AS9100 Rev D Clauses Explained: A Complete Clause-by-Clause Breakdown (2026)

AS9100 Rev D shares its ten-clause structure with ISO 9001, but aerospace-specific additions are layered inside it — from counterfeit parts prevention to configuration management. This guide breaks down every clause, maps it to ISO 9001, and shows exactly where auditors focus.

Every AS9100 Rev D clause, mapped to ISO 9001 and explained in plain shop-floor language

Affiliate Disclosure: Some links in this article are affiliate links. If you purchase through them, The Standards Navigator may earn a commission at no additional cost to you.


Most AS9100 Nonconformances Trace Back to One Thing: Not Knowing What the Clause Actually Requires

Auditors don’t fail organizations for not trying. They fail them for gaps between what a procedure says and what a clause actually demands — and with AS9100 Rev D clauses, those gaps concentrate in the aerospace-specific additions layered inside the ISO 9001 structure.

AS9100 Rev D is built on the ISO 9001:2015 core structure — ten clauses, the same high-level framework shared across ISO 14001 and ISO 45001. The standard doesn’t present its aerospace requirements as a separate numbered list — its own foreword states that additional aviation, space, and defense requirements are shown in bold, italic text directly inside the ISO 9001 clause structure. Organizations that already run a certified ISO 9001 QMS often assume AS9100 is “the same thing with extra paperwork.” It isn’t. Those embedded additions carry real audit weight, and Clause 8 (Operation) carries the heaviest concentration of them.

This guide walks through all ten AS9100 Rev D clauses, what each one requires, and exactly where the aerospace-specific language sits inside the ISO 9001 framework — being careful throughout to separate what the standard actually requires from what auditors commonly emphasize in practice. Those aren’t always the same thing, and conflating them is one of the more common ways organizations misjudge their own audit readiness.

As an ISO 9001 Internal Auditor, I’ve sat in enough audit rooms to know the pattern: a work instruction gets followed to the letter, but the calibration record behind the measurement it relies on has already lapsed. The paperwork says compliant. The process says otherwise. That’s clause 7.1.5 in real life, not on paper — and it’s the kind of gap AS9100 auditors can uncover when they trace a documented process back to the evidence supporting it.

Before your next audit, run a clause-by-clause gap check against the full standard → Get the free AS9100 Rev D Gap Assessment Checklist and find out exactly which clauses your QMS is weakest on before an auditor does.

In This Guide:

  • What AS9100 Rev D actually adds to the ISO 9001 clause structure
  • A clause-by-clause breakdown of all ten sections
  • The aerospace-specific sub-clauses that deserve the closest audit attention
  • Where AS9100 and ISO 9001 requirements diverge — and where they’re identical
  • FAQ on AS9100 clause numbering, scope, and audit focus areas


Start Here — Top Resources

If you’re working from the standard itself while you read this breakdown, get the official text directly rather than a summary. AS9100 Rev D — ANSI Webstore is the authorized source for the current edition, available in print and PDF, with worldwide shipping and multi-language options for suppliers outside the U.S. Use code CC2026 for 5% off through December 31, 2026.

If your team needs to understand how auditors actually interpret these clauses in practice — not just what they say — BSI Group’s AS9100 Training Courses cover clause-level interpretation and internal auditor certification specific to the aerospace series.


How AS9100 Rev D Clauses Are Structured

AS9100 Rev D uses the same ten-clause Annex SL structure as ISO 9001:2015 — Context, Leadership, Planning, Support, Operation, Performance Evaluation, and Improvement. If you’ve already worked through our ISO 9001 clause breakdown, the numbering will look familiar.

What’s different is what’s been inserted inside that structure. AS9100 doesn’t renumber clauses — it adds sub-clauses at the points where aerospace risk is highest: configuration management, counterfeit parts prevention, product safety, first article inspection, and control of production equipment and tooling. Those additions are catalogued in the standard’s own comparison annex, and they’re the reason a shop that’s ISO 9001 certified still has real implementation work to do before an AS9100 Stage 1 audit.

If you’re not yet sure how the two standards differ at a strategic level, our AS9100 vs ISO 9001 comparison covers the bigger picture. This article goes clause by clause.

AS9100 Rev D clauses structure map showing the 10-clause ISO 9001 framework and aerospace-specific requirements
AS9100 Rev D clauses follow the ISO 9001:2015 10-clause structure with aerospace-specific requirements embedded throughout.

Clause 1–3: Scope, Normative References, Terms and Definitions

These three clauses establish the scope, references, and terminology that auditors use to frame everything that follows. They don’t contain the operational QMS requirements that make up the bulk of an AS9100 audit, but they still matter when determining your certification scope and how requirements are interpreted.

Clause 1 — Scope defines AS9100 as applicable to organizations that design, develop, and/or produce aviation, space, and defense products, and to organizations providing post-delivery activities including maintenance, spares, or repair. Scope statements get checked against your actual certificate scope more often than new clients expect.

Clause 2 — Normative References points to ISO 9000:2015 for foundational terms and definitions.

Clause 3 — Terms and Definitions adds aerospace-specific vocabulary on top of the ISO 9000 base: counterfeit part, critical items, key characteristic, product safety, and special requirements. Auditors expect these terms used correctly and consistently across your documentation — not interchangeably with generic quality language.


Clause 4: Context of the Organization

Clause 4.1 through 4.4 require you to identify internal and external issues affecting your QMS, determine interested parties and their requirements, define QMS scope, and document your processes and their interactions.

AS9100 doesn’t add new sub-clauses here, but auditors interpret “interested parties” more broadly than in general manufacturing — regulatory authorities, certifying agencies, and customer flow-down requirements all count, and your QMS scope statement needs to reflect the specific product lines and processes your certificate covers.


Clause 5: Leadership

Clause 5.1 covers leadership commitment, 5.2 covers the quality policy, and 5.3 covers organizational roles, responsibilities, and authorities.

The concrete AS9100 addition sits in 5.3, and it’s a narrow one: ISO 9001:2015 dropped the requirement for a single named “management representative,” but AS9100 explicitly retained it. Top management must appoint a specific person with the organizational freedom and unrestricted access to top management needed to oversee the QMS. If your quality function is spread across several roles with no one holding this explicit authority and access, that’s a real gap against the standard’s text — not just an auditor preference.


Clause 6: Planning

Clause 6.1 (actions to address risks and opportunities), 6.2 (quality objectives and planning), and 6.3 (planning of changes) are essentially unchanged from the ISO 9001 baseline — there’s no AS9100-specific addition inserted directly into Clause 6 itself. The standard’s own informative annex is explicit about where the aerospace risk emphasis actually lives: a formal operational risk management process is required under Clause 8.1.1, not Clause 6. If you’re looking for where AS9100 gets more demanding about risk, that’s the clause to focus on — Clause 6 planning should still look familiar if you’re coming from ISO 9001.


Clause 7: Support — Where the First Major Additions Appear

Sub-ClauseSource of the DifferenceWhat Actually ChangesWhy It Matters in Practice
7.1.3 InfrastructureSame as ISO 9001 baseline — no AS9100-specific textual addition hereNothing added at this clauseEquipment and tooling validation requirements do show up in AS9100 — but at 8.5.1.1, under Production, not here. Don’t confuse the two when building your clause cross-reference.
7.1.5 Monitoring & Measuring ResourcesAS9100 textual addition (7.1.5.2)Explicit calibration/verification against national or international measurement standards, a documented recall process for equipment due for calibration, and a maintained register (equipment type, unique ID, location, method, frequency, acceptance criteria)This is one of the most detailed sub-clauses in the entire standard. Shops tracking calibration informally, without a maintained register, are working against explicit standard text — not just an auditor’s preference.
7.1.6 Organizational KnowledgeSame as ISO 9001 baseline — no AS9100-specific textual additionNothing added at this clauseThe practical risk (tribal knowledge lost to turnover) is real and worth managing, but it’s not a distinct AS9100 requirement beyond what ISO 9001 already asks for.
7.2 CompetenceSame as ISO 9001 baseline — no AS9100-specific textual additionNothing added at this clauseDon’t confuse this with 7.3 below — product safety and ethics awareness live there, not in the competence clause itself.
7.3 AwarenessAS9100 textual additionTwo items added to the awareness list that don’t appear in the ISO 9001 baseline clause: personnel must be aware of their contribution to product safety and the importance of ethical behaviorTraining records built only around technical/skill competence, with no documented safety or ethics awareness element, are a common and genuine gap against this specific text.
7.5 Documented InformationAS9100 textual addition (narrow)An explicit requirement that when documented information is managed electronically, the organization defines data protection processes covering loss, unauthorized changes, unintended alteration, corruption, and physical damageElectronic document-control systems get checked specifically for this language — general version control isn’t automatically the same thing.

For a full breakdown of what documentation auditors expect to see at each stage, see our guide to AS9100 Documentation Requirements.


Clause 8: Operation — Where Most of the Standard’s Weight Lives

AS9100 Rev D clauses showing Clause 8 operational controls for aerospace manufacturing
AS9100 Rev D Clause 8 connects aerospace-specific controls from operational risk and configuration management through production verification and product release.

Clause 8 is where AS9100 diverges most sharply from the ISO 9001 baseline, with the greatest concentration of aerospace-specific operational requirements.

8.1 Operational Planning and Control gains four aerospace-specific sub-clauses:

  • 8.1.1 Operational Risk Management — requires a documented process for managing risk in operations, including risk of nonconformity affecting product safety
  • 8.1.2 Configuration Management — required for organizations where product configuration must be controlled and traceable through its lifecycle
  • 8.1.3 Product Safety — requires planning, implementation, and control of processes for product safety across the product lifecycle
  • 8.1.4 Prevention of Counterfeit Parts — requires a documented approach to preventing counterfeit or suspect counterfeit parts from entering the supply chain

If you haven’t yet mapped your counterfeit parts controls against clause 8.1.4 specifically, our AS9100 Counterfeit Parts Standards guide covers what auditors expect to see documented.

8.3 Design and Development carries three specific AS9100 additions worth knowing by number: 8.3.4.1 requires detailed test planning for verification and validation activities (test plans identifying the item, resources, objectives, conditions, and acceptance criteria); 8.3.5(e) requires design outputs to specify critical items, including key characteristics, and the specific actions to be taken for them; and 8.3.6 requires customer notification before implementing design changes that affect customer requirements, plus control of those changes in accordance with your configuration management process. Organizations that design as well as build have real implementation work here beyond the ISO 9001 baseline.

8.4 Control of Externally Provided Processes, Products, and Services requires flow-down of applicable requirements (including customer and regulatory requirements, and the duty to prevent counterfeit parts) to sub-tier suppliers, and requires verification that purchased product conforms before use in production or delivery. AS9100 also explicitly requires a maintained register of external providers that includes their approval status (approved, conditional, or disapproved) and the scope of the approval — a specific recordkeeping requirement, not just a general expectation. Supplier evaluation and monitoring get audited far more closely under AS9100 than under a standard ISO 9001 certificate.

8.5 Production and Service Provision is where the bulk of aerospace-specific sub-clauses sit — and where getting the exact sub-clause numbers right matters, because they’re easy to mix up:

  • 8.5.1.1 Control of Equipment, Tools, and Software Programs — equipment, tools, and software used to automate, control, monitor, or measure production processes must be validated prior to final release for production and maintained — a common audit gap on CNC-heavy shop floors
  • 8.5.1.2 Validation and Control of Special Processes — for processes where the output can’t be verified by subsequent inspection, requires defined approval criteria, facility/equipment approval, and personnel qualification
  • 8.5.1.3 Production Process Verification — this is the clause that requires production process verification, including first article inspection where applicable: a representative item from the first production run of a new or changed part must verify that production processes, documentation, and tooling meet requirements, repeated when changes invalidate the original results. Covered in detail in our First Article Inspection guide
  • 8.5.2 Identification and Traceability — extended traceability and configuration-identification requirements covered in our AS9100 Traceability Requirements breakdown
  • 8.5.4 Preservation — includes explicit requirements around foreign object debris (FOD) prevention, detailed in our FOD Control Standards guide
  • 8.5.5 Post-Delivery Activities — support and servicing requirements after product leaves your facility, including in-service data collection and technical documentation control

8.6 Release of Products and Services requires verifying that product and service requirements have been met before release proceeds, retaining documented evidence of conformity and traceability to the person authorizing release, and ensuring all documentation required to accompany the product is present at delivery. It’s a closely related idea to first article inspection, but it’s a separate requirement, not a restatement of 8.5.1.3.

8.7 Control of Nonconforming Outputs goes considerably further than the general ISO 9001 requirement. AS9100 requires that dispositions of “use-as-is” or repair be approved by an authorized representative of the design organization (or someone with delegated design authority) — and by the customer, if the nonconformity departs from contract requirements. Product dispositioned for scrap must be conspicuously and permanently marked, or positively controlled, until it’s physically rendered unusable. Counterfeit or suspect counterfeit parts must be controlled to prevent reentry into the supply chain. And nonconformities affecting delivered product require timely reporting to the customer and other relevant interested parties.


Clause 9: Performance Evaluation

Clause 9.1 (monitoring, measurement, analysis, evaluation), 9.2 (internal audit), and 9.3 (management review) follow the ISO 9001 structure without major aerospace-specific insertions — but auditors expect internal audit programs to demonstrate coverage of the AS9100-specific clauses above, not just the ISO 9001 baseline. A shop running internal audits against a generic ISO 9001 checklist and calling it AS9100-compliant can leave significant aerospace-specific requirements untested before Stage 2.

For a full walkthrough of building an internal audit program that actually covers these clauses, see our AS9100 Internal Audit Process guide.


Clause 10: Improvement

Clause 10.1 (general), 10.2 (nonconformity and corrective action), and 10.3 (continual improvement) mirror ISO 9001 directly. The practical difference is scale and documentation rigor: corrective action records tied to product safety or counterfeit parts findings tend to get far closer scrutiny during surveillance audits than a routine process nonconformance.


Objection: “Isn’t This Just ISO 9001 With More Paperwork?”

This is the single most common misconception I run into with shops transitioning from ISO 9001 to AS9100. It’s not more paperwork — it’s more scope. Requirements like 8.1.4 (counterfeit parts prevention), 5.3’s retained management representative, and 7.3’s product safety and ethics awareness items don’t appear in ISO 9001 in this form. They require new processes, not just new forms. Organizations that treat AS9100 as an ISO 9001 add-on typically underestimate the implementation timeline by months — see our AS9100 Implementation Timeline guide for a realistic planning window.

AS9100 Rev D clauses audit evidence trail showing the connection between requirements, procedures, implementation, and objective records
AS9100 Rev D clauses are verified through the complete audit evidence trail from requirements and procedures to shop-floor implementation and objective records.

Quick Clause Audit Checklist — AS9100-Specific Additions

[ ] Documented counterfeit parts prevention process (8.1.4)
[ ] Configuration management process, if applicable to your product line (8.1.2)
[ ] Product safety planning documented across the product lifecycle (8.1.3)
[ ] A named management representative with unrestricted access to topmanagement (5.3)
[ ] Calibration register maintained per 7.1.5.2 — equipment type, ID, location, method, frequency, acceptance criteria
[ ] First article inspection records for new or changed part numbers (8.5.1.3)
[ ] Equipment, tooling, and software validated before release to production (8.5.1.1)
[ ] FOD prevention program documented and implemented (8.5.4)
[ ] Ethics and product safety awareness included in training records (7.3)


FAQ

Does AS9100 Rev D use the same clause numbers as ISO 9001:2015?

Yes. AS9100 Rev D uses the identical ten-clause Annex SL structure as ISO 9001:2015, with aerospace-specific sub-clauses inserted at relevant points rather than renumbered separately.

How many additional requirements does AS9100 add to ISO 9001?

The standard itself doesn’t present the additions as a numbered list — AS9100’s own foreword states that aerospace-specific requirements, definitions, and notes are shown in bold, italic text directly inside the ISO 9001:2015 clause structure. They’re concentrated most heavily in Clause 8 (Operation), which carries more distinct aerospace sub-clauses than any other section of the standard.

Which clauses generate the most AS9100 audit findings?

We don’t have access to statistically representative registrar-wide nonconformance data, so we won’t put a ranking on this. What we can say from direct clause-level audit experience is that 7.1.5 (calibration and measurement traceability), 8.1.4 (counterfeit parts prevention), and 8.5.1.1 (control of production equipment, tools, and software) are recurring finding areas in practice — worth checking closely even if you can’t quantify exactly how common each one is industry-wide.

Do I need a separate quality manual for AS9100 versus ISO 9001?

No — most organizations integrate AS9100-specific requirements into a single QMS manual structured around the same ten clauses, rather than maintaining two parallel systems.

Is clause 8.1.2 (Configuration Management) mandatory for every AS9100 organization?

It applies where product configuration control is relevant to your scope — typically design-and-build organizations and complex assemblies. A pure build-to-print machine shop may have limited applicability, though this should be confirmed with your registrar, not assumed.

Does AS9100 replace ISO 9001 certification?

No. AS9100 certification incorporates and is audited alongside ISO 9001 requirements — it is not a separate parallel certificate. Organizations certified to AS9100 do not need a separate ISO 9001 certificate for the same scope.

Will IA9100 change this clause structure?

AS9100 Rev D remains the current, active standard as of this writing, and everything in this breakdown reflects it. The IAQG has published a roadmap targeting IA9100 for 2026, and its current public material confirms the revision is still in progress rather than finalized. At least one industry newsletter has separately reported a possible slip to mid-2027 — we’re noting that as a secondary, less-authoritative data point rather than treating it as equally confirmed. What’s consistently reported across sources is that IA9100 is expected to preserve the core clause structure while adding requirements in areas like information security, digital assurance, and supplier controls — not a ground-up rebuild. We’ll update this breakdown once a publication date and the actual clause text are confirmed, rather than guess at either now.

here can I verify a supplier’s AS9100 certification status by clause scope?

The IAQG OASIS Database is the authoritative source for verifying a supplier’s certification status, scope, and certifying body.


📥 Free Resources


Not Sure What to Do Next?

🔹 Still researching how AS9100 differs from what you already know? Start with AS9100 vs ISO 9001 for the strategic-level comparison before diving deeper into clause specifics.

🔹 Ready to start closing clause gaps before your next audit? Run the free AS9100 Rev D Gap Assessment Checklist against your current QMS this week.

🔹 Need the official standard to reference clause language directly? Get the current edition from ANSI Webstore — code CC2026 takes 5% off through the end of 2026.

🔹 Want your team trained on how auditors actually interpret these clauses? BSI Group’s AS9100 training courses cover clause-level interpretation for internal teams.

The Standards Navigator will update this breakdown when IA9100 is formally published and its transition requirements are established. Until then, this guide reflects the current AS9100 Rev D requirements.


Get Ahead of the Clause Gaps Auditors Actually Find

Shops can miss AS9100 audit gaps on the clauses they assumed were “basically the same as ISO 9001” — counterfeit parts prevention, production equipment control, FOD, ethics awareness — requirements that don’t appear in ISO 9001 in this form.

Organizations that treat these as genuinely new requirements build the process controls early and walk into Stage 2 with evidence already in hand. Organizations that treat AS9100 as an ISO 9001 add-on end up building those same controls under audit pressure, on a clock they don’t control.

The Standards Navigator tracks every AS9100 clause, sub-clause, and upcoming IA9100 change so you don’t have to reverse-engineer them from a nonconformance report.

👉 Get updates on AS9100 and the IA9100 transition
👉 Be first to access new aerospace gap assessment tools and clause references

Subscribe

* indicates required

Industrial Compliance. Clearly Explained.

BSI AS9100 Training Review: Is It Worth It for Small Manufacturers in 2026?

AS9100 doesn’t require a specific training course — it requires competent auditors. This review breaks down what BSI’s AS9100 training actually covers, its pros and cons against other providers, realistic cost ranges, and a five-scenario framework for deciding whether formal training is the most efficient path for your shop.

AS9100 doesn’t require you to buy a training course — it requires competent people. Here’s how to figure out the most efficient path to get there

Affiliate Disclosure: Some links in this article are affiliate links. If you purchase through them, The Standards Navigator may earn a commission at no additional cost to you.


AS9100 Doesn’t Require a Training Course. It Requires Competent People.

Nearly every training provider will tell you their course is essential. Here’s what the standard itself actually requires: it doesn’t name BSI, ISOQAR, or anyone else. It requires that your internal auditors be competent — genuinely capable of planning, conducting, and reporting an effective audit against AS9100.

That leaves you with a real question, not a marketing one: is formal BSI AS9100 training the most efficient way for your shop to establish that competence, or is there a faster, cheaper path that gets you there just as well?

This isn’t a promotional writeup for BSI’s course catalog. It’s a decision framework for figuring out which path fits where your shop actually stands — and what that path costs.

