By the PharmaTradz BD Team. Published October 2026.
CAPA stands for Corrective and Preventive Action. In pharmaceutical manufacturing, it is the system a company uses to investigate problems, find their root cause, fix that cause so the problem does not come back, and act on risks before they turn into problems at all. Every GMP-compliant manufacturer is expected to run one, and a good CAPA system is one of the clearest signs that a supplier learns from its mistakes rather than repeating them.
For buyers and auditors, the CAPA system is where a factory's real quality culture shows. Certificates tell you a site passed an inspection; CAPA records tell you what happens when something goes wrong on an ordinary Tuesday.
What CAPA means in pharma
The two halves of the term have precise meanings. ICH Q10, the international guideline on the pharmaceutical quality system, borrows its definitions from ISO 9000:2005:
Corrective action is action to eliminate the cause of a detected nonconformity or other undesirable situation. It is taken to prevent recurrence.
Preventive action is action to eliminate the cause of a potential nonconformity or other undesirable potential situation. It is taken to prevent occurrence.
A nonconformity simply means something that did not meet a requirement: a batch outside specification, a procedure not followed, a label printed wrongly. The key word in both definitions is cause. CAPA is not about tidying up the symptom; it is about removing whatever produced it.
Correction vs corrective action vs preventive action
These three are often blurred, and auditors notice when they are. The US FDA's 2006 guidance Quality Systems Approach to Pharmaceutical CGMP Regulations separates them clearly: remedial correction of the identified problem, root cause analysis with corrective action, and preventive action against similar potential problems.
| Term | What it does | Question it answers | Typical example |
|---|---|---|---|
| Correction | Deals with the immediate problem; does not touch the cause | What do we do with the affected product right now? | Quarantine, rework or reject the affected batch; relabel a mislabelled carton |
| Corrective action | Removes the root cause of a problem that has already happened | How do we stop this happening again? | Rewrite an unclear procedure; replace a worn part and add it to the maintenance schedule |
| Preventive action | Removes the cause of a problem that has not happened yet | Where else could this, or something like it, happen? | Apply the same fix to similar machines, products or sites; act on an adverse trend before results go out of limits |
A supplier that answers every problem with a correction alone (reject the batch, move on) will keep rejecting batches. That is the pattern a CAPA system exists to break.
Where CAPAs come from
ICH Q10 says CAPAs should result from the investigation of complaints, product rejections, nonconformances, recalls, deviations, audits, regulatory inspections and findings, and trends from process and product monitoring. In day-to-day terms, the main sources are:
- Deviations: any departure from an approved procedure or instruction
- Out-of-specification (OOS) results and product rejections; see our explainer on the OOS investigation
- Complaints from customers, patients and health professionals
- Recalls and other quality defects found after release
- Audits and regulatory inspections, including internal self-inspections
- Trends from monitoring of process performance and product quality, such as a slowly rising impurity or yield drifting downwards
The last source is where preventive action lives. A result that is still within limits but moving in the wrong direction is a signal to act before anything fails.
How a CAPA system works, step by step
Most companies run CAPA through a written procedure and an electronic or paper log. The steps are broadly the same everywhere:
- Record the problem with a unique number, date, source and description.
- Assess the risk and contain it. Decide how serious it is, which batches or products might be affected, and take any immediate correction.
- Investigate the root cause. ICH Q10 asks for a structured approach, with effort and documentation in proportion to the risk, in line with ICH Q9(R1) on quality risk management.
- Plan the actions, each with an owner and a due date, approved by the quality unit.
- Implement the actions. Changes to processes, equipment, specifications or documents normally go through change control.
- Check effectiveness after a defined period, against criteria set in advance.
- Close the CAPA only when the effectiveness check is passed, and feed the outcome into trending and management review.
Root cause analysis tools
No regulation mandates a specific tool, but a few are used almost everywhere.
5 Whys. You ask "why?" repeatedly, usually about five times, until you reach a cause the company can actually control. It is quick and works well for simple, linear problems. Its weakness is that it follows one chain and can stop too early.
Fishbone (Ishikawa) diagram. Also called a cause-and-effect diagram, it is listed in ICH Q9(R1) among the basic risk management facilitation methods. The problem forms the "head" of the fish, and possible causes are grouped along the "bones", commonly under headings such as people, methods, machines, materials, measurement and environment. It helps a team avoid fixating on the first cause that comes to mind.
For more complex problems, companies also use tools described in ICH Q9(R1) such as failure mode and effects analysis (FMEA) and fault tree analysis.
A word on human error. EU GMP Chapter 1 says that where human error is suspected or identified as the cause, this should be justified, having taken care that process, procedural or system-based errors have not been overlooked. In plain terms: "operator mistake, retrained" is rarely a root cause. The better question is why the system made the mistake easy to make.
