AS9100 Certification Bodies: Ranked & Reviewed (2026)

Not every AS9100 certification body brings the same aerospace expertise to an audit. This guide breaks down what AS9100 accreditation actually requires, which certification bodies are active in the space, and the questions to ask before signing with a registrar.

Comparing accredited AS9100 registrars — what to look for, what to avoid, and which body fits your operation

Affiliate Disclosure: Some links in this article are affiliate links. If you purchase through them, The Standards Navigator may earn a commission at no additional cost to you.


Choosing the Wrong Registrar Costs More Than the Audit

Not all AS9100 certification bodies operate the same way. Some assign a dedicated aerospace lead auditor who understands configuration management and counterfeit parts controls on sight. Others rotate generalist auditors who spend half of Stage 1 relearning your industry — and bill you for the education.

A certificate issued by an appropriately accredited certification body is intended to demonstrate conformity to the same AS9100 requirements, regardless of which body issues it. What can differ significantly is the accreditation scope, auditor expertise, scheduling, audit experience, customer acceptance, and overall certification experience. For a supplier chasing a Tier 1 customer deadline, that difference is real money and real risk.

If you’re comparing registrars for the first time, this guide breaks down what accreditation actually means, which bodies are active in the AS9100 space, and how to evaluate quotes so you’re not choosing on price alone. If you’re already certified and evaluating a switch, the sections on auditor consistency and surveillance cadence will matter most to you.

From the floor: I’ve sat through registrar selection more than once at a heavy industrial manufacturing operation — comparing quotes side by side, all technically accredited, all wildly different in price and turnaround. The number that mattered wasn’t the quote total. It was how the registrar answered questions about auditor aerospace experience, how they’d handle surveillance-audit continuity year over year, and what their process looked like if a Stage 2 audit turned up a major finding. One bidder had clearly never audited anything with configuration management or counterfeit-parts controls in scope, and it showed the moment we started asking specifics. That’s the conversation that should happen before you sign, not the one that happens after your first nonconformance over something your auditor didn’t understand.

Before you request quotes, run a clause-by-clause gap check. Most organizations don’t get burned by picking the wrong registrar — they get burned by walking into Stage 1 not knowing where their gaps are. → AS9100 Rev D Gap Assessment Checklist — 74 items, clause-by-clause, built for aerospace suppliers preparing for certification.


In This Guide

  • What AS9100 accreditation actually requires
  • How to verify a registrar is legitimately accredited
  • What separates a good aerospace auditor from a generalist
  • How these certification bodies were evaluated, and which fit different supplier profiles
  • Questions to ask before signing a registrar contract
  • Cost and timeline expectations by registrar type
  • What to do after you select a certification body


👉 Start Here (Top Resources)

👉 Get the official AS9100 Rev D standard before you approach any registrar → AS9100 / SAE Standards — ANSI Webstore

👉 Get your team trained on AS9100 requirements ahead of Stage 1 → BSI Group AS9100 Training

👉 Run a clause-by-clause gap check before requesting quotes → AS9100 Rev D Gap Assessment Checklist


What Does AS9100 Accreditation Actually Mean?

AS9100 certification isn’t something any registrar can simply decide to offer. Certification bodies (also called registrars or CBs) must hold appropriate accreditation and scope to issue an accredited AS9100 certificate — meaning an independent accreditation body has verified the CB is competent to audit against the standard.

For AS9100 specifically, that accreditation runs through a recognized national accreditation body — in the U.S., ANAB accredits more AS9100 certification bodies than any other accreditation body, though it isn’t the only IAF-recognized option (IAS is also recognized). Accreditation is evaluated against ISO/IEC 17021-1 plus the aerospace-specific IAQG 9104-series requirements developed by the International Aerospace Quality Group (IAQG). Holding ISO 9001 accreditation does not automatically mean a certification body also holds AS9100 accreditation — the two are evaluated and scoped separately, and a registrar without current AS9100 accreditation scope cannot issue an accredited AS9100 certificate that meets the applicable certification-scheme requirements, regardless of how experienced their auditors sound on a sales call.

This matters because a certificate from a body without properly scoped accreditation isn’t just a paperwork issue — it may not satisfy your customer’s supplier-qualification requirements, potentially costing you both certification time and audit expense.

For background on what the standard itself requires before you get to registrar selection, see What Is AS9100? and AS9100 vs ISO 9001.


How to Verify a Registrar Is Legitimately Accredited

Don’t take a sales rep’s word for current AS9100 scope. Verify it directly:

1. Check the OASIS database. The IAQG OASIS Certified Supplier Directory is the official record of AS9100-certified organizations and the certification bodies that issued their certificates. If a registrar’s certifications aren’t showing up in OASIS, that’s a serious red flag.

2. Confirm current accreditation scope directly with the accreditation body. ANAB accredits more AS9100 certification bodies in the U.S. than any other accreditation body and publishes which certification bodies hold active accreditation and what scopes each one covers — some registrars are accredited for aerospace manufacturing but not for MRO (AS9110) or distribution (AS9120). If a registrar cites a different IAF-recognized accreditation body, confirm that body’s scope listing directly rather than assuming it’s equivalent to ANAB’s.

3. Ask what your accredited scope actually covers. Rather than asking whether a registrar covers a specific code, ask: “What is your current accredited AS9100 scope, and does it cover the activities, products, and industry sector included in my proposed certification scope?” Have the registrar confirm the applicable industry and technical scope classifications directly — don’t assume a single code number settles the question.

4. Ask for the accreditation certificate, not a logo on a website. A registrar’s marketing page listing “AS9100 Accredited” isn’t proof — request the actual accreditation certificate showing current scope and expiration.

⚠️ Most common finding: Suppliers under customer pressure sometimes select a registrar based on price and turnaround time alone, without confirming current AS9100 scope in detail — then discover during Stage 2 that a scope gap means the certificate won’t satisfy their customer’s supplier requirements.


What Separates a Good Aerospace Auditor From a Generalist

AS9100 certification bodies review with an auditor examining a first article inspection report beside a precision aerospace component
Choosing the right AS9100 certification bodies means looking beyond the certificate to auditor experience and aerospace expertise.

AS9100 auditors need aerospace-specific fluency that a generalist ISO 9001 auditor may not have. This is the criteria worth keeping in mind as you read the comparisons below — it’s the difference that actually separates certification bodies in practice once you’ve confirmed that the appropriate accreditation and scope are in place. When evaluating a registrar, ask specifically about auditor experience in:

  • Configuration management — Clause 8.1.2’s requirements go well beyond typical ISO 9001 document control
  • Counterfeit parts prevention — Clause 8.1.4 requires audit-ready evidence most non-aerospace auditors have never evaluated
  • First article inspection (FAI) — auditors unfamiliar with the AS9102 forms published by SAE International will struggle to evaluate your FAI records meaningfully
  • Special processes and traceability — Clause 8.5.2 traceability requirements are more stringent than general manufacturing

If you are preparing for your first AS9100 certification → confirm the specific auditor assigned to your account has aerospace industry audit hours, not just AS9100 training credentials. Ask the registrar directly; reputable ones will tell you.

For a deeper look at the traceability and counterfeit-parts requirements auditors will actually test against, see AS9100 Traceability Requirements and AS9100 Counterfeit Parts Standards.


How These Certification Bodies Were Evaluated

Before comparing specific bodies, here’s the criteria behind the categories below:

  • AS9100 accreditation status and scope
  • Aerospace auditor availability and depth of aerospace-specific experience
  • Geographic coverage and multi-site capability
  • Ability to combine AS9100 audits with ISO 9001, ISO 14001, or other management-system audits
  • Fit for different supplier types — manufacturers, MRO organizations, distributors
  • Scheduling flexibility and certification-cycle support

These are editorial recommendations based on accreditation scope, aerospace specialization, geographic coverage, multi-standard capability, and fit for different supplier profiles — not customer satisfaction scores, audit outcome data, or any undisclosed commercial relationship. Always verify current accreditation status yourself through OASIS and ANAB before requesting quotes.


AS9100 Certification Bodies Worth Comparing

The six bodies below are established, accredited names in aerospace quality certification worth including in your quote comparison — not a claim that they’re the only six, or objectively the “best” six, available. Dozens of ANAB-accredited bodies issue AS9100 certificates. Always verify current scope through OASIS before signing with any registrar.

If you already have a strong sense of which profile matches your operation → skip to that category below rather than reading all six in order.

AS9100 certification bodies compared by aerospace focus, multi-site operations, manufacturing, and industrial certification needs
AS9100 certification bodies serve different operational needs, from aerospace-focused suppliers and multi-site operations to combined industrial certification.

Best Overall for Multi-Standard Aerospace Suppliers: BSI Group

Why I’d consider them: BSI certifies against a very wide range of standards — AS9100 alongside ISO 9001, AS9110, AS9120, ISO 14001, and most other major management-system standards. If your operation is pursuing more than one certification, or expects to add standards later, that breadth means fewer registrar relationships to manage over time. Ask specifically whether your account would be assigned one lead auditor across all standards or separate auditors per standard — that affects both cost and consistency.

Best for Aerospace-Focused Certification Experience: Perry Johnson Registrars (PJR)

Why I’d consider them: PJR maintains multiple international accreditations (ANAB, UKAS, JAB) and markets a dedicated aerospace audit staff. For a supplier whose top priority is an auditor who won’t need aerospace concepts explained from scratch, this is worth a direct conversation about auditor assignment. Ask for the assigned auditor’s aerospace sector history before you sign, not after.

