wasn’t fixing something broken. It was giving people a reason to move off something that already did the job. That changed how I ran discovery. Less “what’s wrong with the current process” and more “what would make you pick this over paper?”

02The Problem

Paper makes it hard to meet compliance consistently.

Paper logbooks are a legal requirement in life sciences manufacturing. Every manual task that could affect product quality has to be recorded: equipment cleaning, environmental checks, maintenance runs. These records are what inspectors look at during audits, and logbook failures show up in the top 10 FDA GMP inspection findings every year. The problem isn't that people don't understand the requirement. It's that paper makes the requirement hard to meet the same way every time.

Paper logbook exampleBefore state

Paper logbook example

A typical paper logbook used on the factory floor. Handwritten entries, formatting that varies from person to person, and nothing checking the entry as it's written.

Note: This document has been recreated using fictional data to preserve client confidentiality.

01

Compliance failures happen quietly at entry and only surface later

Operators fill in logbooks on the floor, often in a hurry and sometimes in gloves. Mistakes get made: an entry in the wrong place, a field left blank, handwriting nobody can read. But those mistakes aren't caught when they happen. They turn up days later when QA reviews the physical book, which starts a correction cycle that's slow, stressful, and often can't be fixed without a formal amendment.

Manual entries · nothing checked as it's written · QA review days later

02

No standard way of working across departments

Every department made their own logbooks. There was no shared field structure, no shared review process, and no central view of what existed or what state it was in. Some logbooks had ALCOA+ fields. Others didn't have them at all. Getting ready for an audit meant walking the site and physically finding every book.

Every department did its own thing · no shared format · nothing visible until the book is found

03

Operators saw a digital tool as a way to watch them, not help them

Early discovery sessions surfaced real pushback. Operators weren't against a better process. They doubted a digital system could keep up with pen and paper, and some read it as a way to monitor them rather than help them do the job. That reaction had to be designed for, not ignored.

If it's slower than writing it down, nobody's going to use it.Operator, discovery session

The paper process enforces compliance at the wrong moment. Mistakes happen at entry, but they're caught at review, sometimes days later, by a different person. That gap is where the compliance risk sits.

03Key Decisions

Five decisions that shaped how the product was built, and why. Every decision below came from treating three things as real design inputs: the factory floor, the audit trail requirements, and the risk that people wouldn't adopt it.

Decision01

Tablet-first as a hard rule, not a responsive afterthought

GapMost of my earlier work was desktop-based. The factory floor had a different set of constraints: gloved hands, time pressure, and users who had no patience for a learning curve. Standard responsive design wasn't going to cut it.
ChoiceA single-column layout, large touch targets, very little navigation, and plenty of room to tap. The interface was built so an operator who'd never seen it could finish an entry without asking anyone how it worked.
ConsideredA desktop-first layout scaled down to fit, leaning on operators to adapt. Standard UI component sizing from the existing design system.
WhyIf operators found the tablet slower or harder than pen and paper, they'd push back on the whole tool. Adoption came down to the tablet being genuinely faster, not just compliant.
Decision02

SSO plus PIN over face recognition

GapGxP requires an e-signature on every entry that can be tied to a named person. The question was which method would meet that without slowing operators down on the floor.
ChoiceOperators sign in with their existing site SSO by scanning their access card. Signing an entry is a PIN at the end. One action, tied to a named person, works with gloves on.
ConsideredFace recognition for biometric identity. A separate authentication app. Signature capture with a stylus.
WhyThe client didn't have biometric infrastructure in place. Adding it would have meant more to build and more to validate. Building on the SSO they already had meant there was no new behaviour to learn.
Decision03

Justify on save, so the audit trail holds without blocking the operator

GapIn a GxP context, quietly editing a submitted entry breaks the audit trail. But if amendments are too much of a hassle, operators leave a wrong record standing rather than fix it.
ChoiceOperators can amend any entry they submitted. Saving the amendment needs a reason. The original entry, the amendment, the reason, the timestamp, and the user are all kept in the entry history. The reason is only asked for at save, so it feels like adding a note rather than passing a checkpoint.
ConsideredLocking entries after submission and forcing a new entry to replace the old one. A separate amendment request that needed supervisor approval before any edit.
WhyBoth of those add friction that would put operators off correcting things, and leave wrong records in place. The audit trail has to hold, but the path to a correction has to be quick enough that operators actually take it.
Decision04

A familiar logbook builder over a purpose-built one

GapAuthors needed to set up complex logbooks on their own, some with nested field groups, multi-step sequences, conditional validation, and version control, without any help from engineering.
ChoiceI followed the patterns of existing form builders rather than building a pharma-specific tool. Looking at the form builders already on the market shaped the approach. The wording and the way it worked matched tools authors already knew.
ConsideredA purpose-built logbook designer with pharma-specific wording and guided setup wizards.
WhyThe client was clear: if the builder got too complex, authors would just email us and ask us to set the logbooks up for them. Self-service was the entire point. Familiar patterns meant nothing new to learn.
Decision05

One tablet per station, so a whole step disappears

GapOperators needed the right logbook instantly, with no navigation, while standing at a machine. Any delay or lookup was friction that put the tool up against pen and paper.
ChoiceEach tablet is tied to a station. The logbook for that station is already open when the operator picks it up. No scan, no search, no version lookup. Pick it up and start filling.
ConsideredQR codes on each machine that scan straight to the latest published version of that logbook.
WhyQR scanning made access faster. A pre-assigned tablet made it instant. We didn't drop the QR code because it was hard to build. We dropped it because it added a step the pre-assigned tablet removed completely.

