Lubinpla

How do you build a single source of truth for product datasheets?

Summary

Ending private datasheet copies takes 5 steps: gather every copy, keep one dated revision per product, retire the rest, share by link, and audit regularly. The method holds when one named owner approves each new revision and the shared library is the only place anyone on the team downloads datasheets from.

  • Under EU REACH Article 31(9), a safety data sheet updated for new hazard or risk management information, an authorisation or a restriction, marked "Revision: (date)", must go to every recipient supplied within the preceding 12 months (Regulation 1907/2006).

  • Under US rule 29 CFR 1910.1200(g)(5), the company preparing a safety data sheet must add significant new hazard information within three months of learning it (OSHA, 2026).

  • Under 29 CFR 1910.1200(g)(6)(i) and (g)(7)(i), US chemical manufacturers, importers and distributors must provide the updated safety data sheet to their customers with the first shipment after the update (OSHA, 2026).

  • Any change to a file will, with very high probability, give it a different hash value, so a duplicate check by file hash flags only identical copies (NIST FIPS 180-4, 2015).

This method covers the technical data sheets, safety data sheets and product brochures a supplier's sales team sends to customers. It does not cover checking a customer-specific document package before dispatch, or validating an electronic document system in a regulated industry such as pharmaceuticals.

Why do sales teams end up keeping their own copies of datasheets?

Sales teams end up keeping their own copies of datasheets because the shared location is slower to reach than the last attachment in their inbox, and nobody tells them when a revision replaces the file they saved. A rep answers a customer in minutes. If finding the current datasheet takes longer than forwarding an old email, the forwarded copy wins, and that copy becomes the starting point for the next send.

Three conditions keep the habit alive:

  • No single owner. When product management, quality and regulatory staff each publish to different folders, a rep cannot tell which folder is authoritative.

  • No revision signal. A file named "Product X TDS final.pdf" says nothing about whether it has been replaced.

  • Edited copies. A rep who translates a page, changes the logo or adds a customer name has made a new document that no central list knows about.

Sales content teams describe the same pattern for slide decks. An industry expert quoted in a sales library case study put it this way: "They open the version on their desktop, but the latest one is really in an email from a colleague" (SlideCamp, 2024). For datasheets the cost is higher than for decks, because safety data sheets carry legal update duties in the EU and the US.

What does a single source of truth for datasheets need to hold?

A single source of truth for datasheets needs to hold one current file per product, document type, language and market, plus the fields that tell a reader whether that file is current. A folder of files without those fields is a shared drive, not a source of truth, because nobody can check a copy against it.

Record these fields for every datasheet:

  • Product identifier exactly as printed on the document, and the grade.

  • Document type: technical data sheet, safety data sheet, certificate template or brochure.

  • Language and market. An EU safety data sheet and a US safety data sheet for the same product are separate documents, not translations of one file.

  • Revision date as printed. Under REACH Article 31(9), a revised safety data sheet is identified as "Revision: (date)" (Regulation 1907/2006).

  • Issuer: the manufacturer, or the team that prepared the document.

  • Owner: the person who approves new revisions for that product line.

  • What it replaced: the superseded revision, kept in an archive area that sales cannot download from.

ISO 15489-1:2016, confirmed in 2021, names metadata for records and records controls among the core concepts of records management (ISO, 2016). For suppliers certified to a quality management system, ISO 9001:2026, the sixth edition published on 16 September 2026, keeps documented information among its support requirements (ISO, 2026). Check the clause wording in your own copy of the standard before you cite it in a procedure.

How do you set up one shared datasheet library?

Setting up one shared datasheet library takes five steps per product line, and the library is ready when every product has exactly one downloadable current revision for each document type, language and market.

  1. Gather every copy. Ask each rep for every datasheet saved on laptop, phone and in email, and pull the files from shared drives, chat channels and the website. Set one cut-off date for submissions.

  2. Group the copies by product, document type, language and market, and read the revision date printed on each. A file name is not evidence of a revision.

  3. Keep one dated revision per group: the latest one issued by the manufacturer or your own regulatory team. Where two copies carry the same date but differ in content, ask the issuer which is valid.

  4. Move every other copy to an archive area that only the owner can open, labeled "superseded" with the date it was replaced.

  5. Share by link. Tell the team that every customer send comes from the library, either as a link or as a file downloaded from the library that day.

Name the owner for each product line before step 3, because the owner settles conflicts between copies and approves every later revision. Without an owner, nobody decides which copy wins, and the library is likely to turn back into a shared drive.

How do you retire old datasheet copies saved in email and on laptops?

You retire old datasheet copies saved in email and on laptops by asking each rep to delete them, removing the reason they were saved, and keeping a record of which copies went to which customers. Copies on personal devices usually cannot be removed centrally, so retirement depends on the rep and on a later check.

