An introduction to the Deviation module
What it is, how it works, and who does what
Table of Contents
- Roles and access
- What is the Deviation module?
- Deviation categories
- Deviation vs Whistleblowing
- Notifications
- Export
- Report a deviation from the Huma app
- FAQ
Roles and access
| Access | Role |
|---|---|
| Report a deviation | All employees — no role required |
| Handle deviation cases | System role: Deviations → Deviation case handling |
| Export deviations | System role: Organization |
💡 There are two ways to grant the Deviation case handling role, either through System settings → Roles, or directly from within the Deviation module under Settings.
What is the Deviation module?
The Deviation module lets employees report incidents, near-misses, safety hazards and other deviations from expected standards, directly in Huma. All employees can report a deviation at any time, from both the web platform and the Huma mobile app.
When a deviation is reported, it becomes a case that is handled by one or more designated case handlers. Case handlers can update the status, add a root cause, assign severity and document the measures taken to prevent the issue from happening again. Reporters can choose to remain anonymous throughout the process. Even when anonymous, they will still receive updates about their case, but their name will not be visible to case handlers or other users.
💡 If you’d like to explore using the Deviation module in your company, contact us at support@hu.ma.
🔗 Read more about how to report a deviation.
🔗 Read more about how to handle a deviation case.
Deviation categories
When reporting a deviation, the reporter selects one of the following predefined categories:
| Category | Description |
|---|---|
| Personal injury | Any incident where an individual experiences physical harm or is at risk of harm in the workplace |
| Material damage | Damage to company property, tools or assets |
| Violation of internal rules | Failure to follow the organisation's established policies, guidelines or procedures |
| Violation of external rules | Breach of laws, regulations or industry standards imposed by external authorities |
| Environment | Incidents that negatively impact the environment |
| Near miss | An event that could have caused harm or damage but was avoided by chance or quick action |
| Data privacy | Breaches or lapses in handling sensitive or personal data |
| Quality deviation | A product or service that does not meet the required standards or expectations |
| Improvement suggestion | Proposals for enhancing processes, workflows or workplace safety |
| Other | Deviations that do not fall under any of the predefined categories |
💡 You cannot create custom categories in the Deviation module. The categories above are predefined and cannot be changed.
Deviation vs Whistleblowing
Both modules allow employees to report concerns, but they serve different purposes:
| Deviation | Whistleblowing | |
|---|---|---|
| Purpose | Report HSE incidents, near-misses, safety hazards and quality issues | Report serious misconduct, violations of laws or ethical guidelines |
| Who can report | Employees only | Anyone — including people outside the organisation |
| Anonymous reporting | Yes | Yes |
🔗 Read more about Whistleblowing in Huma.
Notifications
| Event | Who receives it |
|---|---|
| Deviation reported | All case handlers — or only the assigned case handler if one is set |
| Deviation reported — no case handlers configured | A notification is sent to prompt administrators to set up case handlers |
| Case updated | The reporter and the assigned case handler |
| Case handler assigned | The newly assigned case handler |
| Due date passed without resolution | The assigned case handler |
Export
You can export deviation data for reporting and analysis. Available filters are category, time period, current status and severity.
💡Export requires a system role with Organisation access.
💡 Note that the export reflects current values. If a deviation had Critical severity but was later changed to Medium, it will show as Medium in the export.

Report a deviation from the Huma app
Deviations can also be reported directly from the Huma mobile app, making it easy for employees to log incidents on the spot, for example on a construction site, in a warehouse or at a client location.
Open the Huma app and navigate to "Deviations" in the menu. The reporting flow is the same as on the web platform.
🔗 Read more about the Huma app.

FAQ
Can I report a deviation anonymously?
Yes. When submitting a deviation, you can choose to remain anonymous. Your name will not be visible to case handlers or other users. You will still receive notifications about the status of your case.
Can deviation cases be automatically assigned to specific case handlers based on category?
No. Case handlers must be assigned manually to each case. If no case handler is assigned, all users with the Deviation case handling role will receive notifications about the case.
Can I create my own deviation categories?
No. The categories are predefined by Huma and cannot be changed or added to.
What is the difference between Deviation and Whistleblowing?
Deviation is designed for HSE-related reporting, incidents, near-misses and safety issues. Whistleblowing is for reporting serious misconduct or violations of laws and ethical guidelines, and also allows people outside the organisation to report.