Best for Manufacturers Entering Aerospace Supply Chains: NSF-ISR

Why I’d consider them: NSF-ISR has a strong general manufacturing and industrial certification presence. For a fabricator or machine shop pursuing AS9100 for the first time as a new aerospace supplier, a registrar with broad industrial-certification familiarity alongside aerospace scope can be a comfortable entry point. Ask how many first-time AS9100 clients they’ve certified in the past year — that experience matters more than tenure alone for a first certification.

Best for Global or Multi-Site Operations: DEKRA Certification

Why I’d consider them: DEKRA’s global reach and integrated auditing across multiple management-system standards make them worth considering for suppliers with international sites. If multi-site consistency is a priority, ask specifically how auditor assignment and certification scope will be coordinated across locations — that coordination is where multi-site certifications most often run into trouble.

Best for Defense and Marine-Adjacent Aerospace: ABS Quality Evaluations

Why I’d consider them: ABS has a long-standing presence in industrial and aerospace certification, with particular relevance for suppliers whose work overlaps defense or marine-adjacent aerospace segments. Ask directly whether their auditor pool has experience with your specific product category — defense-adjacent scope can carry additional documentation expectations worth confirming up front.

Best for Combined Aerospace and Industrial-Process Certification: DNV

Why I’d consider them: DNV brings deep process-industry audit experience alongside aerospace capability — a reasonable fit for suppliers whose certification needs span both aerospace and broader industrial processes. Ask whether a combined audit across your process and aerospace scopes is possible in a single visit, since that’s where DNV’s dual background can actually save audit days.

At a glance:

Best ForCertification Body
Multi-standard aerospace suppliersBSI Group
Aerospace-focused certification experiencePerry Johnson Registrars (PJR)
Manufacturers entering aerospace supply chainsNSF-ISR
Global or multi-site operationsDEKRA Certification
Defense and marine-adjacent aerospaceABS Quality Evaluations
Combined aerospace and industrial-process certificationDNV

For training — as distinct from certification itself — BSI also offers AS9100-specific coursework covering requirements, internal auditing, and lead auditor preparation.

→ Auditors move faster through Stage 1 when your internal team already knows the standard cold: BSI Group AS9100 Training

For a broader comparison of certification bodies across ISO standards generally — not aerospace-specific — see Best ISO Certification Bodies.


Questions to Ask Before You Sign

Bring these ten questions into every registrar call:

✅ What is your current accredited scope for AS9100, and does it cover the activities, products, and industry sector included in my proposed certification scope? (For U.S. certification bodies, confirm the applicable scope through ANAB.)
✅ Who will be the lead auditor assigned to my account, and what aerospace sectors have they audited?
✅ Will the same auditor normally return for surveillance audits, or should I expect rotation?
✅ How many aerospace-specific audits has my assigned lead auditor conducted in the past 12 months?
✅ What is your typical Stage 1 to Stage 2 turnaround time, and what is the planned audit duration?
✅ What happens if my assigned auditor becomes unavailable close to the scheduled audit date?
✅ What is included in the quoted price — are travel expenses included or billed separately?
✅ What is your nonconformance grading criteria, and what happens if Stage 2 produces a major finding?
✅ How are audit-day schedule changes typically handled?
✅ Can my certificate scope accommodate future expansion — additional sites, products, or standards?

AS9100 certification bodies comparison as an operations manager reviews registrar questions before signing
Compare AS9100 certification bodies carefully before signing, including accreditation, aerospace experience, audit approach, cost, and NCR handling.

If you are under customer pressure to certify quickly → prioritize registrars with confirmed availability in your timeframe over the lowest quote. A registrar that can’t schedule Stage 1 for four months doesn’t help you meet a customer deadline, regardless of price.


Cost and Timeline: What to Expect

These are planning ranges, not fixed market prices. Actual AS9100 certification fees depend on employee count, number of sites, audit complexity, applicable scope, operational complexity, shift structure, travel, audit days required, and whether other management systems are audited together.

FactorTypical Planning RangeNotes
Stage 1 + Stage 2 audit fees$8,000–$18,000Varies by facility size, employee count, and site complexity
Annual surveillance audits$3,000–$7,000 per yearRequired to maintain certification between three-year recertification cycles
Recertification audit$6,000–$12,000Every three years, comparable in scope to initial certification

Ask any registrar directly whether combining AS9100 with an existing ISO 9001 or ISO 14001 audit could reduce total audit days — this varies by registrar and by how your existing certifications are scheduled, so get it confirmed in your specific quote rather than assuming a standard discount applies.

On timeline: the 3–6 month range you’ll often hear for “registrar selection to certificate issuance” assumes your QMS is already substantially implemented and you’re simply at the registrar-selection and audit-scheduling stage. It is not a full AS9100 implementation timeline. If you’re starting without an existing QMS, expect considerably longer — see AS9100 Implementation Timeline for phase-by-phase ranges depending on your starting point.

For a full breakdown of certification costs beyond registrar fees — internal audit prep, documentation, and consulting — see How Much Does AS9100 Certification Cost?.


Common Mistakes When Selecting a Registrar

Choosing on price alone. The cheapest quote often reflects less aerospace-specific auditor experience, not efficiency. A registrar that costs more but assigns a dedicated aerospace lead auditor typically pays for itself in fewer findings and less audit-day confusion.

Not confirming scope in detail before signing. As covered above — AS9100 accreditation doesn’t automatically cover AS9110 (MRO) or AS9120 (distribution). If your business spans more than one, confirm scope for each. See AS9110 vs AS9120 if you’re uncertain which applies to your operation.

Assuming certification body and consultant can be the same entity. Certification bodies must maintain impartiality, and accredited certification activities are subject to strict rules governing consulting and conflicts of interest. A certification body should not be building the QMS it is then responsible for certifying. If a “certification body” is offering to build your documentation and then certify you, ask directly how that’s structured to avoid a conflict.

Ignoring auditor turnover history. Ask how long auditors typically stay assigned to accounts. Frequent auditor rotation means re-explaining your operation’s context every surveillance cycle.


What to Do After You Select a Certification Body

Step 1 — Confirm scope and schedule your Stage 1 readiness review. Most registrars offer an optional pre-assessment to catch major gaps before the audit clock starts.

Step 2 — Run your internal gap assessment first. Don’t walk into a pre-assessment blind. → AS9100 Rev D Gap Assessment Checklist

Step 3 — Address FAI, traceability, and counterfeit parts documentation early. These are the areas generalist QMS documentation most often misses. See First Article Inspection Requirements and FOD Control Standards.

Step 4 — Close the knowledge gap before Stage 1, not during it. An auditor testing your team on requirements they’ve never formally learned is one of the most avoidable sources of Stage 1 findings. → BSI Group AS9100 Training


FAQ

Can any ISO 9001 certification body also certify AS9100?

Not automatically. A registrar must hold separate, specific accreditation for AS9100 through ANAB (or an equivalent IAF-recognized accreditation body), evaluated against ISO/IEC 17021-1 plus the IAQG 9104-series requirements. ISO 9001 accreditation does not automatically extend to AS9100 — the two are scoped and evaluated separately.

How do I verify a certification body is actually accredited for AS9100?

Check the IAQG OASIS Certified Supplier Directory, which lists certified organizations and the registrars that issued their certificates, and confirm current scope directly with ANAB. Don’t rely solely on a registrar’s own marketing claims.

Is the cheapest registrar always the wrong choice?

Not automatically — but a significant price gap usually reflects a difference in auditor aerospace experience, scheduling flexibility, or accreditation scope. Compare quotes on auditor qualifications and turnaround time, not just the number.

Do I need a different registrar for AS9100, AS9110, and AS9120?

Not necessarily the same body, but you do need separate accreditation scope confirmed for each standard you’re certifying against, since they cover different operations — manufacturing, MRO, and distribution respectively. See AS9110 vs AS9120 for the distinction.

Can I switch certification bodies mid-cycle if I’m unhappy with my current one?

Yes, though timing matters — most organizations switch at their three-year recertification point rather than mid-cycle, since transferring an active certificate involves a transfer audit process. Talk to your prospective new registrar about transfer procedures before your current cycle ends.

Does a certification body also provide consulting or documentation help?

Generally, no — accredited certification bodies are subject to impartiality rules that treat consulting on your QMS documentation as a conflict of interest with certifying that same QMS. For documentation support, work with a separate consultant or a documentation kit, then bring an independent registrar in for certification.

How long does AS9100 certification take once I’ve selected a registrar?

If your QMS is already substantially implemented, expect roughly 3–6 months from signing with a registrar to certificate issuance, depending on internal readiness and registrar scheduling availability. This is the certification phase only — it doesn’t include building a QMS from scratch. See AS9100 Implementation Timeline for full phase-by-phase ranges depending on your starting point.

What happens if my registrar’s AS9100 accreditation scope doesn’t cover my activities or products?

Your certificate may not satisfy customer supplier-qualification requirements even if the audit itself goes well. Confirm that the certification body’s accredited scope covers the activities and products included in your proposed certification scope before signing, not after certification.


