Document Version Control: He Signed the Version That Was Withdrawn in March

What is document version control? Document version control means every employee works from the current, approved version of a document, and the organisation can prove who saw which version and when. When documents are distributed as email attachments, each recipient holds an independent copy, and outdated copies keep circulating long after a document is withdrawn.

Publishing a document is not the same as owning one current source. Attachments multiply; governed library records do not.

The form is complete. The data is correct. Both signatures are in place. The approval came from someone with the authority to give it. The file is organised to a standard that deserves praise.

The only problem is that this form was withdrawn in March and replaced with a version that adds a third verification step and a risk classification field. And the file in front of you, complete and organised, contains no third step, because the form that was filled in doesn't know it exists.

Thirty-seven files on the old form. Four months.

And the employee who prepared them broke nothing. She opened the file she has used for two years, saved in her own folder, filled in hundreds of times. Nothing on that screen told her a newer version existed somewhere else.

An obsolete form doesn't announce its obsolescence. It looks exactly the way it always looked.

01The new version really was sent

This is the part that makes the incident hurt more than it should: the circular went out.

On 13 March, an email titled "Account opening form updated — effective immediately" went to four departments with the new version attached. Everything that was supposed to happen, happened.

Then the recipients did what people do with an attachment. Some saved it to Downloads and forgot it. Some saved it to the team folder under a name containing the word "new". Some printed it. Some read only the subject line, because it arrived during close week. Some never opened it.

Two weeks later the organisation held five versions of the form in five places. One was correct. Nothing about the other four said otherwise.

Here is where most organisations make the diagnostic error: they treat the incident as a communication failure and send another circular, more firmly worded.

But the first circular didn't fail. It arrived. The problem is that distribution produces copies, and a copy has no way of knowing it's out of date.

02The difference between publishing a document and owning a single source of it

A document sent as an attachment becomes as many copies as there are recipients. Each is an independent object living its own life on a device you cannot see. You can't amend it, withdraw it, know who is using it, or even count them.

A document published to a central library is a fundamentally different object. It stays as one file in one place, and reaching it means reaching its current state. When the version changes, what everyone opens changes, because there was never a population of copies to begin with.

That's the whole difference, and it fits in one sentence: in the first model you run an awareness campaign after every amendment. In the second, you edit one file.

In Tawasol, files are uploaded to the Library from the dashboard and organised into topics, and employees reach them from the mobile app. What they open is the document as it stands now, not a copy they downloaded in March and can't remember downloading.

03Access is not open, and that's part of the design

One point to clear up before it gets misread: "single source" does not mean "one document every employee can see."

A central library without permissions isn't governance. It's a leak waiting to happen.

So control operates at two levels at once. At the user level, each person is granted granular permissions according to their job role. At the file level, every document in the Library carries a security status that determines whether it can be downloaded at all.

Read the second one carefully, because it separates two categories of document that most organisations treat the same way.

A technical specification a field engineer needs to download and work from at a site with no coverage is one thing. A pricing matrix, a template contract or a sensitive internal policy is something else entirely: to be read, not copied.

Available to view but not to download is a middle state that email attachments can't offer, and that most shared folders are never set up to enforce. And it's precisely the state that applies to most of the documents you actually worry about.

The Library is organised into topics with sub-topics beneath them, so you build a hierarchy that reflects the reality of your documents rather than being forced into one flat level: a "Policies" topic with HR and IT beneath it, for example. Each file gets a description that makes it searchable. It's a small step, but it decides whether people use the library or avoid it and ask a colleague instead.

On top of access control, Tawasol adds screenshot restrictions on supported devices and dynamic watermarking on documents. Neither stops someone photographing the screen with a second phone, but a watermarked photograph gives an investigation somewhere to start.

Reaching the correct version doesn't mean losing control of it. And those are exactly the two things you lose together when you distribute by attachment: control of the content, and control of who holds it.

Before you read on, do this now. Pick one important procedure: a form, a policy, a checklist used daily. Search its name in your shared file space and count the results. Then ask three people in different departments to send you the version they're working from, without telling them why. Compare the dates inside the three files. It takes half an hour, and nobody from outside the organisation. If three identical versions come back, you're in better shape than most. If they don't, you've just measured the size of the problem, and you can repeat the test on any other procedure and get the same result.

04The part that only surfaces in an audit

Everything above is operating cost: rework, thirty-seven files needing correction, a lost week.

The second layer is heavier. In regulated sectors, working from a withdrawn version isn't an administrative slip. It is itself a control failure.

And the question an auditor asks isn't "do you have an updated procedure?" It's far more precise: prove to me that the employee who performed this in May was working from the version in force in May.

