What Does CAPA Stand For? Corrective and Preventive Action Explained

CAPA stands for corrective and preventive action. In quality management, a CAPA is the documented process a company uses to investigate a quality problem, find its root cause, fix it (corrective action), and stop the same problem or a similar one from happening again (preventive action). For medical device companies, CAPA is a required part of the quality management system under FDA's QMSR and ISO 13485:2016, and it is one of the first things an inspector or auditor asks to see. You will also see the full form written as "corrective action and preventive action"; the two phrasings mean the same thing.

What is CAPA in the medical device industry?

The abbreviation CAPA stands for "corrective action and preventive action". Under FDA's Quality Management System Regulation (QMSR), which replaced the Quality System Regulation on February 2, 2026, every medical device manufacturer must maintain corrective action and preventive action procedures. The requirement comes from ISO 13485:2016 clauses 8.5.2 and 8.5.3, which 21 CFR 820.10 incorporates by reference.

While nonconforming product is often the issue that will trigger a CAPA, there are many different types of CAPAs, and your procedures should help identify CAPA-worthy issues from a variety of sources.

Corrective action vs. preventive action vs. correction

A corrective action eliminates the root cause of a nonconformity that has already happened so it does not recur. A preventive action eliminates the cause of a potential nonconformity before it happens. A correction is different from both: it is the immediate fix to the nonconforming product or situation itself, such as reworking a lot or quarantining stock, and it does not address the cause. FDA's own CAPA training makes the same distinction, and mixing the three up is one of the most common reasons a CAPA record fails an inspection.

In practice, most CAPAs open as a corrective action triggered by a nonconformance, a customer complaint, an audit finding, or a trend in quality data. Preventive actions usually come from risk assessment, from analyzing that same quality data before a failure occurs, or from lessons learned on a similar product. For the decision of which one to open, see our guide on when to take corrective action or preventive action.

What is the CAPA process?

The CAPA process is one of the core processes in every medical device quality system, and the one FDA investigators spend the most time on.

The purpose of the CAPA process is to detect and investigate existing and potential causes of nonconforming product and other quality problems, and then implement and verify corrective or preventive actions. The actions taken should prevent the occurrence or recurrence of the nonconformance or quality issue.

The FDA mandates that medical device companies analyze quality audit reports, work operations, returned products, service records, concessions, processes, and other sources of quality data, and work to identify the root causes of nonconformances or other quality issues that qualify for a CAPA. Once causes are identified, the company must determine how to address the problem, implement the solution, and verify its effectiveness. Every step, from the CAPA request to the effectiveness check, must be documented, because the record is what an inspector reviews.

FREE eBOOK: Click here to download the Ultimate Guide to Corrective and Preventive Action (CAPA) for Medical Devices.

CAPA FAQ

What does CAPA stand for in quality?

In quality management, CAPA stands for corrective and preventive action. It is the quality system process for investigating problems, correcting their root causes, and preventing recurrence. The same acronym is used in medical devices, pharmaceuticals, food safety, and any ISO 9001 or ISO 13485 quality system.

What triggers a CAPA?

Common triggers are nonconforming product, customer complaints, internal or external audit findings, service and returned-product records, and trends in quality data that show a process drifting out of control. Not every nonconformance needs a CAPA; a CAPA is for systemic issues, and a single isolated event is usually handled as a correction. Read more in our post on what should trigger a CAPA.

How many steps are in the CAPA process?

There is no fixed number in the regulation. Most published models use 5 to 7 steps: identify, evaluate risk, investigate, find the root cause, plan actions, implement, and verify effectiveness. Greenlight Guru's recommended CAPA process breaks the same work into 15 steps so that review, approval, and effectiveness verification each get their own record.

Greenlight Guru's eQMS supports an effective and compliant CAPA process

Greenlight Guru's QMS Software effectively supports the CAPA quality process of medical device companies across the world by providing an integrated, high visibility platform that increases transparency throughout organizations and addresses some of the key issues with CAPA execution:

Cross-functional CAPA teams. Who decides when a customer complaint becomes a CAPA? In most companies the quality team holds the keys: they review the quality data and decide when a complaint is elevated. That is rarely the best way on its own.

To really understand why complaints are happening, you need a cross-functional group that includes team members from engineering, manufacturing, supply chain, and other departments (and they'll need to understand what should really trigger a CAPA).

Greenlight Guru's CAPA software helps you manage document sharing across departments, keeping everyone on the same page about the most pressing issues facing your cross-functional CAPA management team.

A well-defined CAPA system. CAPA has been one of the most frequently cited areas in FDA Form 483 observations for more than a decade, and the finding is usually the same: the procedure does not define how a request is assessed and triggered. A clear, documented CAPA system is what keeps that from being your finding.

Standardizing the process across your organization helps ensure that you're not letting recurring quality issues slip through the cracks. Greenlight Guru is the perfect place to safeguard your documented CAPA process where everyone in your organization can access and review it.

CAPA documentation. CAPA generates more records than any other quality process: quality data from processes and work operations, audit reports, customer complaints and service records, meeting notes, CAPA forms, root cause analysis, and action plans. ISO 13485 requires that the results of every corrective and preventive action are documented, and inspectors ask for those records first.

Greenlight Guru's eQMS assigns each CAPA a tracking number, links it to the complaint, nonconformance, or audit finding that triggered it, and carries it through investigation, action plan, and effectiveness verification in one record.

As with all quality processes, establishing and documenting policies and procedures early and often is the best way to stay organized and effectively implement a CAPA process at your medical device company.