NCREPORT: Nonconformity
A nonconformity or incident report for tracking deviations from policies, procedures, standards, or customer requirements with root cause analysis and corrective actions.
Default definition. This article describes the default
NCREPORT definition shipped with DemandFlow. Administrators can add, remove, rename, or re-type fields, change which ones are required, and alter the layout from the Definitions screen in Settings. Your tenant's current schema may differ from what is shown here. To read the current definition at any time, GET the DEFINITION object whose id matches NCREPORT.Entity properties
| Property | Value |
|---|---|
| Entity code | NCREPORT |
| Display name | Nonconformity |
| Plural | Nonconformities |
| Level | 90020 |
Use cases
NCREPORT is the general-purpose nonconformity and incident register required by ISO 9001 clause 10. 2 and ISO 27001 clause A. 16.
Fields
Nonconformity Details
| Field | Type | Required | Notes |
|---|---|---|---|
name | text | Yes | Title |
category | enum | Yes | Category Valid ids: quality (Quality Nonconformity), security (Security Incident), customerComplaint (Customer Complaint), processDeviation (Process Deviation), regulatory (Regulatory Non-compliance), supplierNC (Supplier Nonconformity), dataBreach (Data Breach), healthSafety (Health & Safety), environmental (Environmental), other (Other). |
severity | enum | Yes | Severity Valid ids: critical (Critical), major (Major), minor (Minor), observation (Observation). |
status | enum | Yes | Status Valid ids: reported (Reported), investigating (Investigating), actionRequired (Action Required), inProgress (In Progress), resolved (Resolved), closed (Closed). |
source | enum | Source / How Detected Valid ids: internalAudit (Internal Audit), externalAudit (External Audit), customerFeedback (Customer Feedback), processMonitoring (Process Monitoring), staffReport (Staff Report), managementReview (Management Review), supplierIssue (Supplier Issue), regulatoryBody (Regulatory Body), other (Other). |
Dates & People
| Field | Type | Required | Notes |
|---|---|---|---|
occurredDate | date | Yes | Date Occurred |
discoveredDate | date | Date Discovered | |
reportedBy | reference → user | Yes | Reported By |
assignedTo | reference → user | Assigned To | |
department | text | Department / Area | |
isoClause | text | ISO Clause Reference |
Description
| Field | Type | Required | Notes |
|---|---|---|---|
description | text (multi-line) | Yes | Description of Nonconformity |
Impact Assessment
| Field | Type | Required | Notes |
|---|---|---|---|
impactAreas | multiselect | Impact Areas | |
businessImpact | text (multi-line) | Business Impact Description | |
estimatedCost | number | Estimated Cost Impact | |
actualCost | number | Actual Cost Impact |
Breach Notification (Data/Security)
| Field | Type | Required | Notes |
|---|---|---|---|
notifiableBreach | boolean | Notifiable breach (ICO/Regulator) | |
notificationDeadline | datetime | 72 hours from discovery for GDPR breaches | |
notificationDate | datetime | Date Notified | |
regulatorReference | text | Regulator Reference |
Root Cause Analysis
| Field | Type | Required | Notes |
|---|---|---|---|
immediateActions | text (multi-line) | What was done immediately to contain the issue | |
rootCause | text (multi-line) | Root Cause | |
contributingFactors | text (multi-line) | Contributing Factors |
Resolution
| Field | Type | Required | Notes |
|---|---|---|---|
resolution | text (multi-line) | Resolution Summary | |
resolvedDate | date | Resolved Date | |
closedDate | date | Closed Date | |
lessonsLearned | text (multi-line) | Lessons Learned |
Documents
| Field | Type | Required | Notes |
|---|---|---|---|
file | file |
Activity. Activity timeline panel attached.
Relationships
- Related lists:
AUDITACTION(formatSUB|NCR).
Creating a Nonconformity via the API
POST /v1/objects
Authorization: Bearer <your-pat>
Content-Type: application/json
{
"entity": "NCREPORT",
"level": 90020,
"comboKey": "SUB:<your-sub-id>|ENT:",
"name": "Example",
"category": "quality",
"severity": "critical",
"status": "reported"
}Listing Nonconformities records
# All nonconformities in your tenant
GET /v1/entities/NCREPORT/SUB