Nonconforming food product process flowchart (food-safety disposition and CAPA)

What the nonconforming food product process flowchart (food-safety disposition and capa) process is

A nonconforming food product is anything found not to meet a specified requirement — raw material, packaging, an in-process check, or a finished lot at release — discovered at whichever inspection point happens to catch it. What happens in the next few minutes decides whether that finding stays a contained quality event or becomes something bigger, which is why the chart below opens on immediate containment: a suspect lot left in the normal flow of stock gets picked, shipped or used by someone who never saw the tag. From there it runs across four lanes and six phases. Production and Quality Control / QC carry the finding, the containment and the logging; Food Safety owns one decision this process cannot make on a generic checklist — whether the finding is a food-safety matter at all; and Quality / QA carries the disposition, the root cause and the CAPA that closes the loop and feeds the facility's own trend record.

This chart is not the food-safety-incident process. The moment 'Does it affect food safety?' resolves yes, containment scale, regulatory notification and any recall decision move to that process and its own authority — this chart's job stops at the escalation, not at the incident itself. It is not a recall either: a recall is what happens once affected product has already left the facility and reached distribution or a customer, while everything drawn here happens with the material still inside the plant, quarantined and under the facility's own control. And it is not a deviation record: a deviation is a departure from a validated process parameter or critical limit caught during production, often before the batch is even finished, while a nonconformance here is a defect already found in material or product, whether raw, in-process or finished. Keeping those boundaries visible is what stops a disposition review turning into an informal recall decision, or a batch that never should have been released turning into a paperwork exercise. Treat the chart as a starting point to adapt under your own HACCP plan, quality manual and the regulations that apply to your facility and product category.

Three decisions carry the process. 'Does it affect food safety?' is the one a generic nonconformance chart does not have, and it has to be asked before disposition, not after, because a finding that crosses into food safety is not something Quality can disposition on its own authority. 'Disposition decision' is where most of the real paperwork sits, because rework, a downgrade, a use-as-is concession and outright rejection each carry a different evidence trail, and collapsing them into one generic 'resolve it' step is what makes a later audit unable to tell which route a given lot actually took. And 'Recurring nonconformance?' is what keeps CAPA proportionate: a genuine root-cause investigation and corrective action for a repeating finding, and a closed record without the CAPA machinery for one that is not, so the CAPA queue does not fill with one-off events that a bit of trend data would have ruled out on its own.

What this flowchart covers

In this template

• Four swimlanes — Production, Quality Control / QC, Food Safety and Quality / QA — across six phases, so "Nonconformance identified at any inspection point" has a named owner all the way through to the trend record, not just a tag and a shrug
• Immediate containment ahead of the paperwork: the material is quarantined before the nonconformance record is even opened, because a suspect lot in normal stock gets picked, shipped or used by someone who never saw the hold label
• A "Does it affect food safety?" decision the generic version of this chart doesn't have, routing anything that crosses the line straight into the food-safety-incident process rather than letting Quality disposition it on its own authority
• A genuine four-way "Disposition decision" — rework, regrade or downgrade, use-as-is, or reject and dispose — each carrying its own evidence trail rather than one generic 'resolved' step
• A "Recurring nonconformance?" check that keeps CAPA for the patterns the trend record actually shows, with a "CAPA effective?" loop back to the corrective action itself rather than a close on the say-so that it was carried out
• Closure on the trend record, not the paperwork: the disposition, the root cause where one was investigated, and the CAPA reference are filed against the lot, which is what the next recurrence is judged against

When to use this template

• You are writing or updating a nonconforming-material procedure for a food or beverage facility and need one picture that shows containment, disposition and CAPA as one flow rather than three separate documents
• Nonconformances are being dispositioned informally at the line, and you need the food-safety triage, the disposition routes and the sign-off authority named and drawn rather than left to whoever is on shift
• An auditor or certification body has asked how the facility controls nonconforming product, and you need a documented answer that shows containment, disposition, root cause and CAPA as one connected process
• You want the boundary between a quality-only nonconformance and a food-safety escalation drawn explicitly, so a finding that should go to the incident process is never dispositioned as a routine quality hold
• Recurring findings on the same line or the same defect are being closed one at a time with no CAPA trigger, and you need the trend check and the CAPA loop made visible in the process itself

How it works

1. Rename the lanes to your roles

   Replace Production, Quality Control / QC, Food Safety and Quality / QA with the functions that genuinely exist at your facility. On a smaller site QC and QA are often the same person wearing two hats, and food-safety authority may sit with a single trained individual rather than a separate department — merge the lanes rather than drawing a handoff that never happens.

2. Set your own food-safety escalation trigger

   Name what tips a finding from a quality disposition review into the food-safety-incident process: which hazards, which product categories, and who makes that call under your own HACCP plan and risk assessment. This is a product- and process-specific judgment, not a severity table this chart can hand you.

