DiscrepM – The Project Deviation Management Software

DiscrepM by goPLIMS is a centralised, digital Discrepancy Management platform that provides a systematic, compliant, and fully traceable approach to identifying, investigating, approving, and formally concluding all exceptions, deviations, and non-conformances encountered during project execution or operational phases. Unlike spreadsheet logs or email threads — where deviations go untracked, investigations are undocumented, and approvals are informal or missing entirely — DiscrepM enforces a structured workflow for every discrepancy from the moment it is identified to the moment it is formally concluded and signed off. Integrated digital signature capability enables both pre-approvals and post-approvals to be captured electronically, in a defined sequence, by the correct stakeholders. All observations, investigation details, corrective actions, and supporting attachments are stored centrally against each discrepancy record — creating an audit trail that meets the documentation requirements of GMP-regulated environments and protects the organisation during regulatory inspections.

DiscrepM is built around three core pillars that reflect the complete and compliant lifecycle of any deviation or exception. Identify: the deviation is formally documented at the point of discovery — capturing the non-conformance identified in the relevant test document, the full details leading to the deviation, its assessed impact category, and the list of stakeholders required for pre-approval electronic signatures. This structured capture at the outset prevents the ambiguity and incompleteness that is common when deviations are logged informally. Investigate: once identified, the investigation is conducted and documented within the same platform. All observations are recorded, supporting evidence and attachments are uploaded, corrective actions are listed and followed up, any link to a related change management record is referenced, and the comments and decisions of pre-approvers are documented in full. Conclude: formal conclusion requires verification that all corrective actions are complete, all updates are documented with references, and post-approval electronic signatures are applied in the defined sequence. A complete deviation report — including all attachments, observations, actions, and signatures — is generated at close-out as a permanent compliance record.

Effective deviation management does not end with identifying that something went wrong — it requires a thorough investigation of why it went wrong and what will prevent recurrence. DiscrepM’s investigation stage is specifically structured to capture this. Within each discrepancy record, the investigator documents all observations, attaches relevant evidence — photographs, test data, process records — and records the identified root cause with full supporting detail. Corrective actions are listed directly within the investigation record and assigned to named owners with due dates, creating a directly linked and trackable CAPA trail within the same platform. The status of each corrective action is monitored until closure, and evidence of completion is attached before the deviation can proceed to the Conclude stage. This integration of root cause analysis and corrective action management within a single, governed discrepancy record means that the link between the deviation, its cause, and its resolution is always explicit, traceable, and available for inspection — satisfying one of the most consistently scrutinised areas of GMP compliance.

In pharmaceutical and regulated environments, the formal review and approval of deviations — both before corrective actions are taken and after they are completed — is a regulatory expectation, not an optional governance step. DiscrepM’s integrated digital signature capability allows organisations to define and enforce a structured, sequenced approval chain for every discrepancy record. At the pre-approval stage, the identified stakeholders — which may include the relevant System Owner, Quality Assurance, and functional leads depending on the severity and category of the deviation — review the deviation record and apply their electronic signatures in sequence before any corrective actions commence. This ensures that the investigation approach and proposed actions are formally sanctioned before work begins. At the post-approval stage, once all corrective actions are completed and evidenced, a further sequence of signatures formally confirms that the deviation has been satisfactorily concluded and closed. This two-stage sequenced electronic signature model directly supports 21 CFR Part 11 and EU Annex 11 requirements for electronic records in regulated environments — making DiscrepM a compliant-by-design deviation management solution.

Deviations arise at every phase of a pharmaceutical project and across the operational lifecycle of a facility, and each phase carries specific documentation and governance requirements. During Commissioning, Qualification and Validation, deviations from approved test protocols — such as an instrument reading outside its acceptance criterion, a procedural step performed out of sequence, or a test condition that deviated from the approved specification — must be formally documented, investigated, assessed for impact on the validation study, and approved before the protocol can be completed or retested. DiscrepM provides the structured platform to manage each of these protocol deviations with a complete investigation record, an impact assessment, a root cause conclusion, and a sequenced electronic signature chain — all linked to the relevant test document.

