If You Can’t Produce the Documentation, Can You Prove Compliance?

There is an old philosophical riddle: If a tree falls in the forest and no one is around to hear it, does it make a sound?

In dental infection prevention and control, I have a similar question: If a practice is doing the work but cannot produce the documentation to prove it, can it demonstrate compliance?

Proof of compliance extends far beyond a policy manual. A dental practice must be able to produce its sterilization documentation, biological monitoring results, staff training records, current policies, manufacturers’ instructions for use, safety data sheets and equipment maintenance records.

Together, these records demonstrate that the practice has established the right procedures, trained its team, followed manufacturers’ requirements, maintained its equipment and consistently completed the necessary monitoring.

If that evidence cannot be readily produced, the practice may be unable to demonstrate that these requirements were consistently met—even when staff believe they were doing everything correctly.

If a practice is doing the work but cannot produce the documentation to prove it, can it demonstrate compliance?

The Practice Was Doing the Work

Consider a situation that can easily happen in a dental practice.

On the surface, the clinic was a dream. The reprocessing area was organized. Staff understood what a Class 5 chemical indicator was and why it mattered. The sterilization logs showed that biological indicators were being run, the physical parameters were signed off, and the pre-vacuum sterilizer was receiving its daily Bowie-Dick test.

The team was doing the work.

Then came a straightforward question: “Where is your IPAC documentation?”

The answer was not nearly as straightforward.

Even the person responsible for overseeing IPAC could not confidently explain where all the required documentation was stored.

The team knew the policies existed, but no one was certain where the current version could be found. Sterilization records were stored separately. Manufacturers’ instructions for use were kept in different locations, training records were maintained elsewhere, and some files may have been saved on an older computer.

The practice had documentation, but it did not have one reliable place where that documentation could be found, reviewed and maintained.

From an auditing perspective, documentation that cannot be readily located and produced may effectively be treated as though it does not exist.

Doing the Work Is Not the Same as Proving the Work

This situation highlights a major blind spot in dental practices.

Clinics can confuse clinical competence with demonstrable compliance. A team may be following the correct reprocessing procedures, but the practice must also be able to show what was done, when it was done, who completed it and which standards or manufacturers’ instructions were followed.

Compliance is supported by evidence.

That evidence may include:

• Sterilization cycle records and physical parameter logs
• Biological indicator results
• Bowie-Dick test results
• Staff education and training records
• Current IPAC and reprocessing policies
• Manufacturers’ instructions for use
• Safety data sheets
• Equipment maintenance and repair records
• Waterline testing and maintenance records
• Audit findings and completed corrective actions
• Documented policy reviews and version histories

Each piece tells part of the practice’s compliance story. When those records are scattered across binders, computers, email inboxes and shared folders, no one has a complete view.

That creates both an operational problem and a compliance risk.

Documentation Must Be Available to the People Who Need It

The Royal College of Dental Surgeons of Ontario states in its Infection Prevention and Control in the Dental Office guidelines that IPAC policies must be written and readily available to staff.

The words “readily available” matter.

A document is not readily available if it is stored on an old computer that only one person can access. It is not readily available if the team must contact an employee who is away to learn where it was saved. It is not readily available if several conflicting versions exist and no one knows which one is current.

Accessibility also needs to extend beyond policies.

If a new employee starts on Tuesday, can they access the current reprocessing procedures that afternoon? If a staff member needs to confirm the correct dilution or contact time for a product, can they immediately find the manufacturer’s instructions? If an inspector requests recent biological indicator results, can the office manager produce them without searching through several different systems?

If access to essential information depends on one particular employee being present, the practice does not have a dependable documentation system. It has institutional memory.

When Documentation Is Missing, Practice Drift Begins

Current documentation does more than satisfy an auditor. It helps staff perform their work consistently and safely.

When policies, instructions and training resources are difficult to access, team members begin relying on what they remember, what another employee showed them or how a task was completed at a previous clinic.

That is where practice drift begins.

One assistant performs a task one way. Another assistant does it slightly differently. Over time, the written procedure and the actual practice move further apart.

Outdated documentation can also create real safety risks.

For example, if current guidance requires contaminated instruments to be manually brushed beneath the surface of the water, but the available procedure only says to “clean instruments before sterilization,” an important safety step can easily be missed.

Manufacturers’ instructions for use are equally important. Products and equipment have specific requirements for use, dilution, contact time, testing, maintenance and operation. Staff need access to the correct instructions while completing the task—not after someone spends 20 minutes searching for them.

Policies and procedures also need to be reviewed and updated as requirements change. A practice may be following a document that was accurate when it was created but no longer reflects current guidance, equipment or products.

A document that exists but is outdated can be just as problematic as one that cannot be found.

Create a Single Source of Truth

The solution is not simply to move the policy binder online. Uploading files into another unorganized folder can create a digital version of the same problem.

Dental practices need one reliable source of truth for their IPAC documentation.

That central location should allow the team to find and maintain its policies, sterilization records, monitoring results, MIFUs, SDSs, training records, maintenance documentation, audit findings and corrective actions.

It should also be clear:

• Where each type of documentation is stored
• Who is responsible for maintaining it
• Which version is current
• When the document was last reviewed
• When it needs to be reviewed again
• Who has completed the required training
• Which identified gaps remain outstanding
• What corrective actions have been completed

The system must be practical enough to support everyday use. Staff should know where to find the information they need, while the office manager, IPAC lead and principal dentist should be able to see the broader compliance picture.

Key instructions should also be available where the work occurs. Staff should not have to leave the reprocessing area and search through multiple systems to confirm an equipment requirement or product instruction.

Documentation Protects the Practice

A centralized documentation system does more than prepare a dental practice for an inspection.

It supports consistent processes, strengthens employee onboarding, reduces reliance on memory and gives leadership greater visibility into outstanding risks.

It also protects the practice if something goes wrong.

If there is a sterilization failure, exposure incident or complaint, one of the first questions may be whether the practice can demonstrate the procedures it had in place, the training it provided, the monitoring it completed and the corrective action it took.

Without the documentation, the practice may struggle to prove that it had a standardized and consistently followed process—even if team members believe they did everything correctly.

Good IPAC practices should never become invisible simply because the supporting evidence is scattered throughout the office.

Doing the work is one part of compliance. The other is being able to prove it through documentation that is current, complete, organized and readily accessible.

Your IPAC documentation should not be something the team can eventually track down. It should be a living system that staff can rely on every day and that leadership can confidently produce whenever questions arise.