What is an NCR? The non-conformance report process, explained
Published 7 July 2026 · VariationFlow
A plain-English guide to non-conformance reports for subcontractors: what an NCR is, the full lifecycle from raised to verified, the four dispositions (rework, repair, use-as-is, reject), how concessions work, and what a defensible NCR record looks like at handover.

A Non-Conformance Report, an NCR, is the formal record that a piece of work or a batch of material does not meet the specification, drawing or standard it was supposed to. It is the single most misunderstood document in site quality: treated by many subcontractors as an accusation to be avoided, when in reality a clean, well-run NCR trail is the strongest evidence you can offer that your quality system actually works.
This guide walks through what an NCR is, the lifecycle it should follow, the decisions that have to be made along the way, and how to keep a record that survives an audit or a dispute months later.
What counts as a non-conformance?
A non-conformance is any deviation from the requirements: work that fails an inspection, material delivered outside tolerance, an installation that does not match the approved drawing, a test result outside the acceptance criteria. It does not have to be dramatic. A duct run 40mm outside its permitted position, a concrete pour with a cube result below strength, a fire door with the wrong intumescent strip, each is a non-conformance and each should be captured before it disappears under the next trade.
The point of raising it formally is not blame. It is to make sure the problem is dispositioned by the right people, corrected, and, crucially, verified, so that it cannot come back at handover as a defect nobody can explain.
The NCR lifecycle
A well-run NCR moves through a defined set of states. The wording varies between quality systems, but the sequence is consistent:
- Raised: the non-conformance is recorded, with a unique reference, a description, the location, and evidence (photographs, readings, the failed test).
- In review: the quality manager and, where required, the main contractor or client assess it.
- Disposition agreed: a decision is made on how to resolve it (see the four dispositions below).
- Action in progress: the agreed corrective work is carried out.
- Closed: the corrective action is complete.
- Verified: an independent check confirms the work now conforms. This is the step most paper systems skip, and it is the one that matters most.
An NCR that is "closed" but never verified is not resolved, it is a defect with a paper trail that says "trust me". Verification, with its own evidence, is what turns a closed NCR into a defensible record.
The four dispositions
When an NCR is reviewed, a decision has to be made about what to do with the non-conforming work. There are four standard outcomes:
- Rework: remove and redo the work so it fully conforms. The cleanest outcome, and often the most expensive.
- Repair: correct the work by an agreed method so it becomes fit for purpose, without fully restoring it to the original specification.
- Use-as-is (concession): accept the non-conforming work as it stands, by formal agreement with the party who owns the specification. This requires a concession, not just a shrug.
- Reject: the material or work is scrapped and replaced.
Concessions and use-as-is
A concession is a documented decision by the client or designer to accept something that does not meet the original requirement. It is not the subcontractor’s call to make alone. If you accept non-conforming work "use-as-is" without a signed concession from the party who owns the spec, you have simply hidden a defect, and you own it. Capture who agreed the concession, on what basis, and when.
Root cause and repeat non-conformances
A single NCR resolves one problem. A pattern of NCRs tells you something about your process. Good quality systems record a root cause on each NCR, so that when the same issue appears three times you can see it and fix the cause rather than the symptom. That is also exactly the evidence a main contractor’s auditor looks for: not zero NCRs (which usually means nobody is recording them), but NCRs that are found, understood and prevented from recurring.
What a defensible NCR record looks like
- A unique, sequential reference (NCR-0001, NCR-0002 …) so nothing can be quietly deleted.
- Photographic evidence at the point it was raised, tied to the record, not sitting in someone’s camera roll.
- The disposition, who agreed it, and any concession reference.
- Evidence of the corrective action, and separate evidence of verification.
- A timestamped, tamper-evident history: every state change recorded and unchangeable after the fact.
When the record lives on paper and in phones, assembling this at handover is a scramble, and the gaps are exactly where disputes start. When each NCR is captured digitally as it happens, evidence attached, states logged automatically, the trail is complete by the time the job finishes, and the handover is a formality rather than a fight.
Your own quality record, not a guest login
QA Flow is where your team records its own inspections, NCRs, snags and hold-point sign-offs, on site and even offline. The main contractor signs off by link with no account, and each project exports as one ZIP you keep.
See QA Flow