---
title: "NCR Non Conformance Report: What It Means and How to Record It in a Dealer Audit"
description: "An NCR non conformance report records one unmet requirement, the evidence and the gap. See what it contains, key terms and how to write dealer findings."
date: "2026-10-31T18:35:03.117Z"
updated: "2026-10-31T18:35:03.134Z"
author: "Naseef Umar"
canonical: "https://autosmarts.co/feeds/blog/ncr-non-conformance-report"
tags: ["ncr non conformance report", "non conformance report", "audit findings", "non conformance", "non conformance meaning", "non conformance report meaning"]
---

# NCR Non Conformance Report: What It Means and How to Record It in a Dealer Audit

An NCR non conformance report is a formal record that an audited site failed to meet a stated requirement, naming the requirement, the evidence observed and the gap, so the failure can be corrected and tracked. Most disputes start with the wording, not the failure. Two auditors can see the same missing record and write it up in two different ways, and the dealer will argue with the vaguer one. This guide sets out the terminology, the fields a report needs and a fixed sentence pattern for findings. It is written for teams running a [field audit programme across a dealer network](https://autosmarts.co/feeds/blog/field-audit-software-dealer-networks).

> **Key Takeaways**
> - An NCR (non-conformance report) records one unmet requirement, the objective evidence for it and the gap, nothing more.
> - A non-conformance report works best when the auditor's finding is kept separate from the dealer's response.
> - Non-conformance, non-compliance and observation are different terms with different consequences, and mixing them invites disputes.
> - A fixed wording pattern (requirement reference, observed evidence, gap) makes audit findings consistent across auditors and easier for a dealer to verify.
> - Audit findings only become useful for a network when they are trended by requirement ID, site and region.

## What is an NCR in auditing?

An **NCR** in auditing is a non-conformance report: the written record of one requirement that an audited site failed to meet. It names the requirement, the objective evidence the auditor saw and the gap between them. ISO 9001 certification is widespread, with about 1.47 million valid certificates worldwide at the end of 2024 ([System Certification](https://systemcertification.co.uk/exciting-time-for-assurance-certification-and-the-future-of-management-systems-standards/), 2025), so most dealers already know the vocabulary.

The scale keeps growing. The 35th ISO Survey reports 1,611,729 ISO 9001 certificates worldwide, an 8.94% increase on the prior year ([Oxebridge](https://www.oxebridge.com/emma/iso-survey-2025-analysis-india-scammers-run-amok/), 2026). The survey is voluntary and reporting changes can inflate country-level jumps, so treat it as a sign of familiarity, not a precise count.

### Where an NCR sits in an audit

An NCR is one step in a short chain:

1. The auditor compares what they see against a written requirement.
2. The auditor records the evidence, such as a photo, record or measurement.
3. If the requirement is not met, the auditor writes the NCR.
4. The dealer responds with containment, root cause and corrective action.
5. The auditor verifies that the fix worked, then closes the NCR.

An **audit finding** is the result of evaluating audit evidence against audit criteria. A finding can show conformity or non-conformity. Only the second kind becomes an NCR. For how OEMs structure the surrounding programme, see [dealer performance audits and how standards are enforced](https://autosmarts.co/feeds/blog/dealer-performance-audits-oem-standards).

## What does a non-conformance report contain?

A non-conformance report contains five things from the auditor: an identifier, the requirement reference, the objective evidence, a one-sentence deficiency and a grade. The dealer's response sits in separate fields. Under ISO 9001:2026, clause 10 now has two subclauses, and 10.2 keeps nonconformity and corrective action ([ThinkReliability](https://thinkreliability.com/iso-9001-2026-root-cause-analysis-corrective-action), 2026).

### The auditor's fields

**Objective evidence** is verifiable information, such as a photo, a record or a measurement, that shows whether a requirement was met. The table below uses an illustrative dealer example. The standard reference is invented for the example.

| Field | What it records | Illustrative dealer example |
|---|---|---|
| Identifier | Site, audit cycle, date, auditor, finding number | Dealer X, Q3 cycle, finding 07 |
| Requirement reference | The exact clause of the standard that applies | Dealer Operating Standards (DOS), workshop section, clause 4.2 (example) |
| Objective evidence | What was seen, measured or checked, with a time-stamped photo | Photo taken at 10:42 of three oil drums stored without drip trays |
| Deficiency | One sentence stating the gap, with no blame and no fix | Drip trays are not in place under stored oil drums |
| Grade | Major or minor, or a numeric scale, per the programme rules | Minor |
| Owner and due date | The Person-In-Charge (PIC) and the deadline | Workshop manager, 14 days |

The reference field is the one most often skipped. Without it, the dealer cannot check the finding against the standard, and that gap is where disputes begin.

### The dealer's response fields

The dealer, not the auditor, fills in the next block:

- **Containment:** what was done immediately to limit the problem.
- **Root cause:** why the requirement was missed.
- **Corrective action:** the change that stops it recurring.
- **Closure evidence:** proof the action was done, such as a dated photo.
- **Effectiveness check:** who verified it worked, and when.

