Most brand owners visiting a contract manufacturer leave with an audit report, and most audit reports end with a list of findings. What happens to that list separates a dependable supplier from a risky one, and the difference has a name: CAPA, corrective and preventive action. A factory without findings is rare; a factory that closes findings properly is the one worth keeping. This guide explains how findings, root causes and CAPA records work, and what buyers should ask to see.

Why Audits End in a Findings List

An audit compares what the quality system says against what the factory does, on the day of the visit. Perfect alignment is unusual, so auditors record deviations as findings and grade them by risk: critical issues that affect product safety, major issues that affect system reliability, and minor observations. The grading matters more than the count, because ten minor paperwork notes and one cleaning failure are not the same problem.

Buyers sometimes regard any finding as a red flag, which pushes factories towards polished rather than honest audits. A factory that documents its own deviations and fixes them is usually safer than one with an immaculate file and no CAPA history at all. An empty findings history deserves as much scrutiny as a full one.

How to Read a Finding

A well-written finding states the requirement, the observed gap and the evidence, in that order. Poorly written findings lump several issues into one line, which makes closure impossible to verify. Ask the factory to restate each finding in requirement-gap-evidence form before any corrective work begins.

For each finding, the response has two layers: what will be done about the specific batch or record, and what will change so the same gap cannot recur. Facilities and practices behind a competent quality system are described in the workshop overview.

Root cause: the part most responses skip

The commonest weak response attributes every finding to human error and promises retraining. Retraining is rarely a root cause fix, because if one operator forgot a step, the system that allowed the step to be forgotten is still in place. A root cause that blames a person without explaining the system is an unfinished root cause.

Corrective Versus Preventive Action

Corrective action fixes the instance; preventive action fixes the pathway that produced the instance. Cleaning a shared sieve after finding cross-contamination is corrective; changing the cleaning schedule, adding a verification step and updating the batch record template is preventive. CAPA that stops at correction buys one clean batch; prevention buys the next hundred.

Buyers should ask to see both layers in writing, together with the evidence of completion: revised documents, training records where genuinely relevant, and photographs or records showing the change in place. Manufacturer credentials and quality documentation are summarised on the about us page.

Verification and Closure

A finding is closed when the fix is verified, not when the response is filed. Verification can be a follow-up visit, a document review or a check at the next routine audit. Set a deadline and a verification method for every finding, because undated CAPA lists quietly become decoration.

Trends matter as much as single findings: the same issue recurring across quarters signals a system that patches rather than fixes. Request a simple CAPA log summarising open items, ages and closures, which any competent factory maintains already. A product line managed under this discipline is shown in this soothing set reference.

What Buyers Should Put in Place

Three clauses make CAPA enforceable in a supply agreement: a fixed response window for audit findings, a verification method agreed in advance, and a right to escalate repeat findings to a re-audit or a production hold. Escalation rights turn the audit report from a formality into an instrument.

The wider range is listed in the product range, and project briefs can be submitted through the contact page.

Audit findings are not an insult to a factory; they are the maintenance schedule of its quality system. Read the grading, insist on real root causes, demand both corrective and preventive layers, and verify closure on a date. That discipline, more than any certificate on the wall, is what protects a brand's products in the long run.