Passer au contenu

Add Your Heading Text Here

REVIEW MANAGEMENT MODULE Formal sign-off inside Azure DevOps

Structured Review and Approval Workflows Built Inside Azure DevOps

Review Management replaces email-based sign-off with structured review requests directly inside Azure DevOps — assign reviewers and approvers, track every response in real time, enforce rejection comments and generate audit-ready approval reports all without leaving ADO

100% native to Azure DevOps · Approval audit reports · FDA 21 CFR Part 11 ready · Server & Services
SRS-Approval · ReviewLive
BuildViewSettings
3 / 4 responded
ReqSecure login policyApproved
FeatPayment gatewayApproved
StoryToken refresh flowRejected
StoryAudit log exportPending
Approve All Reject
Approval Audit ReportWord · PDF · 1-click
THE PROBLEM

Your approval process lives in email and disappears with it

Scattered email threads, untracked responses and no formal record — when the auditor asks who approved version 2.1 and when, nobody can answer.

NO FORMAL TRAIL

Email approvals leave no evidence when auditors ask

Forwarded emails, verbal sign-offs and chat messages are not formal approval records. When a certification authority asks for evidence of who reviewed and approved a requirement set, email threads are not an acceptable answer.

NO VISIBILITY

Nobody knows who has responded and who has not

Chasing approvals over email means the review owner has no real-time view of who is pending, who approved and who rejected. Follow-up emails stack up. Deadlines slip. Nothing is enforced.

NO ENFORCEMENT

Rejections without reasons create endless back and forth

When an approver rejects a work item without explaining why, the team has no actionable starting point. The conversation resets over a new email thread with no connection to the original review record.

HOW IT WORKS

From review request to approval audit report in three steps

No external tools, no email chains, no manual tracking. Review Management runs the complete formal approval lifecycle inside Azure DevOps.

STEP 01

Build and send your structured review request

Create a review request with a subject, optional message and a set of work items sourced by query, ID or title. Add Reviewers for feedback and Approvers for formal sign-off. Configure rules, set a due date and send. Every participant receives an email with a direct link to respond.

STEP 02

Reviewers comment and approvers formally sign off

Reviewers open the request, leave per-work-item comments and click Mark as Reviewed. Approvers approve or reject each item individually or all at once. Rejection requires a written comment — the system blocks it without one. Status indicators update in real time as each response comes in.

STEP 03

Close the review and generate your audit evidence

Once all approvals are complete the review closes automatically if Auto-close is enabled, or manually by the review owner. Generate the Approval Audit Report or Review Results Report in Word or PDF in one click. Optionally create a baseline directly from the reviewed work items.

WHAT YOU GET

Every capability your team needs to run formal reviews

REVIEW BUILDER

Build any review request in minutes from work items

Add work items by query, ID or title. The "Add User As" option auto-assigns the existing work item owner as a reviewer or approver — no manual stakeholder lookup needed. Preview the notification email before sending to confirm exactly what participants will receive.

DISTINCT ROLES

Separate reviewer and approver roles with different permissions

Reviewers provide comments and feedback only. Approvers can comment and formally approve or reject each work item. One review can include both roles simultaneously — reviewers weigh in while approvers make binding decisions on the same set of work items.

RESPONSE TRACKING

See every response in real time without chasing anyone

The review grid shows live status indicators for every work item — approved, rejected or pending. Switch between My Response, All Responses, All Comments and Summary views in the side panel to see exactly where the review stands at any moment.

REVIEW MANAGEMENT

Update, resend, close or cancel any review after sending

Add or remove reviewers, change the due date or update the message on any active review after it is sent. Resend reminders to participants who have not yet responded. Close a review manually or cancel it entirely — each action moves the review to the appropriate folder in the browse page.

LAUNCH FROM ANY MODULE

Start a review directly from Baseline, Smart Docs or VPM

Click the Review button inside any Baseline, Smart Doc or Version Package to launch a fully pre-loaded review request without navigating to Review Management separately. Choose to review work items at their baseline revision or at the latest ADO revision before sending.

AUDIT REPORTS

One-click Approval Audit and Review Results reports

Generate the Approval Audit Report capturing every approver's name, role, decision, comment and timestamp in Word or PDF. Generate a Review Results Report capturing all reviewer feedback in the same format. Save either report directly to your Document Management library without downloading.

