Re: off the shelf software
I typically keep software used by accounting, finance, HR, etc., outside of the scope of the QMS, and do not require that the validation is formally documented.
However, companies always validate their software; I don't know anyone that would purchase a software without checking first if it does what they need, and I recommend they at least summarize the activities performed.