Were you able to get an answer?  I have a customer with the same request.  Let me know.  Thanks in advance!

I looked into FDA 21 CFR part 11 (for a pharmaceutical  industry customer) a few months ago and the feedback I received was:

• Nothing exists
• Going through the validation would be VERY expensive (if at all possible).

Hi Kevin,

Thank you for your reply.  I found this article written by another Kevin M :)

https://perfval.com/legacy-erp-validation-project-summary/

I wonder if this could be used as proof or if every company must create their own data validation.

I'm no expert on the requirements but I'd say each implementation is different.  A bank vault may be strong, but it is not secure if you leave the door open or a sticky note with the combination next to the lock.  How any software is deployed / configured / used does matter.