A worked example
A distributor reports cracked tablets in several blister strips from one batch.
Correction: the manufacturer quarantines remaining stock of that batch, checks retained samples and replaces the affected packs.
Root cause (5 Whys): Why cracked? The tablet edges chipped in the blister machine. Why? Tablet hardness was at the low end of the range. Why? The compression punches were worn. Why were worn punches in use? Nobody tracked how many tablets each punch set had made. Why? The tooling procedure had no inspection or usage limit. That last answer is the root cause.
Corrective action: replace the punches, and revise the tooling procedure to log usage and inspect punches at set intervals.
Preventive action: apply the same tooling controls to every compression machine on site, and start trending hardness results batch by batch so drift is visible early.
Effectiveness check: after an agreed number of batches, confirm there have been no repeat complaints and that hardness results sit comfortably within the range. If not, the CAPA stays open and the investigation is reopened.
Where CAPA sits in the regulations
| Source | What it says about CAPA |
|---|---|
| ICH Q10 (Step 4, June 2008), section 3.2.2 | CAPA is one of four pharmaceutical quality system elements, alongside process and product quality monitoring, change management and management review. Effectiveness of actions should be evaluated in commercial manufacturing. |
| EU GMP (EudraLex Volume 4) Chapter 1 | Clause 1.4(xiv) requires an appropriate level of root cause analysis, appropriate CAPAs, and monitoring of their effectiveness. The product quality review (1.10) covers the effectiveness of CAPAs taken. |
| EU GMP Chapter 8 | Requires root cause analysis of quality defects and CAPAs whose effectiveness is monitored and assessed. |
| 21 CFR Part 211 (US) | Does not use the word CAPA, but 211.192 requires thorough investigation of unexplained discrepancies, extended to other affected batches, with written conclusions and follow-up. 211.100(b) requires deviations to be recorded and justified, 211.198 covers complaint investigations and 211.180(e) the annual product review. |
| ICH Q7 (APIs) | Audit findings and agreed corrective actions should be completed in a timely and effective manner; the annual product quality review should include the adequacy of corrective actions. |
The FDA's 2022 guidance Investigating Out-of-Specification (OOS) Test Results for Pharmaceutical Production also notes that the duty to investigate implies a need to implement corrective and preventive actions.
What buyers should check in a supplier's CAPA system
When you audit a manufacturer or review its quality documents, these questions get to the heart of the system quickly:
Is there a written CAPA procedure that covers every source above, with the quality unit approving actions and closure?
Can they show you the CAPA log? Look at how many CAPAs are open, how many are overdue, and how often due dates are extended. A long tail of overdue items suggests the system is overloaded or not taken seriously.
Sample a few closed CAPAs. Is the root cause specific and supported by evidence? Do the actions address that cause, or just the symptom? Was an effectiveness check defined in advance and actually done?
Watch for repeats. The same deviation recurring under different numbers means earlier CAPAs did not work.
Count the "human error" conclusions. If most investigations end in retraining, ask what system changes were considered.
Ask about inspection findings. How did the site respond to its last regulatory inspection, and are those CAPAs closed and verified?
Check the link to the product quality review and management review, where CAPA effectiveness should be discussed.
Put it in the quality agreement. Agree that the supplier will notify you of deviations, OOS results and complaints that affect your product, and share the related CAPA, within set timelines. Our guide to verifying a pharmaceutical supplier covers the wider document checks.
How PharmaTradz can help
When you source a product, we can ask manufacturers for their quality system summaries, recent inspection outcomes and CAPA approach before you commit to an audit. Our documentation and quality pack gathers these documents up front, or you can send us an RFQ with your quality requirements. For other terms, see our pharma abbreviations A-Z.
Frequently Asked Questions(FAQs)
What is the full form of CAPA in pharma?
CAPA stands for Corrective and Preventive Action: the system a manufacturer uses to investigate problems, remove their root cause so they do not recur, and act on potential problems before they occur.
What is the difference between corrective action and preventive action?
Corrective action removes the cause of a problem that has already happened, to prevent recurrence. Preventive action removes the cause of a potential problem, to prevent it occurring in the first place.
Is a correction the same as a corrective action?
No. A correction deals with the immediate problem, such as rejecting or reworking an affected batch, while a corrective action fixes the root cause so the problem does not happen again.
Which regulations require a CAPA system?
ICH Q10 names CAPA as a core element of the pharmaceutical quality system, and EU GMP Chapter 1 requires root cause analysis, CAPAs and checks on their effectiveness. US 21 CFR Part 211 does not use the term, but requires investigation of discrepancies, complaints and deviations with documented follow-up.
What is a CAPA effectiveness check?
A planned review, done some time after the actions are complete, that confirms against criteria set in advance that the problem has not come back. If it has, the CAPA stays open and the investigation is revisited.
