Do CAPA reports require notarization?

Typically no. Audit Report CAPA documents are internal corrective records and usually do not require notarization unless they will be used as evidence in court or in a transaction that requires notarized acknowledgment.

Can CAPA be signed electronically?

Yes. Electronic signatures that meet ESIGN and UETA requirements are generally valid. Ensure intent, consent, signer attribution, and reliable record retention are documented to establish legal validity.

How long should CAPA records be retained?

Retention varies by industry and regulatory context; common practice is to keep active records for the program term and archived records for at least seven years, with specific rules like IRS or HIPAA retention taking precedence.

What if an owner misses a deadline?

Escalate per your escalation matrix, document the reason for delay in the CAPA record, update timelines, and document interim containment measures to reduce ongoing risk.

How should verification be documented?

Record verification steps, attach supporting evidence (test results, photos, approvals), include verifier name and date, and state whether the action met the predefined success criteria.

Who reviews and closes a CAPA?

A designated verifier or approver (often Quality or Compliance) must confirm effectiveness, sign the verification section, and record closure; retain the signed record in the audit management system.

Audit Report CAPA

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

AUDIT REPORT AND CORRECTIVE & PREVENTIVE ACTION (CAPA) AGREEMENT

This Audit Report and Corrective & Preventive Action Agreement (the Agreement) is entered into by the parties identified below to document audit findings, require corrective and preventive actions, and establish obligations for implementation, verification, and follow-up.

WHEREAS

WHEREAS, Auditor Organization: , conducted an audit of Respondent Organization: on to evaluate compliance with applicable quality requirements and internal procedures.

WHEREAS, the parties agree that identified nonconformities, root causes, and associated corrective and preventive actions shall be documented, implemented, verified, and tracked in accordance with the terms of this Agreement to ensure timely closure and prevention of recurrence.

SCOPE OF WORK

Scope Description

AUDIT FINDINGS

Finding Summary

Finding Severity: Major Minor Observation

ROOT CAUSE ANALYSIS

Root Cause Analysis

CORRECTIVE ACTION PLAN (CAPA)

Corrective Action Description:

Responsible Person / Department Target Completion Date

PREVENTIVE ACTIONS

Preventive Action Plan Responsible Person / Department Target Implementation Date

IMPLEMENTATION, VERIFICATION & EFFECTIVENESS

Implementation Actions Taken / Evidence Verification Method Verifier Name Verification Date Effectiveness Criteria / Follow-up Review

ATTACHMENTS

Attachments included: Audit logs Photos / evidence Supporting documents

PAYMENT TERMS (ADMINISTRATIVE FEE)

To cover administrative costs associated with management and verification of CAPA activities, Respondent shall pay an administrative fee as set forth below.

Administrative Fee Amount Payment Schedule / Terms Late Payment Fee

TERM AND TERMINATION

This Agreement shall commence on and shall remain in force until all required CAPA items are closed and verified, or until , whichever occurs later.

Notice Period for Termination

Either party may terminate this Agreement for material breach if the breaching party fails to cure the breach within the notice period specified above. Termination does not relieve the breaching party of obligations accrued prior to termination, including payment obligations.

CONFIDENTIALITY

Each party shall maintain in confidence all non-public information disclosed in connection with this Agreement, including audit findings, root cause analyses, CAPA plans, and related evidence. Confidential information shall not be used except for performance under this Agreement and shall not be disclosed to third parties except as required by law or with prior written consent of the disclosing party.

GOVERNING LAW

This Agreement shall be governed by and construed in accordance with the laws of the State of without regard to conflict of laws principles.

ENTIRE AGREEMENT

This Agreement, including all attachments and CAPA documents incorporated herein, constitutes the entire agreement between the parties with respect to the subject matter and supersedes all prior agreements, understandings, and communications relating to the audit findings and CAPA obligations. No amendment shall be effective unless in writing and signed by authorized representatives of both parties.

CERTIFICATION

By signing below, each party certifies that the information provided in this Audit Report and CAPA Agreement is complete and accurate to the best of their knowledge; that corrective and preventive actions described herein will be implemented in good faith and in a timely manner; and that each party has the authority to bind the organization it represents.

Auditor Organization:

By:

Date:

Respondent Organization:

By:

Date:

What the Audit Report CAPA Is and when it matters

The Audit Report CAPA (Corrective and Preventive Action) is a formal, structured record that captures audit findings, documents nonconformities, identifies root causes, and assigns corrective and preventive tasks with owners and deadlines. It creates an auditable trail of actions, evidence, and verification steps used to demonstrate remediation and continuous improvement across quality, compliance, safety, and operational programs. A complete Audit Report CAPA includes scope and evidence summaries, a prioritized action plan, verification criteria, and dates for implementation and closure to confirm effectiveness.