GOVERNANCE & CONTROLS

Built-in compliance controls that regulated teams require

Every control below is enforced by the system — not by policy documents that people forget to follow.

ELECTRONIC SIGNATURE

FDA 21 CFR Part 11 password verification on every approval

Enable the Ask User for Password on Approval rule to require approvers to re-enter their login credentials before their approval or rejection is recorded. This satisfies the FDA 21 CFR Part 11 requirement for verifiable electronic signatures on regulated records.

COMPLIANCE STANDARDS

Audit reports that satisfy certification authorities and regulators

The Approval Audit Report captures every approver's name, role, decision, comment and timestamp in a single formatted document. The Review Results Report captures all reviewer feedback. Both are available as Word or PDF and accepted as formal evidence by FDA, FAA, TÜV and ISO auditors.

APPROVE AS PACKAGE

Force collective sign-off across all work items at once

When Approve as Package is enabled no approver can selectively approve some items and ignore others. All work items must be approved or rejected as a single unit — enforcing full team alignment on a complete requirement set before the review can close.

ENFORCED COMMENTS

Rejection without a written comment is blocked by the system

If an approver attempts to reject a work item without adding a comment the system displays an error and prevents submission. Every rejection in every review has a mandatory written reason — permanently captured in the review record.

STATE TRANSITIONS

Automatically move work items to the post-approval state

Configure a Pre State and Post State on any review. When a work item is approved it transitions automatically to the defined post-approval state in ADO — for example from Active to Approved — without any manual backlog update required from the review owner.

BASELINE FROM REVIEW

Create a baseline directly from reviewed work items

After a review closes create a formal baseline from the reviewed work item set in one action. Choose to baseline the latest revision, the approved and rejected revisions only, or all work items at their existing revision. The baseline opens pre-loaded in the Baseline module.

Evidence for the standards your team is audited against
DO-178CDO-254IEC 62304ISO 26262ASPICEEN 50128IEC 61508FDA 21 CFR Part 11GAMP 5SOXMIL-STD-882EFedRAMPNIST SP 800-53HIPAAISO 9001
BUILT FOR EVERY ROLE

Different roles that use Review Management to replace email sign-off

From safety engineers requesting independent assessor approval to product owners running sprint backlog reviews — every role has a specific workflow inside Review Management.

Analyste d’affaires

Requirements Review Owner

Create a review request for a completed requirement set sourced from a ADO query. Add the product owner as Approver and key stakeholders as Reviewers. Once all responses are in, mark the review closed and generate the Approval Audit Report. Also, launch the review directly from Smart Docs without navigating to Review Management separately.

Propriétaire de produit

Backlog Sign-Off Owner

Before sprint planning, create a review using Approve as Package to ensure the full sprint backlog is collectively reviewed and approved by the development lead and QA lead simultaneously. Use the real-time response grid to see which team members have responded and send reminders to those who have not.

Gestionnaire de conformité

Formal Sign-Off Owner

Create structured review requests for compliance control documentation, quality manuals and SOPs with department heads as mandatory Approvers. Generate the Approval Audit Report at review close and save it directly to Document Management as the formal document control evidence. Use version labels to link each report to a specific compliance cycle.

Safety Engineer

Safety Sign-Off Owner

Create a review for the HARA, Safety Goals or Functional Safety Requirements with the Functional Safety Manager and Independent Safety Assessor as mandatory Approvers. Enable the Approve as Package rule to enforce collective sign-off. Generate the Approval Audit Report as ISO 26262 lifecycle sign-off evidence. Launch the review directly from a Smart Doc HARA.

QA Lead

Test Review Owner

Create a review for Software Test Plans and Test Completion Reports with the PM and Development Lead as Approvers. Use the real-time status indicators to track which test plan sections have been approved and which are pending. Generate the Review Results Report as formal pre-release QA sign-off evidence.

Gestionnaire de projet

Milestone Approval Owner

At each project milestone create a review from the Baseline to formally approve the requirement snapshot captured at that milestone. Choose Use Baseline Revisions so approvers assess the exact work items frozen at that point — not the current ADO state. Close the review and create a new baseline from the approved set for the next phase.

Regulatory Affairs Manager

Submission Sign-Off Owner

Before any regulatory submission create a review for the relevant documentation with VP R&D, Medical Director and VP Regulatory as mandatory Approvers. Enable Ask User for Password on Approval for FDA 21 CFR Part 11 electronic signature compliance. Save the Approval Audit Report directly to Document Management as submission evidence.

