According to Section 2.1 critical deviations should be investigated. All others deviations should be
documented and explained. So the non-conformance would need to be documented and
explained. If the non-conforming material is an API then an investigation should be done.