From the Floor: I’ve sat in on the decision more than once — which employees get sent to formal standards training and which get handed the standard and told to figure it out. The pattern I’ve seen holds regardless of which standard is involved: the people who come back and actually change how audits get run aren’t the ones who sat through the most polished course. They’re the ones who used the class time to work through their own facility’s real nonconformances instead of generic case studies. That’s the filter I’d apply before signing off on any training spend — including this one.

If you haven’t run a gap assessment against AS9100 Rev D yet, that’s the decision that should come before a training decision — not after. Operations managers who evaluate training before understanding their QMS gaps may be solving the wrong problem first.

👉 Before you spend a dime on training, find out exactly where your QMS stands. Run the AS9100 Rev D Gap Assessment Checklist — a 74-item, 12-section clause-by-clause tool that shows you precisely which sections need work before you decide who needs training and in what format.

In This Guide:

  • What BSI’s AS9100 training actually covers, course by course
  • The honest pros and cons of BSI’s training — and how it compares to other providers
  • What it costs — and how BSI’s pricing model actually works
  • A decision framework: which competence-building path fits your shop
  • A cost comparison: formal training vs. experience-based routes vs. skipping it
  • What training actually establishes, and where it doesn’t help
  • FAQ: certificates, recertification, and whether training is technically required


👉 Start Here: Where to Look Into AS9100 Training

If your shop is evaluating formal AS9100 training, BSI Group is one of the established providers worth comparing against — its AS9100 training portfolio covers requirements training, internal auditor training, and lead auditor training. Review BSI’s AS9100 training course options.

If you haven’t bought a current copy of the standard yet, check whether the current course fee includes a copy of the applicable standard. If it doesn’t, budget separately for your copy before class starts. Purchase the current AS9100/SAE standard through ANSI Webstore.


What BSI’s AS9100 Training Actually Covers

BSI’s AS9100 training isn’t a single course — it’s a track, and small manufacturers tend to only need the first one or two levels of it.

The entry-level course covers the AS9100 Rev D requirements themselves: what each clause demands, how the aerospace-specific additions build on the ISO 9001 foundation, and how the standard maps to your existing documentation. This is the right starting point if your team understands ISO 9001 already but has never worked with the aerospace-specific clauses — configuration management, first article inspection, counterfeit parts controls, and the rest.

The internal auditor course goes a step further. It’s built around conducting audits against AS9100 and AS9101, and it typically runs as a multi-day, instructor-led format — in person or live online — with practical audit exercises rather than lecture alone. This is the course that matters most if you’re planning to run your own internal audit program instead of outsourcing every internal audit to a consultant.

Beyond that sits lead auditor training, which is usually more than a small shop needs unless someone is being developed to lead aerospace audits or pursue auditing professionally.

If you are new to AS9100 and still building your quality management system → start with the requirements-level course, not internal auditor training. You can’t audit effectively against clauses your team doesn’t understand yet.

BSI AS9100 training path showing requirements, internal auditor, and lead auditor training levels
BSI AS9100 training offers different levels of learning, from understanding AS9100 requirements to developing internal and lead auditor skills.

Pros and Cons of BSI AS9100 Training

What BSI Does Well

  • Established global training and certification organization with a broad aerospace training portfolio
  • Full AS9100 course catalog spanning requirements, internal auditor, and lead auditor levels
  • Both live online and in-person delivery formats available
  • Course completion certificates from an established training provider
  • In-house delivery available for training multiple employees at once

Potential Drawbacks

  • Pricing isn’t published upfront for most course types — expect to go through a quote request
  • May run higher than some smaller or regional training providers, depending on format and group size
  • Course value depends heavily on where your team already stands — a requirements-level course won’t add much for an already-experienced auditor, and an internal auditor course won’t help a team with no prior standard familiarity
  • Small shops adding AS9100 to an existing ISO 9001 program may only need the requirements-level course, not BSI’s full auditor track

How BSI Compares to Other AS9100 Training Providers

BSI isn’t the only organization offering AS9100 training. Smaller, regional, and boutique training providers also run AS9100 requirements and internal auditor courses, and sometimes at a lower per-seat cost than a multi-national provider like BSI. A provider with an established aerospace training portfolio may offer a familiarity advantage, but don’t assume the provider’s name substitutes for demonstrated auditor competence.

If you’re comparing multiple providers, weigh course content and instructor experience against price alone. An aerospace-specific internal auditor course taught by an instructor with real AS9100 audit experience is worth more than a generic quality-auditing course relabeled for aerospace. Ask any provider — BSI included — how their course specifically addresses the AS9100-unique clauses (configuration management, counterfeit parts, first article inspection) rather than treating AS9100 as ISO 9001 with an extra chapter.


What It Costs — and How BSI’s Pricing Model Works

This is the part that frustrates small manufacturers the most: BSI’s course pages typically direct buyers toward public-course enrollment for individual seats and a separate quote process for private or in-house training, so pricing can vary by course, delivery format, and group size rather than sitting on a single published price list.

That’s not unusual for the industry, and it also means published cost figures age fast. A rough, non-exhaustive comparison across a few established AS9100 training providers suggests 2-day internal auditor courses can run anywhere from roughly $1,000 to $1,600+ per seat depending on provider, country, and delivery format — treat this as an illustrative snapshot rather than a sourced market rate, and confirm current pricing directly with the provider before budgeting.

A practical consideration: shops training more than one or two people are generally better served requesting an in-house quote for the whole quality team rather than booking individual seats one at a time — it’s worth comparing against per-seat pricing, and it often means the session gets built around your actual facility’s documentation instead of a generic case study.

Two things push the real cost higher than the course fee alone:

  • Check whether the standard itself is included. Course fees don’t always cover it — if it isn’t, budget separately for your copy.
  • Travel and time away from the floor add up fast for in-person formats — live online delivery can be a practical choice for smaller shops trying to control the total cost.

If your facility hasn’t priced out the full certification path yet — training, gap assessment, documentation, audit fees — that’s worth doing before training in isolation. See the full breakdown of what AS9100 certification actually costs.


Formal Training vs. Alternatives: A Straight Comparison

ApproachWhat You GetBest ForTypical Cost Range
BSI formal training (requirements or internal auditor course)Structured instruction, practical audit exercises, recognized course certificateShops building an internal audit program from scratch or preparing for first-time AS9100 certificationVaries by provider, format, country, and group size — confirm current pricing directly before budgeting
Experience-based route (auditor learns on the job, under an existing certified internal auditor)Practical familiarity, no course feeShops that already have at least one AS9100-experienced auditor on staff to mentor othersTime cost only — no direct training fee
Documentation kit + self-study (no formal course)Templates and structure, but does not by itself establish internal-auditor competenceShops still in the early documentation-build phase, not yet auditingCost of the documentation kit only

If you are preparing for your first AS9100 certification and have no one on staff with prior aerospace QMS audit experience → formal training is one of the strongest ways to build and demonstrate the required auditor competence. Self-study can contribute to that competence, but you’ll need a defensible way to show your internal auditor is capable of planning and conducting effective audits.

If you are already ISO 9001 certified and simply adding the AS9100-specific clauses → your existing internal auditors may only need requirements-level training rather than repeating a full internal auditor course.


The Real Question: What’s the Most Efficient Path to Auditor Competence?

Not every shop needs the same answer. Where you land depends on what competence you already have on staff — not on whether training is generically “a good idea.”

No aerospace experience and no internal audit experience on staff → Formal training is highly valuable here. This is the shop with the least existing competence to draw on, and a structured course is one of the more direct and defensible ways to build it.

Strong QMS experience and already-trained internal auditors, but new to aerospace → Requirements-level training is often the better starting point, not a full internal auditor course. Your team already knows how to audit — they need the aerospace-specific clause knowledge, not a repeat of general auditing fundamentals.

An experienced aerospace auditor already on staff → You may not need to send everyone through the same course. That person can mentor others through the aerospace-specific requirements, and only newer team members may need formal training.

Multiple employees need the same training → Compare public-seat pricing against in-house delivery before booking. In-house sessions built around your own facility’s documentation are often the more efficient option once you’re training more than one or two people.

No mature QMS yet → A gap assessment and requirements-level understanding should come before loading anyone into auditor training. Sending a team through internal auditor training before the documentation exists may mean teaching them to audit against requirements you haven’t fully built out yet.

⚠️ Common mistake: sending a single employee to lead auditor training as a first step, before the shop has even completed its documentation. That course assumes working familiarity with the standard already in place — it’s the wrong entry point for a shop still building its QMS.


The ROI Question: What Training Actually Establishes

BSI AS9100 training and auditor competence comparison showing training knowledge, audit methods, experience, and demonstrated ability
BSI AS9100 training can help build auditor competence, but completing a course does not replace demonstrated auditing ability.

Training helps establish auditor competence — it doesn’t replace the underlying requirement to actually demonstrate that competence. That distinction matters more than the sales pitch usually lets on: an internal auditor doesn’t need a specific course, they need to be genuinely capable of planning and conducting an effective audit, however they got there.

Where training earns its cost is in areas like configuration management, counterfeit parts controls, and first article inspection — areas where generic ISO 9001 knowledge may not transfer cleanly to aerospace-specific requirements. An internal auditor who’s never been walked through these clauses in a structured setting is more likely to miss a gap during their own internal audit, which means the external auditor finds it first.

That said, training doesn’t fix a documentation problem. If your procedures don’t exist yet, sending someone to auditor training won’t create them — it just teaches someone how to audit against requirements you haven’t built out. For many first-time shops, the practical sequence is gap assessment, initial QMS documentation development, targeted training, then internal audits. Requirements-level training can make sense earlier; internal auditor training becomes more valuable once there’s an actual system to audit.

👉 Not sure if your documentation is even ready for an internal auditor to work against? Run the AS9100 Rev D Gap Assessment Checklist first — it takes less than an hour and tells you exactly which of the 12 major sections still need work.


✅ Quick Checklist: Is Your Shop Ready to Book Training?

  • ✅ Your AS9100-specific documentation is drafted, even if not finalized
  • ✅ You’ve identified who will actually conduct internal audits going forward
  • ✅ You know whether you need requirements-level training, internal auditor training, or both
  • ✅ You’ve priced in-house/group rates against individual seat pricing for your team size
  • ✅ You’ve budgeted separately for the standard itself, since course fees typically don’t include it
  • ⚠️ If you can’t check the first two boxes, reconsider booking internal auditor training yet — the timing may be premature
BSI AS9100 training roadmap showing gap assessment, QMS development, targeted training, internal audit, and certification readiness
A practical AS9100 training sequence connects QMS development, targeted training, internal auditing, and certification readiness.

FAQ

Is AS9100 training legally required for certification?

No. AS9100 does not prescribe a specific training provider or course for internal auditors. The organization is responsible for ensuring its auditors are competent to perform effective audits, and IAQG does not specify a particular 9100-series training course as mandatory. Formal training is one common way small shops establish and document that competence, but it isn’t the only path if you already have qualified aerospace audit experience in-house.

How long does BSI’s AS9100 internal auditor course take?

Multi-day formats are standard across the industry for this course level, typically delivered across two to three consecutive days, whether in person or through live online instruction. Confirm current course length and format directly with BSI, since schedules and formats are updated periodically.

Does the training include a copy of the AS9100 standard?

Course inclusions vary by provider and delivery format. Confirm directly with BSI whether the applicable standard is included before enrolling — if not, budget separately for a current copy.

Can one person get trained and cover the whole shop’s internal audit needs?

For a very small operation, one competent internal auditor may be enough, provided the audit program can maintain appropriate objectivity and coverage — auditors generally shouldn’t audit their own work or processes they’re directly responsible for. Larger shops or those with multiple product lines often train two or more people so audits aren’t bottlenecked by one person’s schedule or independence limits.

Is virtual training as effective as in-person for AS9100?

For the requirements-level course, virtual formats work well. For internal auditor training, in-person formats offer more natural opportunities for hands-on practice exercises, though live online formats with interactive workshops are a reasonable substitute if travel cost or time away from the floor is the deciding factor.

Does BSI training count toward recertification of an existing auditor?

Course-to-course requirements vary by prior certification and course provider. If your auditor already holds a credential from a different accredited provider, confirm directly with BSI whether their program requires a re-sit or a full course before enrolling.

What’s the difference between BSI’s requirements course and internal auditor course?

The requirements course teaches what the standard demands, clause by clause. The internal auditor course teaches how to plan, conduct, and report an audit against those requirements — it assumes the requirements-level knowledge already exists.

Is ISOQAR an alternative for AS9100 training?

No — as of publication, ISOQAR does not offer AS9100-specific training courses. For AS9100 training specifically, BSI is the option covered in this review; confirm current course catalogs directly with any provider before enrolling, since offerings can change over time.


📥 Free Resources


Not Sure What to Do Next?

🔹 Still researching whether formal training makes sense for your shop? Start with the AS9100 Rev D Gap Assessment Checklist to see exactly where your QMS stands before you commit a training budget.

🔹 Ready to move forward with a specific course? Compare BSI’s current AS9100 training course options and request an in-house quote if you’re training more than one person.

🔹 Need the standard itself before class starts? Buy the current AS9100/SAE standard through ANSI Webstore.

🔹 Still deciding on a certification body altogether? See how the major players stack up in AS9100 Certification Bodies — Ranked & Reviewed.

Training is one line item in a much bigger certification budget, and it’s only worth spending on once the rest of your QMS groundwork is in place. Get the sequence right, and training becomes the thing that keeps an auditor from finding a gap your own team should have caught first. At The Standards Navigator, that’s the entire point — clear, practitioner-level guidance on what actually moves the needle toward certification, without the sales pitch.


Stay Ahead of Aerospace Audit Requirements

A common Stage 1 problem isn’t simply misunderstanding AS9100 — it’s discovering that training, documentation, or internal audit readiness isn’t as mature as the organization assumed.

Shops that treat certification as a sequence — documentation, then training, then internal audits — walk into Stage 1 with far fewer surprises than shops that bolt on training as an afterthought once a customer starts asking questions.

The Standards Navigator covers AS9100 certification, training decisions, and aerospace supplier compliance in plain, practitioner-level language — no fluff, no sales pitch.

👉 Get updates on AS9100 certification and aerospace supplier compliance
👉 Be first to access new gap assessment tools and aerospace QMS resources

Subscribe

* indicates required

Industrial Compliance. Clearly Explained.

AS9100 Documentation Requirements: What Auditors Actually Check (2026)

This guide breaks down what AS9100 Rev D actually requires in documented information — from first article inspection and traceability records to counterfeit parts prevention and configuration management. It explains which records auditors pull first, where most aerospace suppliers fall short, and how AS9100 documentation differs from a standard ISO 9001 system.

A clause-by-clause breakdown of what your aerospace QMS documentation needs — and where most suppliers fall short

Affiliate Disclosure: Some links in this article are affiliate links. If you purchase through them, The Standards Navigator may earn a commission at no additional cost to you.


The Documentation Gap That Fails Aerospace Audits

AS9100 documentation requirements cover the documented information needed to operate and demonstrate an aerospace QMS, along with aerospace-specific records and controls in areas such as configuration management, traceability, counterfeit parts prevention, first article inspection, and FOD control. The exact documents and records an organization maintains depend on its processes, applicable requirements, and customer flow-downs.

AS9100 documentation isn’t ISO 9001 paperwork with an aerospace label stuck on it. Traceability records, first article inspection (FAI) data, and configuration management records aren’t background paperwork — auditors use them as objective evidence that aerospace parts were manufactured and controlled according to applicable requirements.

Most suppliers assume a quality manual and a stack of procedures covers it. Then an auditor selects a part number, asks for the traceability record behind its FAI, and finds the two don’t connect — what looked like a minor gap becomes a major nonconformance.

Whether you’re mapping documentation before your first Stage 1 audit or checking an existing system against Rev D, this breaks down exactly what auditors pull first — and where the gaps usually are.

FROM THE SHOP FLOOR: I’ve sat across the table from an AS9100 auditor who skipped the quality manual entirely and went straight for first article inspection records on a part we’d shipped eight months earlier. We had the FAI — what we didn’t have was the linked traceability record showing which material heat lot went into it. That gap alone became a major finding. Auditors aren’t grading your paperwork; they’re testing whether your records actually trace back to the part in front of them.

👉 Most AS9100 documentation gaps don’t surface until an auditor asks for a specific record — by then it’s too late to fix quietly. Run the AS9100 Rev D Gap Assessment Checklist before your next audit and find out exactly where your documentation stands.

In this guide:

  • What AS9100 documented information actually requires — and where it goes beyond ISO 9001
  • Whether you still need a quality manual under Rev D
  • The core records auditors pull first: FAI, traceability, counterfeit parts, FOD
  • Two documentation areas most suppliers underbuild
  • Common findings and how to close them before your audit
  • Where to buy the standard and find training if you’re building this from scratch


👉 Start Here


What “Documented Information” Actually Means Under AS9100

AS9100 Rev D uses the same “documented information” language as ISO 9001 — but the aerospace-specific clauses layer on requirements that don’t exist in a standard ISO 9001 system at all.

AS9100 Rev D does not explicitly require a document called a quality manual. The practical takeaway is that eliminating a document called a “quality manual” does not eliminate the need to document and communicate how your QMS is structured.

Many aerospace organizations continue to use a quality manual because it provides a practical way to describe the QMS and its relationship to the applicable requirements — and it’s the document reviewers commonly use to navigate everything else.

Where AS9100 genuinely goes further than ISO 9001 is in the aerospace-specific documented information requirements: first article inspection, more extensive material and process traceability, counterfeit parts prevention, foreign object debris (FOD) control, and configuration management. None of these have a real equivalent in a baseline ISO 9001 system — see What Is AS9100? for the full standard overview if you’re still mapping out scope.

If you’re building this documentation structure from scratch rather than adapting an existing ISO 9001 system, the ISO Documentation Kits for Manufacturers page is a reasonable starting point for the underlying procedures and forms — just plan to adapt anything generic to AS9100’s aerospace-specific requirements before relying on it for certification.


AS9100 documentation requirements showing an aerospace auditor reviewing FAI, traceability, counterfeit parts prevention, FOD control, and process records
AS9100 documentation requirements include objective evidence showing that aerospace parts and processes were controlled as required.

The Core Records Auditors Pull First

First Article Inspection Records

A common audit approach is to select a specific part number and request the FAI record supporting it, along with the traceability behind it. FAI reporting itself is governed by AS9102, published by SAE International. Full requirements — including what counts as a valid FAI and when a re-FAI is triggered — are covered in First Article Inspection Requirements.

Traceability Records

Traceability records should allow applicable material, batch/lot, and process information to be traced through the product lifecycle to the shipped part, based on the organization’s processes and applicable requirements — not just exist as separate records. See AS9100 Traceability Requirements for what Clause 8.5.2 actually demands.

Counterfeit Parts Prevention Records

Documented controls for counterfeit parts prevention are required under Clause 8.1.4 — and auditors check whether they’re actually followed, not just written. Full breakdown in AS9100 Counterfeit Parts Standards.

FOD Control Records

AS9100 expects documented controls and evidence appropriate to the organization’s processes for preventing foreign object debris — the specific form that takes varies by operation. See FOD Control Standards for what Clause 8.5.4 requires.

A recurring pattern I’ve seen: these four record types exist independently but aren’t cross-referenced. An auditor pulls an FAI, asks for the traceability record behind it, and finds no clear link between the two documents — even though both technically exist. In practice, that kind of disconnect often draws more scrutiny than a missing document, because it suggests the system isn’t actually being used to trace parts, just to generate paperwork.

The Audit Trail: Part Number → Revision → Material Lot → Process Route → FAI → Final Record

An auditor doesn’t just want to see that each record in that chain exists individually. They want to see how the records relate to each other and to the specific part in front of them. (This makes a strong visual for the published page — worth building as a simple graphic rather than just text.)

👉 If your traceability records and FAI paperwork don’t reference each other by part number and revision, that’s a gap worth closing before an audit tests it. Download the Manufacturing Compliance Checklist and confirm your records connect.

AS9100 documentation requirements audit trail showing part number, drawing revision, material heat lot, process routing, FAI, and shipped product
AS9100 documentation requirements connect the part number, revision, material, process, inspection, and final shipment into a traceable audit trail.

Two Documentation Areas Most Suppliers Underbuild

Configuration Management Documentation (Clause 8.1.2)

Configuration management — tracking exactly which design revision, engineering change, and customer-approved deviation applies to a given part — gets far less attention than FAI or traceability, but auditors increasingly check it as a standalone item. If your documentation doesn’t clearly show which configuration was in effect at the time of manufacture, that’s a gap worth closing before it becomes a finding. This is dense enough to deserve its own dedicated breakdown — flagging it here as a topic to watch.