Systems Engineer

Design Review Owner

Create a review for System Requirements or Interface Control Documents at each design review milestone — SRR, PDR, CDR. Add systems lead, chief architect and customer representative as Approvers. Launch the review from the Smart Doc SRS so all work items are pre-loaded. Generate the Approval Audit Report as formal design review entry criteria evidence.

Configuration Manager

Configuration Baseline Owner

Configuration managers use Review Management to formally close configuration baseline events — PDR, CDR and TRR — with a complete approver sign-off record. The Approval Audit Report captures every decision with name, role, timestamp and mandatory comment, serving as the formal configuration baseline entry criteria evidence for each milestone.

Validation Lead

CSV Sign-Off Owner

Create reviews for URS, Functional Specification and Test Protocol documents with the QA Manager and IT Validation Lead as Approvers. Enable Ask User for Password on Approval to satisfy FDA 21 CFR Part 11 electronic signature requirements at each IQ, OQ and PQ phase. Generate and save Approval Audit Reports to Document Management as validation lifecycle evidence.

Test Manager

Verification Sign-Off Owner

Create a review for the Software Verification and Validation Plan before test execution begins. Add the DER or Notified Body representative as a mandatory Approver. Use the All Responses side panel view to see feedback from all participants in one place. Generate the Approval Audit Report as formal test readiness review evidence for the certification package.

Program Manager

Cross-Team Review Owner

Create program-level reviews covering work items from multiple ADO area paths using query-based work item selection. Use the Update Review function to add late stakeholders or adjust the due date without cancelling and re-creating the request. Use Copy URL to share a direct link to the review with external stakeholders who need visibility without navigating ADO.

INDUSTRY USE CASES

Formal review workflows across 12 regulated industries

From DO-178C in aerospace to FDA electronic signatures in pharma — see how regulated teams use Review Management to produce certification-ready sign-off evidence inside Azure DevOps.

AEROSPACE & DEFENSE
ARP4754A / EUROCAE ED-79A
Systems integration engineer

ARP4754A system validation review

Create a multi-stakeholder review for aircraft system validation requirements with the customer DAA, DER and independent V&V engineer as Approvers. Use Resend Reminder to re-notify pending approvers before the deadline. Generate the Review Results Report capturing all reviewer feedback as formal ARP4754A validation evidence.

MEDICAL DEVICES
ISO 13485 / QMS
Quality Assurance Manager

ISO 13485 QMS review results report

Create a review for quality management procedure documents with the QA Director and Regulatory Affairs Manager as Reviewers. Generate the Review Results Report at close — capturing every reviewer's comment and timestamp. Submit as ISO 13485 Section 4.2.3 documented procedure review evidence during QMS certification audit.

AUTOMOTIVE
ISO/SAE 21434 / Cybersecurity Engineering
Automotive cybersecurity engineer

ISO 21434 review with state transitions

Create a review for Vehicle Cybersecurity Goals and Requirements with the Cybersecurity Manager and third-party assessor as Approvers. Configure post-approval state transitions to move approved items from Proposed to Accepted automatically on approval. No manual backlog update required — ADO updates immediately.

RAILWAYS
IEC 62280 / Railway Communication Security
Railway security systems engineer

IEC 62280 review with late approver

After the initial security requirements review is sent the project sponsor requests adding a Network Security Assessor as a mandatory Approver. Use Update Review to add the new Approver and adjust the due date. Previously submitted responses are retained — only the new Approver needs to action the items.

BANKING & FINANCE
Basel III / BCBS 239
Risk data governance lead

Basel III follow-up review cycle

After the annual BCBS 239 risk data quality requirements review closes, use Create Request to launch a follow-up review from the same work item set. Select Use Latest Revisions to reflect post-review changes. The new request opens pre-populated — no work item re-selection needed.

GOVERNMENT & DEFENSE
CMMC Level 3 / CUI
Cleared systems engineer

CMMC Level 3 cleared team sign-off

Create a review for CUI-related system security requirements with cleared personnel as mandatory Approvers. Use Copy URL to share a direct link with cleared reviewers who need access without navigating the ADO project. Every decision is captured with name, timestamp and comment in the Approval Audit Report.

