Someone else does the work.You still own the outcome.

Provider to sign-off.
One connected chain.

The work is outsourced; the accountability is not. Provider, activity, finding, corrective action and the accountable-manager sign-off all sit on the same picture — not five spreadsheets that have to agree.

1. 01OUT
   ProviderMenzies Aviation · ground handling, A320 fleet
   OUT-2026-0042
2. 02OUT
   ActivityTurn time tracked against the agreed service level
   OUT-2026-0042
3. 03QMS
   FindingDrift over target — raised on the provider record
   FND-2026-0091
4. 04CAP
   Corrective actionProvider owns the fix · your team verifies
   CAP-2026-0118
5. 05OUT
   AM sign-offThe accountable manager closes the loop
   OUT-2026-0042

Five moments.
No side spreadsheet.

• When you bring on a provider.
  The activity, the agreement and the owner — on one record.

  A new ground handler, a maintenance contract, a training partner. Each becomes a provider record with its outsourced activity, its agreed service levels and its contract reference. The accountable manager is named at the start, not after the first audit finding.

• When performance drifts.
  Drift surfaces as a finding, with an owner and a clock.

  Turn time creeps over target, an incident lands, an audit point stays open. The platform raises it as a finding against the provider and routes it through the same severity ladder as your own findings — so it is on the record before the next contract review, not after.

• When a provider needs auditing.
  The same checklists, the same finding model.

  A provider audit runs on the same audit plan, finding model and evidence rules as your internal quality audits. There is no separate provider audit programme to keep in step — the findings land in the same operational picture.

• When a finding needs closing.
  A corrective action the provider owns and you verify.

  A finding against a provider opens a corrective action. The provider owns the fix; your team verifies it. The same effectiveness gate applies — a corrective action cannot be marked done until the evidence shows it actually worked.

• When the regulator asks who is accountable.
  The signature chain is already on the record.

  Provider sign-off, operations sign-off, accountable-manager sign-off — the chain is part of the close-out, not a folder of approval emails. The accountable manager is the last signature, regardless of who performed the activity.