CAPA Documentation in Pharmaceutical : Forms, Reports, and Evidence Checklists
A practical guide to documenting pharmaceutical corrective and preventive actions from issue intake through investigation, implementation, effectiveness review, and closure.
What should CAPA Documentation in Pharmaceutical include?
A complete CAPA record should identify the issue and its source, define immediate containment and scope, document evidence and investigation, support the root-cause conclusion, assess risk, list approved actions with owners and due dates, retain implementation evidence, define effectiveness criteria, record review and approval, and explain the closure decision. The record should be traceable, contemporaneous, complete, and controlled throughout its lifecycle.
Why the record matters
Why CAPA Documentation in Pharmaceutical is important in pharmaceutical quality systems
CAPA documentation is the auditable story of how an organization understood a quality problem and addressed its causes. It lets reviewers follow the path from initial signal to final decision without relying on undocumented explanations or personal memory. The depth of documentation should be proportionate to risk, complexity, recurrence, and potential effect on product quality or patient safety.
Show why the action was selected
Records make the rationale visible: what evidence was considered, how the scope was set, why a cause was accepted, and why an action is expected to prevent recurrence.
Enable independent review
A clear file allows QA and management to assess investigation quality, action completion, overdue risks, effectiveness, and whether closure is justified.
Build a usable CAPA file
Recommended structure for a CAPA form and record
A CAPA platform may use one electronic record, linked forms, or a controlled paper packet. Whatever the format, provide a unique identifier and maintain clear links between related evidence and approvals.
| Record section | Recommended content | Review question |
|---|---|---|
| 1. Initiation and classification | CAPA ID, source event, date opened, originator, department, category, priority, and linked deviation, complaint, audit, OOS, or trend reference. | Can a reviewer identify why the CAPA was opened and trace it to the initiating signal? |
| 2. Problem statement and scope | Factual description, requirement or expected condition, actual condition, location, process, product, lot range, time period, and known boundaries. | Is the issue specific, evidence-based, and bounded with a rationale? |
| 3. Immediate correction and containment | Correction, interim controls, affected product or records, notification/escalation, responsible person, timing, and risk rationale. | Were immediate risks controlled and were affected lots or decisions considered? |
| 4. Investigation and evidence | Investigation plan, source records, interviews where relevant, data reviewed, samples or systems examined, findings, limitations, and chronology. | Can another qualified reviewer reproduce the reasoning from retained evidence? |
| 5. Cause analysis and risk assessment | Methods used, contributing factors, evidence supporting or rejecting hypotheses, root cause statement, impact assessment, and residual uncertainty. | Does the conclusion follow from the facts rather than assumption? |
| 6. Action plan and change control | Correction, corrective action, preventive action where applicable, owner, due date, dependencies, training, resources, change-control links, and acceptance criteria. | Do actions address the identified cause and are responsibilities clear? |
| 7. Implementation and effectiveness | Completion evidence, approval, implementation date, effectiveness protocol, sampling/rationale, observation period, results, and escalation if ineffective. | Was effectiveness evaluated against criteria set before the check? |
| 8. Review and closure | Final record review, open-item check, residual risk, linked records, approvers, closure date, and reasoned closure decision. | Is the file complete and closure justified by objective evidence? |
Useful controlled templates
Essential CAPA forms and templates
CAPA initiation and triage form
Captures the signal, factual issue statement, preliminary scope, immediate action, initial risk, owner, classification, and approval to investigate.
Investigation and evidence log
Lists records, data, equipment, personnel, interviews, samples, methods, observations, dates, findings, and links to attachments.
Root-cause and risk assessment
Documents analysis method, tested hypotheses, evidence, cause statement, contributing factors, scope/impact evaluation, and uncertainty.
Action plan and change-control link
Records each action, its relationship to the cause, accountable owner, due date, resources, dependencies, change-control ID, and verification evidence required.
Effectiveness check protocol
Defines success criteria, data source, sample size or rationale, review period, responsible reviewer, and response to failure before the check begins.
CAPA closure and approval checklist
Confirms evidence, actions, effectiveness, linked records, residual risk, open issues, and required approvals are addressed before closure.
Make the investigation readable
How to write a CAPA investigation report
State the issue and requirement
Describe what happened, where and when it was detected, and what requirement or expected condition was not met. Separate verified facts from initial assumptions.
Define scope and impact
Explain how affected products, batches, systems, records, shifts, time periods, and prior events were considered. Show the rationale for included and excluded scope.
Describe evidence and methods
Identify records reviewed, interviews or observations performed, tools used, and any limitations. Reference controlled evidence by unique identifier and attachment number.
Explain analysis and cause
Summarize relevant findings, tested hypotheses, rejected explanations, contributing factors, and the evidence supporting the final cause statement.
Connect actions to causes
Show how each action removes or controls a cause, who owns it, when it is due, and how completion and effectiveness will be verified.
Conclude with a reasoned decision
State the final impact, actions taken, effectiveness results, residual risk, open items, and approval or escalation decision.
Use concise, factual language. A report should not simply repeat the timeline: it should explain how the evidence supports the investigation conclusion and CAPA decision.