Why a clear Audit Report CAPA improves outcomes

A well‑constructed Audit Report CAPA centralizes responsibility, reduces recurrence by documenting root causes, and provides measurable timelines and evidence for closure. It supports regulatory readiness, improves internal controls, and supplies an auditable record that demonstrates the organization tracked, implemented, and verified corrective measures.

Who prepares and who reviews Audit Report CAPA

Quality, compliance, operations, and safety teams typically prepare Audit Report CAPA following internal, supplier, or regulatory audits.

Quality managers and auditors — draft findings, assign actions, and track closure dates.
Compliance officers — verify regulatory alignment and documentation completeness.
Process owners and supervisors — implement corrective actions and report verification results.

External auditors, regulatory inspectors, and executive stakeholders review CAPA summaries to assess risk mitigation and ongoing compliance status.

Primary signatories and approvers

Quality Manager

Oversees CAPA lifecycle, assigns corrective owners, monitors deadlines, and verifies effectiveness with evidence. Maintains the audit trail and reports status to management and internal audit.

Head of Compliance

Validates that actions meet regulatory obligations, approves risk assessments, coordinates with legal or external auditors when required, and ensures record retention policies are followed.

Security and compliance controls to include

Encryption: TLS 1.2/1.3; AES-256 at rest

Audit Trail: Timestamped action history

Access Controls: Role-based permissions

BAA Required: For HIPAA-related records

Two-Factor Auth: MFA for privileged users

Retention Policy: Defined archival schedule

Risks if the Audit Report CAPA is incorrect or incomplete

Delayed Remediation: Extended operational risk

Regulatory Exposure: Potential citations or fines

Repeat Findings: Recurring nonconformities

Contract Risk: Client or supplier disputes

Data Integrity: Missing evidence or logs

Reputational Harm: Stakeholder trust erosion

Common preparation mistakes to avoid

Vague corrective actions without owners or deadlines lead to accountability gaps and prevent verification of effectiveness.
Focusing only on symptoms rather than conducting root cause analysis causes repeated nonconformities and wasted resources.
Failing to attach objective evidence or timestamps undermines the audit trail and complicates external review or dispute resolution.
Using inconsistent version control or storage locations increases the risk of outdated CAPA documents being used for compliance demonstrations.

Essential parts of a professional Audit Report CAPA

A professional Audit Report CAPA balances concise findings with actionable plans, measurable verification, and documented evidence so readers can assess status and effectiveness quickly.

Executive Summary

Brief overview of scope, major findings, and prioritized actions so leadership can quickly assess risk and resource needs without reading full details.

Findings

Clear, numbered descriptions of nonconformities, including where the issue was observed, supporting evidence, and severity or impact ratings for prioritization.

Root Cause

Concise analysis describing underlying causes using methods such as 5 Whys or fishbone, linking causes to corrective actions and preventive strategies.

Corrective Actions

Specific tasks, assigned owners, target dates, required resources, and success criteria to address identified root causes and restore compliance.

Preventive Actions

System‑level changes, controls, or training intended to prevent recurrence, including monitoring metrics and responsible parties for ongoing oversight.

Verification & Metrics

Evidence checklist, verification dates, sampling approaches, and metrics used to confirm action effectiveness and to close the CAPA formally.

Step-by-step: Completing an Audit Report CAPA

Follow these sequential steps to ensure the CAPA is actionable, auditable, and closed with documented verification.

01

Prepare report: Summarize scope and findings concisely.
02

Analyze cause: Conduct root cause analysis with evidence.
03

Assign actions: Set owners, deadlines, and resources.
04

Verify closure: Collect evidence and confirm effectiveness.

Typical workflow for eSubmitting an Audit Report CAPA

An efficient eSubmission workflow reduces friction and preserves an immutable audit trail from creation through closure.

Upload: Add the CAPA document to the system.
Place fields: Insert signature, date, and verification fields.
Send: Notify owners with deadlines and reminders.
Archive: Store final copy with audit trail.

Recommended digital workflow settings

Configure the CAPA workflow to capture approvals, timestamps, and verification evidence automatically to simplify audits and reporting.

