Deviation · NCR · OOS · OOT
Deviation management that captures the event when it happens.
Raise a deviation from the station, attach the lot and evidence, and hand it to an investigator, with AI help to classify it that a person reviews.
Captured at the source
Out-of-tolerance reading, missed step, wrong material — V5 opens the deviation at the kiosk, pre-linked to the lot, operator, SOP rev, and equipment.
Impact Assessment from the Genealogy
V5 traces forward from the deviation: which lots used the same material, the same equipment, the same operator.
One chain: deviation → investigation → CAPA
No re-keying, no parallel logs.
What goes wrong today3 common problems
Deviations are written up after the shift
By then, half the context is gone and the affected product is already in the warehouse. The investigation is a guess.
Impact assessment is manual and slow
Which lots were affected? Which customers received them? Which other batches share the same root cause? Spreadsheets can't answer fast enough.
Deviation and CAPA Live in Different Systems
Two logs, two numbering schemes, manual cross-references. The auditor traces one and gets lost.
Everything V5 does here4 capabilities
Captured at the source
Out-of-tolerance reading, missed step, wrong material — V5 opens the deviation at the kiosk, pre-linked to the lot, operator, SOP rev, and equipment.
Impact Assessment from the Genealogy
V5 traces forward from the deviation: which lots used the same material, the same equipment, the same operator. The scope is computed, not guessed.
One chain: deviation → investigation → CAPA
No re-keying, no parallel logs.
21 CFR Part 11 throughout
Every comment, every status change, every signature — tamper-evident audit trail. The investigation record is inspection-ready.
How it works, step by step6 steps
A deviation from kiosk open to CAPA close.
- Operator taps Open Deviation. Kiosk opens pre-linked deviation with lot, step, equipment, SOP, operator.
- Classification by rule. System proposes classification; supervisor confirms or overrides with reason captured.
- Impact Assessment. Genealogy computes affected scope; downstream lots quarantine automatically if rule requires.
- Investigation. Structured root-cause tooling (5-Why, Fishbone, FTA) drives investigation; required fields gated before submission.
- CAPA Chain. If recurrent or systemic, deviation flows into a CAPA with effectiveness verification gate.
- Trending. Live Pareto by line/equipment/operator/material surfaces systemic issues inside the noise.
What to look for when choosing
Deviation management is the upstream of CAPA. If deviations are slow, painful, or hidden, the rest of QMS is downstream of bad data.
Open at the source
Can the operator open a deviation from the kiosk — pre-linked to lot, step, equipment, SOP? One tap at the kiosk opens a pre-linked deviation.
Impact Assessment from Genealogy
Does the system compute affected scope from genealogy automatically? Forward and reverse genealogy compute scope.
Disposition Options Gated by Rule
Are accept/reject/rework/quarantine options enforced by rule — not operator discretion? Disposition options are constrained by deviation type, classification, and product risk.
Classification reproducibility
Does the system produce reproducible classification by rule — not by reviewer mood? Classification is rule-driven and explainable; overrides require reason captured in audit trail.
Single Chain into CAPA
Does an investigation flow into a single CAPA record — not a separate parallel record? Deviation → investigation → CAPA is one record chain.
Trending and Pareto
Are deviations trended live by source, type, line, equipment, operator? Live Pareto across every meaningful dimension.
Right-First-Time Investigation
Does the system gate investigation completeness before submission? Completeness is gated; submissions go to review fully formed.
V5 Compared with Other Approaches
Deviation management compared across the typical stack.
| capability | spreadsheet | legacy Qms | v5 |
|---|---|---|---|
| Time to open deviation | 10-30 minutes | 5-10 minutes | Under 30 seconds |
| Pre-linked context | Hand-keyed | Some lookups | Full — lot/step/equipment/SOP |
| Impact assessment | Manual | Manual + lookup | From genealogy, computed |
| Classification consistency | Variable | Variable | Rule-driven, explainable |
| Chain to CAPA | Re-keyed | Linked | One record chain |
| Trending | Quarterly | Monthly export | Live Pareto |
| Investigation completeness gate | Reviewer catches | Optional | Enforced |
| Type distinction | Often conflated | Variable | Distinct types, shared genealogy |
Regulations this supportsYour quality team stays responsible for compliance
Deviation-relevant regulatory clauses.
21 CFR 211.192
Discrepancies open investigations that gate batch disposition; closure requires signed root cause and effectiveness.
EU GMP Chapter 1 §1.4(xiv)
Significant deviations route to investigation with structured root-cause tooling; closure gated on effectiveness.
ICH Q10 §3.2.1
All three are first-class record types with shared genealogy and one downstream CAPA chain.
Standards Referenced
- 21 CFR 211.192 (production record review — pharma)
- 21 CFR 820.90 (nonconforming product — devices)
- 21 CFR 117.150 (corrective actions — food)
- ICH Q10 (deviation management)
- 21 CFR Part 11 (audit trail & e-signatures)
Common questions4 answers
- What is deviation management software?
- It captures any departure from approved procedures, specifications, or tolerances — opens an investigation, assesses impact across affected lots, and routes corrective actions through CAPA — all on one record with 21 CFR Part 11 audit trails.
- How does V5 capture deviations at the moment?
- Out-of-tolerance readings, missed steps, wrong scans — the kiosk opens the deviation immediately, pre-linked to the lot, operator, SOP revision, and equipment. There is no end-of-shift catch-up step.
- How is impact assessment handled?
- V5 traces forward from the deviation through the genealogy — lots that used the same material, the same equipment, or the same operator. The scope is computed from the data, not estimated.
- Does deviation flow into CAPA automatically?
- Yes — one record, one number, one chain. The deviation becomes the CAPA source with the root cause carried forward. No re-keying, no parallel logs.