That's a question about a system, not a document. A typical shared folder won't answer it, because its modified date describes the file, not who opened it, and few organisations keep or review access logs for everyday forms.

By contrast, when a new version is published as an announcement inside the app, the dashboard shows who viewed it, each with their unit, and compares that against the full audience it was sent to.

That's the difference between "we circulated it" and "here are the names of the people who opened it, and their departments." The first is a statement about effort. The second is a record. Auditors don't audit effort.

And when an entire department hasn't opened the new version, you know on the day rather than four months later. That alone would have made the number of affected files two instead of thirty-seven.

05Three cases with nothing to do with compliance, and an immediate cost

You may not be in a regulated sector. The problem doesn't go away; it surfaces elsewhere.

Pricing. A rep quotes from a price list that predates the last revision and commits to a customer at a price that no longer stands. The organisation now chooses between honouring it and losing the margin, or withdrawing it and losing something more valuable. Both outcomes are the product of a file. Note that this is exactly the kind of document that should be readable and not downloadable: the middle state described above.

Installation and maintenance. A technician works from a superseded specification and performs work that needs a second visit at the company's expense. The cost is booked under travel. The reason is booked nowhere.

What reaches the customer. A deck with the old logo, a contract containing a clause that was removed, a brochure listing a discontinued service. None of it stops operations, and every instance tells the customer something about your internal discipline that you'd rather it didn't.

The common thread is that the cost is never attributed to its cause. It's recorded as rework, an extra visit, an individual error. So it never gets fixed, because nothing unattributed gets a solution assigned to it.

06The document read at the moment there's no time to search

There's a category of document whose problem only appears at the worst possible moment.

The evacuation procedure. Handling instructions for a chemical. Escalation steps when a core system goes down. Safety data for a substance the team works with.

Every organisation has these, most are well written, and most sit somewhere nobody can reach in the first three minutes of an incident: printed in a binder in a locked office, attached to an old email, or on a drive that needs the corporate network and a desktop.

A library on the phone changes exactly that: topics visible on a single screen, and the document opened where the employee is standing.

And an organisation that can show the emergency procedure was in the hands of the people who needed it, at the moment they needed it, stands somewhere entirely different from one that can only show it wrote one.

07A library alone isn't enough

One last point before the replay, and it's what separates a system that works from one that only appears to.

The Library guarantees the correct version exists and is reachable. It doesn't guarantee anyone noticed the change. The employee in our story wasn't looking for a new version, because she had no reason to think there was anything to look for.

So a document update needs three layers together. A library holding the single version. An announcement targeted at the units and groups that use the document, so it reaches them rather than the whole organisation. And a view record showing who has seen it and who hasn't.

The first corrects the content. The second creates the attention. The third exposes the gap before it becomes thirty-seven files.

And when the update requires training rather than notification, a session is created through the Events module with its date, location, description and an agenda of timed sessions, then published to the app calendar. Employees register from their phones, and when approval is switched on for the event, each registration waits until it's confirmed or declined: attendance is something the organisation grants, not something an employee declares. The events list shows each session's status, start and end dates, member count and creator. And for everyone marked as attended, certificates are generated automatically from a template uploaded in advance.

At that point you don't just have an updated document. You have a trace showing how the update reached the people who work from it, and who was admitted to the training.

08Replay 13 March

Now replay that day with all of this in place.

The new version replaces the old one in the Library, in the same topic, so it becomes what anyone opening the form opens. No attachment, no five copies, no file with "new" in its name.

An announcement is published to the units that use the form rather than the entire organisation, so it reaches the people it concerns and doesn't get lost among announcements that don't.

On 15 March you open the dashboard: three departments have read it completely, and one is at half its members. One call to that department's manager, and the gap closes in two days.

In May, when the auditor asks which version was in force and who was working from it, the answer is a screen rather than an argument.

And the thirty-seven files were never filled in on the old form, because the old form was no longer anywhere to be opened.

09What's in your team's hands right now

At this moment, someone in your organisation is opening a file they downloaded at a time they can't recall, and assuming it's correct.

Their assumption is entirely reasonable. Nothing on that screen tells them otherwise, and nothing will, until it surfaces in a review, an audit or a call from a customer.

The employee who prepared thirty-seven files wasn't careless. She was working from the only information available to her, and that information was a file that didn't know it had expired.

Send us the name of one procedure and the departments that use it, and we'll return a written Version Spread Check: where copies of it are likely living, which ones your teams are actually working from, and what it would take to bring them back to one source. It's a document for your compliance or operations lead, not a slide deck. Send it to info@it-blocks.com with "Version Spread Check" in the subject line.