Risk-Based Documentation for Special Processes

Special processes — such as welding, heat treating, and nondestructive testing — carry their own documented risk requirements under AS9100’s risk-based thinking clauses. Nadcap accreditation may apply separately when required by a customer or applicable supply-chain requirements; that accreditation question is covered in NADCAP vs AS9100. The documentation angle specifically — how you document special-process risk decisions, distinct from whether you’re Nadcap-accredited — is underserved content-wise and worth a dedicated piece.


How AS9100 Documentation Differs from ISO 9001

CategoryISO 9001AS9100
Quality ManualNot explicitly mandatedNot explicitly mandated, but commonly used in practice
First Article InspectionNo aerospace-specific FAI requirementIncorporated through AS9100 and applicable customer requirements; AS9102 (SAE) governs FAI reporting
TraceabilityGeneral requirement, scope flexibleMore extensive material/process traceability, including customer- and product-specific requirements where applicable
Counterfeit Parts PreventionNo equivalent requirementDocumented controls required (Clause 8.1.4)
Configuration ManagementNo equivalent requirementRequired (Clause 8.1.2)
FOD ControlNo equivalent requirementDocumented controls and evidence appropriate to the organization’s processes and applicable requirements

For the full standard-by-standard comparison beyond documentation specifically, see AS9100 vs ISO 9001.

👉 Building this documentation structure without a consultant is realistic — but only if you’re working from the current edition. Buy the AS9100 Rev D standard through ANSI Webstore and use code CC2026 for 5% off.


What Happens When Documentation Doesn’t Hold Up

A documentation gap doesn’t automatically fail an audit — but an auditor who finds one disconnected record set often digs deeper, and what started as a single finding turns into a pattern of findings across the whole system. That’s the real cost: not the first gap, but what it triggers.

The cost objection: it’s fair to wonder whether this level of documentation rigor is overkill for a small shop with a handful of part numbers. When FAI and traceability requirements apply, a five-person shop and a five-hundred-person supplier may need to maintain the same core record types for a given part number; the difference is the complexity of the system used to manage them.

If you’re deciding whether your existing system is ready, AS9100 Internal Audit Process walks through running that check yourself before a registrar does it for you. And if you haven’t picked a certification body yet, AS9100 Certification Bodies — Ranked & Reviewed is a good next stop — worth confirming the body you choose is itself accredited by a recognized accreditor such as ANAB.

In practice, traceability is a significant part of aerospace QMS auditing because auditors need objective evidence that product and process records can be connected to the requirements they support.


Quick Documentation Checklist

✅ Quality manual (or equivalent scope document) references all applicable Rev D clauses

✅ FAI records exist and cross-reference traceability records by part number and revision

✅ Traceability records identify applicable material heat/lot/batch information for shipped parts, based on customer, product, and process requirements

✅ Documented controls for counterfeit parts prevention are in place and actively followed, not just written

✅ FOD controls are documented and supported by evidence appropriate to the organization’s processes and applicable requirements

✅ Configuration management records show which design revision applied at time of manufacture

✅ Special process records (welding, heat treat, NDT, etc.) are retained per customer and registrar requirements


AS9100 documentation requirements showing the difference between controlled documents and records used as objective audit evidence
AS9100 documentation requirements distinguish controlled information from records that provide objective evidence processes were performed.

FAQ

Is a quality manual required under AS9100 Rev D?

Not explicitly by the standard’s own wording — but many aerospace organizations continue to use one because it provides a practical way to describe the QMS and map it to the standard’s structure. Skipping it entirely can create more audit friction than it saves in paperwork, since certification bodies commonly expect some document that fills that role.

What documents does an AS9100 auditor ask for first?

A common audit approach is to select a specific part number and request the first article inspection record supporting it, followed by the traceability record behind that FAI. Auditors use this pairing to test whether your documentation system actually connects, not just exists.

What’s the difference between documented information and records under AS9100?

Documented information is the broader AS9100 term covering anything required to be created, maintained, and controlled — procedures, work instructions, and forms all count. Records are a specific type of documented information that provide evidence of results, like a completed FAI or a calibration record. Every record is documented information, but not everything documented is a record.

How long do AS9100 records need to be retained?

Retention periods vary by customer contract and registrar requirement rather than a single fixed AS9100 rule — many aerospace customers require retention well beyond typical ISO 9001 timeframes, sometimes for the life of the program. Check your specific customer flow-down requirements rather than assuming a default period applies.

Do I need separate documentation for each customer?

Not necessarily separate systems, but you likely need customer-specific supplemental requirements layered onto your core AS9100 documentation — most aerospace OEMs have their own flow-down requirements beyond the base standard.

What is a common AS9100 documentation finding?

One recurring documentation problem is records that exist individually but aren’t cross-referenced — an FAI with no linked traceability record, or a traceability record that doesn’t tie back to the part it supports. The documents technically exist; they just don’t function as a connected system.

Can I use the same documentation system for ISO 9001 and AS9100?

Largely yes for the shared core structure, but AS9100-specific records (FAI, counterfeit parts prevention, configuration management, FOD control) have no ISO 9001 equivalent and need to be built as additions, not substitutions.

Do I need software to manage AS9100 documentation, or can spreadsheets work?

Spreadsheets can work for a small shop with limited part numbers, but the risk grows with volume — the more parts and revisions you’re tracking, the easier it becomes for records to silently disconnect from each other, which is the exact failure pattern auditors catch most often.

How much documentation does a small aerospace supplier actually need?

The same core record types as a larger supplier — a small shop doesn’t get a reduced list of required records. What differs is the complexity of the system used to manage them; a simpler operation can often meet the same requirements with a leaner, more manual system than a high-volume supplier needs.


📥 Free Resources


Not Sure What to Do Next?

🔹 Still researching what AS9100 documentation actually requires? Start with What Is AS9100? for the full standard overview.

🔹 Ready to build your documentation structure? Buy the current AS9100 Rev D standard through ANSI Webstore — you can’t build compliant documentation from an outdated edition.

🔹 Need training to get your team up to speed? BSI Group’s AS9100 training courses cover documentation requirements clause by clause.

🔹 Want a professional gap assessment first? Download the free AS9100 Rev D Gap Assessment Checklist.

Documentation is where AS9100 audits are actually won or lost — not in the quality manual, but in whether your records connect to the parts they’re supposed to trace. Get the structure right from the beginning, and maintaining audit-ready evidence becomes far easier. That’s the standard The Standards Navigator holds every AS9100 guide to.


Stay Ahead of Your Next AS9100 Audit

Most aerospace suppliers don’t fail audits because they lack documentation — they fail because their documentation doesn’t connect. FAI records that don’t reference traceability. Traceability that doesn’t tie to configuration. Individually complete, collectively disconnected.

Suppliers who struggle treat documentation as a checklist exercise, built once and left alone. Suppliers who succeed build cross-referencing into every record from day one, so nothing has to be reconstructed under audit pressure.

The Standards Navigator covers AS9100 implementation for aerospace suppliers building audit-ready quality systems from the ground up.

👉 Get updates on AS9100 and aerospace compliance

👉 Be first to access new gap assessment checklists and documentation templates

Subscribe

* indicates required

Industrial Compliance. Clearly Explained.

AS9100 Internal Audit Process: A Step-by-Step Guide for 2026

AS9100 Clause 9.2 requires more than an ISO 9001 internal audit program — customer and regulatory requirements have to be built into your audit criteria, and results have to reach management. This guide breaks down the six-part audit workflow, what a real internal audit checklist should cover, how findings feed into management review and AS9101 reporting, and the objectivity gap that trips up small aerospace quality teams.

How aerospace suppliers plan, conduct, and close out a Clause 9.2-compliant internal audit program

Affiliate Disclosure: Some links in this article are affiliate links. If you purchase through them, The Standards Navigator may earn a commission at no additional cost to you.


Your Internal Audit Program Is What Helps Keep Your AS9100 Certification Credible

An AS9100 certificate doesn’t prove your QMS is working. Your AS9100 internal audit process helps prove that it is.

Most operations managers treat internal audits as a compliance formality — something to schedule before the registrar shows up, not something that actually finds problems. That approach works right up until a surveillance audit surfaces a nonconformance your own internal audit should have caught six months earlier. At that point, the registrar isn’t just questioning the finding. They’re questioning whether your internal audit program is real.

If you’re already certified and running audits on autopilot, or preparing for your first AS9100 certification and building this process from scratch, the standard is specific about what “real” looks like. Clause 9.2 lays out exactly what your internal audit program has to prove, and AS9100 Rev D adds requirements ISO 9001 doesn’t have.

From the Floor: I’ve sat in gap assessment meetings where the documented internal audit schedule looked airtight on paper — every process, every quarter, neatly assigned. Then you pull the actual audit records and half of them are checklist walk-throughs with no objective evidence attached, no findings, no closure dates. An auditor doesn’t need long to spot the difference between an internal audit program that’s running and one that’s just being logged.

👉 Before you build or rebuild your internal audit program, run the AS9100 Rev D Gap Assessment Checklist — a 74-item, clause-by-clause tool that shows you exactly where your current audit coverage has gaps before an external auditor finds them for you.


In This Guide

  • What Clause 9.2 actually requires, and where AS9100 goes beyond ISO 9001
  • The six-step internal audit process defined in Clause 9.2.2
  • How internal audit findings feed into management review and AS9101 reporting
  • A ready-to-use internal audit checklist structure
  • Common mistakes that turn a real audit program into a paperwork exercise
  • Where to buy the standard and where to get trained on running compliant audits


👉 Start Here (Top Resources)

  • AS9100D — ANSI Webstore — the current edition of the standard, including the exact Clause 9.2 language your audit program has to satisfy. Use coupon code CC2026 for 5% off through December 31, 2026.
  • ISO 19011:2018 — ANSI Webstore — the audit guidelines standard referenced directly by AS9100 internal audit resources; worth owning if you’re training internal auditors.
  • AS9100 Training — BSI Group — for teams that need to formally qualify internal auditors on AS9100-specific requirements, not just general ISO 9001 audit technique.

What Clause 9.2 Actually Requires

Clause 9.2.1 requires you to conduct internal audits at planned intervals to determine whether your quality management system conforms to three things: your own organization’s requirements, the AS9100 standard itself, and the QMS is effectively implemented and maintained. That’s the ISO 9001 baseline.

AS9100 Rev D builds directly on that clause text. Under the standard’s Annex L structure, the aerospace-specific language is written straight into Clause 9.2.1 itself: your organization’s requirements for internal audit purposes must explicitly include customer requirements and applicable statutory and regulatory requirements — not just your internal procedures. That’s not guidance layered on top of ISO 9001; it’s part of the clause language you’re audited against. Audit results also have to be reported to relevant management, not just filed.

Most common finding: Internal audit programs that check ISO 9001 conformance thoroughly but never verify against a specific customer’s flow-down requirements or purchase order quality clauses. That’s a Clause 9.2 gap I commonly see when aerospace suppliers transition from ISO 9001 to AS9100.

ISO 9001 Baseline (Clause 9.2)Aerospace-Specific Clause 9.2 Language (Annex L Addition)
Conformance to the organization’s own QMS requirementsMust explicitly include customer, statutory, and regulatory requirements
Conformance to the standardAS9100 Rev D requirements, including its aerospace-specific additions
Effective implementation and maintenanceResults must be reported to relevant management, feeding directly into management review

If you are preparing for your first AS9100 certification → build your audit criteria around customer and regulatory requirements from day one, not as an afterthought once ISO 9001 conformance is handled.

👉 Need to see the exact Clause 9.2 language for yourself before you build your audit program around it? Get the current AS9100D edition from the ANSI Webstore — use code CC2026 for 5% off through December 31, 2026.


The AS9100 Internal Audit Process: A Six-Part Workflow Built From Clause 9.2.2

AS9100 audit program showing risk-based planning, audit frequency, previous findings, and an annual internal audit schedule in an aerospace manufacturing facility
A risk-based AS9100 audit program considers process importance, changes, previous findings, and risk when establishing the internal audit schedule.

Clause 9.2.2 lays out the requirements your audit program has to satisfy — the audit program itself, planning and conduct, auditor objectivity, reporting, corrective action, and retained documented information. Read together, that maps cleanly onto six practical steps, and an auditor will ask about all six.

1. Audit Program

Establish, implement, and maintain an audit program that identifies frequency, methods, responsibilities, planning requirements, and reporting. This has to account for the importance of the processes involved, changes affecting your organization, and the results of previous audits — not a static calendar you set once and never revisit.

2. Audit Criteria and Scope

Define what standard, procedure, or requirement each audit is measured against, and how far that audit reaches — which processes, which shifts, which locations if you run more than one facility.

3. Auditor Selection

Select auditors and conduct audits in a way that ensures objectivity and impartiality. Nobody audits their own work. On a small quality team this is often the hardest requirement to satisfy on paper — it usually means cross-training auditors across departments so a floor supervisor never audits the process they run.

4. Reporting Results

Audit results go to relevant management — not just the quality manager’s file. If a finding touches production scheduling, engineering, or purchasing, that function’s management needs visibility into it.

5. Corrective Action

Take appropriate correction and corrective action without undue delay when nonconformities are found. “Without undue delay” is intentionally vague in the standard, but in practice, your corrective action process should establish a documented target closure date appropriate to the severity of the finding — an open-ended promise to “look into it” won’t hold up as objective evidence of an effective process.

6. Retained Documentation

Keep documented information as evidence of the audit program’s implementation and the audit results. These are among the first records an external auditor is likely to examine: not your procedure, but your actual audit records — schedules, checklists, findings, objective evidence, and closure dates.

👉 If your audit records are more calendar than evidence, that’s the gap that surfaces during a surveillance audit — not a certification audit. Run the gap assessment checklist against your current program before your next registrar visit, not after.

AS9100 internal auditor reviewing work instructions, actual work, inspection records, and objective evidence on an aerospace manufacturing floor
An effective AS9100 internal audit follows the evidence from documented procedures to actual work, inspection records, and process effectiveness.

What Should an AS9100 Internal Audit Checklist Include?

A checklist built only around ISO 9001 clause conformance misses the aerospace-specific scope Clause 9.2.1 actually requires. Use this as the framework for what each internal audit needs to cover:

Audit AreaWhat the Auditor Should Verify
Process requirementsApplicable AS9100 clauses and internal procedure requirements
Customer requirementsPurchase order and contract flow-down requirements
Regulatory requirementsApplicable statutory and regulatory obligations
Objective evidenceActual records and direct observations, not verbal confirmation
Process effectivenessWhether the process is achieving its intended result, not just running
FindingsNonconformities clearly supported by objective evidence
Corrective actionRoot cause analysis, corrective action, and verification of effectiveness
Follow-upClosure evidence and confirmation the fix actually worked

If your operation also carries program-specific deliverables under AS9145 (APQP and PPAP), extend your audit criteria to those documents too — see AS9145 Explained for what’s typically in scope. And if any of your special processes are already covered under NADCAP, coordinate your internal audit scope so you’re not duplicating external oversight — NADCAP vs AS9100 breaks down where the two programs overlap and where they don’t.

AS9100 corrective action workflow showing audit finding, containment, root cause analysis, corrective action, effectiveness verification, and closure
An AS9100 corrective action is not complete until the organization verifies that the action worked and documents the results.

How Internal Audit Results Feed Into Management Review

Internal audit findings aren’t the end of the process — Clause 9.3 requires them as an input into management review. Corrective actions from internal audits, along with trending data like recurring nonconformities, similar issues across multiple processes, and top process concerns, should show up as agenda items top management actually discusses. That requirement comes from your QMS’s management review clause, not from any external audit form.

Separately, when your registrar conducts your certification or surveillance audit, results get documented on AS9101 — the standardized audit report form referenced by SAE International and logged in the IAQG OASIS database. AS9101 doesn’t dictate what your internal management review has to look like. But an external auditor completing that form will ask to see your management review minutes, and if internal audit trends never make it into those minutes, that gap is easy to spot — not because AS9101 requires a specific format, but because the disconnect itself signals the management review process isn’t functioning as intended.

If you are already ISO 9001 certified and adding AS9100 → your internal audit process likely doesn’t need to change structurally. What changes is audit criteria — you now have to audit against customer and regulatory requirements your ISO 9001 program never had to touch, and management review needs a direct line from audit findings to those aerospace-specific requirements.


Objection: “We Don’t Have Staff to Audit Objectively”

This is the most common pushback on small aerospace shops — a 15-person quality team can’t realistically avoid people auditing processes adjacent to their own work.

It’s a real constraint, but it’s manageable without adding headcount. Cross-train two or three people across departments so each can audit outside their own process. A machinist trained as an internal auditor can objectively audit the receiving inspection process; the receiving inspector can objectively audit machining documentation. Registrars don’t require a dedicated audit department — they require evidence that whoever conducted the audit had no stake in the outcome. Document that logic in your audit program procedure, and it holds up.


Quick Internal Audit Readiness Checklist

✅ Audit program covers all applicable processes at a frequency justified by risk and past findings

✅ Audit criteria explicitly reference customer purchase order requirements, not just internal procedures

✅ Auditors are demonstrably independent of the process they’re auditing

✅ Findings include objective evidence — not just a pass/fail checkbox

✅ Corrective actions have documented target closure dates

✅ Audit results appear as a distinct agenda item in management review minutes

⚠️ If any of these are missing, that’s the gap a registrar finds before you do


Frequently Asked Questions

What does Clause 9.2 of AS9100 actually require?

Clause 9.2 requires organizations to run internal audits at planned intervals to confirm the QMS conforms to the organization’s own requirements — which under AS9100 must include customer, statutory, and regulatory requirements — conforms to the AS9100 standard itself, and is effectively implemented. Results must be reported to relevant management.

How often do AS9100 internal audits need to happen?

The standard doesn’t set a fixed interval. Frequency has to be justified by the importance of the process, the results of previous audits, and any changes affecting the organization. Higher-risk processes — special processes, product safety-critical operations — typically warrant more frequent audits than lower-risk administrative processes.

Can one person run the entire internal audit program on a small team?

Generally, yes, as long as objectivity is maintained. The requirement is independence from the process being audited, not a minimum team size. On very small teams this can require creative scheduling or occasionally bringing in an outside auditor for processes where no internal person can honestly claim independence.

Do internal audit findings have to be reported to the registrar?

No. Internal audit results are reported to your own relevant management, not to the certification body. The registrar reviews your internal audit records and evidence of corrective action during surveillance and recertification audits — they don’t need real-time reporting.

What’s the difference between an internal audit and the AS9101 certification audit?

Your internal audit program is something you run yourselves, on your own schedule, against your own and the standard’s requirements. AS9101 is the standardized form your registrar uses to document the results of your external certification and surveillance audits, which then get logged in the IAQG OASIS database. A strong internal audit program is largely what prepares you to pass the AS9101-documented external audit cleanly.

Can internal audits be conducted remotely?

The standard doesn’t prohibit it, and many quality teams do conduct document reviews and some process audits remotely. Physical, in-person audits are still strongly preferred for shop floor processes where objective evidence — traveler stamps, calibration tags, first article records — needs to be directly observed rather than described.

What happens if our internal audit program has gaps when the registrar shows up?

It depends on severity and pattern, and classification is ultimately the auditor’s call based on the evidence in front of them. An isolated missed audit interval on a low-risk process may be treated differently from a persistent systemic failure, depending on the evidence and the auditor’s assessment. A pattern of audits with no objective evidence, no findings ever recorded, or no connection to management review calls into question whether the QMS’s self-monitoring is functioning at all — which is the kind of gap that tends to draw closer scrutiny.

Is a documented procedure enough, or do we need to prove the audits actually happened?

A procedure alone isn’t enough. Registrars expect to see the records: audit schedules, completed checklists with objective evidence, documented findings, and closure evidence for corrective actions. The procedure describes what you’re supposed to do — the records prove you did it.


📥 Free Resources

  • AS9100 Rev D Gap Assessment Checklist — 74-item, clause-by-clause checklist for aerospace suppliers assessing their QMS, including internal audit coverage, before certification.
  • ISO 13485 Gap Assessment Checklist — free checklist for medical device manufacturers assessing their QMS against ISO 13485 requirements.
  • ISO 9001 Roadmap — step-by-step implementation guide for manufacturers building or improving a quality management system.
  • Manufacturing Compliance Checklist — practical compliance reference covering key ISO, OSHA, and quality requirements for production environments.
  • Supplier Quality Checklist — evaluation tool for assessing supplier quality controls and flow-down compliance before audits or new contracts.

Not Sure What to Do Next?

🔹 Still researching what AS9100 internal audits require? Start with the What Is AS9100? pillar guide, then read AS9100 vs ISO 9001 to see exactly which requirements are new to you if you’re already ISO 9001 certified.