3. Write the disposition rules for each route

   State what is eligible for rework, what only qualifies for a downgraded use, what needs a documented concession, and what is never anything but a reject. Name the document each rule comes from — the product spec, the customer's quality agreement, or your own disposition procedure.

4. Name who holds concession authority

   Decide who may sign a use-as-is concession, whether your customer's own acceptance is required before it is valid, and what the record must carry. A concession granted informally by whoever is under production pressure that day is the finding an auditor samples first.

5. Define your own containment and hold method

   Describe the physical hold — label, tag colour, dedicated area or system flag — and who may release it. State it at a level someone new to the floor could follow without asking; a quarantine step that exists only as a habit is the one that gets skipped on a busy shift.

6. Set what 'CAPA effective' means for you

   Decide how a corrective action is verified before its nonconformance is closed — a repeat inspection, a defined monitoring period, or a sample size — and write it down before the first CAPA reaches that decision. 'The action was carried out' is not the same claim as 'the action worked.'

7. Walk it against last quarter's nonconformance log

   Pull a handful of closed records, including one that was dispositioned as use-as-is and one that recurred, and trace them through the chart. Any step people describe that is not drawn, or a concession with no named authority behind it, is the finding worth fixing before you publish.

Frequently asked questions

What are the steps in a nonconforming food product process?

A nonconformance is identified at any inspection point — incoming, in-process or at release — and the material is contained and quarantined immediately, before the paperwork catches up. The finding is logged with its lot code, quantity and how it was found, and the scope is checked against neighbouring lots and shifts. Quality then assesses whether the finding affects food safety: if it does, the process hands off to the food-safety-incident process; if it doesn't, a disposition decision routes the material to rework, a regrade or downgrade, a use-as-is concession, or rejection and disposal, each with its own record. Root cause is investigated, and a recurring finding triggers a CAPA that is checked for effectiveness before it closes; an isolated one closes without it. Either way, the disposition, the cause where investigated, and the CAPA reference are recorded against the lot and rolled into the facility's nonconformance trend.

What is the difference between a nonconformance, a deviation and a recall?

A nonconformance is material or product already found not to meet a specified requirement, discovered at any inspection point, and handled through containment and disposition — this chart. A deviation is a departure from a validated process parameter or critical limit, typically identified during production, often before the batch is even complete, and is usually assessed under the facility's own deviation-management procedure before the batch's disposition is decided. A recall is a safety-driven action taken once affected product has already left the facility and reached distribution or a customer; everything drawn in this chart happens while the material is still inside the plant and under the facility's own control. Terminology and exactly where one process hands off to the next vary by facility and quality system, so treat these as the general shape rather than a fixed boundary.

Who can approve a use-as-is concession?

There is no universal answer; it is set by the facility's own quality system, usually named in the quality manual or the disposition procedure. Common practice is to restrict concession authority to Quality / QA management or a specifically designated food-safety authority, rather than the person who found the nonconformance or the production supervisor under schedule pressure. When the deviated requirement originated with a customer's own specification, many quality agreements also require the customer's documented acceptance before the concession is valid. Whatever the rule, name it before a concession is needed rather than deciding it in the moment, and keep the sign-off with the nonconformance record.

Does this template establish HACCP compliance or satisfy a certification scheme's requirement for controlling nonconforming product?

No template establishes compliance on its own; this chart is an adaptable starting point, not a compliance deliverable. Codex Alimentarius's HACCP principles (CXC 1-1969) call for establishing corrective actions as Principle 5, which is the general international reference point for why a nonconformance needs a defined, documented route rather than an ad hoc call. If your facility is certified to or aligned with ISO 22000:2018, clause 8.9 on control of nonconformities covers this area of a food safety management system, and schemes such as BRCGS and SQF have their own equivalent requirements with their own clause structures and audit expectations. Validate the actual hazards, critical limits and disposition rules against your own HACCP plan, prerequisite programs and whichever scheme and revision apply to your facility — requirements and clause numbering vary by scheme, revision and jurisdiction, and a competent person should review the adaptation before it goes into use.

What records does a nonconforming product process need for an audit?

At a minimum, record the lot code, product and quantity affected, where and how the nonconformance was found, the disposition decision and its rationale, the concession sign-off where one was used, the root cause where one was investigated, and the CAPA reference where CAPA was triggered. If your facility is subject to the FDA's Preventive Controls for Human Food rule, 21 CFR 117.150 sets out corrective-action and correction requirements that this kind of record supports; requirements differ under other jurisdictions and certification schemes, so confirm what your own applies. What an auditor typically samples is not the tag but the trail behind it — a disposition with no documented rationale, or a recurring finding with no CAPA reference, is the gap they are trained to look for.