Evidence checklist
CAPA evidence checklist by lifecycle stage
Initiation and containment
- Source event or signal and linked record ID
- Clear description of expected versus actual condition
- Scope rationale and affected product/process evaluation
- Containment, correction, notification, and approval evidence
- Initial risk assessment and interim monitoring as needed
Investigation and root cause
- Investigation plan and chronology
- Source records, raw data, audit trails, and attachment index
- Objective observations and documented interviews where used
- Methods, hypotheses, evidence tests, and results
- Cause statement, contributing factors, and uncertainty
Actions and implementation
- Action-to-cause rationale for each action
- Named owner, due date, dependency, and completion record
- Approved change control, revised procedure, or system record
- Training completion and competency evidence where applicable
- Verification that action was implemented as approved
Effectiveness and closure
- Pre-approved measurable effectiveness criteria
- Defined population, sample, observation period, and rationale
- Results, data sources, analysis, and reviewer independence as appropriate
- Assessment of recurrence, unintended effects, and residual risk
- QA review, required approvals, and documented closure rationale
Reliable, traceable, reviewable
CAPA documentation and GMP recordkeeping controls
Traceability
Use unique CAPA and attachment identifiers; retain links to source events, deviations, complaints, audits, laboratory investigations, change controls, and training records.
Data integrity
Preserve the source and history of records. Control access, corrections, electronic signatures, audit trails, versioning, and retention under approved procedures.
Review and approval
Define technical and Quality review responsibilities. Record decisions, dates, required follow-up, and rationale for extensions, reclassification, or closure.
CAPA records are part of the broader cGMP quality system. Follow approved procedures for record creation, retention, data access, and management review.
Practical review aid
CAPA file readiness self-check
Use this short review before routing a CAPA for closure. It prompts discussion and does not replace the approved site checklist or QA decision.
Clear answers to common questions
Frequently asked questions about CAPA documentation
What is CAPA documentation?
It is the controlled record of a CAPA from initiation through scope assessment, investigation, cause analysis, actions, implementation, effectiveness review, approvals, and closure.
What should a CAPA form include?
At minimum, include the issue source and description, scope, containment, risk, investigation and evidence, cause conclusion, actions, owners, due dates, effectiveness plan, review, approvals, and closure decision.
What is the difference between a CAPA form and a CAPA report?
A CAPA form is the controlled template or workflow used to capture required information. A CAPA report summarizes the investigation, evidence, conclusions, actions, impact, and closure rationale in a reviewable narrative.
What evidence should be attached to a CAPA?
Attach or reference source records, raw data, audit trails, investigation notes, risk evaluations, approvals, revised procedures, training records, action completion records, and effectiveness results as relevant.
Does every CAPA require a separate investigation report?
Not necessarily. Follow the site procedure and record complexity. The final CAPA file should still provide sufficient traceable evidence and reasoning for the decisions made.
How should a CAPA root cause be documented?
State the cause clearly and show the evidence and analysis supporting it. Record contributing factors, hypotheses considered, and why plausible alternatives were rejected when relevant.
How do I document CAPA containment?
Record the immediate action, responsible person, date/time, affected scope, product or process disposition considerations, approvals, and rationale for any interim controls.
What is an effectiveness check record?
It documents pre-defined success criteria, data source, sample or monitoring plan, timeframe, results, analysis, reviewer, and decision about whether the action prevented recurrence.
When should effectiveness criteria be set?
Define them in the approved action plan or effectiveness protocol before evaluating outcomes, so the decision is not adjusted to fit the observed result.
How should CAPA attachments be controlled?
Use unique identifiers, an index, page or file references, controlled access, and clear links to the CAPA. Preserve the source and ensure attachments remain readable and retrievable.
How should CAPA due-date extensions be documented?
Follow site procedure and document the reason, current status, risk of delay, interim controls if needed, revised target date, owner, and required approval.
Can training alone be a CAPA?
Training may be appropriate when evidence shows a knowledge or skill gap, but document why training addresses the cause and how implementation and effectiveness will be verified.
How should an ineffective CAPA be documented?
Record the failed criterion or recurrence, preserve relevant evidence, reassess the cause and scope, evaluate interim risk controls, and initiate further investigation or action under procedure.
How does ALCOA+ apply to CAPA records?
It helps ensure CAPA evidence is attributable, legible, contemporaneous, original, accurate, complete, consistent, enduring, and available. See the ALCOA+ guide.
How long should CAPA records be retained?
Use the applicable legal requirements, product and record-specific rules, and approved retention schedule. Ensure linked evidence remains accessible for the required period.
Who should approve CAPA closure?
Approval roles are defined by the quality system and procedure. Quality should ensure that required actions, evidence, effectiveness assessment, residual risk, and records are adequately reviewed.
What does 21 CFR 211.192 require for investigation records?
For covered drug manufacturing records, the regulation requires investigation of specified unexplained discrepancies and failures, with a written record that includes investigation conclusions and follow-up. Consult the current regulation and applicable procedures.
How does cGMP relate to CAPA documentation?
cGMP provides the broader requirements for controlled records, investigations, and quality oversight. CAPA documentation should be maintained within the site's approved quality system; see our cGMP guide.
Where can I read the main CAPA guide?
See the CAPA guide for the wider corrective and preventive action process.
Can this checklist replace the site's SOP?
No. It is an educational aid. Use the current approved CAPA procedure, forms, regulatory requirements, and Quality Unit decisions for actual records.
Primary references
.webp)