Work through three places:

  • Email: search sent mail and saved attachments for each product name plus "TDS", "SDS" or "datasheet", and delete local attachments once the library holds the current revision.

  • Laptops and phones: ask reps to clear datasheets from download folders and any personal "my datasheets" folder.

  • Shared drives and chat channels: replace old files with a pointer to the library entry.

Before anything is deleted, export the list of customers who received each safety data sheet. Sent mail is often the only record of who got which revision, and the update rules depend on knowing the recipients. In the EU, REACH Article 31(9) has the supplier send the revised, dated version to every recipient supplied with the substance or mixture within the preceding 12 months (Regulation 1907/2006). In the US, 29 CFR 1910.1200(g)(6)(i) has chemical manufacturers and importers, and (g)(7)(i) has distributors, provide the updated safety data sheet with the first shipment after the update (OSHA, 2026).

How do you check that the team is using the current datasheet revision?

You check that the team is using the current datasheet revision by comparing a sample of recent customer sends, and each library entry, against five checks: revision date, issuer, superseded copies, private copies and the safety data sheet update duty. Run the check monthly for the first three months after setup, then at every new safety data sheet revision (illustrative interval).

The table below decides whether a datasheet in the shared library can go to a customer as the current revision.

Check

Pass

Fail and what to do

Revision date

Printed date matches the library record and is the latest issued

Library holds an older date: get the latest from the issuer and archive the old file

Issuer

Manufacturer or own regulatory team named on the document

Unknown issuer or a re-badged copy: ask the manufacturer for the original

Superseded copies

Held in the archive only, not downloadable by sales

Old revision still downloadable: move it to the archive with its superseded date

Private copies

Recent sends link to, or match, the library file

A send used a laptop or email copy: replace it and record the customer if the revision differed

Safety data sheet update duty

Revision sent to EU recipients of the preceding 12 months (REACH Article 31, Regulation 1907/2006) and with the first US shipment after the update (OSHA, 29 CFR 1910.1200, 2026)

Recipients missing: build the list from shipment and sent-mail records, then send the revision

The private copies row catches the habit itself. When a recent send used a file that is not in the library, ask where it came from and delete that source copy. To test whether a sent file matches the library file, compare their hash values: any change to a file gives a different hash with very high probability (NIST FIPS 180-4, 2015). A mismatch shows a different file, not necessarily a wrong revision, so read the printed revision date next.

Which datasheet library habits bring private copies back?

Four datasheet library habits bring private copies back after a shared library is set up: slow access, edited copies, silent revisions and reliance on a duplicate warning.

  • Slow access. If reaching the library from a customer site takes a VPN and four folders, reps save a copy. Keep every datasheet one search away by product name.

  • Edited copies. A translated or re-branded datasheet is a new document with its own revision date. Put it in the library under the product owner, or do not send it.

  • Silent revisions. Replacing a file without telling the team leaves them trusting the copy they remember. Announce each new revision with product, document type and date.

  • Reliance on a duplicate warning. Duplicate checks that compare file hashes flag only byte-identical files, because any change gives a different hash with very high probability (NIST FIPS 180-4, 2015). A re-saved PDF or a copy with one edited line uploads as a new file with no warning, so the revision date check in the table above still needs a person.

In Lubinpla, the whole team works from one shared data room, where re-uploading a byte-identical file triggers a duplicate warning and a file that differs at all gets none, and files reach customers through sharing from that same room.

Frequently asked questions

Should sales reps keep any datasheets offline?

Offline copies are reasonable for a site visit without a network connection, if the rep downloads them from the library on the day and deletes them afterwards. The risk is the copy that stays on the laptop and is sent again months later, after a revision.

Does a technical data sheet have the same update rules as a safety data sheet?

No. The REACH and OSHA update duties cited here apply to safety data sheets. A technical data sheet has no equivalent rule in those texts, although a supply contract or quality agreement with a customer may require notice of changes. Keep both in the same library with the same revision fields.

How long should superseded datasheets be kept?

In the EU, each manufacturer, importer, downstream user and distributor must keep the information needed for its REACH duties for at least 10 years after it last supplied or used the substance or mixture (Regulation 1907/2006, Article 36). Superseded safety data sheets that show what each customer received are usually part of that information. Check national rules elsewhere.

Who should own the datasheet library?

One person per product line should own the datasheets, usually from product management, quality or regulatory affairs, with sales as users rather than editors. The owner approves each new revision, archives the old one and announces the change.

Related posts

Turn technical reasoning into better results.

Bring your own case. Lubinpla reasons from your data and ends in a document your customer or manager can act on. Free to start, no card.