📥 Free Resources

AS9100 Rev D Gap Assessment Checklist — 74-item clause-by-clause checklist for aerospace suppliers assessing their QMS before certification

ISO 13485 Gap Assessment Checklist — free checklist for medical device manufacturers assessing their QMS against ISO 13485 requirements

ISO 9001 Roadmap — step-by-step implementation guide for manufacturers building or improving a quality management system

Manufacturing Compliance Checklist — practical compliance reference covering key ISO, OSHA, and quality requirements for production environments

Supplier Quality Checklist — evaluation tool for assessing supplier quality controls and flow-down compliance before audits or new contracts


Not Sure What to Do Next?

🔹 You’re still researching registrar optionsWhat Is AS9100?AS9100 vs ISO 9001Aerospace Supplier Compliance Standards

🔹 You’re ready to request registrar quotes → Run your gap assessment first → AS9100 Rev D Gap Assessment Checklist

🔹 You need your team trained before Stage 1BSI Group AS9100 Training

🔹 You still need to buy the official AS9100 Rev D standardAS9100 / SAE Standards — ANSI Webstore

🔹 You want to understand certification costs and timeline firstHow Much Does AS9100 Certification Cost?AS9100 Implementation Timeline


The Registrar You Choose Is Part of Your Quality System

Certification is not a one-time transaction — it’s a multi-year relationship with surveillance audits every year and recertification every three. Choosing an accredited body with genuine aerospace auditor experience, transparent scope, and consistent auditor assignment saves far more over that relationship than a lower first-year quote.

At The Standards Navigator, complex standards are translated into practical, real-world guidance you can act on.

Aerospace suppliers don’t fail audits because the requirements are a mystery — they fail because they picked a registrar that didn’t understand their industry, or walked into Stage 1 without a real gap assessment behind them.

Organizations that treat registrar selection as a checkbox end up re-explaining their operation to a new auditor every surveillance cycle. Organizations that vet accreditation scope and auditor experience up front build a certification relationship that gets faster and smoother every year.

At The Standards Navigator, aerospace compliance gets the same clause-level treatment as everything else on this site — no fluff, no generic advice.

👉 Get updates on AS9100 certification, audits, and aerospace supply chain compliance
👉 Be first to access new gap assessment tools and aerospace-specific guides

Subscribe

* indicates required

Industrial Compliance. Clearly Explained.

AS9145 Explained: Aerospace APQP and PPAP Requirements for 2026

AS9145 governs Advanced Product Quality Planning (APQP) and Production Part Approval Process (PPAP) for aerospace suppliers. This guide breaks down the PPAP elements, explains how primes like Boeing and Lockheed Martin flow the requirement down through purchase orders and supplier quality clauses, and covers the triggers that require a new submission.

What Advanced Product Quality Planning and Production Part Approval Really Require From Suppliers

Affiliate Disclosure: Some links in this article are affiliate links. If you purchase through them, The Standards Navigator may earn a commission at no additional cost to you.


When “It Passed First Article” Isn’t the Same as PPAP Approval

A new part clears first article inspection. The customer signs off. Then, three weeks later, a supplier quality engineer emails asking for the DFMEA, the control plan, and the measurement system analysis — none of which were part of the FAI package.

That gap catches a lot of suppliers off guard. First article inspection is one deliverable. AS9145 is commonly structured around eleven.

If you’re new to advanced product quality planning (APQP) in aerospace, this article explains what the standard actually requires. If you’ve already built a PPAP process and want to check it against the full element list, jump to the requirements breakdown below. Either way, this is the standard most aerospace suppliers don’t fully understand until a customer flow-down requirement forces the issue.

From the Floor: I’ve sat across the table from a supplier quality engineer who rejected a PPAP submission because the process capability study only covered one of three key characteristics on the drawing. The part had already passed first article. It didn’t matter — PPAP looks at the whole production process, not just the finished part. That’s the distinction that trips up shops moving from AS9100 compliance into full APQP/PPAP flow-down.

Most operations managers don’t find out their APQP process has gaps until a customer rejects a submission mid-program. Run your QMS against the AS9100 Rev D Gap Assessment Checklist before that happens → Download the free 74-item checklist


In This Guide

  • What AS9145 is and why IAQG created it
  • APQP vs. PPAP — how the two processes fit together
  • The 11 PPAP elements aerospace suppliers typically assemble
  • How AS9145 connects to AS9100, AS9102, and NADCAP
  • Whether AS9145 certification exists (it doesn’t — here’s what that means for you)
  • How customers actually flow down AS9145 requirements — and how to tell if it applies to you
  • Common triggers that require a new or updated PPAP submission
  • Common mistakes suppliers make when implementing AS9145
  • FAQs on scope, cost, and flow-down requirements


👉 Start Here (Top Resources)


What Is AS9145?

AS9145 is the aerospace industry’s standard for Advanced Product Quality Planning (APQP) and Production Part Approval Process (PPAP). The International Aerospace Quality Group (IAQG) released it in November 2016, adapting the automotive industry’s long-established APQP/PPAP framework (built by AIAG) to aerospace and defense manufacturing.

The standard exists because aerospace primes and OEMs — Lockheed Martin, Boeing, Rockwell Collins, and others — needed a structured, auditable way to confirm that a new part, or a part built from a new or changed process, would consistently meet requirements before full-rate production started. AS9100 certification tells a customer your quality management system is sound. AS9145 tells them a specific part and process combination is production-ready.

As of this writing, the current published edition remains the November 2016 release. IAQG has discussed a revision to clarify mandatory versus optional deliverables and streamline change management, but no new edition has been formally published — treat any “AS9145 Revision A” references you encounter online as forward-looking, not current. Verify the current revision status through SAE International or IAQG before purchasing or implementing requirements.


APQP vs. PPAP: Two Processes, One Standard

Infographic comparing AS9145 APQP and PPAP processes, illustrating how Advanced Product Quality Planning activities generate the documentation required for Production Part Approval Process submissions.
This infographic shows how AS9145 connects APQP planning activities to the PPAP documentation package required for aerospace customer approval.

APQP and PPAP are often used interchangeably, which causes confusion. They’re related but distinct.

ElementAPQPPPAP
What it isThe planning process across the product development lifecycleThe documentation package submitted for customer approval
When it happensContinuously, from design through production launchAt defined milestones — typically before full-rate production
PurposeDetect risk early, coordinate design and process feedbackProve the process can repeatably produce a conforming part
OutputDesign reviews, risk assessments, control plansThe 11-element submission package plus the PPAP approval form
OwnerCross-functional team (design, quality, manufacturing)Quality function, submitted to the customer for disposition

Think of APQP as the process and PPAP as the proof. It’s difficult to submit a credible PPAP package without having run APQP first — the PPAP elements are largely artifacts APQP is meant to generate along the way.


The 11 PPAP Elements Aerospace Suppliers Typically Assemble

Infographic illustrating the 11 AS9145 PPAP elements required for aerospace production approval, including design records, DFMEA, PFMEA, MSA, FAIR, and PPAP documentation.
This infographic breaks down the 11 AS9145 PPAP elements that aerospace suppliers assemble to demonstrate production readiness and obtain customer approval.

Automotive PPAP under AIAG runs 18 elements. Aerospace requirements are commonly grouped into 11 aerospace PPAP deliverables under AS9145 — a deliberate scope difference, since IAQG built the standard to fit aerospace’s lower production volumes and higher part complexity rather than copy automotive wholesale. Some customers and auditors group or document these elements slightly differently in practice, so always confirm the exact submission format against your specific customer’s requirements before you finalize a package.

#ElementWhat It Confirms
1Design recordThe part matches the current released drawing/model
2Design risk analysis (DFMEA)Design failure modes were identified and mitigated
3Process flow diagramEvery manufacturing and inspection step is mapped
4Process risk analysis (PFMEA)Process failure modes were identified and mitigated
5Control planKey characteristics are monitored at the right points in the process
6Measurement system analysis (MSA)Gauges and inspection methods are capable of measuring what they claim to measure
7Initial process capability studiesThe process can hold tolerance on key characteristics
8Packaging, preservation, and labeling approvalsThe part survives handling and shipment without degradation
9First article inspection report (FAIR)The part conforms to drawing requirements — see AS9100’s First Article Inspection Requirements for the full clause breakdown
10Customer-specific PPAP requirementsAny additional documentation the customer’s flow-down demands
11PPAP approval formThe customer’s formal disposition — approved, conditional, or rejected

Example: A supplier manufacturing machined aluminum brackets for a military aircraft receives a purchase order that flows down AS9145. The resulting PPAP package would typically include the released engineering drawing, a PFMEA covering the machining operations, a control plan identifying the inspection method and frequency for the critical hole diameters, a gage R&R study validating the CMM program used to measure those diameters, an initial process capability study, the FAIR, and any customer-specific forms called out on the purchase order.

Most aerospace customers expect capability evidence on designated key characteristics, not just a passing measurement. Capability is typically demonstrated using Cp/Cpk studies, ongoing SPC data, or a customer-approved alternative method — which one applies depends on production volume and the risk classification of the characteristic.

If you are already producing FAIRs under AS9100 clause requirements → you likely already have much of element 9 in place. For many suppliers, the remaining gap tends to fall in elements 2 through 7 — the risk analysis and capability studies some shops treat as optional until a customer’s purchase order makes them mandatory.

One of the most common findings: Suppliers often submit a PPAP package with a completed FAIR and design record, but no PFMEA or control plan tied to the same key characteristics. Customers frequently reject these submissions because the package doesn’t clearly show how the process will keep producing conforming parts — only that one sample did.


