Corrective Action Preventive Action (CAPA) Documentation Guide for Manufacturing

Quick answer: A corrective action preventive action (CAPA) documentation package is the structured set of records — nonconformance description, containment, root cause analysis, action plan, implementation evidence, and effectiveness verification — that demonstrates a quality problem has been permanently resolved or a potential failure has been proactively eliminated. A complete CAPA file satisfies ISO 9001:2015 Clause 10.2, AS9100 Rev D Clause 10.2, and IATF 16949 Clause 10.2 auditor requirements.

A rejected batch comes back from a customer with a single sticky note: "dimensions out of spec — please advise." That note triggers a chain of documentation that, done well, closes the loop in 30 days and prevents a repeat. Done badly, it fills a folder with corrective action forms that satisfy no one and fix nothing. Most quality engineers have seen both outcomes.

The difference is almost always in how the CAPA is documented — not how smart the team is. This guide walks through every CAPA process step in manufacturing, explains how to write a CAPA report that passes audits under ISO 9001, AS9100, and IATF 16949, and provides a corrective action form template structure you can adapt immediately.

What Is at Stake When CAPA Documentation Is Weak

Poorly written CAPAs create real costs beyond the audit finding. Customers lose confidence when the same defect recurs in a follow-up shipment. Regulatory bodies — particularly in aerospace and medical device sectors — can escalate to supplier disqualification if CAPA closure evidence is missing or unconvincing. IATF 16949 Clause 10.2.4 specifically requires that corrective actions be reviewed for effectiveness; without documented evidence, closure is not permitted.

The financial exposure is equally direct. Rework, scrap, and customer-imposed sort costs from a recurring nonconformance can easily exceed the cost of one engineer's time spent writing a thorough CAPA in the first place. The documentation is not a bureaucratic tax — it is the proof that the fix actually worked.

CAPA Process Steps in Manufacturing: The Complete Sequence

A standard manufacturing CAPA follows eight sequential steps. Each step produces a specific output that becomes a section of the final CAPA report. Skipping steps — particularly containment or effectiveness verification — is the single most common audit finding.

1. Identify and describe the nonconformance. Record the part number, revision, drawing requirement, actual measured value, and detection point (incoming, in-process, customer return). Be specific: "Bore diameter measured 25.48 mm against a drawing requirement of 25.40 ± 0.05 mm (ASME Y14.5-2018)" is a valid description. "Dimension out of spec" is not.
2. Contain the nonconformance immediately. Quarantine affected stock, issue a hold tag, and determine the scope of potentially nonconforming product — lot traceability or date-coded batches. Containment must happen before root cause analysis, because the first priority is stopping further escapes to the customer.
3. Define the problem statement formally. Summarise the who, what, when, where, and how much in two to three sentences. A good problem statement makes the root cause investigation self-directing. A vague one allows the team to drift to convenient rather than actual causes.
4. Perform root cause analysis (RCA). Select the method appropriate to complexity (see table below). Document the method used, the logic chain, and the evidence reviewed. The root cause must be a controllable factor, not a symptom.
5. Identify and plan corrective actions. For each root cause, define an action, assign an owner, and set a target completion date. Distinguish between the immediate corrective action (fixing this batch) and the systemic corrective action (changing the process so it cannot recur).
6. Implement corrective actions. Execute the plan, gather objective evidence — updated work instructions, revised control plans, new process parameters, training records, or re-inspection data — and attach it to the CAPA file. Evidence must be dated and traceable.
7. Verify effectiveness. After the corrective action has been in place for a defined production run (typically 30–90 days or a statistically meaningful lot), compare defect rates or process capability before and after. Document the verification result with data, not just a statement that "the action was effective."
8. Close and distribute the CAPA. Obtain sign-off from Quality Manager (and customer if required), update the CAPA register, assess whether any other product families or processes share the same risk, and file all records per the documented retention policy.

Root Cause Analysis Methods: Choosing the Right Tool

The method selected for RCA shapes the quality of the root cause identified. Using 5-Why for a complex multi-factor failure often produces a shallow answer. Using Fault Tree Analysis for a simple process drift wastes time. The table below matches common manufacturing nonconformance types to appropriate RCA methods.

For automotive suppliers under IATF 16949, the 8D format is the de facto expectation from Tier 1 customers. For aerospace under AS9100 Rev D, any documented method is acceptable as long as the logic is traceable and the root cause is verified. The ASQ Root Cause Analysis resource page provides free guidance on selecting and applying each method.