**Corrective action** is action that removes the root cause of a non-conformance so it does not recur. A correction only fixes the instance. ISO 9001 clause 10.2 expects retained information on the nature of the non-conformity, the actions taken and their results, so the response fields are not optional extras. Evidence quality matters here too: [offline-first mobile capture with time stamps](https://autosmarts.co/feeds/blog/mobile-audit-software-dealer-networks) keeps the photo tied to the finding.

## What does non-conformance mean, and how is it different from non-compliance?

Non-conformance means a requirement was not fulfilled, and nonconformity is the same idea in ISO wording. Non-compliance is the usual English term when the requirement is a law or regulation. An observation is a note that does not breach any requirement. Each term triggers a different response, so mixing them confuses the dealer.

**Non-conformance** is a failure to fulfil a specified requirement. The requirement can come from a brand standard, an internal procedure, a customer specification or a quality standard. It describes the failure, not the person.

### A terminology map

| Term | Meaning | Use it when | Triggers corrective action? |
|---|---|---|---|
| Audit finding | Result of comparing evidence to criteria | Describing any audit result, good or bad | Only if it shows non-conformity |
| Non-conformance (nonconformity) | A specified requirement was not fulfilled | A brand or quality standard was breached | Yes |
| Non-compliance | A legal or regulatory requirement was not met | The criteria are statutory, such as safety law | Yes, often with deadlines set by the regulator |
| Observation | A note that breaches no requirement | Something may become a problem later | No |
| Opportunity for improvement | A suggestion beyond the requirement | The site meets the standard but could do better | No |

**Non-compliance** is a failure to meet a legal or regulatory requirement, and ISO 19011 treats it as the English term when criteria are statutory. An **observation** is a note about something that does not breach a requirement. Pick one term per case and keep it consistent across auditors. If a programme grades findings as major or minor, write the grading rules down and train every auditor on them.

### What changed with ISO 9001:2026

ISO 9001:2026 was published on 16 September 2026 and replaces the 2015 edition, with a 36-month transition ([TÜV SÜD](https://www.tuvsud.com/en/knowledge-hub/articles/iso-9001-everything-you-need-to-know-about-the-new-revision), 2026). The ISO technical committee says the new edition "introduces a new Annex A to clarify key terms and the intent of requirements" ([ISO/TC 176](https://committee.iso.org/sites/tc176/home/news/content-left-area/news-and-updates/news.html), 2026). ISO 9000:2026 also updates the vocabulary, so check the current definitions before you publish a glossary. Templates that cite 2015 clause numbers need a review.

## Why does inconsistent wording get audit findings disputed?

Inconsistent wording gets audit findings disputed because a dealer can only accept what it can check. A finding that names no requirement or evidence invites argument, and dealers have a formal route: "your dealership will have the ability to challenge the audit findings and provide additional documentation disputing the same" ([Bass Sox Mercer](https://bsm-law.com/preparing-for-your-next-audit/), 2026).

That route is reasonable. The failure is on the auditor's side when the finding gives the dealer nothing specific to confirm or refute.

### A fixed sentence pattern

Write every finding in the same three parts: **requirement reference, observed evidence, gap**. Then add a grade. The table shows the same finding written two ways. All examples are illustrative.

| Vague wording | Controlled wording | Why the dealer can or cannot dispute it |
|---|---|---|
| Workshop is untidy | DOS clause 4.2: three oil drums stored without drip trays (photo, 10:42). Drip trays are not in place. | The vague version has no clause or evidence to check. The controlled version can be confirmed or rebutted in minutes. |
| Staff not trained | DOS clause 6.1: training records for 2 of 5 technicians were not available on request. | "Not trained" is a judgement. A missing record is a fact. |
| Poor customer handling | DOS clause 2.4: no greeting recorded within the 2-minute standard in 3 of 4 mystery visits. | Without the standard and counts, the dealer reads it as opinion. |

Four rules keep the pattern honest:

1. State the requirement before the observation.
2. Describe what was seen, not what it implies.
3. Leave out blame and leave out the solution.
4. Give the dealer a chance to confirm the evidence is accurate and record any point left unresolved.

### What wording drift looks like across a network

Picture two regional auditors who find the same missing training record. One writes "training not up to standard". The other writes "clause 6.1: records unavailable for 2 of 5 technicians". The first dealer disputes the finding and the second corrects it. When the scores are compared, the network is measuring how auditors write, not how dealers perform.

## How do you analyze retail store audit findings?

To analyze retail store audit findings, group them by requirement ID, count repeats per site, rank requirements and sites with a Pareto view, then ask whether the standard itself is unclear before blaming the store. Only 35% of surveyed manufacturers use a comprehensive cost-of-quality model ([Lumafield](https://www.lumafield.com/cost-of-quality-report), 2026), so most teams trend findings informally.