How AS9145 Connects to AS9100, AS9102, and NADCAP

AS9145 doesn’t operate on its own. It’s woven into the broader aerospace quality framework:

  • AS9100 — your certified QMS is the foundation APQP/PPAP sits on top of. See AS9100 vs ISO 9001 if you’re still building that foundation.
  • AS9102 — governs first article inspection reporting specifically, which becomes PPAP element 9.
  • NADCAP — a separate special-process accreditation system. AS9145 and NADCAP address different risk areas and neither substitutes for the other; see NADCAP vs AS9100 for how the two fit together.

When a customer flows down AS9145 requirements, it typically shows up as a purchase order note or a supplier quality manual reference — not as a separate certification audit. Your registrar’s AS9100 surveillance audit is often where an auditor checks whether your APQP/PPAP process, if you’ve committed to one contractually, is actually being followed.

Infographic showing how AS9145 connects with AS9100, AS9102, NADCAP, and customer flow-down requirements within the aerospace quality management system.
This infographic illustrates how AS9145 integrates with AS9100, AS9102, NADCAP, and customer flow-down requirements to support aerospace quality planning and production approval.

Is AS9145 Certifiable?

No — and this is the objection worth addressing directly. AS9145 is a guidance and requirements standard, not a certifiable one. There’s no accredited registrar issuing “AS9145 certificates” the way there is for AS9100. That leads some operations managers to deprioritize it, assuming it’s optional.

It isn’t, in practice. Contractually, AS9145 becomes a binding requirement once a customer flows it down in a purchase order or supplier quality manual — something primes and Tier 1s do with increasing frequency. At that point, your compliance gets evaluated two ways: through the PPAP submission itself, and through how well your documented process matches what an AS9100 auditor observes on the floor. Skipping APQP/PPAP discipline doesn’t remove the requirement — it just means you’ll be building the documentation reactively, under deadline pressure, instead of as part of normal program planning.

If you are under customer pressure to submit a first PPAP package quickly → don’t skip straight to the paperwork. Build the process flow diagram and control plan first; the rest of the elements depend on those being accurate.


How Customers Flow Down AS9145 Requirements

This is the question most suppliers actually have: does AS9145 apply to me? The answer is almost always sitting in the contract, not the standard itself. The common flow-down mechanisms:

  • PO notes. Many primes attach AS9145 requirements as a numbered note directly on the purchase order rather than as a standalone contract clause — easy to miss if you’re only reading the drawing and spec callouts.
  • Supplier quality clauses. Most primes and Tier 1s maintain a dedicated supplier quality requirements document with a specific APQP/PPAP clause referencing AS9145 by name. If your customer’s supplier quality manual or PO cites AS9145, AS9102, or “APQP/PPAP” directly, it applies to that part.
  • Boeing. Boeing’s Supplemental Quality Requirements for Suppliers document and its PO Notes system govern when APQP applies. As of this writing, the framework ties the requirement to the specific part number identified in the procurement agreement rather than a blanket program-wide mandate, and Boeing reserves the right to review and approve APQP/PPAP submissions directly — but these documents are revised periodically, so confirm against the current revision your contract references.
  • Lockheed Martin. Lockheed Martin Aeronautics maintains a supplier quality clause covering APQP/PPAP that’s modeled on AS9145 and, as of this writing, applies to the purchase order and to lower-tier detail parts, plus a related first article inspection clause tying FAI performance into the broader APQP/PPAP system. Like Boeing’s documents, these clauses are revised periodically — verify against the revision cited in your contract.
  • Tier 1 suppliers. A Tier 1 that receives AS9145 flow-down from a prime is typically obligated under its own contract to pass that requirement to its sub-tier suppliers. A shop with no direct relationship to Boeing or Lockheed can still end up on the hook for a full PPAP submission through a Tier 1 customer’s flow-down.

If you are unsure whether AS9145 applies to a specific part → check the purchase order notes and your customer’s supplier quality manual before you start production. The requirement is almost always explicit once you know where to look — it shouldn’t arrive as a surprise mid-program.


Common Triggers for an AS9145 PPAP

PPAP isn’t a one-time event reserved for brand-new parts. Customers typically expect a new or updated PPAP submission when one of these occurs:

  • New product introduction
  • New customer
  • New manufacturing location
  • Major process change
  • Tooling replacement
  • Significant engineering change
  • Customer-requested revalidation

Any one of these can trigger a full or partial PPAP resubmission, even on a part that’s been in stable production for years.

If you are moving production to a new facility or replacing tooling on an established part → confirm with your customer whether a PPAP resubmission is required before you make the change, not after. Retroactive PPAP submissions are far harder to defend than ones planned into the change itself.


Common Mistakes in AS9145 Implementation

  • Treating FAIR as the whole submission. First article inspection is one of eleven elements, not a substitute for the rest.
  • Running PFMEA and control plan development as separate, disconnected exercises. They should reference the same key characteristics — when they don’t, customers catch the mismatch immediately.
  • Skipping MSA on new inspection equipment. A capable process measured with an incapable gauge produces PPAP data that’s difficult to trust.
  • Waiting for the customer to specify element 10 requirements before starting the rest. Customer-specific requirements layer on top of the standard 11 elements — they don’t replace the need to start APQP early.
  • No cross-functional ownership. APQP tends to break down when it’s treated as a quality department task instead of a design-manufacturing-quality collaboration from the start.

Quick AS9145 Readiness Checklist

✅ Design record matches the current released drawing revision
✅ DFMEA and PFMEA completed and cross-referenced to the same key characteristics
✅ Process flow diagram covers every manufacturing and inspection step
✅ Control plan identifies monitoring method and frequency for each key characteristic
✅ MSA completed on gauges used to measure key characteristics
✅ Initial process capability study demonstrates the process can hold tolerance
✅ Packaging and preservation method validated for the part’s handling requirements
✅ FAIR completed per AS9102 and matches the design record
✅ Customer-specific PPAP requirements identified before submission, not after
✅ PPAP approval form included and routed for customer disposition


What Does It Cost to Implement AS9145?

There’s no certification fee, since AS9145 isn’t a certifiable standard — the cost is internal: engineering time for DFMEA/PFMEA, capability studies, and control plan development, plus the price of the standard itself. If your team is also purchasing related AS9100-series documents, buying the standards as a bundle typically costs less than purchasing each one individually, and code CC2026 takes an additional 5% off through December 31, 2026.


FAQ

Is AS9145 the same as AS9100?

No. AS9100 is a certifiable quality management system standard. AS9145 is a non-certifiable process standard covering APQP and PPAP for specific parts and production processes — it operates within an AS9100-certified QMS, not in place of one.

Does every aerospace supplier need to comply with AS9145?

Only when a customer flows down the requirement — through a purchase order, supplier quality manual, or contract clause. It’s not a blanket regulatory requirement, but flow-down has become common enough among primes and Tier 1s that most active aerospace suppliers are likely to encounter it at some point.

How many PPAP elements does AS9145 require?

Aerospace requirements are commonly grouped into eleven PPAP deliverables, compared to the 18 elements used in automotive PPAP under AIAG. Aerospace’s version was scoped down to fit lower production volumes and higher part complexity, though some customers document or group elements slightly differently.

What’s the difference between APQP and PPAP?

APQP is the ongoing planning process across product development. PPAP is the documentation package — built from APQP activities — submitted to the customer for approval before production.

Can a first article inspection report substitute for a full PPAP submission?

No. FAIR is one of the eleven commonly documented PPAP elements (element 9), not a replacement for the rest. A part can pass first article inspection and still have an incomplete PPAP package if the risk analyses, control plan, or capability studies are missing.

Is there a registrar audit specifically for AS9145?

No. There’s no accredited certification body issuing AS9145 certificates. Compliance is verified through the customer’s review of your PPAP submission and, indirectly, through your AS9100 surveillance audits if APQP/PPAP has become a contractual requirement your registrar is checking against.

Where do I buy the AS9145 standard?

Through the ANSI Webstore, the authorized distributor for SAE aerospace standards. Avoid free PDF copies circulating outside official channels — they’re frequently outdated or incomplete, and using one puts your PPAP submission at risk of referencing superseded requirements.

How does AS9145 relate to NADCAP?

They’re independent systems addressing different risk areas. AS9145 governs new product and process introduction through APQP/PPAP. NADCAP accredits special processes like heat treating, welding, and NDT. A supplier can need both, either, or neither depending on what they produce and what their customers require — see our full comparison for the details.

How do I know if AS9145 applies to my company?

Check your purchase order notes and your customer’s supplier quality manual. AS9145 flow-down is almost always explicit — cited by name in a PO note or a dedicated APQP/PPAP clause — rather than implied. If you supply a Tier 1 that itself received AS9145 flow-down from a prime, the requirement passes down to you contractually even without a direct relationship to the prime.

What triggers a new PPAP submission on a part already in production?

New product introduction, a new customer, a new manufacturing location, a major process change, tooling replacement, a significant engineering change, or a customer-requested revalidation. Any of these can require a full or partial PPAP resubmission even on parts that have been in stable production for years.


📥 Free Resources


Not Sure What to Do Next?

🔹 Still researching? Read What Is AS9100? to understand the QMS foundation AS9145 sits on top of.