🔹 Ready to build or fix your internal audit program? Run the AS9100 Rev D Gap Assessment Checklist against your current audit records, then check the AS9100 Implementation Timeline to see where audit program maturity fits into your certification schedule.

🔹 Need to buy the standard or get auditors trained? Get the current edition from the ANSI Webstore with code CC2026 for 5% off, and see AS9100 Certification Bodies: Ranked & Reviewed for AS9100 auditor training through BSI Group.


A weak internal audit program is one of the most common reasons a QMS that looks compliant on paper fails to hold up in front of a registrar. Build the six-step process the standard actually asks for, put real objective evidence behind every audit, and your surveillance audits stop being a surprise. That’s what The Standards Navigator’s AS9100 coverage is built around — the requirements as they’re actually enforced, not just as they’re written.


Before You Go

Most aerospace suppliers don’t lose points on AS9100 audits because they misunderstand Clause 9.2 — they lose points because their internal audit program looks good on paper and falls apart under objective evidence review.

Shops that treat internal audits as a real management tool catch their own nonconformances before a registrar does. Shops that treat them as a scheduling formality find out the hard way, usually during a surveillance audit, that “completed” and “effective” aren’t the same thing.

The Standards Navigator covers the AS9100 requirements aerospace suppliers actually get audited against — not just the clause text, but how registrars interpret it in practice.

👉 Get updates on AS9100 implementation and internal audit best practices

👉 Be first to access new aerospace gap assessment tools and checklists

Subscribe

* indicates required

Industrial Compliance. Clearly Explained.

AS9100 Certification Bodies: Ranked & Reviewed (2026)

Not every AS9100 certification body brings the same aerospace expertise to an audit. This guide breaks down what AS9100 accreditation actually requires, which certification bodies are active in the space, and the questions to ask before signing with a registrar.

Comparing accredited AS9100 registrars — what to look for, what to avoid, and which body fits your operation

Affiliate Disclosure: Some links in this article are affiliate links. If you purchase through them, The Standards Navigator may earn a commission at no additional cost to you.


Choosing the Wrong Registrar Costs More Than the Audit

Not all AS9100 certification bodies operate the same way. Some assign a dedicated aerospace lead auditor who understands configuration management and counterfeit parts controls on sight. Others rotate generalist auditors who spend half of Stage 1 relearning your industry — and bill you for the education.

A certificate issued by an appropriately accredited certification body is intended to demonstrate conformity to the same AS9100 requirements, regardless of which body issues it. What can differ significantly is the accreditation scope, auditor expertise, scheduling, audit experience, customer acceptance, and overall certification experience. For a supplier chasing a Tier 1 customer deadline, that difference is real money and real risk.

If you’re comparing registrars for the first time, this guide breaks down what accreditation actually means, which bodies are active in the AS9100 space, and how to evaluate quotes so you’re not choosing on price alone. If you’re already certified and evaluating a switch, the sections on auditor consistency and surveillance cadence will matter most to you.

From the floor: I’ve sat through registrar selection more than once at a heavy industrial manufacturing operation — comparing quotes side by side, all technically accredited, all wildly different in price and turnaround. The number that mattered wasn’t the quote total. It was how the registrar answered questions about auditor aerospace experience, how they’d handle surveillance-audit continuity year over year, and what their process looked like if a Stage 2 audit turned up a major finding. One bidder had clearly never audited anything with configuration management or counterfeit-parts controls in scope, and it showed the moment we started asking specifics. That’s the conversation that should happen before you sign, not the one that happens after your first nonconformance over something your auditor didn’t understand.

Before you request quotes, run a clause-by-clause gap check. Most organizations don’t get burned by picking the wrong registrar — they get burned by walking into Stage 1 not knowing where their gaps are. → AS9100 Rev D Gap Assessment Checklist — 74 items, clause-by-clause, built for aerospace suppliers preparing for certification.


In This Guide

  • What AS9100 accreditation actually requires
  • How to verify a registrar is legitimately accredited
  • What separates a good aerospace auditor from a generalist
  • How these certification bodies were evaluated, and which fit different supplier profiles
  • Questions to ask before signing a registrar contract
  • Cost and timeline expectations by registrar type
  • What to do after you select a certification body


👉 Start Here (Top Resources)

👉 Get the official AS9100 Rev D standard before you approach any registrar → AS9100 / SAE Standards — ANSI Webstore

👉 Get your team trained on AS9100 requirements ahead of Stage 1 → BSI Group AS9100 Training

👉 Run a clause-by-clause gap check before requesting quotes → AS9100 Rev D Gap Assessment Checklist


What Does AS9100 Accreditation Actually Mean?

AS9100 certification isn’t something any registrar can simply decide to offer. Certification bodies (also called registrars or CBs) must hold appropriate accreditation and scope to issue an accredited AS9100 certificate — meaning an independent accreditation body has verified the CB is competent to audit against the standard.

For AS9100 specifically, that accreditation runs through a recognized national accreditation body — in the U.S., ANAB accredits more AS9100 certification bodies than any other accreditation body, though it isn’t the only IAF-recognized option (IAS is also recognized). Accreditation is evaluated against ISO/IEC 17021-1 plus the aerospace-specific IAQG 9104-series requirements developed by the International Aerospace Quality Group (IAQG). Holding ISO 9001 accreditation does not automatically mean a certification body also holds AS9100 accreditation — the two are evaluated and scoped separately, and a registrar without current AS9100 accreditation scope cannot issue an accredited AS9100 certificate that meets the applicable certification-scheme requirements, regardless of how experienced their auditors sound on a sales call.

This matters because a certificate from a body without properly scoped accreditation isn’t just a paperwork issue — it may not satisfy your customer’s supplier-qualification requirements, potentially costing you both certification time and audit expense.

For background on what the standard itself requires before you get to registrar selection, see What Is AS9100? and AS9100 vs ISO 9001.


How to Verify a Registrar Is Legitimately Accredited

Don’t take a sales rep’s word for current AS9100 scope. Verify it directly:

1. Check the OASIS database. The IAQG OASIS Certified Supplier Directory is the official record of AS9100-certified organizations and the certification bodies that issued their certificates. If a registrar’s certifications aren’t showing up in OASIS, that’s a serious red flag.

2. Confirm current accreditation scope directly with the accreditation body. ANAB accredits more AS9100 certification bodies in the U.S. than any other accreditation body and publishes which certification bodies hold active accreditation and what scopes each one covers — some registrars are accredited for aerospace manufacturing but not for MRO (AS9110) or distribution (AS9120). If a registrar cites a different IAF-recognized accreditation body, confirm that body’s scope listing directly rather than assuming it’s equivalent to ANAB’s.

3. Ask what your accredited scope actually covers. Rather than asking whether a registrar covers a specific code, ask: “What is your current accredited AS9100 scope, and does it cover the activities, products, and industry sector included in my proposed certification scope?” Have the registrar confirm the applicable industry and technical scope classifications directly — don’t assume a single code number settles the question.

4. Ask for the accreditation certificate, not a logo on a website. A registrar’s marketing page listing “AS9100 Accredited” isn’t proof — request the actual accreditation certificate showing current scope and expiration.

⚠️ Most common finding: Suppliers under customer pressure sometimes select a registrar based on price and turnaround time alone, without confirming current AS9100 scope in detail — then discover during Stage 2 that a scope gap means the certificate won’t satisfy their customer’s supplier requirements.


What Separates a Good Aerospace Auditor From a Generalist

AS9100 certification bodies review with an auditor examining a first article inspection report beside a precision aerospace component
Choosing the right AS9100 certification bodies means looking beyond the certificate to auditor experience and aerospace expertise.

AS9100 auditors need aerospace-specific fluency that a generalist ISO 9001 auditor may not have. This is the criteria worth keeping in mind as you read the comparisons below — it’s the difference that actually separates certification bodies in practice once you’ve confirmed that the appropriate accreditation and scope are in place. When evaluating a registrar, ask specifically about auditor experience in:

  • Configuration management — Clause 8.1.2’s requirements go well beyond typical ISO 9001 document control
  • Counterfeit parts prevention — Clause 8.1.4 requires audit-ready evidence most non-aerospace auditors have never evaluated
  • First article inspection (FAI) — auditors unfamiliar with the AS9102 forms published by SAE International will struggle to evaluate your FAI records meaningfully
  • Special processes and traceability — Clause 8.5.2 traceability requirements are more stringent than general manufacturing

If you are preparing for your first AS9100 certification → confirm the specific auditor assigned to your account has aerospace industry audit hours, not just AS9100 training credentials. Ask the registrar directly; reputable ones will tell you.

For a deeper look at the traceability and counterfeit-parts requirements auditors will actually test against, see AS9100 Traceability Requirements and AS9100 Counterfeit Parts Standards.


How These Certification Bodies Were Evaluated

Before comparing specific bodies, here’s the criteria behind the categories below:

  • AS9100 accreditation status and scope
  • Aerospace auditor availability and depth of aerospace-specific experience
  • Geographic coverage and multi-site capability
  • Ability to combine AS9100 audits with ISO 9001, ISO 14001, or other management-system audits
  • Fit for different supplier types — manufacturers, MRO organizations, distributors
  • Scheduling flexibility and certification-cycle support

These are editorial recommendations based on accreditation scope, aerospace specialization, geographic coverage, multi-standard capability, and fit for different supplier profiles — not customer satisfaction scores, audit outcome data, or any undisclosed commercial relationship. Always verify current accreditation status yourself through OASIS and ANAB before requesting quotes.


AS9100 Certification Bodies Worth Comparing

The six bodies below are established, accredited names in aerospace quality certification worth including in your quote comparison — not a claim that they’re the only six, or objectively the “best” six, available. Dozens of ANAB-accredited bodies issue AS9100 certificates. Always verify current scope through OASIS before signing with any registrar.

If you already have a strong sense of which profile matches your operation → skip to that category below rather than reading all six in order.

AS9100 certification bodies compared by aerospace focus, multi-site operations, manufacturing, and industrial certification needs
AS9100 certification bodies serve different operational needs, from aerospace-focused suppliers and multi-site operations to combined industrial certification.

Best Overall for Multi-Standard Aerospace Suppliers: BSI Group

Why I’d consider them: BSI certifies against a very wide range of standards — AS9100 alongside ISO 9001, AS9110, AS9120, ISO 14001, and most other major management-system standards. If your operation is pursuing more than one certification, or expects to add standards later, that breadth means fewer registrar relationships to manage over time. Ask specifically whether your account would be assigned one lead auditor across all standards or separate auditors per standard — that affects both cost and consistency.

Best for Aerospace-Focused Certification Experience: Perry Johnson Registrars (PJR)

Why I’d consider them: PJR maintains multiple international accreditations (ANAB, UKAS, JAB) and markets a dedicated aerospace audit staff. For a supplier whose top priority is an auditor who won’t need aerospace concepts explained from scratch, this is worth a direct conversation about auditor assignment. Ask for the assigned auditor’s aerospace sector history before you sign, not after.

Best for Manufacturers Entering Aerospace Supply Chains: NSF-ISR

Why I’d consider them: NSF-ISR has a strong general manufacturing and industrial certification presence. For a fabricator or machine shop pursuing AS9100 for the first time as a new aerospace supplier, a registrar with broad industrial-certification familiarity alongside aerospace scope can be a comfortable entry point. Ask how many first-time AS9100 clients they’ve certified in the past year — that experience matters more than tenure alone for a first certification.

Best for Global or Multi-Site Operations: DEKRA Certification

Why I’d consider them: DEKRA’s global reach and integrated auditing across multiple management-system standards make them worth considering for suppliers with international sites. If multi-site consistency is a priority, ask specifically how auditor assignment and certification scope will be coordinated across locations — that coordination is where multi-site certifications most often run into trouble.

Best for Defense and Marine-Adjacent Aerospace: ABS Quality Evaluations

Why I’d consider them: ABS has a long-standing presence in industrial and aerospace certification, with particular relevance for suppliers whose work overlaps defense or marine-adjacent aerospace segments. Ask directly whether their auditor pool has experience with your specific product category — defense-adjacent scope can carry additional documentation expectations worth confirming up front.

Best for Combined Aerospace and Industrial-Process Certification: DNV

Why I’d consider them: DNV brings deep process-industry audit experience alongside aerospace capability — a reasonable fit for suppliers whose certification needs span both aerospace and broader industrial processes. Ask whether a combined audit across your process and aerospace scopes is possible in a single visit, since that’s where DNV’s dual background can actually save audit days.

At a glance:

Best ForCertification Body
Multi-standard aerospace suppliersBSI Group
Aerospace-focused certification experiencePerry Johnson Registrars (PJR)
Manufacturers entering aerospace supply chainsNSF-ISR
Global or multi-site operationsDEKRA Certification
Defense and marine-adjacent aerospaceABS Quality Evaluations
Combined aerospace and industrial-process certificationDNV

For training — as distinct from certification itself — BSI also offers AS9100-specific coursework covering requirements, internal auditing, and lead auditor preparation.

→ Auditors move faster through Stage 1 when your internal team already knows the standard cold: BSI Group AS9100 Training

For a broader comparison of certification bodies across ISO standards generally — not aerospace-specific — see Best ISO Certification Bodies.


Questions to Ask Before You Sign

Bring these ten questions into every registrar call:

✅ What is your current accredited scope for AS9100, and does it cover the activities, products, and industry sector included in my proposed certification scope? (For U.S. certification bodies, confirm the applicable scope through ANAB.)
✅ Who will be the lead auditor assigned to my account, and what aerospace sectors have they audited?
✅ Will the same auditor normally return for surveillance audits, or should I expect rotation?
✅ How many aerospace-specific audits has my assigned lead auditor conducted in the past 12 months?
✅ What is your typical Stage 1 to Stage 2 turnaround time, and what is the planned audit duration?
✅ What happens if my assigned auditor becomes unavailable close to the scheduled audit date?
✅ What is included in the quoted price — are travel expenses included or billed separately?
✅ What is your nonconformance grading criteria, and what happens if Stage 2 produces a major finding?
✅ How are audit-day schedule changes typically handled?
✅ Can my certificate scope accommodate future expansion — additional sites, products, or standards?

AS9100 certification bodies comparison as an operations manager reviews registrar questions before signing
Compare AS9100 certification bodies carefully before signing, including accreditation, aerospace experience, audit approach, cost, and NCR handling.

If you are under customer pressure to certify quickly → prioritize registrars with confirmed availability in your timeframe over the lowest quote. A registrar that can’t schedule Stage 1 for four months doesn’t help you meet a customer deadline, regardless of price.


Cost and Timeline: What to Expect

These are planning ranges, not fixed market prices. Actual AS9100 certification fees depend on employee count, number of sites, audit complexity, applicable scope, operational complexity, shift structure, travel, audit days required, and whether other management systems are audited together.

FactorTypical Planning RangeNotes
Stage 1 + Stage 2 audit fees$8,000–$18,000Varies by facility size, employee count, and site complexity
Annual surveillance audits$3,000–$7,000 per yearRequired to maintain certification between three-year recertification cycles
Recertification audit$6,000–$12,000Every three years, comparable in scope to initial certification

Ask any registrar directly whether combining AS9100 with an existing ISO 9001 or ISO 14001 audit could reduce total audit days — this varies by registrar and by how your existing certifications are scheduled, so get it confirmed in your specific quote rather than assuming a standard discount applies.

On timeline: the 3–6 month range you’ll often hear for “registrar selection to certificate issuance” assumes your QMS is already substantially implemented and you’re simply at the registrar-selection and audit-scheduling stage. It is not a full AS9100 implementation timeline. If you’re starting without an existing QMS, expect considerably longer — see AS9100 Implementation Timeline for phase-by-phase ranges depending on your starting point.

For a full breakdown of certification costs beyond registrar fees — internal audit prep, documentation, and consulting — see How Much Does AS9100 Certification Cost?.


Common Mistakes When Selecting a Registrar

Choosing on price alone. The cheapest quote often reflects less aerospace-specific auditor experience, not efficiency. A registrar that costs more but assigns a dedicated aerospace lead auditor typically pays for itself in fewer findings and less audit-day confusion.

Not confirming scope in detail before signing. As covered above — AS9100 accreditation doesn’t automatically cover AS9110 (MRO) or AS9120 (distribution). If your business spans more than one, confirm scope for each. See AS9110 vs AS9120 if you’re uncertain which applies to your operation.

Assuming certification body and consultant can be the same entity. Certification bodies must maintain impartiality, and accredited certification activities are subject to strict rules governing consulting and conflicts of interest. A certification body should not be building the QMS it is then responsible for certifying. If a “certification body” is offering to build your documentation and then certify you, ask directly how that’s structured to avoid a conflict.

Ignoring auditor turnover history. Ask how long auditors typically stay assigned to accounts. Frequent auditor rotation means re-explaining your operation’s context every surveillance cycle.


What to Do After You Select a Certification Body

Step 1 — Confirm scope and schedule your Stage 1 readiness review. Most registrars offer an optional pre-assessment to catch major gaps before the audit clock starts.

Step 2 — Run your internal gap assessment first. Don’t walk into a pre-assessment blind. → AS9100 Rev D Gap Assessment Checklist

Step 3 — Address FAI, traceability, and counterfeit parts documentation early. These are the areas generalist QMS documentation most often misses. See First Article Inspection Requirements and FOD Control Standards.

Step 4 — Close the knowledge gap before Stage 1, not during it. An auditor testing your team on requirements they’ve never formally learned is one of the most avoidable sources of Stage 1 findings. → BSI Group AS9100 Training


FAQ

Can any ISO 9001 certification body also certify AS9100?

Not automatically. A registrar must hold separate, specific accreditation for AS9100 through ANAB (or an equivalent IAF-recognized accreditation body), evaluated against ISO/IEC 17021-1 plus the IAQG 9104-series requirements. ISO 9001 accreditation does not automatically extend to AS9100 — the two are scoped and evaluated separately.

How do I verify a certification body is actually accredited for AS9100?

Check the IAQG OASIS Certified Supplier Directory, which lists certified organizations and the registrars that issued their certificates, and confirm current scope directly with ANAB. Don’t rely solely on a registrar’s own marketing claims.

Is the cheapest registrar always the wrong choice?

Not automatically — but a significant price gap usually reflects a difference in auditor aerospace experience, scheduling flexibility, or accreditation scope. Compare quotes on auditor qualifications and turnaround time, not just the number.

Do I need a different registrar for AS9100, AS9110, and AS9120?

Not necessarily the same body, but you do need separate accreditation scope confirmed for each standard you’re certifying against, since they cover different operations — manufacturing, MRO, and distribution respectively. See AS9110 vs AS9120 for the distinction.

Can I switch certification bodies mid-cycle if I’m unhappy with my current one?

Yes, though timing matters — most organizations switch at their three-year recertification point rather than mid-cycle, since transferring an active certificate involves a transfer audit process. Talk to your prospective new registrar about transfer procedures before your current cycle ends.

Does a certification body also provide consulting or documentation help?

Generally, no — accredited certification bodies are subject to impartiality rules that treat consulting on your QMS documentation as a conflict of interest with certifying that same QMS. For documentation support, work with a separate consultant or a documentation kit, then bring an independent registrar in for certification.

How long does AS9100 certification take once I’ve selected a registrar?

If your QMS is already substantially implemented, expect roughly 3–6 months from signing with a registrar to certificate issuance, depending on internal readiness and registrar scheduling availability. This is the certification phase only — it doesn’t include building a QMS from scratch. See AS9100 Implementation Timeline for full phase-by-phase ranges depending on your starting point.

What happens if my registrar’s AS9100 accreditation scope doesn’t cover my activities or products?

Your certificate may not satisfy customer supplier-qualification requirements even if the audit itself goes well. Confirm that the certification body’s accredited scope covers the activities and products included in your proposed certification scope before signing, not after certification.


📥 Free Resources

AS9100 Rev D Gap Assessment Checklist — 74-item clause-by-clause checklist for aerospace suppliers assessing their QMS before certification

ISO 13485 Gap Assessment Checklist — free checklist for medical device manufacturers assessing their QMS against ISO 13485 requirements

ISO 9001 Roadmap — step-by-step implementation guide for manufacturers building or improving a quality management system

Manufacturing Compliance Checklist — practical compliance reference covering key ISO, OSHA, and quality requirements for production environments

Supplier Quality Checklist — evaluation tool for assessing supplier quality controls and flow-down compliance before audits or new contracts


Not Sure What to Do Next?

