Deviation Management

Deviation Management provides a centralized system for documenting, tracking, and resolving any departure from approved procedures, specifications, or standards. The module enforces SLA-based deadlines, supports AI-powered classification, and integrates directly with CAPA to drive corrective and preventive actions.

Report a new deviation

1. On the left sidebar, select Deviations.
2. Select Report deviation.
3. Fill in the deviation form: title, description, severity, linked SOP, and detection date.
4. Submit the form.

Report a deviation from a template

1. On the left sidebar, select Deviations.
2. Select Report deviation.
3. In the Form template section at the top of the form, your workspace’s default deviation template is already selected. Choose a different template, or clear the selection to report on the basic form.
4. Complete the form and submit. Fields the template shares with the basic form appear once, not twice.

Filter the deviation register

The register uses a filter panel rather than a row of separate controls, and every filter you apply appears as a chip above the table so you can always see what is being excluded.

1. On the left sidebar, select Deviations.

2. Select Filters. The panel opens with four filters:

   Filter	Values
   Status	Open, Under Review, Pending Approval, Approved, Rejected
   Severity	The severities configured for your workspace
   Overdue	Overdue only — deviations past their due date that are not yet closed
   Reported	A date range, matched against the date the deviation was reported

3. Choose a value. The table updates immediately — there is no Apply step.

4. To remove one filter, select the x on its chip. To remove all of them, select Clear all.

Filters combine, and they are carried in the page address — so a link to a filtered register opens the same filtered register for a colleague.

Note

Overdue is now one filter among four rather than a separate view. Previously, switching to the overdue list silently discarded the status and date filters you had selected, while leaving them looking selected. As a filter it combines with the others: “high-severity, under review, and overdue” is a single question you can now ask.

Save a filtered view

If you find yourself setting the same search text and filters every time you open the register, save them as a named view instead of rebuilding them.

1. On the left sidebar, select Deviations.
2. Set the search text and filters you want to save (for example, Status: Open and Overdue only).
3. Select Views in the toolbar, then select Save current view….
4. Enter a name (for example, “My open criticals”) and select Save.

To reapply a saved view, select Views and choose it from the list — the search text and every filter it was saved with are restored together. To remove one you no longer need, select the trash icon next to it in the list.

Note

Saved views are personal: only you see the views you save, on any device you sign in from. There is currently no way to share a view with the rest of your team.

Note

Saved views are available on the deviations register today. Bringing them to the other registers (CAPA, audit, suppliers, and so on) is tracked as a follow-up.

Read the SLA status summary

1. On the left sidebar, select Deviations.
2. Above the table, review the Deviation SLA Status panel.

It shows three counts across every deviation that is still open or under review:

Count	Meaning
Overdue	Past its due date
Due in 24h	Due within the next 24 hours
On track	Due more than 24 hours from now

Select the Overdue count to apply the Overdue only filter to the table beneath it, and select it again to clear it. Due in 24h and On track are counts only — they are not selectable.

Tip

The summary answers “how much is late” before you have to ask it. The Overdue filter answers “show me which ones.” Use the summary in daily stand-ups and management reviews to see whether there is anything to chase at all.

Note

A deviation with no due date is not counted in any of the three. Set a due date when reporting so the deviation is tracked against the SLA.

View a deviation’s details

1. On the left sidebar, select Deviations.
2. Select the deviation’s row in the table. The whole row is the link — there is no separate View button.

The detail page is organized into sections along a tab bar (which scrolls sideways when it overflows on narrow screens):

• Details — Deviation metadata including title, description, severity, status, reported-by user, linked document/SOP, and detection and reporting dates.
• Root cause — The root cause analysis panel, including AI-generated 5 Whys and Fishbone analyses.
• Corrective actions — The actions recorded against the deviation.
• Linked records — The linked CAPA (or the Create CAPA action when none is linked yet).
• Comments — A collaborative thread for discussion, investigation findings, and resolution coordination.
• History — The full audit trail with creation, status changes, approvals, and rejections displayed chronologically.

Update a deviation’s status

1. On the deviation detail page, select Update Status.
2. In the modal, select the new status: Open, Under Review, Pending Approval, Approved, or Rejected.
3. Optionally enter a resolution description.
4. Select Update.