Field \| Configuration	Purpose \| Settings applied
Upload Document	PDF/A or DOCX accepted; preserve original filename and metadata.
Assign Roles	Set owner, verifier, and approver roles with deadlines and reminders.
Set Deadlines	Enforce milestones with automated escalation and audit logging.
Enable Audit Trail	Capture IP, timestamp, and action history for each signer.

Technical considerations for eSigning and management

Use a platform that supports secure signatures, audit trails, and common file formats to preserve evidentiary value.

File formats: PDF, DOCX, and XLSX supported
Integrations: Salesforce, NetSuite, Google Workspace
Authentication: Email, SMS, and advanced methods

Ensure the chosen system can export a tamper-evident signed PDF and maintains secure storage to meet retention policies and audit needs.

Typical timing expectations for CAPA items

Timelines depend on severity; below are common planning targets to guide scheduling and tracking of actions.

Initial CAPA issued:

Issue within 30 days of audit completion for most nonconformities.

Interim containment:

Immediate actions addressed within 24–72 hours when safety or compliance is at risk.

Corrective action due:

Medium-severity fixes commonly due within 60–90 days.

Preventive action schedule:

Longer-term process changes planned within 90–180 days.

Verification and closure:

Verification typically completed within 30 days after implementation.

Key milestones from audit to closure

Track these sequential milestones to show progress and maintain an auditable timeline from finding to verified closure.

01

Audit Completion

Document findings and evidence immediately after the audit.

02

CAPA Initiation

Create the CAPA record and assign owners and deadlines.

03

Implementation

Complete corrective and preventive tasks per schedule.

04

Verification & Close

Confirm effectiveness, collect evidence, and formally close the CAPA.

eSignature pricing and capability comparison relevant to CAPA workflows

Compare per-user pricing, feature availability, and envelope limits when selecting an eSignature provider for CAPA and audit workflows.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	7-day free trial	Varies	Varies	Varies	Varies
Bulk Send	Yes	Yes	Yes	Yes	No
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes	Yes	Yes	No	No
Envelope Cap	No cap	100 envelopes/user/year	No cap	No cap	No cap

Real-world examples of Audit Report CAPA usage

Case examples show how teams capture findings, assign actions, and verify outcomes using a standard CAPA structure.

Optica Ventures (COO)

After a supplier audit the team documented nonconformities and owners promptly

Root cause traced to inconsistent work instructions
The CAPA record centralized evidence, accelerated corrective tasks, and provided a concise report for executive review and supplier follow-up.

Fertility Centers of Illinois (Founder)

Clinically related process gaps were identified during an operational audit

Actions included staff training and process changes
The documented CAPA and verification evidence supported regulatory review and reduced repeat findings at the next inspection cycle.

Practical tips for accurate and efficient CAPA completion

Apply consistent formats, validation checks, and automated reminders to reduce errors and accelerate closure of CAPA items.

Use consistent identifiers

Adopt a standard Report ID format and version control so reviewers and auditors can quickly locate supporting evidence and historical records.

Attach objective evidence

Always include photos, test data, or inspection logs rather than relying on narrative descriptions to support findings and closure.

Set measurable criteria

Define clear success criteria and sampling methods for verification so closure is based on objective confirmation rather than opinion.

Automate reminders and escalations

Use automated notifications, escalation paths, and periodic reports to keep owners on schedule and preserve an auditable action history.

Frequently asked questions about Audit Report CAPA

Answers address common points of confusion about completion, signatures, retention, and digital submission of CAPA documents.

Need help? Contact support

Do CAPA reports require notarization?
Typically no. Audit Report CAPA documents are internal corrective records and usually do not require notarization unless they will be used as evidence in court or in a transaction that requires notarized acknowledgment.
Can CAPA be signed electronically?
Yes. Electronic signatures that meet ESIGN and UETA requirements are generally valid. Ensure intent, consent, signer attribution, and reliable record retention are documented to establish legal validity.
How long should CAPA records be retained?
Retention varies by industry and regulatory context; common practice is to keep active records for the program term and archived records for at least seven years, with specific rules like IRS or HIPAA retention taking precedence.
What if an owner misses a deadline?
Escalate per your escalation matrix, document the reason for delay in the CAPA record, update timelines, and document interim containment measures to reduce ongoing risk.
How should verification be documented?
Record verification steps, attach supporting evidence (test results, photos, approvals), include verifier name and date, and state whether the action met the predefined success criteria.
Who reviews and closes a CAPA?
A designated verifier or approver (often Quality or Compliance) must confirm effectiveness, sign the verification section, and record closure; retain the signed record in the audit management system.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now