🔹 You’re still researching registrar optionsWhat Is AS9100?AS9100 vs ISO 9001Aerospace Supplier Compliance Standards

🔹 You’re ready to request registrar quotes → Run your gap assessment first → AS9100 Rev D Gap Assessment Checklist

🔹 You need your team trained before Stage 1BSI Group AS9100 Training

🔹 You still need to buy the official AS9100 Rev D standardAS9100 / SAE Standards — ANSI Webstore

🔹 You want to understand certification costs and timeline firstHow Much Does AS9100 Certification Cost?AS9100 Implementation Timeline


The Registrar You Choose Is Part of Your Quality System

Certification is not a one-time transaction — it’s a multi-year relationship with surveillance audits every year and recertification every three. Choosing an accredited body with genuine aerospace auditor experience, transparent scope, and consistent auditor assignment saves far more over that relationship than a lower first-year quote.

At The Standards Navigator, complex standards are translated into practical, real-world guidance you can act on.

Aerospace suppliers don’t fail audits because the requirements are a mystery — they fail because they picked a registrar that didn’t understand their industry, or walked into Stage 1 without a real gap assessment behind them.

Organizations that treat registrar selection as a checkbox end up re-explaining their operation to a new auditor every surveillance cycle. Organizations that vet accreditation scope and auditor experience up front build a certification relationship that gets faster and smoother every year.

At The Standards Navigator, aerospace compliance gets the same clause-level treatment as everything else on this site — no fluff, no generic advice.

👉 Get updates on AS9100 certification, audits, and aerospace supply chain compliance
👉 Be first to access new gap assessment tools and aerospace-specific guides

Subscribe

* indicates required

Industrial Compliance. Clearly Explained.

AS9145 Explained: Aerospace APQP and PPAP Requirements for 2026

AS9145 governs Advanced Product Quality Planning (APQP) and Production Part Approval Process (PPAP) for aerospace suppliers. This guide breaks down the PPAP elements, explains how primes like Boeing and Lockheed Martin flow the requirement down through purchase orders and supplier quality clauses, and covers the triggers that require a new submission.

What Advanced Product Quality Planning and Production Part Approval Really Require From Suppliers

Affiliate Disclosure: Some links in this article are affiliate links. If you purchase through them, The Standards Navigator may earn a commission at no additional cost to you.


When “It Passed First Article” Isn’t the Same as PPAP Approval

A new part clears first article inspection. The customer signs off. Then, three weeks later, a supplier quality engineer emails asking for the DFMEA, the control plan, and the measurement system analysis — none of which were part of the FAI package.

That gap catches a lot of suppliers off guard. First article inspection is one deliverable. AS9145 is commonly structured around eleven.

If you’re new to advanced product quality planning (APQP) in aerospace, this article explains what the standard actually requires. If you’ve already built a PPAP process and want to check it against the full element list, jump to the requirements breakdown below. Either way, this is the standard most aerospace suppliers don’t fully understand until a customer flow-down requirement forces the issue.

From the Floor: I’ve sat across the table from a supplier quality engineer who rejected a PPAP submission because the process capability study only covered one of three key characteristics on the drawing. The part had already passed first article. It didn’t matter — PPAP looks at the whole production process, not just the finished part. That’s the distinction that trips up shops moving from AS9100 compliance into full APQP/PPAP flow-down.

Most operations managers don’t find out their APQP process has gaps until a customer rejects a submission mid-program. Run your QMS against the AS9100 Rev D Gap Assessment Checklist before that happens → Download the free 74-item checklist


In This Guide

  • What AS9145 is and why IAQG created it
  • APQP vs. PPAP — how the two processes fit together
  • The 11 PPAP elements aerospace suppliers typically assemble
  • How AS9145 connects to AS9100, AS9102, and NADCAP
  • Whether AS9145 certification exists (it doesn’t — here’s what that means for you)
  • How customers actually flow down AS9145 requirements — and how to tell if it applies to you
  • Common triggers that require a new or updated PPAP submission
  • Common mistakes suppliers make when implementing AS9145
  • FAQs on scope, cost, and flow-down requirements


👉 Start Here (Top Resources)


What Is AS9145?

AS9145 is the aerospace industry’s standard for Advanced Product Quality Planning (APQP) and Production Part Approval Process (PPAP). The International Aerospace Quality Group (IAQG) released it in November 2016, adapting the automotive industry’s long-established APQP/PPAP framework (built by AIAG) to aerospace and defense manufacturing.

The standard exists because aerospace primes and OEMs — Lockheed Martin, Boeing, Rockwell Collins, and others — needed a structured, auditable way to confirm that a new part, or a part built from a new or changed process, would consistently meet requirements before full-rate production started. AS9100 certification tells a customer your quality management system is sound. AS9145 tells them a specific part and process combination is production-ready.

As of this writing, the current published edition remains the November 2016 release. IAQG has discussed a revision to clarify mandatory versus optional deliverables and streamline change management, but no new edition has been formally published — treat any “AS9145 Revision A” references you encounter online as forward-looking, not current. Verify the current revision status through SAE International or IAQG before purchasing or implementing requirements.


APQP vs. PPAP: Two Processes, One Standard

Infographic comparing AS9145 APQP and PPAP processes, illustrating how Advanced Product Quality Planning activities generate the documentation required for Production Part Approval Process submissions.
This infographic shows how AS9145 connects APQP planning activities to the PPAP documentation package required for aerospace customer approval.

APQP and PPAP are often used interchangeably, which causes confusion. They’re related but distinct.

ElementAPQPPPAP
What it isThe planning process across the product development lifecycleThe documentation package submitted for customer approval
When it happensContinuously, from design through production launchAt defined milestones — typically before full-rate production
PurposeDetect risk early, coordinate design and process feedbackProve the process can repeatably produce a conforming part
OutputDesign reviews, risk assessments, control plansThe 11-element submission package plus the PPAP approval form
OwnerCross-functional team (design, quality, manufacturing)Quality function, submitted to the customer for disposition

Think of APQP as the process and PPAP as the proof. It’s difficult to submit a credible PPAP package without having run APQP first — the PPAP elements are largely artifacts APQP is meant to generate along the way.


The 11 PPAP Elements Aerospace Suppliers Typically Assemble

Infographic illustrating the 11 AS9145 PPAP elements required for aerospace production approval, including design records, DFMEA, PFMEA, MSA, FAIR, and PPAP documentation.
This infographic breaks down the 11 AS9145 PPAP elements that aerospace suppliers assemble to demonstrate production readiness and obtain customer approval.

Automotive PPAP under AIAG runs 18 elements. Aerospace requirements are commonly grouped into 11 aerospace PPAP deliverables under AS9145 — a deliberate scope difference, since IAQG built the standard to fit aerospace’s lower production volumes and higher part complexity rather than copy automotive wholesale. Some customers and auditors group or document these elements slightly differently in practice, so always confirm the exact submission format against your specific customer’s requirements before you finalize a package.

#ElementWhat It Confirms
1Design recordThe part matches the current released drawing/model
2Design risk analysis (DFMEA)Design failure modes were identified and mitigated
3Process flow diagramEvery manufacturing and inspection step is mapped
4Process risk analysis (PFMEA)Process failure modes were identified and mitigated
5Control planKey characteristics are monitored at the right points in the process
6Measurement system analysis (MSA)Gauges and inspection methods are capable of measuring what they claim to measure
7Initial process capability studiesThe process can hold tolerance on key characteristics
8Packaging, preservation, and labeling approvalsThe part survives handling and shipment without degradation
9First article inspection report (FAIR)The part conforms to drawing requirements — see AS9100’s First Article Inspection Requirements for the full clause breakdown
10Customer-specific PPAP requirementsAny additional documentation the customer’s flow-down demands
11PPAP approval formThe customer’s formal disposition — approved, conditional, or rejected

Example: A supplier manufacturing machined aluminum brackets for a military aircraft receives a purchase order that flows down AS9145. The resulting PPAP package would typically include the released engineering drawing, a PFMEA covering the machining operations, a control plan identifying the inspection method and frequency for the critical hole diameters, a gage R&R study validating the CMM program used to measure those diameters, an initial process capability study, the FAIR, and any customer-specific forms called out on the purchase order.

Most aerospace customers expect capability evidence on designated key characteristics, not just a passing measurement. Capability is typically demonstrated using Cp/Cpk studies, ongoing SPC data, or a customer-approved alternative method — which one applies depends on production volume and the risk classification of the characteristic.

If you are already producing FAIRs under AS9100 clause requirements → you likely already have much of element 9 in place. For many suppliers, the remaining gap tends to fall in elements 2 through 7 — the risk analysis and capability studies some shops treat as optional until a customer’s purchase order makes them mandatory.

One of the most common findings: Suppliers often submit a PPAP package with a completed FAIR and design record, but no PFMEA or control plan tied to the same key characteristics. Customers frequently reject these submissions because the package doesn’t clearly show how the process will keep producing conforming parts — only that one sample did.


How AS9145 Connects to AS9100, AS9102, and NADCAP

AS9145 doesn’t operate on its own. It’s woven into the broader aerospace quality framework:

  • AS9100 — your certified QMS is the foundation APQP/PPAP sits on top of. See AS9100 vs ISO 9001 if you’re still building that foundation.
  • AS9102 — governs first article inspection reporting specifically, which becomes PPAP element 9.
  • NADCAP — a separate special-process accreditation system. AS9145 and NADCAP address different risk areas and neither substitutes for the other; see NADCAP vs AS9100 for how the two fit together.

When a customer flows down AS9145 requirements, it typically shows up as a purchase order note or a supplier quality manual reference — not as a separate certification audit. Your registrar’s AS9100 surveillance audit is often where an auditor checks whether your APQP/PPAP process, if you’ve committed to one contractually, is actually being followed.

Infographic showing how AS9145 connects with AS9100, AS9102, NADCAP, and customer flow-down requirements within the aerospace quality management system.
This infographic illustrates how AS9145 integrates with AS9100, AS9102, NADCAP, and customer flow-down requirements to support aerospace quality planning and production approval.

Is AS9145 Certifiable?

No — and this is the objection worth addressing directly. AS9145 is a guidance and requirements standard, not a certifiable one. There’s no accredited registrar issuing “AS9145 certificates” the way there is for AS9100. That leads some operations managers to deprioritize it, assuming it’s optional.

It isn’t, in practice. Contractually, AS9145 becomes a binding requirement once a customer flows it down in a purchase order or supplier quality manual — something primes and Tier 1s do with increasing frequency. At that point, your compliance gets evaluated two ways: through the PPAP submission itself, and through how well your documented process matches what an AS9100 auditor observes on the floor. Skipping APQP/PPAP discipline doesn’t remove the requirement — it just means you’ll be building the documentation reactively, under deadline pressure, instead of as part of normal program planning.

If you are under customer pressure to submit a first PPAP package quickly → don’t skip straight to the paperwork. Build the process flow diagram and control plan first; the rest of the elements depend on those being accurate.


How Customers Flow Down AS9145 Requirements

This is the question most suppliers actually have: does AS9145 apply to me? The answer is almost always sitting in the contract, not the standard itself. The common flow-down mechanisms:

  • PO notes. Many primes attach AS9145 requirements as a numbered note directly on the purchase order rather than as a standalone contract clause — easy to miss if you’re only reading the drawing and spec callouts.
  • Supplier quality clauses. Most primes and Tier 1s maintain a dedicated supplier quality requirements document with a specific APQP/PPAP clause referencing AS9145 by name. If your customer’s supplier quality manual or PO cites AS9145, AS9102, or “APQP/PPAP” directly, it applies to that part.
  • Boeing. Boeing’s Supplemental Quality Requirements for Suppliers document and its PO Notes system govern when APQP applies. As of this writing, the framework ties the requirement to the specific part number identified in the procurement agreement rather than a blanket program-wide mandate, and Boeing reserves the right to review and approve APQP/PPAP submissions directly — but these documents are revised periodically, so confirm against the current revision your contract references.
  • Lockheed Martin. Lockheed Martin Aeronautics maintains a supplier quality clause covering APQP/PPAP that’s modeled on AS9145 and, as of this writing, applies to the purchase order and to lower-tier detail parts, plus a related first article inspection clause tying FAI performance into the broader APQP/PPAP system. Like Boeing’s documents, these clauses are revised periodically — verify against the revision cited in your contract.
  • Tier 1 suppliers. A Tier 1 that receives AS9145 flow-down from a prime is typically obligated under its own contract to pass that requirement to its sub-tier suppliers. A shop with no direct relationship to Boeing or Lockheed can still end up on the hook for a full PPAP submission through a Tier 1 customer’s flow-down.

If you are unsure whether AS9145 applies to a specific part → check the purchase order notes and your customer’s supplier quality manual before you start production. The requirement is almost always explicit once you know where to look — it shouldn’t arrive as a surprise mid-program.


Common Triggers for an AS9145 PPAP

PPAP isn’t a one-time event reserved for brand-new parts. Customers typically expect a new or updated PPAP submission when one of these occurs:

  • New product introduction
  • New customer
  • New manufacturing location
  • Major process change
  • Tooling replacement
  • Significant engineering change
  • Customer-requested revalidation

Any one of these can trigger a full or partial PPAP resubmission, even on a part that’s been in stable production for years.

If you are moving production to a new facility or replacing tooling on an established part → confirm with your customer whether a PPAP resubmission is required before you make the change, not after. Retroactive PPAP submissions are far harder to defend than ones planned into the change itself.


Common Mistakes in AS9145 Implementation

  • Treating FAIR as the whole submission. First article inspection is one of eleven elements, not a substitute for the rest.
  • Running PFMEA and control plan development as separate, disconnected exercises. They should reference the same key characteristics — when they don’t, customers catch the mismatch immediately.
  • Skipping MSA on new inspection equipment. A capable process measured with an incapable gauge produces PPAP data that’s difficult to trust.
  • Waiting for the customer to specify element 10 requirements before starting the rest. Customer-specific requirements layer on top of the standard 11 elements — they don’t replace the need to start APQP early.
  • No cross-functional ownership. APQP tends to break down when it’s treated as a quality department task instead of a design-manufacturing-quality collaboration from the start.

Quick AS9145 Readiness Checklist

✅ Design record matches the current released drawing revision
✅ DFMEA and PFMEA completed and cross-referenced to the same key characteristics
✅ Process flow diagram covers every manufacturing and inspection step
✅ Control plan identifies monitoring method and frequency for each key characteristic
✅ MSA completed on gauges used to measure key characteristics
✅ Initial process capability study demonstrates the process can hold tolerance
✅ Packaging and preservation method validated for the part’s handling requirements
✅ FAIR completed per AS9102 and matches the design record
✅ Customer-specific PPAP requirements identified before submission, not after
✅ PPAP approval form included and routed for customer disposition


What Does It Cost to Implement AS9145?

There’s no certification fee, since AS9145 isn’t a certifiable standard — the cost is internal: engineering time for DFMEA/PFMEA, capability studies, and control plan development, plus the price of the standard itself. If your team is also purchasing related AS9100-series documents, buying the standards as a bundle typically costs less than purchasing each one individually, and code CC2026 takes an additional 5% off through December 31, 2026.


FAQ

Is AS9145 the same as AS9100?

No. AS9100 is a certifiable quality management system standard. AS9145 is a non-certifiable process standard covering APQP and PPAP for specific parts and production processes — it operates within an AS9100-certified QMS, not in place of one.

Does every aerospace supplier need to comply with AS9145?

Only when a customer flows down the requirement — through a purchase order, supplier quality manual, or contract clause. It’s not a blanket regulatory requirement, but flow-down has become common enough among primes and Tier 1s that most active aerospace suppliers are likely to encounter it at some point.

How many PPAP elements does AS9145 require?

Aerospace requirements are commonly grouped into eleven PPAP deliverables, compared to the 18 elements used in automotive PPAP under AIAG. Aerospace’s version was scoped down to fit lower production volumes and higher part complexity, though some customers document or group elements slightly differently.

What’s the difference between APQP and PPAP?

APQP is the ongoing planning process across product development. PPAP is the documentation package — built from APQP activities — submitted to the customer for approval before production.

Can a first article inspection report substitute for a full PPAP submission?

No. FAIR is one of the eleven commonly documented PPAP elements (element 9), not a replacement for the rest. A part can pass first article inspection and still have an incomplete PPAP package if the risk analyses, control plan, or capability studies are missing.

Is there a registrar audit specifically for AS9145?

No. There’s no accredited certification body issuing AS9145 certificates. Compliance is verified through the customer’s review of your PPAP submission and, indirectly, through your AS9100 surveillance audits if APQP/PPAP has become a contractual requirement your registrar is checking against.

Where do I buy the AS9145 standard?

Through the ANSI Webstore, the authorized distributor for SAE aerospace standards. Avoid free PDF copies circulating outside official channels — they’re frequently outdated or incomplete, and using one puts your PPAP submission at risk of referencing superseded requirements.

How does AS9145 relate to NADCAP?

They’re independent systems addressing different risk areas. AS9145 governs new product and process introduction through APQP/PPAP. NADCAP accredits special processes like heat treating, welding, and NDT. A supplier can need both, either, or neither depending on what they produce and what their customers require — see our full comparison for the details.

How do I know if AS9145 applies to my company?

Check your purchase order notes and your customer’s supplier quality manual. AS9145 flow-down is almost always explicit — cited by name in a PO note or a dedicated APQP/PPAP clause — rather than implied. If you supply a Tier 1 that itself received AS9145 flow-down from a prime, the requirement passes down to you contractually even without a direct relationship to the prime.

What triggers a new PPAP submission on a part already in production?

New product introduction, a new customer, a new manufacturing location, a major process change, tooling replacement, a significant engineering change, or a customer-requested revalidation. Any of these can require a full or partial PPAP resubmission even on parts that have been in stable production for years.


📥 Free Resources


Not Sure What to Do Next?

🔹 Still researching? Read What Is AS9100? to understand the QMS foundation AS9145 sits on top of.

🔹 Ready to build your APQP/PPAP process? Download the AS9100 Rev D Gap Assessment Checklist and confirm your QMS can support the documentation elements before you start.

🔹 Need to buy the standard? AS9145 — ANSI Webstore for the individual standard, or use the ANSI Bundle Link with code CC2026 if you’re purchasing multiple AS9100-series documents together.

🔹 Need training on the QMS context AS9145 operates in? BSI’s AS9100 training courses cover the audit environment your APQP/PPAP process will be evaluated against.

AS9145 rewards suppliers who treat it as a planning discipline instead of a paperwork exercise. Build the risk analyses and control plans as part of your normal development process, and the PPAP submission comes together far more easily. We’ll update this guide if IAQG publishes a revised edition.


Stay Ahead of Aerospace Flow-Down Requirements

Many PPAP rejections trace back less to a misunderstanding of the standard and more to APQP being treated as a last-minute paperwork sprint instead of a planning process run alongside design and manufacturing engineering.

Shops that build DFMEA, PFMEA, and control plans into their normal product development workflow tend to submit cleaner PPAP packages on the first pass. Shops that wait until the customer asks often end up reverse-engineering documentation under deadline pressure — and that’s when submissions are more likely to get rejected.

The Standards Navigator covers AS9145, AS9100, and the rest of the aerospace quality framework suppliers need to stay contract-ready.

👉 Get updates on aerospace quality planning and flow-down requirements
👉 Be first to access new AS9100 and AS9145 resources as we publish them

Subscribe

* indicates required

Industrial Compliance. Clearly Explained.

AS9110 vs AS9120: Which Aerospace Standard Does Your Business Actually Need? (2026)

AS9110 and AS9120 are both aerospace quality standards built on ISO 9001 — but they serve completely different operations. This guide compares MRO certification (AS9110) against stockist distributor certification (AS9120), covering scope, clause differences, cost, and how to confirm which standard actually matches your business.

MRO certification vs. stockist distributor certification — how to tell which AS91XX standard applies to your operation

Affiliate Disclosure: Some links in this article are affiliate links. If you purchase through them, The Standards Navigator may earn a commission at no additional cost to you.


Confusing These Two Standards Can Cost You a Contract

A prime contractor asks if you’re “AS certified.” You say yes — but you say it without knowing which AS certification they mean. That gap shows up fast in a supplier qualification review, and understanding AS9110 vs AS9120 before that conversation happens is what keeps you from losing a bid before you ever quote a price.

AS9110 and AS9120 are both aerospace quality management system standards built on the same ISO 9001 foundation as AS9100. But they exist for two completely different kinds of operations. AS9110 governs maintenance, repair, and overhaul (MRO) organizations. AS9120 governs stockist distributors — companies that buy, store, and resell aerospace parts without altering them. Certify to the wrong one, or assume one covers what the other requires, and you’ll fail a customer audit or lose a contract before the certificate is even printed.

If you’re evaluating which standard applies to your operation — or a supplier is asking which one you hold — this guide breaks down the real differences: scope, clause focus, cost, and how to know which one is actually right for you.