DEFENSE
MIL-HDBK-516C / Airworthiness Certification
Airworthiness certification engineer

MIL-HDBK-516C airworthiness review closure

After all Approvers submit decisions for the airworthiness criteria review, click Close Review to formally complete the cycle. The Approval Audit Report generates at closure and is submitted to the Designated Airworthiness Representative as formal MIL-HDBK-516C airworthiness determination evidence.

HEALTHCARE IT
HL7 FHIR R4 / Interoperability
Clinical interoperability lead

HL7 FHIR review all responses view

Create a review for FHIR conformance requirements with clinical informatics leads as Reviewers and the Chief Medical Information Officer as Approver. Use the All Responses side panel to see every reviewer's per-work-item comment consolidated in one place before the CMIO makes the final approval decision.

PHARMACEUTICAL
ICH Q10 / Pharmaceutical Quality System
Quality director

ICH Q10 baseline triggered review

After a change control modifies the pharmaceutical quality system documentation, open the Baseline capturing the pre-change requirement set and click Review. Select Use Latest Revisions to send updated work items to reviewers. The review pre-loads from the baseline without any manual work item re-selection.

ENERGY & UTILITIES
NERC CIP / Critical Infrastructure Protection
Grid cybersecurity compliance engineer

NERC CIP package triggered review

Open the NERC CIP control implementation Version Package and click Review. The dialog pre-loads all control work items from the package. Add the CISO and Grid Security Officer as Approvers. The Approval Audit Report generated at close is submitted as formal evidence at each quarterly NERC CIP assessment.

INSURANCE
Solvency II / ORSA
Actuarial risk review manager

Solvency II ORSA collective sign-off

Create the annual ORSA requirement review with Approve as Package enabled so the CRO, Chief Actuary and Compliance Director must collectively sign off the entire risk and solvency assessment requirement set. No partial approvals allowed — all items must be accepted or rejected as a single unit.

ENTERPRISE SOFTWARE
ISO/IEC 12207 / Software Lifecycle Processes
Software process lead

ISO 12207 Smart Doc triggered review

Open the Software Requirements Specification Smart Doc and click Review from the toolbar. The review dialog pre-loads all work items from the Smart Doc. Add process assessors as Reviewers and the Software Engineering Director as Approver — without navigating to Review Management separately.

WHERE TEAMS USE IT

Built for teams that cannot afford an informal approval process

COMPLIANCE

Approval evidence that auditors and regulators accept

The Approval Audit Report captures every approver's name, decision, comment and timestamp in a single formatted document. Generate it in one click at any time — it is the formal sign-off record that certification authorities and regulatory bodies require as submission evidence.

REGULATED

FDA 21 CFR Part 11 electronic signatures built into every review

Enable Ask User for Password on Approval to add a verifiable electronic signature step to any review cycle. No external e-signature tool required. The credential verification happens inside ADO and the approver's confirmed identity is captured in the Approval Audit Report.

DELIVERY

Launch any review without leaving the module you are working in

Click the Review button from inside any Baseline, Smart Doc or Version Package and a fully configured review request opens pre-loaded with all relevant work items. No navigation to a separate module, no manual work item re-entry, no missed items.

LEADERSHIP

Real-time approval status without follow-up emails

The review grid shows live approval status for every work item across all approvers. Leadership can see at a glance which items are approved, which are rejected and which are still pending — without sending a single follow-up email or scheduling a status call.

THE IMPACT

What changes when approvals run inside Azure DevOps

0
Email chains needed to run a formal requirement approval cycle
100%
Of rejections captured with mandatory written comments — enforced by the system
1-click
From any module to a fully pre-loaded formal review request
3
Export formats for audit evidence — Word, PDF and HTML
FAQS