How to Write a CAPA Report: Section-by-Section Structure

A CAPA report is not a narrative essay — it is a structured record with discrete sections that an auditor can check against a requirement list. Below is the corrective action form template structure used across ISO 9001, AS9100, and IATF 16949 environments.

Section 1: CAPA Header

Include CAPA number (sequential, from your register), date opened, initiator name and function, customer or internal source, affected part number and revision, and applicable standard or customer requirement. This section must be traceable to the original nonconformance record — a Customer Complaint Report (CCR), Internal Nonconformance Report (NCR), or audit finding reference number.

Section 2: Problem Description

Write a factual, quantified description. State the drawing requirement (with tolerance and standard — e.g., ISO 2768-m for general tolerances, or a specific GD&T callout per ASME Y14.5-2018), the actual measured value, the quantity affected, and the detection point. Attach the ballooned drawing or the relevant inspection record as supporting evidence. If the nonconformance was found during First Article Inspection, link the FAI report number here — see the related guide on how to generate FAI reports efficiently.

Section 3: Containment Action

Document what was done within 24 hours to stop further shipment of nonconforming product. Include stock quarantine quantity, lot numbers, hold tag reference, and whether any product already at the customer was recalled or sorted. Containment is time-critical; the date and time it was implemented should be on record.

Section 4: Root Cause Analysis

State the method used, show the full analysis (5-Why chain, Fishbone diagram, or 8D D4–D5), and identify the confirmed root cause — distinguishing it clearly from contributing causes. The root cause must be a process, system, or design factor that, if corrected, eliminates the possibility of recurrence. "Operator error" is almost never a sufficient root cause; the deeper question is why the process allowed that error to occur or go undetected.

Section 5: Corrective and Preventive Action Plan

List each action in a table with: action description, owner, target date, and evidence required. Separate immediate corrective actions (this occurrence) from systemic ones (preventing recurrence). Add a third column for preventive actions — similar processes or products where the same risk could exist. This is where the CA and PA in CAPA both appear explicitly.

Section 6: Implementation Evidence

Attach dated, signed copies of: revised work instructions or control plans, updated process FMEA (if RPN changed), training records for affected operators, re-inspection data or updated FAI records. Photographs of physical changes — new fixtures, revised tool settings — are valuable supporting evidence. Everything here must be dated after the root cause was confirmed, not before.

Section 7: Effectiveness Verification

Define the verification method and acceptance criterion before implementation, not after. A worked example: if the corrective action is a new CNC tooling setup to control a bore diameter of 25.40 ± 0.05 mm, the verification criterion might be "zero nonconformances across the next three production lots of 100 pieces each, with Cpk ≥ 1.33 on bore diameter." Record actual results against this criterion and state clearly whether the CAPA is verified effective or requires re-opening.

Section 8: CAPA Closure and Lessons Learned

Quality Manager sign-off, date of closure, and a one-paragraph lessons-learned summary. Identify whether the corrective action or the risk assessment should be shared across similar product lines, suppliers, or processes. Update the CAPA register status to Closed. Retain the complete file per your documented retention period — ISO 9001:2015 Clause 7.5 requires quality records to be retained for a period defined by the organisation, and many aerospace contracts specify a minimum of 10 years.

Common CAPA Mistakes That Fail Audits

These are the errors that appear most consistently in audit nonconformance reports across manufacturing sectors. Recognising them in a CAPA draft before it leaves the quality department saves significant rework.

• Treating the symptom as the root cause. "Machine was not calibrated" is a symptom. The root cause is why the calibration was missed — a broken calibration schedule, no alert system, or a gap in the control plan. Auditors under IATF 16949 and AS9100 are trained to push back on shallow root causes.
• No quantified problem description. A CAPA that reads "customer found parts defective" cannot be verified as closed because the original defect was never clearly defined. Every measurement-related CAPA must cite the drawing requirement, tolerance standard, and actual measured value.
• Containment completed after RCA. Containment and RCA run in parallel in some methodologies, but containment must precede shipment of any further product. A CAPA where the timeline shows shipments continuing for three weeks after the nonconformance was identified will draw immediate scrutiny.
• Effectiveness verification is a statement, not data. Writing "action was effective; no further issues observed" does not satisfy ISO 9001 Clause 10.2.1(f). A process capability index, a defect count against a defined sample, or a customer confirmation letter are the minimum acceptable forms of evidence.
• Preventive action section left blank. In a combined CAPA form, the preventive action field is frequently left empty. Auditors notice. Every CAPA should assess whether related products, processes, or suppliers share the same vulnerability, even if the conclusion is documented as "reviewed — no similar risk identified."
• CAPA register not updated. Individual CAPAs are only half the system. The register — tracking open CAPAs by age, owner, and status — is what management review meetings use to assess systemic quality trends. An up-to-date CAPA register is an explicit requirement of ISO 9001:2015 Clause 9.3.