From the Floor: I’ve sat at the table with a smaller machine shop during an onboarding audit with a much larger aerospace manufacturer who assumed AS9100 covered their distribution operation — it didn’t, and it cost them weeks in corrective action before we could approve them as a source. The standard has to match what you actually do on the floor, not what sounds closest to what your customer asked for.

Before you go further, know exactly where your QMS stands. Run your operation against the AS9100 Rev D Gap Assessment Checklist — a 74-item, clause-by-clause tool that also flags where MRO- and distribution-specific requirements diverge from base AS9100. Most gap findings are found six weeks too late. Don’t be one of them.

In This Guide

  • What AS9110 covers and who needs it
  • What AS9120 covers and who needs it
  • Side-by-side clause and scope comparison
  • Certification cost and timeline differences
  • How to know which standard — or standards — your operation needs
  • What’s changing in the 2026 IAQG standards revision
  • FAQs on dual certification, transition, and audit prep


👉 Start Here (Top Resources)


What Is AS9110?

Quick Answer: AS9110 is the aerospace quality management system standard for organizations that perform maintenance, repair, and overhaul (MRO) work on aircraft, engines, components, or related equipment. The current edition, AS9110 Rev C (2016), is titled “Quality Management Systems — Requirements for Aviation Maintenance Organizations” and is built on the ISO 9001:2015 clause structure.

AS9110 applies to organizations that touch a product’s airworthiness after it’s already in service — not organizations designing or manufacturing it new. That includes:

  • FAA Part 145 certified repair stations
  • Engine and component overhaul shops
  • Organizations performing continuing airworthiness management
  • MRO providers serving commercial, private, or military aircraft

The clause set adds requirements around configuration control of repaired items, release-to-service documentation, component traceability through the repair cycle, and management of customer-supplied product — all specific to the risk profile of returning a used part to service rather than shipping a new one.

If you’re comparing AS9110’s foundation to base ISO 9001, our AS9100 vs ISO 9001 breakdown covers the shared clause structure that AS9110 inherits.

What Is AS9120?

Quick Answer: AS9120 is the aerospace quality management system standard for stockist distributors — companies that procure aerospace parts, materials, or assemblies and resell them without physically modifying the product. The current edition, AS9120 Rev B, is titled “Quality Management Systems — Requirements for Aviation, Space and Defense Distributors.”

AS9120 is intentionally narrow in scope. It’s built for organizations that buy from an approved source, store product under controlled conditions, and ship it back out — sometimes splitting larger lots into smaller quantities, or performing a customer- or regulatory-required inspection before delivery. It is explicitly not intended for organizations that repair, maintain, or perform any process that changes the product’s characteristics or conformity.

That distinction matters because it drives the clause focus. AS9120 emphasizes:

  • Purchasing controls and approved source verification
  • Prevention of counterfeit and suspect unapproved parts
  • Storage, handling, and shelf-life control
  • Traceability of parts back to the original manufacturer

If counterfeit parts prevention is a gap area for your operation, our Counterfeit Parts Standards guide covers the AS9100-family clause requirements — including how AS9120 handles it for distributors specifically.

Infographic comparing AS9110, AS9120, and AS9100 to help aerospace organizations determine the correct quality management standard based on maintenance, distribution, or manufacturing activities.
This decision guide helps aerospace organizations determine whether AS9110, AS9120, or AS9100 best aligns with their operational scope and certification requirements.

AS9110 vs AS9120: Side-by-Side Comparison

Category AS9110 (MRO) AS9120 (Distributors) Who it applies to Maintenance, repair, and overhaul organizations Stockist distributors, no physical modification of product Current edition Rev C (2016) Rev B Base standard ISO 9001:2015 ISO 9001:2015 Primary risk addressed Airworthiness of returned-to-service parts Traceability and authenticity of resold parts Key added clauses Release-to-service documentation, configuration control, maintenance data control Approved source verification, counterfeit parts prevention, lot control Typical certified organizations FAA Part 145 repair stations, engine overhaul shops Parts distributors, stockist suppliers, kitting operations Physical modification of product Yes — repair, overhaul, alteration No — resale only, with limited exceptions (splitting lots, inspection) Can be held alongside AS9100 Yes, for operations doing both design/production and MRO Yes, though less common — usually a standalone certification

⚠️ Most common finding: Auditors regularly flag distributors who hold AS9120 but perform light processing — such as re-marking, relabeling, repackaging, or other activities that affect traceability documentation — without realizing that activity may push them out of AS9120’s defined scope and into AS9110 or AS9100 territory. Know exactly what your operation does to the product before you pick a standard.

If you are unsure which standard matches your actual operation → map every process step against the AS9110 and AS9120 scope statements before you approach a certification body, not after you’ve already scheduled an audit.

Side-by-side AS9110 vs AS9120 comparison infographic showing differences in maintenance, repair, overhaul, distribution, traceability, documentation, and quality management requirements.
This AS9110 vs AS9120 comparison highlights where the two aerospace quality management standards share common requirements and where their operational focus differs.

Certification Cost and Timeline

Neither AS9110 nor AS9120 certification is dramatically more expensive than base AS9100 — the cost driver is usually organization size and audit complexity, not which standard you’re certifying to. Expect the same general cost structure: registrar audit fees, any documentation or consulting spend, and internal resource time for gap closure and internal audits.

For a full breakdown of what drives AS9100-family certification cost, see How Much Does AS9100 Certification Cost? — the same cost categories apply to AS9110 and AS9120 audits, with adjustments for scope.

If you are budgeting for certification this year → don’t assume AS9120 is cheaper because the standard is “smaller.” Distributor audits still require full documentation review, internal audit evidence, and a two-stage certification audit through an accredited registrar.

How Long Does Implementation Take?

Timeline follows the same general phases as AS9100: gap assessment, documentation build-out, implementation and internal audit, then the two-stage certification audit. Organizations with an existing ISO 9001 QMS typically move faster because the foundational clause structure is already in place — AS9110 and AS9120 add to that structure rather than replacing it.

For a phase-by-phase breakdown you can apply to either standard, our AS9100 Implementation Timeline walks through the realistic timeline most organizations should plan for.

Most teams miss this step — run a gap check against the specific standard you’re pursuing before you start building documentation. A generic AS9100 gap assessment won’t fully capture AS9110’s release-to-service requirements or AS9120’s distributor-specific traceability and counterfeit-part controls. Check yours before you invest in a documentation build-out you’ll have to redo →


Do You Need Both?

Some organizations legitimately need more than one AS91XX certification — a Tier 1 supplier that manufactures parts and also runs an internal repair operation might hold both AS9100 and AS9110. A distributor that occasionally performs approved rework might need to evaluate whether AS9120 alone still covers their scope, or whether they’ve drifted into AS9110 or AS9100 territory.

If you are already AS9100 certified and expanding into MRO or distribution work → don’t assume your existing certificate covers the new activity. Confirm scope with your registrar before you take on contracts that depend on AS9110 or AS9120 coverage you don’t actually have.

Traceability requirements run through all three standards, just with different emphasis. If you’re building out traceability documentation, our AS9100 Traceability Requirements article covers the clause 8.5.2 requirements that AS9110 and AS9120 both extend from.

Decision flowchart comparing AS9110 vs AS9120 and AS9100, helping aerospace organizations determine the correct quality management standard based on maintenance, distribution, or manufacturing activities.
This AS9110 vs AS9120 decision flowchart guides aerospace organizations to the quality management standard that best matches their operational scope and certification needs.

Objection: “We’re Small — Do We Really Need to Certify to the Exact Right Standard?”

Yes, and here’s why it’s not just paperwork. Prime contractors and OEMs use your certification scope to determine what work they can flow down to you without additional oversight. If your certificate doesn’t match your actual scope of work, you risk being disqualified from a bid, or worse, passing an audit on paper while operating outside your certified scope — which becomes a much bigger problem the first time there’s a quality escape traced back to your facility.

Small organizations especially benefit from getting this right the first time, because a second certification audit to fix a scope mismatch costs real money and real time you don’t get back.


What’s Changing: The 2026 IAQG Standards Revision

The International Aerospace Quality Group is currently working through a comprehensive revision of the AS9100 series. Current IAQG working materials indicate the standards are expected to transition to the IA9100-series naming convention, although final publication details and transition requirements have not yet been formally released. Planned changes include stronger supplier management requirements, formal cybersecurity risk integration, and expanded counterfeit parts prevention measures for distributors specifically.

⚠️ This revision has not been published as final text as of this writing, and no confirmed transition deadline has been set. Treat any specific 2026 publication date as preliminary until IAQG and SAE International confirm final release. We’ll update this article once the revised editions are formally published.


Quick Audit Checklist: Which Standard Applies to You?

✅ Does your organization physically repair, overhaul, or alter aerospace products after they’ve entered service? → AS9110

✅ Does your organization buy, store, and resell aerospace parts without modification? → AS9120

✅ Does your organization design, develop, or manufacture new aerospace products? → AS9100 — see our What Is AS9100? pillar guide

✅ Does your organization do more than one of the above? → You may need certification to more than one standard — confirm scope with your registrar before proceeding

✅ Have you mapped your actual process steps against the standard’s defined scope statement, not just its title? → Do this before scheduling any certification audit


FAQ

Is AS9110 harder to get certified to than AS9120?

Not inherently. Difficulty depends on how mature your existing quality processes are, not which standard you’re pursuing. AS9110 has more clauses focused on maintenance-specific documentation and release-to-service control, while AS9120 focuses heavily on purchasing and traceability controls. Neither is universally “easier.”

Can a distributor hold AS9100 instead of AS9120?

Technically a distributor could pursue AS9100, but it would include requirements around design and production control that don’t apply to a pure distribution operation. AS9120 is scoped specifically for distributors and avoids that mismatch — which is usually what customers and registrars expect to see.

Does AS9110 or AS9120 replace the need for ISO 9001 certification?

No. Both standards incorporate the full text of ISO 9001:2015 and add aerospace-specific requirements on top of it. You don’t need a separate ISO 9001 certificate in addition to AS9110 or AS9120 — the aerospace standard already contains it — but the underlying quality management principles are the same ones ISO 9001 establishes.

How do I verify a supplier’s AS9110 or AS9120 certification is real?

Check the IAQG’s OASIS database, which lists verified AS9100-family certifications, including AS9110 and AS9120, issued by accredited certification bodies.

What happens if my scope of work doesn’t match my certificate?

You risk failing a customer supplier audit, losing approved-source status with a prime contractor, or facing corrective action findings during your next registrar surveillance audit. If your operation has changed since your last certification cycle, confirm your certificate scope still matches before it becomes a customer’s finding instead of yours.

Is there a bundled cost savings if I need the text of both AS9110 and AS9120?

Is there a bundled cost savings if I need the text of both AS9110 and AS9120?
If you’re evaluating whether your operation needs both standards, buying multiple standards together through ANSI’s bundle packages saves meaningfully compared to purchasing each document separately.

Do AS9110 and AS9120 require the same registrar accreditation as AS9100?

Yes. Certification bodies auditing to any AS91XX standard must be accredited specifically for aerospace scope, not just general ISO 9001 accreditation. Verify your registrar’s aerospace accreditation through ANAB or your relevant national accreditation body before signing a contract.

Will the 2026 IAQG revision require re-certification?

Organizations already certified will go through a transition period once the revised standards (referred to in early IAQG materials as IA9100, IA9110, and IA9120) are formally published. No transition deadline has been confirmed yet — don’t plan around a specific date until IAQG publishes final transition guidance.


📥 Free Resources


Not Sure What to Do Next?

🔹 Still researching which standard applies to your operation? Run the AS9100 Rev D Gap Assessment Checklist — it flags MRO- and distributor-specific gaps alongside base AS9100 clauses, so you’ll know where you actually stand before talking to a registrar.

🔹 Ready to start building your QMS documentation? 9001Simplified’s documentation kits give you a structured starting point you can adapt to AS9110 or AS9120’s added requirements — no consultant required.

🔹 Need to purchase the standard itself? AS9110 — ANSI Webstore or AS9120 — ANSI Webstore. Use code CC2026 for 5% off through December 31, 2026.

🔹 Shopping for training or picking a certification body? BSI’s aerospace training catalog covers AS9100-family courses relevant to both MRO and distribution operations.

Picking the wrong AS91XX standard doesn’t just slow down your certification timeline — it can cost you a supplier qualification you were counting on. The Standards Navigator covers the full AS9100 family so you can certify to the standard that actually matches what your operation does, not just what sounds closest.

Stay Ahead of Aerospace Compliance Changes

Most operations don’t lose a bid because they can’t meet a requirement — they lose it because they certified to the wrong standard for what they actually do. Organizations that map their real scope of work against AS9110 and AS9120 before choosing a path move through certification once. The ones that guess end up doing it twice.

The Standards Navigator tracks the AS9100 family closely, including the upcoming IAQG revision that will affect every organization certified to AS9110 or AS9120.

👉 Get updates on AS9100-family standards, including AS9110, AS9120, and the 2026 IAQG revision
👉 Be first to access new aerospace gap assessment tools and documentation resources as they’re released

Subscribe

* indicates required

Industrial Compliance. Clearly Explained.

NADCAP vs AS9100: Do You Need Both for Aerospace Certification in 2026?

This guide explains the difference between Nadcap accreditation and AS9100 certification, and why AS9100 is typically a prerequisite for Nadcap. It covers which special processes fall under Nadcap, how the two programs relate, common documentation gaps auditors flag, and includes a readiness checklist for suppliers transitioning from AS9100 certification into Nadcap accreditation.

Understanding the difference between quality system certification and special process accreditation

Affiliate Disclosure: Some links in this article are affiliate links. If you purchase through them, The Standards Navigator may earn a commission at no additional cost to you.


Do I Need NADCAP If I’m Already AS9100 Certified?

Short answer: probably — but not for the reason most people assume.

NADCAP vs AS9100 isn’t really an either/or question — it’s two different types of approval that most aerospace suppliers eventually need together.

AS9100 certifies your quality management system. Nadcap accredits specific special processes — heat treating, welding, non-destructive testing, chemical processing, and others where a finished part can look perfect and still be defective in a way no inspection will catch. One certifies how your company runs. The other certifies whether a specific process, done in a specific way, actually works.

If your shop performs any of those processes — or you outsource them to a supplier who does — being AS9100 certified doesn’t automatically cover you. Primes like Boeing, Airbus, and Rolls-Royce increasingly require Nadcap accreditation as a separate, additional condition of doing business, regardless of your QMS certification status.

I watched this play out at a contract coating facility during a Nadcap audit. The production team proudly showed off a batch of aerospace brackets that had passed thickness and adhesion testing with no issues. The paperwork told a different story. The oven chart recorder showed the programmed temperature, but nothing documented that the part itself had reached cure spec before the timer started. The thermocouple used to qualify that oven had been swapped out months earlier during routine maintenance, and nobody had updated the work instruction to match. The finish looked fine. The documentation didn’t prove the process had actually happened the way it was supposed to — and that’s what closed the audit as a finding.

Split-screen infographic showing successful and failed aerospace audit documentation, illustrating how objective evidence supports NADCAP vs AS9100 compliance.
Proper documentation and objective evidence often determine the difference between a successful audit and a nonconformance during NADCAP vs AS9100 compliance.

AS9100 Rev D Gap Assessment Checklist: Before you add Nadcap to your roadmap, confirm your QMS foundation is solid. Run the 74-item, clause-by-clause gap check most operations managers wait too long to do →

Get the Free AS9100 Rev D Gap Assessment Checklist

In This Guide

  • What Nadcap actually accredits — and why it’s not a QMS certification
  • Why AS9100 is a prerequisite for most Nadcap accreditation paths
  • A side-by-side comparison of scope, governance, and audit structure
  • Which processes fall under Nadcap’s special process categories
  • What auditors actually flag when process verification records fall short
  • Real decision-stage guidance for suppliers at every point in the process
  • Where the standards and accreditation criteria come from — and how to buy or start


👉 Start Here (Top Resources)

  • Buying the AS9100 standard itself: SAE AS9100 — ANSI Webstore — the current official edition, direct from ANSI’s authorized store.
  • Building or tightening your QMS documentation before a Nadcap audit: 9001Simplified Documentation Kits — pre-built procedures and forms that hold up under both AS9100 and Nadcap’s quality-system scrutiny, without hiring a consultant.
  • AS9100 training for your internal audit team: BSI AS9100 Training Courses — useful if you’re staffing up internal audit capability before pursuing Nadcap.

What Nadcap Actually Accredits

Nadcap — no longer written in all caps, and no longer standing for “National Aerospace and Defense Contractors Accreditation Program” in PRI’s own branding — is an industry-managed accreditation program administered by the Performance Review Institute (PRI). It’s governed directly by the aerospace primes that require it: Boeing, Airbus, Rolls-Royce, Honeywell, and others sit on the task groups that write and revise the audit criteria. AS9100 itself, by contrast, is published and maintained by SAE International, the aerospace industry’s standards-development body.

Here’s the distinction that trips people up: Nadcap doesn’t accredit your company. It accredits a specific process, performed a specific way, at a specific facility. If you run heat treating and chemical processing, you’d pursue separate Nadcap accreditations for each — and you wouldn’t automatically hold accreditation for a process you don’t perform. That’s fundamentally different from AS9100, which certifies your entire quality management system as one integrated audit.

The processes covered are the ones that can’t be verified by looking at the finished part. A weld can look clean and still fail. A heat-treated part can meet dimensional spec and still have the wrong microstructure. This is the same principle behind AS9100 Clause 8.5.1(f) — controlled conditions for special processes — but Nadcap goes deeper, with process-specific technical criteria that a general QMS audit isn’t built to evaluate.

What Counts as a Nadcap “Special Process”?

Nadcap organizes accreditation into roughly 17 special process categories, each governed by its own Task Group. The ones most relevant to fabrication, machining, and coatings operations include:

  • Heat Treating — furnace pyrometry, controlled atmosphere, hardness verification
  • Welding — fusion welding, resistance welding, brazing
  • Non-Destructive Testing (NDT) — penetrant, radiographic, ultrasonic, magnetic particle
  • Chemical Processing — plating, anodizing, chemical conversion coatings
  • Coatings — thermal spray and other applied coatings on aerospace hardware
  • Materials Testing Laboratories — mechanical and chemical test labs
  • Composites — layup, curing, and bonding of composite structures
  • Non-Conventional Machining — EDM, chemical milling, laser processing
  • Elastomer Seals — molding and processing of seal components
  • Aerospace Quality Systems (AC7004) — the QMS alternative for suppliers without AS9100

If your facility touches any of these — or you flow work down to a subcontractor who does — that’s the process that needs its own Nadcap accreditation, separate from your AS9100 certificate.


Why AS9100 Is (Usually) a Prerequisite for Nadcap

Roadmap illustrating the typical aerospace supplier certification path from ISO 9001 and AS9100 to Nadcap accreditation for special processes.
This roadmap shows how manufacturers typically progress from a quality management system to Nadcap special process accreditation for aerospace customers.

PRI requires evidence of an acceptable quality management system before granting most Nadcap accreditations. For most aerospace suppliers, AS9100 certification is the route used to satisfy that expectation. In practice, that means one of two paths:

  1. You already hold AS9100 certification from an accredited third-party registrar. PRI accepts this as satisfying the QMS prerequisite.
  2. You don’t hold AS9100 yet. PRI will assess your QMS against AC7004 — a checklist-based alternative modeled on AS9003, audited directly by PRI rather than a separate registrar. If you go this route, expect an additional day added to your special process audit, at PRI’s day rate, which typically runs higher than standard registrar pricing.

Most suppliers who already have customers in aerospace choose the first path. If you’re already pursuing AS9100 certification for other reasons — customer requirement, competitive positioning — getting it in place before you start the Nadcap process avoids paying PRI’s premium AC7004 day rate for a QMS review you’ll need anyway.

Most common finding: Suppliers who assume their AS9100 certificate alone satisfies Nadcap’s documentation expectations for a specific process. It doesn’t. Nadcap auditors expect to see process-specific records — pyrometry surveys, weld procedure qualifications, NDT technique sheets — that go well beyond what a general AS9100 surveillance audit reviews.


Nadcap vs AS9100: Side-by-Side Comparison

CategoryNadcapAS9100
What it certifiesA specific special process (heat treat, welding, NDT, etc.)The organization’s entire quality management system
Governing bodyPerformance Review Institute (PRI), industry task groupsThird-party registrars accredited under the IAQG scheme
Scope of auditDeep, technical, process-specific criteriaBroad, system-level clauses across the organization
PrerequisiteAS9100 (or PRI’s AC7004 equivalent) required firstISO 9001 QMS foundation; no prerequisite certification
Who mandates itIndividual primes (Boeing, Airbus, Rolls-Royce, etc.) via contract flow-downIncreasingly required across the aerospace supply chain broadly
Reaccreditation cycleTypically every 12–24 months, process-dependentTypically annual surveillance, 3-year recertification
Applies toOnly the processes actually performed at that facilityThe entire organization as a single certified entity

If you’re evaluating both standards side by side, buying them together through ANSI’s standards bundle is worth checking before purchasing individually — bundle pricing on standards documents tends to beat buying each one separately, and code CC2026 takes an additional 5% off through December 31, 2026.

