The Non-Conformity Register is a compliance artefact in its own right. It records every identified gap, deficiency, or inconsistency with a unique identifier, severity classification (critical, major, minor), description, affected AISDP module and Article, required remediation, responsible person, remediation deadline, verification method, and closure date with verification evidence.

The register demonstrates the organisation’s ability to identify, classify, and resolve gaps, which is itself a QMS requirement. A register showing a history of identified and resolved non-conformities is stronger compliance evidence than a register showing no non-conformities, which may suggest inadequate assessment rigour. The register is retained for ten years.

Key outputs

• Per-NC structured documentation with severity, remediation, and closure
• Compliance artefact demonstrating gap management capability
• Ten-year retention
• Module 6 AISDP evidence