The ISO 9001:2015 standard (Clause 10.2) and the AS9100 Rev D standard (Clause 10.2) both specify the exact retained records required for CAPA closure. Reviewing these clauses against your CAPA form template annually is good practice.

For process FMEA-based preventive actions, the detailed link between risk priority numbers and CAPA triggers is covered in the related post on completing a Process FMEA for PPAP.

CAPA Timelines: What Auditors Expect

A common question is how quickly each CAPA step must be completed. The table below reflects typical expectations across major quality standards. These are targets, not hard regulatory limits, but deviating significantly without documented justification creates audit risk.

How CadNexa Helps With CAPA-Related Inspection Documentation

When a CAPA originates from a dimensional nonconformance — an out-of-tolerance bore, a positional deviation, a surface finish failure — the corrective action plan almost always requires re-inspection evidence on the revised or reworked part. That means a new ballooned drawing, a fresh inspection record, and often a new FAI report tied to the engineering change.

CadNexa's FAI Report Generator produces first article inspection reports directly from ballooned drawings in AS9102 Rev C, PPAP, ISO, ASME, DIN, JIS, GB, and IS formats, exportable as interactive HTML, PDF, or CSV. When the corrective action involves a part revision or a new supplier, the re-inspection data generated through CadNexa becomes the objective evidence that goes into Section 6 of the CAPA report — implementation evidence. The CSV Export feature lets quality engineers pull the characteristic data directly into their CAPA form or quality management system without manual re-entry, reducing transcription errors in critical records. Generate your re-inspection FAI report at CadNexa to close the documentation loop on your next CAPA.

For quality engineers unfamiliar with how ballooned drawings connect to inspection records, the post on converting a drawing to an inspection sheet covers the full workflow.

Frequently Asked Questions

What is the difference between corrective action and preventive action in CAPA?

Corrective action addresses a nonconformance that has already occurred — fixing the root cause so it does not recur. Preventive action targets a potential failure identified before it happens, eliminating the risk proactively. Both require documented evidence of effectiveness and must be retained as quality records under ISO 9001:2015 Clause 10.2.

How long should a CAPA be kept open before verification?

Most quality management systems set a target of 30–90 days from opening to effectiveness verification, depending on severity. High-severity CAPAs in regulated industries — ISO 13485, AS9100 — are typically expected to show verified effectiveness within 30 days of implementing the action. Anything open beyond 90 days without documented justification is a red flag in an audit.

What are the mandatory sections of a CAPA report in manufacturing?

A complete CAPA report must include: nonconformance description, containment action, root cause analysis (with method documented), corrective or preventive action plan, implementation evidence, effectiveness verification, and closure sign-off. ISO 9001:2015 Clause 10.2 requires all of these to be documented and retained as records. Missing any one section gives an auditor grounds for a major nonconformance.

Which root cause analysis method is best for manufacturing CAPA?

The choice depends on problem complexity. 5-Why is fastest for straightforward process issues. Fishbone (Ishikawa) works well for multi-factor problems involving Man, Machine, Method, Material, Measurement, and Environment. Fault Tree Analysis suits safety-critical components. AIAG's 8D approach is the most complete method and is expected by most automotive Tier 1 customers for customer-escape CAPAs.

Does CAPA documentation link to First Article Inspection records?

Yes. When a CAPA results from a dimensional or process nonconformance found during FAI, the corrective action evidence — revised drawings, updated control plans, re-inspection data — should reference the original FAI report and the new ballooned drawing set. This traceable record loop satisfies AS9100 Rev D Clause 10.2 and gives auditors a clear before-and-after comparison. The FAI report guide explains how to structure those records.

Conclusion

A CAPA is only as strong as its documentation. The eight-step structure — from containment through effectiveness verification — exists because each step answers a specific auditor or customer question. Skipping steps, writing vague root causes, or closing without data are the patterns that turn a single customer complaint into a recurring audit finding.

The corrective action form template structure described here applies directly under ISO 9001:2015, AS9100 Rev D, and IATF 16949. Adapt the section headers to your existing QMS form; the logic sequence is what matters. For the inspection evidence that goes into Section 6, particularly when a revised part needs re-inspection after a corrective action, having a fast path to a compliant FAI report saves significant time.