Infographic comparing NADCAP vs AS9100 audit focus, showing system-level quality management requirements versus special process technical controls for aerospace manufacturers.
See how NADCAP vs AS9100 audits differ, with AS9100 evaluating quality management systems and Nadcap assessing technical controls for special processes.

Decision-Stage Guidance: Where Are You in This Process?

  • If you are AS9100 certified and just found out a customer requires Nadcap → don’t panic and don’t assume you need to redo your QMS. Identify which specific process the customer needs accredited, pull the relevant Task Group’s audit criteria from PRI’s eAuditNet-based platform, and run a gap assessment against that specific checklist.
  • If you are not yet AS9100 certified but know Nadcap is coming → get AS9100 certification moving first. Paying a registrar for AS9100 is almost always cheaper than paying PRI’s added day rate for an AC7004 QMS review layered onto your special process audit.
  • If you are already Nadcap accredited for one process and adding a second → don’t assume your existing accreditation covers related work. Each process category has its own Task Group, its own audit criteria, and its own accreditation — verify the specific checklist before you commit resources.

The Objection Nobody Says Out Loud: “We Can’t Afford Two Certifications”

This is the real hesitation behind most delayed Nadcap decisions, and it’s worth addressing directly. You’re not paying for two unrelated programs. AS9100 gives you the documented QMS foundation — document control, corrective action, internal audit processes — that Nadcap auditors expect to already be in place before they even start evaluating your process-specific records. Facilities that treat AS9100 as a genuine operating system, not a binder for the auditor, spend less time and money on Nadcap corrective actions later. The two costs aren’t additive in the way they feel like they should be — a strong AS9100 implementation reduces the Nadcap audit burden.

If cost timing is the real constraint, accredit one process first — typically whichever one your highest-value customer is asking for — rather than trying to fund every applicable process category in the same audit cycle.


Quick Readiness Checklist: AS9100-to-Nadcap Transition

✅ AS9100 certificate is current and in good standing with your registrar
✅ You’ve identified every special process performed on-site or flowed down to a subcontractor
✅ You’ve pulled the specific Task Group audit criteria for each applicable process
✅ Calibration and equipment qualification records (pyrometry, thermocouples, gauges) are current and traceable
✅ Internal audits cover process-specific technical requirements, not just system-level clauses
✅ Work instructions match the actual equipment and setup currently in use — not what was documented at initial qualification


FAQ

Is Nadcap a certification or an accreditation?

It’s an accreditation, and the distinction matters. Certification typically applies to a management system (like AS9100). Accreditation applies to a specific technical process performed a specific way — Nadcap accredits your heat treating process, not your company as a whole.

Do I need AS9100 before I can get Nadcap accredited?

In most cases, yes. PRI requires evidence of an acceptable QMS before granting most Nadcap accreditations, and AS9100 certification is the route most suppliers use to satisfy that expectation. Without it, PRI will assess your QMS against AC7004 as part of the Nadcap audit, typically adding cost and time.

What is AC7004, and can I use it instead of AS9100?

AC7004 is PRI’s own checklist-based QMS assessment, based on AS9003, used when a supplier doesn’t hold AS9100. It’s audited exclusively by PRI rather than a third-party registrar, and it’s generally more expensive per day than a standard AS9100 surveillance audit.

How long does Nadcap accreditation take?

Many first-time suppliers should expect six months or longer from preparation to accreditation, with timelines varying significantly based on process scope and audit readiness.

How much does Nadcap accreditation cost?

Cost varies significantly based on the number of process categories, facility complexity, and whether you already hold AS9100. PRI provides a formal quote after you request an audit through their platform — there’s no flat published rate, since scope drives cost more than anything else.

Do Boeing, Airbus, and other primes actually require Nadcap?

For special processes, yes — it’s typically a mandatory contractual flow-down requirement, not optional best practice. If you perform heat treating, welding, NDT, or chemical processing for a prime that mandates Nadcap, AS9100 alone won’t satisfy that specific contract requirement.

Is Nadcap accreditation the same across every special process?

No. Each process category — heat treating, welding, NDT, coatings, and the rest — has its own Task Group, its own audit criteria, and its own accreditation cycle. Being accredited for one process doesn’t extend to another, even a related one.

How often do I need to renew Nadcap accreditation?

Reaccreditation audits typically happen every 12 to 24 months, depending on the process category and your audit history. Processes with a stronger track record may move to a longer reaccreditation cycle over time.


📥 Free Resources


Not Sure What to Do Next?

🔹 Still researching whether you need Nadcap at all? Start with What Is AS9100? to confirm your QMS foundation is understood before layering on process-specific accreditation questions.

🔹 Ready to start preparing for a Nadcap audit? Run the AS9100 Rev D Gap Assessment Checklist first — closing QMS gaps now saves you from PRI flagging system-level issues during a process-specific audit.

🔹 Need to buy the standard itself? Get the current edition of SAE AS9100 through ANSI Webstore, and check the ANSI standards bundle with code CC2026 if you’re purchasing multiple related standards at once.


Nadcap and AS9100 aren’t competing paths — they’re layered requirements, and treating them as separate line items instead of one connected system is where most suppliers lose time and money. The Standards Navigator covers both sides of aerospace compliance: the QMS foundation and the special process accreditation built on top of it.


Stop Guessing at What Your Customer Actually Requires

Suppliers who wait until a customer flow-down requirement lands in their inbox end up scrambling to figure out which Task Group criteria apply and whether their existing documentation even comes close. Suppliers who build Nadcap readiness into their AS9100 QMS from the start walk into that audit with process records already in the shape auditors expect to see.

The Standards Navigator tracks AS9100, Nadcap, and the aerospace supply chain requirements layered on top of both — so you’re not piecing this together from forum threads and PRI’s website.

👉 Get updates on AS9100 and Nadcap accreditation requirements as they develop
👉 Be first to access new aerospace compliance checklists and gap assessment tools

Subscribe

* indicates required

Industrial Compliance. Clearly Explained.

FOD Control Standards: What AS9100 Clause 8.5.4 Actually Requires in 2026

This guide explains what AS9100 Clause 8.5.4 requires for FOD control, including tool accountability, bin-level traceability, and the difference between general housekeeping and true foreign object prevention. It covers common FOD program mistakes, how NAS412 aligns with Clause 8.5.4, and includes a readiness checklist for aerospace suppliers preparing for their next audit.

Foreign object debris prevention requirements for aerospace suppliers and manufacturers

Affiliate Disclosure: Some links in this article are affiliate links. If you purchase through them, The Standards Navigator may earn a commission at no additional cost to you.


The FOD Finding That Shuts Down an Audit Fast

An extra washer in a parts bin. A dropped safety wire clipping near an open assembly. A wrench left inside a housing before it’s closed up. None of these look like a big deal on their own — until an auditor asks you to prove your FOD prevention program actually controls them.

In aerospace, FOD is commonly used to refer to Foreign Object Debris, Foreign Object Damage, and the activities used to detect and prevent both. It’s one of the fastest ways to generate a nonconformance in an AS9100 audit. Not because suppliers don’t understand the concept. Because most FOD programs exist as a policy statement in the quality manual and nothing else: no tool accountability, no bin-level traceability, no documented investigation process when something turns up that shouldn’t be there.

If you’re preparing for your first AS9100 certification, or your registrar has already flagged FOD control as a weak area, this guide breaks down exactly what Clause 8.5.4 requires, what a real FOD prevention program looks like on the floor, and where most aerospace suppliers fall short.

I’ve worked a build where a color-coded parts bin for a safety-critical pressure relief valve assembly came back from final assembly with one extra washer in it — not a missing part, an extra one. That immediately raised a FOD question: had hardware been added to the wrong build, or had something gone unaccounted for during assembly? The accountability review identified an assembler who had found a washer on the floor during cleanup and placed it in the nearest bin instead of reporting it. The investigation confirmed the valve assembly was complete and unaffected, but bin-level tracking and end-of-build verification caught the discrepancy before the product moved forward, and that’s exactly the kind of documented accountability Clause 8.5.4 expects to see.

👉 If your FOD prevention program is a paragraph in your quality manual and nothing else, that’s the gap auditors find first → Download the AS9100 Rev D Gap Assessment Checklist

In This Guide:

  • What AS9100 Clause 8.5.4 actually requires for foreign object prevention
  • What counts as a foreign object — common FOD examples
  • How FOD control differs from general shop housekeeping
  • Tool control and bin-level traceability as core FOD prevention methods
  • NAS412 and how it aligns with Clause 8.5.4 expectations
  • Common FOD program mistakes that generate audit findings
  • A quick FOD control readiness checklist


👉 Start Here (Top Resources)


What Counts as a Foreign Object? (FOD Examples)

Quick Answer: A foreign object is any item that doesn’t belong in a controlled work area, assembly, or product — anything that could migrate into a system, jam a mechanism, contaminate a surface, or get sealed inside a finished part. Common FOD examples include:

  • Loose hardware (nuts, bolts, washers, fasteners)
  • Safety wire clippings
  • Drill shavings and metal chips
  • Tape fragments and backing material
  • Packaging material (foam, plastic, cardboard)
  • Shop rags and cleaning cloths
  • Broken tool pieces (drill bit tips, blade fragments)
  • Personal items such as pens, markers, or jewelry

The washer in the story above is a textbook example — a small, easily overlooked item that becomes a real problem the moment it ends up somewhere it shouldn’t be. AS9100 Clause 8.5.4 doesn’t limit “foreign object” to any specific category of item; it’s a functional definition tied to whether something could cause damage, contamination, or malfunction if it goes undetected.


What AS9100 Clause 8.5.4 Actually Requires

Quick Answer: AS9100 Clause 8.5.4 (Preservation) requires organizations to include foreign object prevention, detection, and removal as part of preserving product during production and service provision. The clause doesn’t hand you a program — it hands you an obligation, and you’re expected to build the controls that satisfy it.

The exact language is short. Preservation activities must include, where applicable, provisions for the prevention, detection, and removal of foreign objects. That’s it. There’s no prescribed checklist inside AS9100 itself for how to do this — which is exactly why so many suppliers under-build their FOD program. They read the clause, write a policy statement, and consider it satisfied.

Auditors don’t read it that way. They expect to see:

  • A documented FOD prevention program, not just a policy sentence
  • Defined controlled areas where FOD risk is highest (open assemblies, confined spaces, areas near flight hardware)
  • Tool and material accountability — a way to prove nothing entered a controlled area that didn’t leave it
  • A process for investigating and closing out FOD incidents when something unexplained turns up
  • Training records showing personnel understand what FOD is and why it matters in their specific work area

If you are preparing for your first AS9100 certification → don’t wait for the registrar to ask about FOD. Build the program before Stage 1, not in response to a finding.

For the aerospace-specific clauses this connects to, see What Is AS9100? and Aerospace Supplier Compliance Standards.


FOD Control vs. General Shop Housekeeping

Comparison of general housekeeping and FOD control in an aerospace manufacturing facility, showing why AS9100 requires documented accountability beyond a clean work environment.
A clean facility supports safety, but effective FOD control requires documented accountability, tool verification, traceability, and inspection throughout production.

This is the mistake that trips up suppliers new to aerospace work: assuming a clean shop floor satisfies FOD requirements. It doesn’t. Housekeeping and FOD control solve different problems.

CategoryGeneral HousekeepingAS9100 FOD Control
ObjectiveClean, organized, safe work areaZero foreign material inside product or controlled zones
ScopeWhole facilityDefined controlled areas: assemblies, confined spaces, near flight hardware
AccountabilityVisual — looks cleanTraceable — accounted for, tool counts, bin verification
DocumentationCleaning schedulesFOD prevention program, incident investigation records
Failure modeClutter, safety hazardUndetected object inside delivered product
Audit evidenceWalkthrough observationProgram documentation, training records, incident logs

A spotless shop floor can still fail an AS9100 FOD audit if there’s no traceability behind it. Auditors aren’t evaluating whether your facility looks clean — they’re evaluating whether you can prove a foreign object couldn’t make it into a delivered product undetected.

⚠️ Most common finding: a supplier has a genuinely clean facility, a general housekeeping policy, and zero FOD-specific documentation. The registrar writes it up anyway, because “clean” and “controlled” aren’t the same thing under Clause 8.5.4.


Tool Control: The Foundation of FOD Prevention

Aerospace FOD control system showing tool accountability with a shadow board, tool check-out log, hardware kit verification, and documented inspection records for AS9100 compliance.
Tool accountability is a critical element of FOD control, ensuring every tool is tracked, verified, and accounted for before work is complete.

Tool control is the single most auditable piece of a FOD prevention program, because it produces a paper trail. If a tool goes missing, you need to know within minutes — not at the end of a shift, and not when a customer opens a delivered assembly.

Core tool control practices auditors look for:

  • Shadow boards — foam-cutout or outlined tool storage where a missing tool is visible at a glance, not discovered later
  • Tool check-out/check-in logs — technicians sign tools out at job start and back in at close; a mismatch holds the job open
  • Job-box inventory counts — a documented count of every item in a toolbox or kit before and after work in a confined space or sealed assembly
  • Broken tool tracking — if a tool breaks during use, every piece has to be accounted for before the job closes — a missing drill bit tip doesn’t get shrugged off
  • Bin-level part traceability — parts and hardware tracked by bin or kit from issue through final assembly, so an extra or missing item is immediately traceable to a specific build

If you are already ISO 9001 certified → tool control is the AS9100-specific requirement with no direct ISO 9001 equivalent. General nonconformance handling covers a missing part; it doesn’t cover a tool left inside a sealed assembly.

👉 Most teams miss the closeout step, not the tool control system itself — check yours before your next Stage 2 audit → Download the AS9100 Rev D Gap Assessment Checklist


NAS412 and How It Aligns With Clause 8.5.4

AS9100 doesn’t prescribe a specific FOD prevention methodology, which is why most aerospace primes and registrars point suppliers toward NAS412, the National Aerospace Standard for FOD Prevention, published by the Aerospace Industries Association. It’s not an AS9100 requirement by itself, but it’s the industry’s de facto benchmark for what a defensible FOD prevention program looks like, and it’s frequently flowed down contractually by primes.

NAS412 covers program elements including:

  • Foreign object elimination during facility construction and modification
  • Controlled area designation and access restrictions
  • Tool accountability methods (shadow boards, chit systems, tool counters)
  • Debris removal at the end of every task and every shift
  • Incident reporting and root cause investigation

If you are under customer pressure to certify quickly → aligning your FOD program to NAS412 structure, even informally, gives your registrar and your customer’s supplier quality team a recognizable framework rather than a program built from scratch.

For how AS9100’s aerospace-specific clauses fit together as a full system, see AS9100 Traceability Requirements and AS9100 Counterfeit Parts Standards — both rely on the same bin- and lot-level tracking discipline that a strong FOD program depends on.

The SAE International standards library maintains NAS412 alongside the broader AS9100-family documents, and the IAQG publishes supplemental guidance on foreign object elimination expectations across the aerospace supply chain.


Common FOD Program Mistakes

1. Treating FOD control as a housekeeping responsibility. A clean facility is necessary but not sufficient — see the comparison above.

2. No documented investigation process. When an unexplained object turns up, “we found it and moved on” isn’t a closed loop. Auditors want to see root cause, corrective action, and — where relevant — a check for whether the same issue could exist elsewhere.

3. Tool control without bin-level part traceability. Suppliers often build strong tool accountability but leave parts and hardware untracked at the bin or kit level, which is exactly where a stray washer or fastener slips through.

4. Awareness training with no work-area specificity. Generic “what is FOD” training doesn’t prepare an assembler working near an open valve assembly the same way area-specific training does.

5. No flow-down to sub-tier suppliers. If your FOD prevention requirements stop at your own facility and don’t extend to subcontractors handling flight hardware, that’s a supply-chain gap a customer audit will eventually surface.

If you are building your FOD program from scratch → start with controlled-area identification and tool accountability before layering on documentation. The program has to work on the floor before it works on paper.


FOD control readiness checklist for AS9100 showing documented prevention, tool accountability, controlled work areas, traceability, and audit preparation in an aerospace manufacturing facility.
A comprehensive FOD control readiness checklist helps aerospace manufacturers verify the documented controls, accountability, and traceability needed before an AS9100 audit.

Quick FOD Control Readiness Checklist

✅ FOD prevention program is documented — not just referenced in the quality manual

✅ Controlled areas are formally identified (open assemblies, confined spaces, near flight hardware)

✅ Tool control system in place — shadow boards, check-out logs, or job-box counts

✅ Bin-level or kit-level part traceability tracks components from issue through final assembly

✅ FOD incident investigation process exists and produces documented root cause and corrective action

✅ Personnel training is specific to their work area, not generic FOD awareness only

✅ FOD prevention requirements flow down to sub-tier suppliers where applicable

✅ Records demonstrate the program in use — not just the program’s existence


FAQ

What clause of AS9100 covers FOD requirements?

Clause 8.5.4 (Preservation) requires preservation activities to include provisions for the prevention, detection, and removal of foreign objects, where applicable. It’s a short requirement that leaves the specific program design to the supplier.

Is NAS412 required for AS9100 certification?

Not directly. AS9100 doesn’t name NAS412 as a mandatory reference. In practice, most aerospace primes and registrars expect a FOD prevention program that aligns with NAS412’s structure, and many contracts flow it down explicitly as a requirement.

What’s the difference between FOD, foreign object damage, and foreign object detection?

They’re the same acronym used for three related concepts: Foreign Object Debris (the object itself), Foreign Object Damage (the harm it causes), and Foreign Object Detection (the process of finding it before it causes harm). Most FOD programs address all three together.

Does FOD control apply to every AS9100-certified supplier, or only ones building complete aircraft?

It applies wherever Clause 8.5.4 is relevant to the product — which is nearly every aerospace supplier, not just prime contractors. A machine shop producing a single bracket still needs foreign object controls if that bracket is delivered as flight hardware.

What’s the most common FOD-related audit finding?

A documented policy with no supporting evidence — no tool control log, no incident investigation record, no training specific to the work area. Auditors expect to see the program in active use, not just written down.

Can a supplier fail an AS9100 audit over FOD even with a clean facility?

Yes. A clean shop floor demonstrates good housekeeping, not traceable control. Auditors evaluate whether a foreign object could enter a controlled area or product undetected — cleanliness alone doesn’t answer that question.

Do FOD prevention requirements extend to subcontractors and sub-tier suppliers?

Yes, where those subcontractors handle flight hardware or work in controlled areas. Flow-down of FOD requirements is a common contractual expectation and a gap customer audits frequently catch.

How does tool control relate to FOD prevention specifically?

Tool control is one of the most auditable elements of a FOD program because it creates a traceable record — shadow boards, check-out logs, and job-box counts all prove a tool that entered a controlled area also left it, or that its absence was caught and resolved before the job closed.


📥 Free Resources


Not Sure What to Do Next?

🔹 Still researching whether this applies to your operation — Read What Is AS9100? or Aerospace Supplier Compliance Standards for the full picture of aerospace-specific requirements.

🔹 Ready to assess your current FOD programDownload the AS9100 Rev D Gap Assessment Checklist and confirm where your documentation stands before an auditor asks.

🔹 Need to purchase the standard itself — Get the current AS9100 Rev D text from the ANSI Webstore. Use code CC2026 for 5% off through December 31, 2026.

🔹 Ready to schedule AS9100 trainingBSI Group’s AS9100 training catalog covers preservation and foreign object requirements as part of its full AS9100 coursework.

The Standards Navigator covers every AS9100 clause that trips up aerospace suppliers during certification — not just the ones that get the most attention. FOD control is one of the quieter requirements in the standard, and one of the most common findings when it’s treated as an afterthought.


Stay Ahead of Aerospace-Specific Compliance Gaps

A missing part gets caught fast. An extra part, or a tool nobody accounted for, is the finding that surfaces during a customer audit instead of your own — and by then it’s a supplier corrective action request, not a quiet fix.

Organizations that pass FOD audits cleanly treat Clause 8.5.4 as a real program: tool accountability, bin-level traceability, and a documented investigation process. Organizations that struggle treat it as a paragraph in the quality manual and hope it’s never tested.

The Standards Navigator covers the AS9100 clauses that generate the most audit findings — not just the ones with the most search volume.