🔹 Ready to build your APQP/PPAP process? Download the AS9100 Rev D Gap Assessment Checklist and confirm your QMS can support the documentation elements before you start.

🔹 Need to buy the standard? AS9145 — ANSI Webstore for the individual standard, or use the ANSI Bundle Link with code CC2026 if you’re purchasing multiple AS9100-series documents together.

🔹 Need training on the QMS context AS9145 operates in? BSI’s AS9100 training courses cover the audit environment your APQP/PPAP process will be evaluated against.

AS9145 rewards suppliers who treat it as a planning discipline instead of a paperwork exercise. Build the risk analyses and control plans as part of your normal development process, and the PPAP submission comes together far more easily. We’ll update this guide if IAQG publishes a revised edition.


Stay Ahead of Aerospace Flow-Down Requirements

Many PPAP rejections trace back less to a misunderstanding of the standard and more to APQP being treated as a last-minute paperwork sprint instead of a planning process run alongside design and manufacturing engineering.

Shops that build DFMEA, PFMEA, and control plans into their normal product development workflow tend to submit cleaner PPAP packages on the first pass. Shops that wait until the customer asks often end up reverse-engineering documentation under deadline pressure — and that’s when submissions are more likely to get rejected.

The Standards Navigator covers AS9145, AS9100, and the rest of the aerospace quality framework suppliers need to stay contract-ready.

👉 Get updates on aerospace quality planning and flow-down requirements
👉 Be first to access new AS9100 and AS9145 resources as we publish them

Subscribe

* indicates required

Industrial Compliance. Clearly Explained.

AS9110 vs AS9120: Which Aerospace Standard Does Your Business Actually Need? (2026)

AS9110 and AS9120 are both aerospace quality standards built on ISO 9001 — but they serve completely different operations. This guide compares MRO certification (AS9110) against stockist distributor certification (AS9120), covering scope, clause differences, cost, and how to confirm which standard actually matches your business.

MRO certification vs. stockist distributor certification — how to tell which AS91XX standard applies to your operation

Affiliate Disclosure: Some links in this article are affiliate links. If you purchase through them, The Standards Navigator may earn a commission at no additional cost to you.


Confusing These Two Standards Can Cost You a Contract

A prime contractor asks if you’re “AS certified.” You say yes — but you say it without knowing which AS certification they mean. That gap shows up fast in a supplier qualification review, and understanding AS9110 vs AS9120 before that conversation happens is what keeps you from losing a bid before you ever quote a price.

AS9110 and AS9120 are both aerospace quality management system standards built on the same ISO 9001 foundation as AS9100. But they exist for two completely different kinds of operations. AS9110 governs maintenance, repair, and overhaul (MRO) organizations. AS9120 governs stockist distributors — companies that buy, store, and resell aerospace parts without altering them. Certify to the wrong one, or assume one covers what the other requires, and you’ll fail a customer audit or lose a contract before the certificate is even printed.

If you’re evaluating which standard applies to your operation — or a supplier is asking which one you hold — this guide breaks down the real differences: scope, clause focus, cost, and how to know which one is actually right for you.

From the Floor: I’ve sat at the table with a smaller machine shop during an onboarding audit with a much larger aerospace manufacturer who assumed AS9100 covered their distribution operation — it didn’t, and it cost them weeks in corrective action before we could approve them as a source. The standard has to match what you actually do on the floor, not what sounds closest to what your customer asked for.

Before you go further, know exactly where your QMS stands. Run your operation against the AS9100 Rev D Gap Assessment Checklist — a 74-item, clause-by-clause tool that also flags where MRO- and distribution-specific requirements diverge from base AS9100. Most gap findings are found six weeks too late. Don’t be one of them.

In This Guide

  • What AS9110 covers and who needs it
  • What AS9120 covers and who needs it
  • Side-by-side clause and scope comparison
  • Certification cost and timeline differences
  • How to know which standard — or standards — your operation needs
  • What’s changing in the 2026 IAQG standards revision
  • FAQs on dual certification, transition, and audit prep


👉 Start Here (Top Resources)


What Is AS9110?

Quick Answer: AS9110 is the aerospace quality management system standard for organizations that perform maintenance, repair, and overhaul (MRO) work on aircraft, engines, components, or related equipment. The current edition, AS9110 Rev C (2016), is titled “Quality Management Systems — Requirements for Aviation Maintenance Organizations” and is built on the ISO 9001:2015 clause structure.

AS9110 applies to organizations that touch a product’s airworthiness after it’s already in service — not organizations designing or manufacturing it new. That includes:

  • FAA Part 145 certified repair stations
  • Engine and component overhaul shops
  • Organizations performing continuing airworthiness management
  • MRO providers serving commercial, private, or military aircraft

The clause set adds requirements around configuration control of repaired items, release-to-service documentation, component traceability through the repair cycle, and management of customer-supplied product — all specific to the risk profile of returning a used part to service rather than shipping a new one.

If you’re comparing AS9110’s foundation to base ISO 9001, our AS9100 vs ISO 9001 breakdown covers the shared clause structure that AS9110 inherits.

What Is AS9120?

Quick Answer: AS9120 is the aerospace quality management system standard for stockist distributors — companies that procure aerospace parts, materials, or assemblies and resell them without physically modifying the product. The current edition, AS9120 Rev B, is titled “Quality Management Systems — Requirements for Aviation, Space and Defense Distributors.”

AS9120 is intentionally narrow in scope. It’s built for organizations that buy from an approved source, store product under controlled conditions, and ship it back out — sometimes splitting larger lots into smaller quantities, or performing a customer- or regulatory-required inspection before delivery. It is explicitly not intended for organizations that repair, maintain, or perform any process that changes the product’s characteristics or conformity.

That distinction matters because it drives the clause focus. AS9120 emphasizes:

  • Purchasing controls and approved source verification
  • Prevention of counterfeit and suspect unapproved parts
  • Storage, handling, and shelf-life control
  • Traceability of parts back to the original manufacturer

If counterfeit parts prevention is a gap area for your operation, our Counterfeit Parts Standards guide covers the AS9100-family clause requirements — including how AS9120 handles it for distributors specifically.

Infographic comparing AS9110, AS9120, and AS9100 to help aerospace organizations determine the correct quality management standard based on maintenance, distribution, or manufacturing activities.
This decision guide helps aerospace organizations determine whether AS9110, AS9120, or AS9100 best aligns with their operational scope and certification requirements.

AS9110 vs AS9120: Side-by-Side Comparison

Category AS9110 (MRO) AS9120 (Distributors) Who it applies to Maintenance, repair, and overhaul organizations Stockist distributors, no physical modification of product Current edition Rev C (2016) Rev B Base standard ISO 9001:2015 ISO 9001:2015 Primary risk addressed Airworthiness of returned-to-service parts Traceability and authenticity of resold parts Key added clauses Release-to-service documentation, configuration control, maintenance data control Approved source verification, counterfeit parts prevention, lot control Typical certified organizations FAA Part 145 repair stations, engine overhaul shops Parts distributors, stockist suppliers, kitting operations Physical modification of product Yes — repair, overhaul, alteration No — resale only, with limited exceptions (splitting lots, inspection) Can be held alongside AS9100 Yes, for operations doing both design/production and MRO Yes, though less common — usually a standalone certification

⚠️ Most common finding: Auditors regularly flag distributors who hold AS9120 but perform light processing — such as re-marking, relabeling, repackaging, or other activities that affect traceability documentation — without realizing that activity may push them out of AS9120’s defined scope and into AS9110 or AS9100 territory. Know exactly what your operation does to the product before you pick a standard.

If you are unsure which standard matches your actual operation → map every process step against the AS9110 and AS9120 scope statements before you approach a certification body, not after you’ve already scheduled an audit.

Side-by-side AS9110 vs AS9120 comparison infographic showing differences in maintenance, repair, overhaul, distribution, traceability, documentation, and quality management requirements.
This AS9110 vs AS9120 comparison highlights where the two aerospace quality management standards share common requirements and where their operational focus differs.

Certification Cost and Timeline

Neither AS9110 nor AS9120 certification is dramatically more expensive than base AS9100 — the cost driver is usually organization size and audit complexity, not which standard you’re certifying to. Expect the same general cost structure: registrar audit fees, any documentation or consulting spend, and internal resource time for gap closure and internal audits.

For a full breakdown of what drives AS9100-family certification cost, see How Much Does AS9100 Certification Cost? — the same cost categories apply to AS9110 and AS9120 audits, with adjustments for scope.

If you are budgeting for certification this year → don’t assume AS9120 is cheaper because the standard is “smaller.” Distributor audits still require full documentation review, internal audit evidence, and a two-stage certification audit through an accredited registrar.

How Long Does Implementation Take?

Timeline follows the same general phases as AS9100: gap assessment, documentation build-out, implementation and internal audit, then the two-stage certification audit. Organizations with an existing ISO 9001 QMS typically move faster because the foundational clause structure is already in place — AS9110 and AS9120 add to that structure rather than replacing it.

For a phase-by-phase breakdown you can apply to either standard, our AS9100 Implementation Timeline walks through the realistic timeline most organizations should plan for.

Most teams miss this step — run a gap check against the specific standard you’re pursuing before you start building documentation. A generic AS9100 gap assessment won’t fully capture AS9110’s release-to-service requirements or AS9120’s distributor-specific traceability and counterfeit-part controls. Check yours before you invest in a documentation build-out you’ll have to redo →


Do You Need Both?