04Solution

Two interfaces, one system, built around the people who use it.

The product has two sides. The operator interface is built for speed and no friction on the floor. The author interface is built for control and self-service in the back office. Both connect through a shared approval and version control layer.

Operator interface

Tablet-first, always on, filtered by role. Operators only see the logbooks assigned to their role and station.

Entry fields are large and clearly labelled, and they can't be skipped. Dates and the operator's identity fill in on their own. Multi-step logbooks handle each stage one at a time, with sign-off needed before the next step opens.

Amendments are reachable from any entry, and the reason is asked for as part of the save action.

Author interface

A browser-based, self-service logbook builder. Authors set up logbooks using familiar form-builder patterns (text, numeric, dropdown, date, or checkbox fields) in single-step or multi-step layouts.

Once it's set up, the logbook goes through a controlled review and approval process before it's published. Version control lets authors update a live logbook without disrupting entries already in progress.

Supervisors and QA can flag entries, review by role, and sign off at their stage.

eLogbook complete workflow, from entry creation to closure

eLogbooks operator flow diagram showing entry, amendment, and submission stages
elogbooks.app/builder
1

Self-service by design authors build and publish their own logbooks, with no engineering support needed.

2

Built for complexity multiple steps and field groups handle even the most involved logbooks.

05Usability Testing

On-site workshop with operators, supervisors, QA.

We ran a small workshop at the client's site: a full day with me, the product owner, and a front-end engineer there in person. We split it into three groups running at the same time, each with operators on tablets and supervisors or QA on laptops. We used anonymised versions of real logbook scenarios from the client's own environment.

01
Single-step entry (break it on purpose first)We asked operators to fill in an entry in the worst way they could: leave fields empty, add a typo on purpose. Then fill it in correctly and fix the typo. We wanted to see how the system handled things going wrong, not just the happy path.
02
Multi-step entryOperators completed a multi-stage entry. Supervisors flagged one for amendment. Operators amended and resubmitted. Supervisors confirmed.
03
Entry history and activity logOperators and supervisors went through the entry history. QA checked the full activity log for the session and confirmed every action was captured with a name and a timestamp.
04
Review workflowsSingle-stage and multi-stage review flows shown to the whole group, including reject-with-reason and return-to-operator paths.

Incomplete entries were blocked at submission. The amendment flow worked without friction. The pushback we'd seen from operators, who came in unconvinced, had shifted by the end of the day. They described it as easier than pen and paper. QA liked the flag and review flow: a clear way to send an entry back with a reason attached, in place of the informal back-and-forth the paper process needed.

06Status and Results

Controlled pilot underway, paper and digital running side by side.

The product is in a controlled pilot across two labs at the client's site. The approach is deliberate: run one paper logbook and one digital logbook next to each other before committing to the full switch. This gives operators a low-stakes way in, and gives QA a way to confirm that digital records meet their compliance standards before the wider rollout.

We scoped 98 logbooks at the start. The builder made it possible to standardise and combine them, so logbooks that had drifted into slightly different formats across departments could be unified during digitisation. The final number in use is expected to be well below 98.

Full outcomes are waiting on the pilot results. What the workshop confirmed is that the system did what it was designed to do, under realistic conditions, with real users who came in sceptical and left expecting something different.

An operator adds a logbook entry — selecting a logbook, clicking Add entry, and applying an electronic signature to sign the record

07Reflection

Compliance was the easy part. Adoption was the hard part.

The regulatory requirements were well documented, the ALCOA+ principles weren't up for debate, and the audit trail logic had clear rules. Careful design could handle all of that.

The harder part was adoption. Operators who feel watched don't engage with a new tool. They work around it. The design had to feel like it was working for them, not just for QA. Every choice about touch target size, PIN signing, pre-assigned tablets, and the pace of the entry flow was really a choice about whether the thing would get used at all.

What I'd do differently

I'd push harder to get operators in the room during the design phase, not just the testing phase. The resistance we saw in the workshop was manageable because we'd already made the right calls. But some of those calls would have been sharper with operator input from the start, especially the amendment flow and the way fields are configured in the builder.

The system that earns adoption on the factory floor isn't the strictest one. It's the one that makes doing the job properly the fastest way to get it done.