Caution

When approving a deviation, the system may require you to verify your identity by clicking Get Verification Code and entering the 6-digit code sent to your email. This is a regulatory compliance requirement under 21 CFR Part 11.

Segregation of duties

The person who reported a deviation can never approve it, whatever their role — approval must evidence an independent review. This identity-based rule is enforced on the approve action and on bulk status updates alike.

Bulk-update or delete several deviations at once

1. On the left sidebar, select Deviations.
2. Select the checkbox on each row you want to act on, or the header checkbox to select every row currently loaded.
3. A bulk actions panel appears above the table showing how many rows are selected.
4. Select Update Status to enter a new status for every selected deviation, or Delete Selected to remove them (with a confirmation step).
5. The operation runs as a background job; the panel shows its progress and any per-row errors, then clears the selection once it finishes.

Note

Bulk operations are only available to tenant Admins — the underlying /api/bulk/* endpoints are Admin-gated, so QA_Team, User, and Auditor roles never see the selection checkboxes.

Create a CAPA from a deviation

1. On the deviation detail page, select Create CAPA.
2. The system creates a new CAPA record linked to the deviation.
3. On the left sidebar, select CAPA to define corrective and preventive actions on the new record.

Note

The Create CAPA button is only visible when no CAPA is already linked and you have the capa.create permission.

Export deviation data

1. On the left sidebar, select Deviations.
2. In the filter bar, select Export.
3. Choose the export format and optional status filter.

Severity levels

Level	Description
Low	Minor deviation with negligible impact on product quality or patient safety.
Medium	Moderate deviation requiring investigation but no immediate product risk.
High	Significant deviation with potential impact on product quality.
Critical	Severe deviation requiring immediate attention and escalation.

Permissions

Permission	Description
deviations.read	View deviations and the deviation list.
deviations.approve	Update deviation status, approve, or reject deviations.
deviations.update	Edit any deviation’s supporting details (attachments, linked documents, linked CAPAs, custom form fields) — not only your own.
capa.create	Create a new CAPA from a deviation.

The person who reported a deviation can always edit its supporting details themselves, as a continuation of reporting it. Editing someone else’s deviation needs deviations.update.

Note

The Overdue only filter is available to anyone who can view the register — it needs only the deviations.read permission. Saving, applying, and deleting views needs only deviations.read too — a view is just a personal shortcut onto records you can already see.

Practical example: managing a pH excursion deviation

This walkthrough shows a deviation moving through its full lifecycle in a pharmaceutical manufacturing context.

Scenario: During in-process testing of Batch #2026-0312, a QC analyst detects that the buffer solution pH is 7.8, outside the validated range of 7.2-7.4.

1. Report the deviation

1. On the left sidebar, select Deviations.
2. Select Report deviation.
3. Enter the following:
   • Title: pH excursion in buffer preparation — Batch #2026-0312
   • Description: During in-process pH testing of phosphate buffer solution for Batch #2026-0312, the measured pH was 7.8, exceeding the validated range of 7.2-7.4. The batch was placed on hold immediately. Affected equipment: Buffer vessel BV-04. The excursion was detected during routine IPC at 10:15 AM.
   • Severity Level: High (the AI suggestion may also recommend High based on the out-of-spec result)
   • Related SOP/Document: SOP-BUF-003 Buffer Preparation Procedure
   • Date Detected: 2026-03-07
4. Select Report deviation.

2. Investigate and update status

1. On the deviation detail page, select Update Status.
2. Change the status to Under Review.
3. Use the Root Cause Analysis panel to run a 5 Whys analysis.
4. Add a comment: “Preliminary investigation indicates NaOH titrant was from a newly opened lot (Lot #T-4421). Requesting COA from vendor.”

3. Create a CAPA

1. After confirming the root cause, select Create CAPA on the deviation detail page.
2. Define corrective actions (for example, retest the NaOH titrant lot, retrain operators on titrant verification).
3. Define preventive actions (for example, add incoming titrant verification step to SOP-BUF-003).

4. Approve and close

1. Once the CAPA actions are completed and the effectiveness review is approved, return to the deviation detail page.
2. Select Update Status and change to Pending Approval.
3. A QA manager reviews the full record and changes the status to Approved, providing an electronic signature.

The deviation now has a complete audit trail from detection through resolution, linked to its CAPA record.