### Five steps to read a batch of findings

1. **Tag every finding with a requirement ID.** Free text cannot be counted. This is why controlled wording matters first.
2. **Count by requirement.** A Pareto view shows which few requirements produce most failures.
3. **Count by site and region.** Separate a site problem from a network problem.
4. **Check repeats.** The same site failing the same requirement across audit cycles points to a root cause that was never fixed.
5. **Test the standard.** If many sites fail one clause, the clause may be unclear or impractical. Rewrite it before issuing more NCRs.

> **Our data:** AutoSmart's data shows each audit generates 8 to 20 findings, and under the manual process each finding requires 4 to 5 follow-ups including escalations before closure.

At that volume, manual counting is the bottleneck. A weighted scoring logic applied identically to every auditor makes cross-site comparisons fair, and a [drill-down dashboard](https://autosmarts.co/feeds/blog/operational-audit-management-solution) lets management move from network level to a single finding.

### Why the cost of missing findings adds up

In a survey of 210 North American quality decision-makers, 42% estimate quality-related costs exceed 5% of revenue ([Lumafield](https://www.lumafield.com/article/manufacturers-know-quality-costs-money-most-dont-know-how-much), 2026). And 58% believe at least a quarter of their true cost of quality is not measured ([Lumafield](https://www.lumafield.com/cost-of-quality-report), 2026). These are self-reported manufacturer estimates, not dealer data, but they show why consistent records matter.

### Look outside the dealer too

Not every pattern is the dealer's fault. In a separate Lumafield study, 54% of quality leaders said suppliers had downgraded product quality to offset tariff costs ([Lumafield via GlobeNewswire](https://www.globenewswire.com/news-release/2026/05/19/3297572/0/en/Study-Reveals-62-of-Manufacturers-Believe-Tariffs-and-Trade-Barriers-Threaten-Quality.html), 2026). If parts failures cluster across many sites, look upstream before assigning corrective action to each dealer. For a platform view of this work, see [dealer audit systems beyond spreadsheets](https://autosmarts.co/feeds/blog/dealer-audit-system-spreadsheets-to-software).

## What are the limits of the NCR non conformance report approach for dealer audits?

An NCR non conformance report for dealer audits has limits. The approach covers OEM dealer and franchise audits, not product NCRs on a factory line. No credible public data exists on dealer-audit dispute rates or closure times, and ISO 9001:2026, published on 16 September 2026 ([TÜV SÜD](https://www.tuvsud.com/en/knowledge-hub/articles/iso-9001-everything-you-need-to-know-about-the-new-revision), 2026), may reword terms, so check current vocabulary.

Keep these caveats in mind:

- **Not for product NCRs.** Material and part rejection reports need containment and disposition fields that are not covered here.
- **Cost figures are manufacturer estimates.** The Lumafield numbers come from vendor-sponsored research on manufacturers in the US and Canada.
- **Examples are illustrative.** The clause numbers and findings above show a pattern. Use your own standard's references.
- **Legal advice is separate.** Dispute rights and deadlines depend on your agreements and local law.

## Frequently Asked Questions

### What is a non-conformance report?

A non-conformance report is a formal record that a specified requirement was not met. It names the requirement, the objective evidence observed, the gap between them and a grade, and it assigns an owner and due date for correction. It turns a spotted problem into a tracked one that can be closed.

### What is a non-conformance?

A non-conformance is a failure to fulfil a specified requirement, whether the requirement comes from a brand standard, an internal procedure, a customer specification or a quality standard such as ISO 9001. It describes the failure itself, not the person responsible, and it must be backed by evidence an auditor can show.

### What does non-conformance mean?

Non-conformance means a requirement was not fulfilled. In ISO wording the same idea is written as nonconformity. Where the requirement is a law or regulation, non-compliance is the usual English term. In every case, the word only applies when a written requirement exists and evidence shows it was not met.

### How to analyze retail store audit findings?

To analyze retail store audit findings, group them by requirement ID, count repeats per site and per region, rank both with a Pareto view, and test whether the finding wording or the standard itself is unclear. Then trace repeat failures to a root cause before assigning corrective action to the store.

### Can a dealer dispute an audit finding?

Yes. Dealers can usually challenge an audit finding by supplying documentation that contradicts it, and manufacturer programs and local rules often set a deadline for doing so. A finding that cites the requirement, the evidence and the gap is far easier to confirm or correct than a vague one.

## Conclusion

An NCR is only as strong as its wording. Dealers dispute what they cannot check, so give them something checkable.

- Record one requirement, one piece of evidence and one gap per NCR.
- Keep the auditor's finding separate from the dealer's response.
- Use one term per case: non-conformance, non-compliance or observation.
- Tag findings by requirement ID so they can be trended across sites.
- Check any glossary against ISO 9001:2026 and the current vocabulary.

Your next step is to take ten recent findings and rewrite each in the three-part pattern. To see the same pattern run with owned action items and a [paperless audit workflow](https://autosmarts.co/feeds/blog/paperless-audit-software-dealer-networks), Schedule a Free Demo of AutoSmart Audit.