Some organizations legitimately need more than one AS91XX certification — a Tier 1 supplier that manufactures parts and also runs an internal repair operation might hold both AS9100 and AS9110. A distributor that occasionally performs approved rework might need to evaluate whether AS9120 alone still covers their scope, or whether they’ve drifted into AS9110 or AS9100 territory.

If you are already AS9100 certified and expanding into MRO or distribution work → don’t assume your existing certificate covers the new activity. Confirm scope with your registrar before you take on contracts that depend on AS9110 or AS9120 coverage you don’t actually have.

Traceability requirements run through all three standards, just with different emphasis. If you’re building out traceability documentation, our AS9100 Traceability Requirements article covers the clause 8.5.2 requirements that AS9110 and AS9120 both extend from.

Decision flowchart comparing AS9110 vs AS9120 and AS9100, helping aerospace organizations determine the correct quality management standard based on maintenance, distribution, or manufacturing activities.
This AS9110 vs AS9120 decision flowchart guides aerospace organizations to the quality management standard that best matches their operational scope and certification needs.

Objection: “We’re Small — Do We Really Need to Certify to the Exact Right Standard?”

Yes, and here’s why it’s not just paperwork. Prime contractors and OEMs use your certification scope to determine what work they can flow down to you without additional oversight. If your certificate doesn’t match your actual scope of work, you risk being disqualified from a bid, or worse, passing an audit on paper while operating outside your certified scope — which becomes a much bigger problem the first time there’s a quality escape traced back to your facility.

Small organizations especially benefit from getting this right the first time, because a second certification audit to fix a scope mismatch costs real money and real time you don’t get back.


What’s Changing: The 2026 IAQG Standards Revision

The International Aerospace Quality Group is currently working through a comprehensive revision of the AS9100 series. Current IAQG working materials indicate the standards are expected to transition to the IA9100-series naming convention, although final publication details and transition requirements have not yet been formally released. Planned changes include stronger supplier management requirements, formal cybersecurity risk integration, and expanded counterfeit parts prevention measures for distributors specifically.

⚠️ This revision has not been published as final text as of this writing, and no confirmed transition deadline has been set. Treat any specific 2026 publication date as preliminary until IAQG and SAE International confirm final release. We’ll update this article once the revised editions are formally published.


Quick Audit Checklist: Which Standard Applies to You?

✅ Does your organization physically repair, overhaul, or alter aerospace products after they’ve entered service? → AS9110

✅ Does your organization buy, store, and resell aerospace parts without modification? → AS9120

✅ Does your organization design, develop, or manufacture new aerospace products? → AS9100 — see our What Is AS9100? pillar guide

✅ Does your organization do more than one of the above? → You may need certification to more than one standard — confirm scope with your registrar before proceeding

✅ Have you mapped your actual process steps against the standard’s defined scope statement, not just its title? → Do this before scheduling any certification audit


FAQ

Is AS9110 harder to get certified to than AS9120?

Not inherently. Difficulty depends on how mature your existing quality processes are, not which standard you’re pursuing. AS9110 has more clauses focused on maintenance-specific documentation and release-to-service control, while AS9120 focuses heavily on purchasing and traceability controls. Neither is universally “easier.”

Can a distributor hold AS9100 instead of AS9120?

Technically a distributor could pursue AS9100, but it would include requirements around design and production control that don’t apply to a pure distribution operation. AS9120 is scoped specifically for distributors and avoids that mismatch — which is usually what customers and registrars expect to see.

Does AS9110 or AS9120 replace the need for ISO 9001 certification?

No. Both standards incorporate the full text of ISO 9001:2015 and add aerospace-specific requirements on top of it. You don’t need a separate ISO 9001 certificate in addition to AS9110 or AS9120 — the aerospace standard already contains it — but the underlying quality management principles are the same ones ISO 9001 establishes.

How do I verify a supplier’s AS9110 or AS9120 certification is real?

Check the IAQG’s OASIS database, which lists verified AS9100-family certifications, including AS9110 and AS9120, issued by accredited certification bodies.

What happens if my scope of work doesn’t match my certificate?

You risk failing a customer supplier audit, losing approved-source status with a prime contractor, or facing corrective action findings during your next registrar surveillance audit. If your operation has changed since your last certification cycle, confirm your certificate scope still matches before it becomes a customer’s finding instead of yours.

Is there a bundled cost savings if I need the text of both AS9110 and AS9120?

Is there a bundled cost savings if I need the text of both AS9110 and AS9120?
If you’re evaluating whether your operation needs both standards, buying multiple standards together through ANSI’s bundle packages saves meaningfully compared to purchasing each document separately.

Do AS9110 and AS9120 require the same registrar accreditation as AS9100?

Yes. Certification bodies auditing to any AS91XX standard must be accredited specifically for aerospace scope, not just general ISO 9001 accreditation. Verify your registrar’s aerospace accreditation through ANAB or your relevant national accreditation body before signing a contract.

Will the 2026 IAQG revision require re-certification?

Organizations already certified will go through a transition period once the revised standards (referred to in early IAQG materials as IA9100, IA9110, and IA9120) are formally published. No transition deadline has been confirmed yet — don’t plan around a specific date until IAQG publishes final transition guidance.


📥 Free Resources


Not Sure What to Do Next?

🔹 Still researching which standard applies to your operation? Run the AS9100 Rev D Gap Assessment Checklist — it flags MRO- and distributor-specific gaps alongside base AS9100 clauses, so you’ll know where you actually stand before talking to a registrar.

🔹 Ready to start building your QMS documentation? 9001Simplified’s documentation kits give you a structured starting point you can adapt to AS9110 or AS9120’s added requirements — no consultant required.

🔹 Need to purchase the standard itself? AS9110 — ANSI Webstore or AS9120 — ANSI Webstore. Use code CC2026 for 5% off through December 31, 2026.

🔹 Shopping for training or picking a certification body? BSI’s aerospace training catalog covers AS9100-family courses relevant to both MRO and distribution operations.

Picking the wrong AS91XX standard doesn’t just slow down your certification timeline — it can cost you a supplier qualification you were counting on. The Standards Navigator covers the full AS9100 family so you can certify to the standard that actually matches what your operation does, not just what sounds closest.

Stay Ahead of Aerospace Compliance Changes

Most operations don’t lose a bid because they can’t meet a requirement — they lose it because they certified to the wrong standard for what they actually do. Organizations that map their real scope of work against AS9110 and AS9120 before choosing a path move through certification once. The ones that guess end up doing it twice.

The Standards Navigator tracks the AS9100 family closely, including the upcoming IAQG revision that will affect every organization certified to AS9110 or AS9120.

👉 Get updates on AS9100-family standards, including AS9110, AS9120, and the 2026 IAQG revision
👉 Be first to access new aerospace gap assessment tools and documentation resources as they’re released

Subscribe

* indicates required

Industrial Compliance. Clearly Explained.

NADCAP vs AS9100: Do You Need Both for Aerospace Certification in 2026?

This guide explains the difference between Nadcap accreditation and AS9100 certification, and why AS9100 is typically a prerequisite for Nadcap. It covers which special processes fall under Nadcap, how the two programs relate, common documentation gaps auditors flag, and includes a readiness checklist for suppliers transitioning from AS9100 certification into Nadcap accreditation.

Understanding the difference between quality system certification and special process accreditation

Affiliate Disclosure: Some links in this article are affiliate links. If you purchase through them, The Standards Navigator may earn a commission at no additional cost to you.


Do I Need NADCAP If I’m Already AS9100 Certified?

Short answer: probably — but not for the reason most people assume.

NADCAP vs AS9100 isn’t really an either/or question — it’s two different types of approval that most aerospace suppliers eventually need together.

AS9100 certifies your quality management system. Nadcap accredits specific special processes — heat treating, welding, non-destructive testing, chemical processing, and others where a finished part can look perfect and still be defective in a way no inspection will catch. One certifies how your company runs. The other certifies whether a specific process, done in a specific way, actually works.

If your shop performs any of those processes — or you outsource them to a supplier who does — being AS9100 certified doesn’t automatically cover you. Primes like Boeing, Airbus, and Rolls-Royce increasingly require Nadcap accreditation as a separate, additional condition of doing business, regardless of your QMS certification status.

I watched this play out at a contract coating facility during a Nadcap audit. The production team proudly showed off a batch of aerospace brackets that had passed thickness and adhesion testing with no issues. The paperwork told a different story. The oven chart recorder showed the programmed temperature, but nothing documented that the part itself had reached cure spec before the timer started. The thermocouple used to qualify that oven had been swapped out months earlier during routine maintenance, and nobody had updated the work instruction to match. The finish looked fine. The documentation didn’t prove the process had actually happened the way it was supposed to — and that’s what closed the audit as a finding.

Split-screen infographic showing successful and failed aerospace audit documentation, illustrating how objective evidence supports NADCAP vs AS9100 compliance.
Proper documentation and objective evidence often determine the difference between a successful audit and a nonconformance during NADCAP vs AS9100 compliance.