👉 Get updates on aerospace-specific compliance requirements as new AS9100 content publishes
👉 Be first to access new gap assessment checklists and clause breakdowns

Subscribe

* indicates required

The Standards Navigator — Industrial Compliance. Clearly Explained.

AS9100 Counterfeit Parts Standards: What Clause 8.1.4 Actually Requires in 2026

AS9100 Clause 8.1.4 requires aerospace suppliers to prevent counterfeit and suspect counterfeit parts from entering their supply chain. This guide breaks down how AS5553, AS6174, and AS6081 apply, where DFARS counterfeit clauses raise the bar for defense work, and what a right-sized prevention program looks like for suppliers of every size.

AS5553, AS6174, and AS6081 explained for aerospace suppliers building a counterfeit parts prevention program

Affiliate Disclosure: Some links in this article are affiliate links. If you purchase through them, The Standards Navigator may earn a commission at no additional cost to you.


A Counterfeit Part Doesn’t Announce Itself

A relabeled transistor looks identical to the real thing until it fails in the field. A remarked fastener passes visual inspection until someone pulls the cert and finds the lot number doesn’t trace back to anywhere real. That’s what makes counterfeit parts different from every other nonconformance you deal with — the part isn’t defective, it’s fraudulent, and your normal inspection process was never built to catch it. Closing that gap is exactly what AS9100 counterfeit parts controls exist to do.

If you’re certified to AS9100, you already know Clause 8.1.4 exists — if you’re still working through what AS9100 actually requires at a higher level, this clause is one piece of a much larger operational planning section. What trips up a lot of suppliers is figuring out how much program they actually need to build, which of the SAE standards apply to their specific supply chain, and whether their customer’s flow-down requirements go further than the base AS9100 clause does.

This guide breaks down what 8.1.4 requires, how AS5553, AS6174, and AS6081 fit together, where DFARS counterfeit clauses come into play for defense work, and what a right-sized prevention program looks like for a supplier that isn’t building satellites.

From the Floor: I’ve sat across the table from a supplier during a corrective action review after a customer audit flagged a raw material lot with no traceable mill certification — not a counterfeit electronic part, but the same root failure: nobody had a documented process for verifying the source before it hit the shop floor. The fix wasn’t complicated. It was a two-page procurement control procedure and a supplier approval list that didn’t exist before. Most operations managers assume counterfeit prevention means expensive testing equipment. Most of the time, it means closing the gap between what you assume your buyer is checking and what’s actually written down.

Before you build or rebuild a counterfeit parts prevention procedure, most operations managers are working from the wrong starting point — assuming their existing purchasing controls already cover it. Run a clause-by-clause AS9100 gap check before you touch your procurement procedure — most gaps show up in 8.1.4 first. Get the free AS9100 Rev D Gap Assessment Checklist and see exactly where your documentation stands against all 74 clause-level requirements, including counterfeit parts control.


In This Guide

  • What AS9100 Clause 8.1.4 requires — and what it deliberately leaves open
  • Why traceability is the foundation of counterfeit prevention
  • What qualifies as a suspect counterfeit part
  • AS5553, AS6174, and AS6081: which standard applies to your supply chain
  • DFARS 252.246-7007 and 252.246-7008 for defense-flow-down contractors
  • The three control points every prevention program needs: purchasing, receiving, inspection
  • GIDEP and why registrars ask about it during audits
  • Building a right-sized program if you don’t handle electronic parts
  • Common audit findings and how to close them


👉 Start Here (Top Resources)

  • AS9100 Rev D Gap Assessment Checklist — free 74-item clause-by-clause checklist to find where your counterfeit parts documentation stands today
  • 9001Simplified — pre-built AS9100 documentation packages that include a counterfeit parts prevention procedure template, so you’re not starting from a blank page
  • SAE/AS9100 Standard — ANSI Webstore — the current edition, needed as your baseline reference for Clause 8.1.4
  • BSI AS9100 Training — if your team needs a working understanding of how counterfeit prevention integrates into your broader QMS audit prep

What Clause 8.1.4 Actually Says

Quick Answer: AS9100 Clause 8.1.4 requires organizations to establish processes that prevent counterfeit or suspect counterfeit parts from entering their product, addressing supplier controls, traceability, inspection, personnel training, reporting, and management of obsolete parts.

AS9100 is maintained by the International Aerospace Quality Group (IAQG). AS9100D introduced Clause 8.1.4, “Prevention of Counterfeit Parts,” as a standalone requirement inside the operational planning and control section. In plain terms, it requires your organization to plan, implement, and control processes appropriate to your organization and product to prevent the use of counterfeit or suspect counterfeit parts, and to minimize the impact if one is discovered.

Here’s the part that surprises people: the clause itself doesn’t name AS5553, AS6174, or AS6081 directly. It leaves the “how” open, which is deliberate — a machine shop making titanium brackets and a Tier 1 avionics integrator face completely different counterfeit exposure, and a one-size-fits-all mandate wouldn’t work for either.


The Five Areas AS9100 Counterfeit Parts Controls Must Address

What it does require, at minimum, is that your process address:

  • Personnel training on counterfeit part risks and detection
  • Application of methods for detection appropriate to the parts you purchase
  • Maintaining traceability of parts and components to their original or authorized manufacturer — the same traceability backbone covered in Clause 8.5.2, which is why weak traceability records are a common thread behind both types of findings
  • A process for reporting counterfeit or suspect counterfeit parts to appropriate authorities
  • Control of parts that reach obsolescence or are no longer supported by the original manufacturer

If you are already ISO 9001 certified → this is one of the requirements with no direct ISO 9001 equivalent, which means you can’t repurpose an existing procedure — you need something built specifically for this clause.


Why Traceability Is the Foundation of Counterfeit Prevention

Every control in a counterfeit prevention program eventually comes back to one question: can you trace this part to its original manufacturer? That’s not a coincidence — it’s why registrars frequently write findings against Clause 8.1.4 and Clause 8.5.2 together during the same audit. A gap in one is almost always a gap in the other.

A working traceability chain for counterfeit prevention typically covers:

  • Original manufacturer traceability — a documented path from the part in your hands back to the OEM or an authorized aftermarket manufacturer, not just to whichever distributor you bought it from
  • Lot traceability — the ability to isolate every unit affected by a specific lot if a counterfeit or nonconforming condition is discovered after the fact
  • Mill certification traceability — for raw material and hardware, a cert that actually matches the heat or lot number stamped on the material, not just a document that arrived alongside it
  • Serialization where applicable — for high-consequence or flight-critical parts, unit-level identification that survives the part through receiving, inspection, and installation

Most counterfeit investigations don’t start with a lab test — they start when someone tries to trace a part backward and hits a dead end. Auditors treat 8.1.4 and 8.5.2 as connected for exactly that reason: a counterfeit part is, by definition, a traceability failure somewhere upstream. If your organization can’t demonstrate an unbroken chain back to an authorized source, no amount of visual inspection at receiving closes that gap. If you’re building or revising your counterfeit prevention procedure, do it alongside your traceability procedure rather than treating them as two separate audit prep exercises — most of the objective evidence a registrar wants overlaps between the two.


What Qualifies as a Suspect Counterfeit Part?

AS9100 counterfeit parts decision flow infographic showing the process for verifying traceability, quarantining suspect parts, investigating suppliers, reporting findings, and completing corrective actions.
This AS9100 counterfeit parts workflow shows the recommended process for handling suspect counterfeit parts, from documentation review through quarantine, investigation, reporting, and corrective action.

Before your team can detect a suspect counterfeit part, they need a working definition of what one looks like. In practice, a part gets flagged as suspect counterfeit when one or more of these conditions shows up:

  • Altered certifications — a certificate of conformance or test report that’s been modified, or that doesn’t match the part it accompanies
  • Relabeled or remarked materials — physical evidence of resurfacing, re-etching, or blacktopping to hide the original part marking
  • Missing or inconsistent traceability records — no documented path back to an authorized source, or documentation that doesn’t align with the physical part
  • Incorrect manufacturer markings — logos, date codes, or lot numbers that don’t match known authentic formatting for that manufacturer
  • Mismatched lot or date code information — a cert referencing one lot while the physical part is marked with another
  • Unauthorized substitutions — a part that performs the intended function but wasn’t sourced through an approved or franchised channel

None of these alone proves a part is counterfeit — but any one of them is enough to trigger quarantine and further investigation under a properly scoped 8.1.4 procedure. Training personnel to recognize these indicators, rather than assuming counterfeit detection requires lab equipment, is often the single highest-value control in a right-sized program.


The Three SAE Standards Behind Counterfeit Prevention

Registrars auditing Clause 8.1.4 don’t expect you to have memorized these standards, but they do expect your procedure to reflect the intent behind them. All three are published by SAE International, the same standards body responsible for the AS9100-series documents. Three matter most:

StandardScopeWho Needs It
AS5553Counterfeit electronic parts — avoidance, detection, mitigation, dispositionAny organization that procures or integrates electrical, electronic, or electromechanical (EEE) parts
AS6174Counterfeit materiel more broadly — not limited to electronicsOrganizations sourcing raw material, hardware, and non-electronic components with counterfeit risk
AS6081Prescriptive avoidance requirements for independent distributors buying from the open marketDistributors and brokers, not manufacturers buying direct from OEMs

If your organization operates as an independent distributor or broker rather than buying direct from OEMs, AS6081 is written specifically for your position in the supply chain — it sets prescriptive avoidance requirements for open-market purchases that AS5553 and AS6174 don’t fully address.

AS5553 has gone through several revisions since it was first published in 2009, reflecting how counterfeit detection techniques and supply chain risk have evolved. The current edition is AS5553E, published in 2025 — always confirm you’re referencing this edition rather than an older one sitting in a binder from your last certification cycle. Get the current AS5553E standard through ANSI Webstore — it’s the source document for the avoidance, detection, mitigation, and disposition requirements referenced throughout this section. The same discipline applies to the AS9100 standard itself: buy from an authorized source and confirm you’re working from the current revision before you build a procedure around it.

AS9100 counterfeit parts infographic comparing authorized aerospace supply chains with high-risk open market sourcing, highlighting traceability, supplier approval, and counterfeit prevention.
This comparison illustrates how authorized suppliers, complete traceability, and approved sourcing reduce AS9100 counterfeit parts risk compared to open-market purchasing and broken documentation.

If your shop doesn’t touch electronic components at all — pure machining, fabrication, or coatings work — AS6174 is the more relevant reference, since it covers materiel counterfeiting broadly rather than EEE parts specifically. Don’t assume “no electronics” means “no counterfeit exposure.” Counterfeit and mismarked raw material, fasteners, and castings are a documented problem in the fabrication supply chain too.

⚠️ Most common finding: Suppliers write a counterfeit parts procedure that references AS5553 by name but only handles electronic components — leaving raw material and hardware purchasing completely uncovered. If you’re under customer pressure to certify quickly → prioritize scoping your procedure correctly before you invest time drafting it.


DFARS: When Defense Contracts Raise the Bar

If any part of your supply chain touches a Department of Defense contract, two DFARS clauses may apply on top of your AS9100 obligations: DFARS 252.246-7007 (Contractor Counterfeit Electronic Part Detection and Avoidance System) and DFARS 252.246-7008 (Sources of Electronic Parts).

What the Two Clauses Actually Require

These clauses apply specifically to contractors subject to Cost Accounting Standards, and they require a documented system addressing a defined set of risk areas — training, inspection and testing criteria, traceability from the original manufacturer through to Government acceptance, supplier qualification, reporting and quarantining, and monitoring of industry alert databases for suspect parts. The requirement traces back to Section 818 of the 2012 National Defense Authorization Act, which was the original legislative response to counterfeit electronic parts turning up in military hardware.

Flow-Down Applies Regardless of Contract Size

If you supply into the defense industrial base — even as a sub-tier supplier several layers removed from the prime contractor — these requirements can flow down contractually regardless of contract size. Don’t assume flow-down doesn’t apply to you because you’re small. Check your purchase order terms and conditions directly.


The Three Control Points Auditors Check

AS9100 counterfeit parts infographic showing the three critical control points of purchasing, receiving inspection, and final inspection for counterfeit prevention.
The three primary control points for AS9100 counterfeit parts prevention are purchasing, receiving inspection, and final inspection, each playing a critical role in protecting the aerospace supply chain.

Regardless of which standards you reference, a workable counterfeit prevention program controls three points in your process:

Purchasing — Your procedure needs to define authorized sources: original component manufacturers, authorized distributors, or franchised sources. Any purchase from the open market or an unfranchised broker should trigger additional scrutiny, not the same approval as a direct-from-OEM buy. If a prospective supplier claims AS9100 certification, verify it against the IAQG OASIS database rather than taking the certificate at face value.

Receiving — Incoming inspection needs criteria specific to counterfeit detection, not just dimensional and functional acceptance. This can be as simple as visual inspection for remarking or resurfacing on lower-risk parts, up to X-ray or decapsulation testing for high-consequence electronic components.

Final inspection — A last check before parts move into production or assembly, catching anything that slipped through receiving inspection or that entered through an internal process gap.

If you are preparing for your first AS9100 certification → start with these three control points before you draft a single page of procedure text, and map them against your overall AS9100 implementation timeline so counterfeit prevention isn’t the piece you scramble to finish in the final weeks. Registrars will trace your process through all three during the stage 2 audit — the same receiving and final inspection points also show up in First Article Inspection requirements, so it’s worth aligning both procedures rather than building them in isolation. Gaps at any one point are a common nonconformance.


👉 Not Sure This Applies to You?

Before you decide your counterfeit exposure is low → verify it against your actual purchasing data, not your assumption. Download the AS9100 Rev D Gap Assessment Checklist and run your procurement records against the clause 8.1.4 criteria in under 45 minutes.


GIDEP and Reporting Obligations

The Government-Industry Data Exchange Program (GIDEP) is the primary clearinghouse where confirmed and suspect counterfeit parts get reported across the aerospace and defense industry. It isn’t mentioned by name inside AS9100 itself, but registrars routinely ask during audits whether your organization monitors GIDEP alerts and has a documented process for screening incoming reports against your active part numbers.

Reporting works both directions. If you discover a suspect counterfeit part, your procedure should define who reports it, to whom, and on what timeline — both internally and, where required by contract, externally to GIDEP or your customer’s designated reporting channel. A procedure that only covers detection and not reporting is incomplete against both AS9100’s intent and most customer flow-down requirements.


Right-Sizing Your Program

Not every AS9100-certified supplier needs a full electronic parts testing lab. If you’re a small or mid-size fabrication or machining operation with limited electronic content in your product mix, a right-sized program typically includes:

  • A documented supplier approval list limited to OEMs, authorized distributors, or franchised sources
  • A written procedure defining what triggers additional scrutiny — any open-market or broker purchase
  • Incoming inspection criteria that specifically call out counterfeit indicators, not just dimensional checks
  • A process for screening GIDEP alerts relevant to your part numbers, even if that’s a manual monthly check rather than an automated feed
  • A defined reporting and quarantine process for suspect parts

Quick Audit Checklist

  • ✅ Counterfeit parts procedure exists and is controlled as a quality document
  • ✅ Approved supplier list distinguishes OEM/franchised sources from open-market sources
  • ✅ Receiving inspection includes counterfeit-specific criteria
  • ✅ Personnel who approve purchases have received counterfeit awareness training
  • ✅ GIDEP monitoring process is documented, even if manual
  • ✅ Reporting and quarantine process defines responsible roles and timelines
  • ✅ Obsolete part sourcing is addressed separately from standard procurement

Common Audit Findings

The objection I hear most from operations managers building this out for the first time is cost — the assumption that counterfeit prevention means investing in testing equipment they can’t justify for their volume. That’s rarely what triggers a nonconformance. The findings that actually show up during AS9100 audits are almost always documentation and scope gaps, not technical capability gaps:

  • A counterfeit parts procedure exists but was never updated after the organization started sourcing a new part category
  • Training records don’t show counterfeit awareness training was actually delivered, even though the procedure references it
  • The approved supplier list doesn’t distinguish franchised distributors from open-market brokers
  • No evidence of GIDEP monitoring, even informally
  • Reporting process is undefined — the procedure says “report suspect parts” without naming who, how, or within what timeframe

If you are already ISO 9001 certified → the good news is your document control and corrective action processes already exist. You’re not building a new management system, just a new procedure that plugs into the one you have — see our full breakdown of AS9100 vs ISO 9001 for the other clauses in the same category. Counterfeit prevention is also just one piece of the broader aerospace supplier compliance picture, which is worth reviewing if you’re building out your quality system section by section.


FAQ

Does AS9100 require a separate written procedure for counterfeit parts?

AS9100 Clause 8.1.4 doesn’t explicitly mandate a standalone written procedure, but in practice nearly every registrar expects to see one as objective evidence that your organization has planned, implemented, and controlled the required processes. A reference buried inside a general purchasing procedure rarely satisfies an auditor looking for a documented, controllable process.

Do I need AS5553 certification to pass an AS9100 audit?

No. AS5553 is a standard your counterfeit prevention procedure can be built around, but AS9100 doesn’t require separate certification to it. Some customers request AS5553 alignment or certification as a flow-down requirement, which is different from what your registrar checks during your AS9100 surveillance or recertification audit.

What’s the difference between AS5553 and AS6174?

AS5553 covers counterfeit electrical, electronic, and electromechanical (EEE) parts specifically. AS6174 covers counterfeit materiel more broadly, including raw material, hardware, and non-electronic components. If your product mix includes both, your procedure should reference both.

Does a machine shop with no electronic components need a counterfeit parts program?

Yes. Clause 8.1.4 applies to counterfeit and suspect counterfeit parts generally, not just electronics. Fabrication and machining operations should scope their program around AS6174’s materiel-focused guidance rather than assuming AS5553’s electronic parts focus is the only relevant reference.

What is GIDEP and do I have to use it?

GIDEP (the Government-Industry Data Exchange Program) is the industry clearinghouse for counterfeit and nonconforming part alerts. AS9100 doesn’t name it directly, but registrars commonly expect evidence that your organization monitors relevant GIDEP alerts as part of your detection process, and reports confirmed or suspect counterfeit parts through it when required by contract.

Do DFARS counterfeit parts clauses apply to me if I’m not a prime defense contractor?

Possibly. DFARS 252.246-7007 and 252.246-7008 apply to contractors subject to Cost Accounting Standards, but the requirements can flow down contractually to sub-tier suppliers regardless of your direct relationship with the government. Check your purchase order terms rather than assuming your distance from the prime contractor exempts you.

How often should the approved supplier list be reviewed for counterfeit risk?

There’s no fixed interval mandated by AS9100 itself, but most effective programs review the approved supplier list at least annually, and immediately whenever a new part category or supplier is added — particularly if that supplier isn’t a franchised distributor or the original manufacturer.

What’s the most common reason suppliers fail this clause during an audit?

Scope gaps, not missing technology. A procedure that names AS5553 but never addresses non-electronic materiel, or a training program that exists on paper but has no records showing it was delivered, are the findings that show up most often — not a lack of expensive test equipment.


📥 Free Resources


Not Sure What to Do Next?

🔹 Still researching what your program needs to look like? Download the free AS9100 Rev D Gap Assessment Checklist and map your current procurement controls against all 74 clauses before you draft anything.

🔹 Ready to build the documentation? 9001Simplified’s AS9100 packages include a counterfeit parts prevention procedure template built to satisfy Clause 8.1.4 — a faster starting point than drafting from scratch. Not sure if a documentation kit is worth it? Read our honest 9001Simplified review first.

🔹 Need to reference the standard itself while you write your procedure? Get the current SAE/AS9100 standard through ANSI Webstore — use code CC2026 for 5% off through December 31, 2026.

🔹 Need your team trained on how this fits into your broader QMS? BSI’s AS9100 training courses cover counterfeit prevention alongside the rest of the AS9100 clause set. Weighing BSI against another registrar? Compare BSI vs ISOQAR before you commit.

Clause 8.1.4 isn’t the hardest requirement in AS9100 — it’s the one most suppliers underestimate because it looks like a paperwork exercise until an auditor asks to see a GIDEP screening process that doesn’t exist. The Standards Navigator will keep tracking this requirement as counterfeit risk across the aerospace supply chain continues to shift.


Stay Ahead of Aerospace Compliance Requirements

Suppliers that treat Clause 8.1.4 as an afterthought find out the hard way, mid-audit. Suppliers that build the procedure early, with clear supplier approval criteria and a documented GIDEP screening process, walk into that same audit with one less place for a nonconformance to hide. That’s the gap The Standards Navigator exists to close for aerospace suppliers working through AS9100.

👉 Get updates on AS9100 clause interpretation and aerospace compliance
👉 Be first to access new aerospace gap assessment tools and documentation resources

Subscribe

* indicates required

The Standards Navigator — Industrial Compliance. Clearly Explained.