Frequently asked questions about Review Management

What is the difference between a Reviewer and an Approver?
Reviewers can add comments and feedback on individual work items but cannot approve or reject. Approvers can do both — provide comments and formally approve or reject each work item. A single review can include both roles at the same time with the same work item set.
Can I add or remove participants after a review has been sent?
Yes. Click Update Review on any active review to add or remove reviewers and approvers, change their roles, update the subject, revise the message or adjust the due date. All participants receive a notification email when the review is updated.
What happens if an approver tries to reject without writing a comment?
The system blocks the rejection and displays an error message — "Comment is required for Reject and Submit Review actions." The approver cannot submit a rejection without a written comment. This is enforced by the system on every review, not by a policy that can be skipped.
What does Approve as Package mean?
When Approve as Package is enabled all work items in the review must be approved or rejected collectively by each approver. No approver can selectively approve some items and skip others. This is used to enforce full team alignment on a complete requirement set at the start of an iteration or milestone.
How does the FDA 21 CFR Part 11 electronic signature feature work?
Enable the Ask User for Password on Approval rule when building the review. When an approver clicks Approve or Reject they are prompted to re-enter their Azure DevOps login credentials before the action is recorded. The verified identity and timestamp are captured in the Approval Audit Report as a 21 CFR Part 11-compliant electronic signature record.
Can I create a review directly from Smart Docs, Baseline or Version Package?
Yes. Each of these modules has a Review button in the toolbar. Clicking it opens the standard Review dialog pre-loaded with all work items from that document, baseline or package. For Baseline you can choose whether to review work items at their baseline revision or at the latest ADO revision.
What is the Approval Audit Report and what does it contain?
The Approval Audit Report is a formatted Word or PDF document generated at the close of any review. It captures every approver's name, role, decision (Approve or Reject), written comment and timestamp. It is accepted as formal approval evidence by FDA, FAA, TÜV, ISO auditors and other certification authorities.
Can I create a baseline directly from a completed review?
Yes. Open any review and click the three dots menu, then select Baseline. Choose whether to baseline using the latest revision of all work items, the existing revisions of approved and rejected items only, or the existing revisions of all work items. The Create Baseline wizard opens with the work items pre-loaded.
What does Auto-close Review do?
When Auto-close Review is enabled the review closes automatically once all approvers have submitted their decisions on all work items. If it is not enabled the review owner must manually click Close Review. Closed reviews move to the Closed folder and can no longer be modified.
Can I configure work item state changes to happen automatically on approval?
Yes. Set a Pre State and Post State when building the review. Use the Change State dropdown to define whether the state transition happens when a specific work item is approved or when all work items are approved by all approvers. State changes write back to ADO automatically — no manual backlog update required.
Can I generate reports from a review before it closes?
Yes. Click Smart Report in the three dots menu on any active or closed review to generate a formatted report using your organization's templates and stylesheets. The Approval Audit Report and Review Results Report can also be generated at any point — not only after review closure.
Does Review Management work with Azure DevOps Server on-premises?
Yes. Review Management is certified for both Azure DevOps Services and Azure DevOps Server. Teams with air-gapped or data-residency requirements can run the complete review lifecycle — create, respond, audit report generation and baseline creation — entirely within their own infrastructure.
GET STARTED

Replace email sign-off with formal reviews inside Azure DevOps

Review Management is part of MR NextGen — built natively inside Azure DevOps. Create structured review requests, collect formally recorded approvals and generate audit-ready evidence without a single email thread. Launch reviews from Baseline, Smart Docs or Version Package in one click.

No migration required · Free trial available · No credit card required · Azure DevOps Server & Services
EXPLORE MR NEXTGEN

Complete your requirements workflow with the full MR NextGen platform

Review Management connects directly with every other MR NextGen module — launch reviews from any of them and save reports back to Document Management.

Smart Docs

Create living requirements documents inside Azure DevOps. Launch a formal review request directly from any Smart Doc — all work items pre-load into the review dialog automatically.

Explore Smart Docs →

Traçabilité

Build intersection and horizontal traceability matrices from live ADO work items. Generate a Smart Report and save it to Document Management — or trigger a review of the traced requirement set.

Explore Traceability →

Référence

Freeze any requirement set as an immutable snapshot at any milestone. Launch a formal review directly from any Baseline and create a new baseline from the reviewed and approved work item set.

Explore Baseline →

Gestion documentaire

Save Approval Audit Reports and Review Results Reports directly to the Document Management library in one click. Every review report is versioned, organized and accessible to the whole team.

Explore Document Management →

Gestion des paquets de versions

Group work items into formal version packages by release or milestone. Launch a review directly from any Version Package to formally approve the release scope before delivery.

Explore VPM →

Copilot4DevOps

The only AI requirements assistant built natively inside Azure DevOps. Use Copilot to generate and refine requirements in Smart Docs, then trigger a formal review request to collect stakeholder sign-off.

Explore Copilot4DevOps →