AS9100 Rev D Gap Assessment Checklist: Before you add Nadcap to your roadmap, confirm your QMS foundation is solid. Run the 74-item, clause-by-clause gap check most operations managers wait too long to do →

Get the Free AS9100 Rev D Gap Assessment Checklist

In This Guide

  • What Nadcap actually accredits — and why it’s not a QMS certification
  • Why AS9100 is a prerequisite for most Nadcap accreditation paths
  • A side-by-side comparison of scope, governance, and audit structure
  • Which processes fall under Nadcap’s special process categories
  • What auditors actually flag when process verification records fall short
  • Real decision-stage guidance for suppliers at every point in the process
  • Where the standards and accreditation criteria come from — and how to buy or start


👉 Start Here (Top Resources)

  • Buying the AS9100 standard itself: SAE AS9100 — ANSI Webstore — the current official edition, direct from ANSI’s authorized store.
  • Building or tightening your QMS documentation before a Nadcap audit: 9001Simplified Documentation Kits — pre-built procedures and forms that hold up under both AS9100 and Nadcap’s quality-system scrutiny, without hiring a consultant.
  • AS9100 training for your internal audit team: BSI AS9100 Training Courses — useful if you’re staffing up internal audit capability before pursuing Nadcap.

What Nadcap Actually Accredits

Nadcap — no longer written in all caps, and no longer standing for “National Aerospace and Defense Contractors Accreditation Program” in PRI’s own branding — is an industry-managed accreditation program administered by the Performance Review Institute (PRI). It’s governed directly by the aerospace primes that require it: Boeing, Airbus, Rolls-Royce, Honeywell, and others sit on the task groups that write and revise the audit criteria. AS9100 itself, by contrast, is published and maintained by SAE International, the aerospace industry’s standards-development body.

Here’s the distinction that trips people up: Nadcap doesn’t accredit your company. It accredits a specific process, performed a specific way, at a specific facility. If you run heat treating and chemical processing, you’d pursue separate Nadcap accreditations for each — and you wouldn’t automatically hold accreditation for a process you don’t perform. That’s fundamentally different from AS9100, which certifies your entire quality management system as one integrated audit.

The processes covered are the ones that can’t be verified by looking at the finished part. A weld can look clean and still fail. A heat-treated part can meet dimensional spec and still have the wrong microstructure. This is the same principle behind AS9100 Clause 8.5.1(f) — controlled conditions for special processes — but Nadcap goes deeper, with process-specific technical criteria that a general QMS audit isn’t built to evaluate.

What Counts as a Nadcap “Special Process”?

Nadcap organizes accreditation into roughly 17 special process categories, each governed by its own Task Group. The ones most relevant to fabrication, machining, and coatings operations include:

  • Heat Treating — furnace pyrometry, controlled atmosphere, hardness verification
  • Welding — fusion welding, resistance welding, brazing
  • Non-Destructive Testing (NDT) — penetrant, radiographic, ultrasonic, magnetic particle
  • Chemical Processing — plating, anodizing, chemical conversion coatings
  • Coatings — thermal spray and other applied coatings on aerospace hardware
  • Materials Testing Laboratories — mechanical and chemical test labs
  • Composites — layup, curing, and bonding of composite structures
  • Non-Conventional Machining — EDM, chemical milling, laser processing
  • Elastomer Seals — molding and processing of seal components
  • Aerospace Quality Systems (AC7004) — the QMS alternative for suppliers without AS9100

If your facility touches any of these — or you flow work down to a subcontractor who does — that’s the process that needs its own Nadcap accreditation, separate from your AS9100 certificate.


Why AS9100 Is (Usually) a Prerequisite for Nadcap

Roadmap illustrating the typical aerospace supplier certification path from ISO 9001 and AS9100 to Nadcap accreditation for special processes.
This roadmap shows how manufacturers typically progress from a quality management system to Nadcap special process accreditation for aerospace customers.

PRI requires evidence of an acceptable quality management system before granting most Nadcap accreditations. For most aerospace suppliers, AS9100 certification is the route used to satisfy that expectation. In practice, that means one of two paths:

  1. You already hold AS9100 certification from an accredited third-party registrar. PRI accepts this as satisfying the QMS prerequisite.
  2. You don’t hold AS9100 yet. PRI will assess your QMS against AC7004 — a checklist-based alternative modeled on AS9003, audited directly by PRI rather than a separate registrar. If you go this route, expect an additional day added to your special process audit, at PRI’s day rate, which typically runs higher than standard registrar pricing.

Most suppliers who already have customers in aerospace choose the first path. If you’re already pursuing AS9100 certification for other reasons — customer requirement, competitive positioning — getting it in place before you start the Nadcap process avoids paying PRI’s premium AC7004 day rate for a QMS review you’ll need anyway.

Most common finding: Suppliers who assume their AS9100 certificate alone satisfies Nadcap’s documentation expectations for a specific process. It doesn’t. Nadcap auditors expect to see process-specific records — pyrometry surveys, weld procedure qualifications, NDT technique sheets — that go well beyond what a general AS9100 surveillance audit reviews.


Nadcap vs AS9100: Side-by-Side Comparison

CategoryNadcapAS9100
What it certifiesA specific special process (heat treat, welding, NDT, etc.)The organization’s entire quality management system
Governing bodyPerformance Review Institute (PRI), industry task groupsThird-party registrars accredited under the IAQG scheme
Scope of auditDeep, technical, process-specific criteriaBroad, system-level clauses across the organization
PrerequisiteAS9100 (or PRI’s AC7004 equivalent) required firstISO 9001 QMS foundation; no prerequisite certification
Who mandates itIndividual primes (Boeing, Airbus, Rolls-Royce, etc.) via contract flow-downIncreasingly required across the aerospace supply chain broadly
Reaccreditation cycleTypically every 12–24 months, process-dependentTypically annual surveillance, 3-year recertification
Applies toOnly the processes actually performed at that facilityThe entire organization as a single certified entity

If you’re evaluating both standards side by side, buying them together through ANSI’s standards bundle is worth checking before purchasing individually — bundle pricing on standards documents tends to beat buying each one separately, and code CC2026 takes an additional 5% off through December 31, 2026.

Infographic comparing NADCAP vs AS9100 audit focus, showing system-level quality management requirements versus special process technical controls for aerospace manufacturers.
See how NADCAP vs AS9100 audits differ, with AS9100 evaluating quality management systems and Nadcap assessing technical controls for special processes.

Decision-Stage Guidance: Where Are You in This Process?

  • If you are AS9100 certified and just found out a customer requires Nadcap → don’t panic and don’t assume you need to redo your QMS. Identify which specific process the customer needs accredited, pull the relevant Task Group’s audit criteria from PRI’s eAuditNet-based platform, and run a gap assessment against that specific checklist.
  • If you are not yet AS9100 certified but know Nadcap is coming → get AS9100 certification moving first. Paying a registrar for AS9100 is almost always cheaper than paying PRI’s added day rate for an AC7004 QMS review layered onto your special process audit.
  • If you are already Nadcap accredited for one process and adding a second → don’t assume your existing accreditation covers related work. Each process category has its own Task Group, its own audit criteria, and its own accreditation — verify the specific checklist before you commit resources.

The Objection Nobody Says Out Loud: “We Can’t Afford Two Certifications”

This is the real hesitation behind most delayed Nadcap decisions, and it’s worth addressing directly. You’re not paying for two unrelated programs. AS9100 gives you the documented QMS foundation — document control, corrective action, internal audit processes — that Nadcap auditors expect to already be in place before they even start evaluating your process-specific records. Facilities that treat AS9100 as a genuine operating system, not a binder for the auditor, spend less time and money on Nadcap corrective actions later. The two costs aren’t additive in the way they feel like they should be — a strong AS9100 implementation reduces the Nadcap audit burden.

If cost timing is the real constraint, accredit one process first — typically whichever one your highest-value customer is asking for — rather than trying to fund every applicable process category in the same audit cycle.


Quick Readiness Checklist: AS9100-to-Nadcap Transition

✅ AS9100 certificate is current and in good standing with your registrar
✅ You’ve identified every special process performed on-site or flowed down to a subcontractor
✅ You’ve pulled the specific Task Group audit criteria for each applicable process
✅ Calibration and equipment qualification records (pyrometry, thermocouples, gauges) are current and traceable
✅ Internal audits cover process-specific technical requirements, not just system-level clauses
✅ Work instructions match the actual equipment and setup currently in use — not what was documented at initial qualification


FAQ

Is Nadcap a certification or an accreditation?

It’s an accreditation, and the distinction matters. Certification typically applies to a management system (like AS9100). Accreditation applies to a specific technical process performed a specific way — Nadcap accredits your heat treating process, not your company as a whole.

Do I need AS9100 before I can get Nadcap accredited?

In most cases, yes. PRI requires evidence of an acceptable QMS before granting most Nadcap accreditations, and AS9100 certification is the route most suppliers use to satisfy that expectation. Without it, PRI will assess your QMS against AC7004 as part of the Nadcap audit, typically adding cost and time.

What is AC7004, and can I use it instead of AS9100?

AC7004 is PRI’s own checklist-based QMS assessment, based on AS9003, used when a supplier doesn’t hold AS9100. It’s audited exclusively by PRI rather than a third-party registrar, and it’s generally more expensive per day than a standard AS9100 surveillance audit.

How long does Nadcap accreditation take?

Many first-time suppliers should expect six months or longer from preparation to accreditation, with timelines varying significantly based on process scope and audit readiness.

How much does Nadcap accreditation cost?