Not every discrepancy carries the same risk to product quality, patient safety, or project schedule — and the depth of investigation and level of approval required should reflect that risk proportionately. DiscrepM allows each deviation to be categorised by impact at the point of identification — for example, Major, or Minor, or using a project-specific or organisation-specific classification framework. This categorisation drives the appropriate investigation depth, the required approval chain, and the timeline for resolution. A minor procedural deviation may require a straightforward corrective action and a two-signature approval, while a critical deviation affecting a validated process or a GMP-controlled material may require a full cross-functional investigation, a formal root cause analysis. In regulatory terms, the ability to demonstrate that deviations are consistently categorised, that the investigation is proportionate to the category, and that approvals are appropriately sequenced is a key indicator of a mature Quality Management System — and DiscrepM makes this visible and demonstrable at every stage.

DiscrepM provides four purpose-built views that give quality teams, project managers, and functional leads real-time visibility of deviation status at the level of detail they require. Summary View presents an at-a-glance overview of all discrepancy records — how many are open, under investigation, awaiting pre-approval, pending corrective action closure, or formally concluded — giving QA Directors and Programme Leads an immediate picture of the organisation’s open deviation landscape. List View provides a fully sortable and filterable table of all discrepancy records,-  ideal for C&Q / quality review meetings, periodic deviation trending, and inspection preparation. Calendar View maps all investigation deadlines and conclusion target dates onto a calendar, making overdue items and approaching deadlines immediately visible and enabling proactive resource allocation. Draft View allows incomplete deviation records to be saved and returned to — ensuring that no deviation identified on-site or during a test execution is lost before it is formally and accurately submitted.

DiscrepM is designed so that every deviation record is inspection-ready at all times — not just when an audit is imminent. Every action taken within a discrepancy record is automatically logged with a timestamp, a user identity, and a status descriptor, creating a continuously updated, tamper-evident audit trail. At any point — whether for an internal QA review, a client audit, or a regulatory inspection by the FDA, EMA, or HPRA — any deviation record can be retrieved in full, showing the complete history from identification through investigation, corrective action, and post-approval conclusion. Customised deviation reports, including all observations, attachments, root cause documentation, action records, and signature sequences, can be generated and exported to PDF for inclusion in inspection binders, regulatory submission packages, or management review presentations. For pharmaceutical organisations where deviation management is one of the most frequently inspected areas of the Quality Management System, DiscrepM provides the confidence that every deviation is documented completely, approved correctly, and retrievable instantly.

DiscrepM is a core module within the goPLIMS Integrated Project Execution Platform and is designed to connect seamlessly with the broader suite to provide complete traceability from deviation identification through investigation, corrective action, and formal conclusion. A deviation that requires a formal change to a process, drawing, or document can be directly referenced and linked to a change record in ChangeM — ensuring that the deviation and its corrective change are traceable to each other in a single audit trail. Corrective actions arising from a deviation can be assigned and tracked to closure in ActionR, with owners, due dates, and completion evidence all managed within the connected platform. Documents referenced or updated as part of a deviation investigation can be version-controlled and managed in EDocM. Where a deviation arises from or generates a punchlist item, PunchM provides the linked physical closure record. For quality functions building a comprehensive digital Quality Management System, DiscrepM is the deviation and exception management backbone — ensuring that no non-conformance exists in isolation, and that every event is connected to its investigation, its resolution, and its documented conclusion within a single, governed, and fully traceable platform.

DiscrepM is a core component of goPLIMS’s broader digitalisation offering — replacing paper forms, manual signature routing, physical filing, and disconnected spreadsheet logs with a fully digital, governed, and accessible workflow. Deviations are raised, investigated, approved, and concluded entirely online. Digital signatures replace wet ink signatures while meeting 21 CFR Part 11 and EU Annex 11 requirements. Supporting evidence is attached and stored digitally against each record. For organisations on a broader digitalisation journey, DiscrepM provides an immediate, high-impact entry point — delivering measurable improvements in speed, traceability, and audit readiness from day one.

Yes — DiscrepM functions as a structured knowledge repository for every deviation an organisation has encountered and resolved. Because every record contains a complete, standardised account — what happened, what root cause was identified, what corrective actions were taken, and how the deviation was concluded — the entire deviation history becomes a searchable, retrievable knowledge base. New team members can search the archive to understand what deviations have occurred on a given system and what corrective measures proved effective, without relying on institutional memory. DiscrepM transforms the deviation register from a reactive compliance obligation into a proactive organisational learning asset.