Cost varies significantly based on the number of process categories, facility complexity, and whether you already hold AS9100. PRI provides a formal quote after you request an audit through their platform — there’s no flat published rate, since scope drives cost more than anything else.

Do Boeing, Airbus, and other primes actually require Nadcap?

For special processes, yes — it’s typically a mandatory contractual flow-down requirement, not optional best practice. If you perform heat treating, welding, NDT, or chemical processing for a prime that mandates Nadcap, AS9100 alone won’t satisfy that specific contract requirement.

Is Nadcap accreditation the same across every special process?

No. Each process category — heat treating, welding, NDT, coatings, and the rest — has its own Task Group, its own audit criteria, and its own accreditation cycle. Being accredited for one process doesn’t extend to another, even a related one.

How often do I need to renew Nadcap accreditation?

Reaccreditation audits typically happen every 12 to 24 months, depending on the process category and your audit history. Processes with a stronger track record may move to a longer reaccreditation cycle over time.


📥 Free Resources


Not Sure What to Do Next?

🔹 Still researching whether you need Nadcap at all? Start with What Is AS9100? to confirm your QMS foundation is understood before layering on process-specific accreditation questions.

🔹 Ready to start preparing for a Nadcap audit? Run the AS9100 Rev D Gap Assessment Checklist first — closing QMS gaps now saves you from PRI flagging system-level issues during a process-specific audit.

🔹 Need to buy the standard itself? Get the current edition of SAE AS9100 through ANSI Webstore, and check the ANSI standards bundle with code CC2026 if you’re purchasing multiple related standards at once.


Nadcap and AS9100 aren’t competing paths — they’re layered requirements, and treating them as separate line items instead of one connected system is where most suppliers lose time and money. The Standards Navigator covers both sides of aerospace compliance: the QMS foundation and the special process accreditation built on top of it.


Stop Guessing at What Your Customer Actually Requires

Suppliers who wait until a customer flow-down requirement lands in their inbox end up scrambling to figure out which Task Group criteria apply and whether their existing documentation even comes close. Suppliers who build Nadcap readiness into their AS9100 QMS from the start walk into that audit with process records already in the shape auditors expect to see.

The Standards Navigator tracks AS9100, Nadcap, and the aerospace supply chain requirements layered on top of both — so you’re not piecing this together from forum threads and PRI’s website.

👉 Get updates on AS9100 and Nadcap accreditation requirements as they develop
👉 Be first to access new aerospace compliance checklists and gap assessment tools

Subscribe

* indicates required

Industrial Compliance. Clearly Explained.

AS9100 Counterfeit Parts Standards: What Clause 8.1.4 Actually Requires in 2026

AS9100 Clause 8.1.4 requires aerospace suppliers to prevent counterfeit and suspect counterfeit parts from entering their supply chain. This guide breaks down how AS5553, AS6174, and AS6081 apply, where DFARS counterfeit clauses raise the bar for defense work, and what a right-sized prevention program looks like for suppliers of every size.

AS5553, AS6174, and AS6081 explained for aerospace suppliers building a counterfeit parts prevention program

Affiliate Disclosure: Some links in this article are affiliate links. If you purchase through them, The Standards Navigator may earn a commission at no additional cost to you.


A Counterfeit Part Doesn’t Announce Itself

A relabeled transistor looks identical to the real thing until it fails in the field. A remarked fastener passes visual inspection until someone pulls the cert and finds the lot number doesn’t trace back to anywhere real. That’s what makes counterfeit parts different from every other nonconformance you deal with — the part isn’t defective, it’s fraudulent, and your normal inspection process was never built to catch it. Closing that gap is exactly what AS9100 counterfeit parts controls exist to do.

If you’re certified to AS9100, you already know Clause 8.1.4 exists — if you’re still working through what AS9100 actually requires at a higher level, this clause is one piece of a much larger operational planning section. What trips up a lot of suppliers is figuring out how much program they actually need to build, which of the SAE standards apply to their specific supply chain, and whether their customer’s flow-down requirements go further than the base AS9100 clause does.

This guide breaks down what 8.1.4 requires, how AS5553, AS6174, and AS6081 fit together, where DFARS counterfeit clauses come into play for defense work, and what a right-sized prevention program looks like for a supplier that isn’t building satellites.

From the Floor: I’ve sat across the table from a supplier during a corrective action review after a customer audit flagged a raw material lot with no traceable mill certification — not a counterfeit electronic part, but the same root failure: nobody had a documented process for verifying the source before it hit the shop floor. The fix wasn’t complicated. It was a two-page procurement control procedure and a supplier approval list that didn’t exist before. Most operations managers assume counterfeit prevention means expensive testing equipment. Most of the time, it means closing the gap between what you assume your buyer is checking and what’s actually written down.

Before you build or rebuild a counterfeit parts prevention procedure, most operations managers are working from the wrong starting point — assuming their existing purchasing controls already cover it. Run a clause-by-clause AS9100 gap check before you touch your procurement procedure — most gaps show up in 8.1.4 first. Get the free AS9100 Rev D Gap Assessment Checklist and see exactly where your documentation stands against all 74 clause-level requirements, including counterfeit parts control.


In This Guide

  • What AS9100 Clause 8.1.4 requires — and what it deliberately leaves open
  • Why traceability is the foundation of counterfeit prevention
  • What qualifies as a suspect counterfeit part
  • AS5553, AS6174, and AS6081: which standard applies to your supply chain
  • DFARS 252.246-7007 and 252.246-7008 for defense-flow-down contractors
  • The three control points every prevention program needs: purchasing, receiving, inspection
  • GIDEP and why registrars ask about it during audits
  • Building a right-sized program if you don’t handle electronic parts
  • Common audit findings and how to close them


👉 Start Here (Top Resources)

  • AS9100 Rev D Gap Assessment Checklist — free 74-item clause-by-clause checklist to find where your counterfeit parts documentation stands today
  • 9001Simplified — pre-built AS9100 documentation packages that include a counterfeit parts prevention procedure template, so you’re not starting from a blank page
  • SAE/AS9100 Standard — ANSI Webstore — the current edition, needed as your baseline reference for Clause 8.1.4
  • BSI AS9100 Training — if your team needs a working understanding of how counterfeit prevention integrates into your broader QMS audit prep

What Clause 8.1.4 Actually Says

Quick Answer: AS9100 Clause 8.1.4 requires organizations to establish processes that prevent counterfeit or suspect counterfeit parts from entering their product, addressing supplier controls, traceability, inspection, personnel training, reporting, and management of obsolete parts.

AS9100 is maintained by the International Aerospace Quality Group (IAQG). AS9100D introduced Clause 8.1.4, “Prevention of Counterfeit Parts,” as a standalone requirement inside the operational planning and control section. In plain terms, it requires your organization to plan, implement, and control processes appropriate to your organization and product to prevent the use of counterfeit or suspect counterfeit parts, and to minimize the impact if one is discovered.

Here’s the part that surprises people: the clause itself doesn’t name AS5553, AS6174, or AS6081 directly. It leaves the “how” open, which is deliberate — a machine shop making titanium brackets and a Tier 1 avionics integrator face completely different counterfeit exposure, and a one-size-fits-all mandate wouldn’t work for either.


The Five Areas AS9100 Counterfeit Parts Controls Must Address

What it does require, at minimum, is that your process address:

  • Personnel training on counterfeit part risks and detection
  • Application of methods for detection appropriate to the parts you purchase
  • Maintaining traceability of parts and components to their original or authorized manufacturer — the same traceability backbone covered in Clause 8.5.2, which is why weak traceability records are a common thread behind both types of findings
  • A process for reporting counterfeit or suspect counterfeit parts to appropriate authorities
  • Control of parts that reach obsolescence or are no longer supported by the original manufacturer

If you are already ISO 9001 certified → this is one of the requirements with no direct ISO 9001 equivalent, which means you can’t repurpose an existing procedure — you need something built specifically for this clause.


Why Traceability Is the Foundation of Counterfeit Prevention

Every control in a counterfeit prevention program eventually comes back to one question: can you trace this part to its original manufacturer? That’s not a coincidence — it’s why registrars frequently write findings against Clause 8.1.4 and Clause 8.5.2 together during the same audit. A gap in one is almost always a gap in the other.

A working traceability chain for counterfeit prevention typically covers:

  • Original manufacturer traceability — a documented path from the part in your hands back to the OEM or an authorized aftermarket manufacturer, not just to whichever distributor you bought it from
  • Lot traceability — the ability to isolate every unit affected by a specific lot if a counterfeit or nonconforming condition is discovered after the fact
  • Mill certification traceability — for raw material and hardware, a cert that actually matches the heat or lot number stamped on the material, not just a document that arrived alongside it
  • Serialization where applicable — for high-consequence or flight-critical parts, unit-level identification that survives the part through receiving, inspection, and installation

Most counterfeit investigations don’t start with a lab test — they start when someone tries to trace a part backward and hits a dead end. Auditors treat 8.1.4 and 8.5.2 as connected for exactly that reason: a counterfeit part is, by definition, a traceability failure somewhere upstream. If your organization can’t demonstrate an unbroken chain back to an authorized source, no amount of visual inspection at receiving closes that gap. If you’re building or revising your counterfeit prevention procedure, do it alongside your traceability procedure rather than treating them as two separate audit prep exercises — most of the objective evidence a registrar wants overlaps between the two.


What Qualifies as a Suspect Counterfeit Part?

AS9100 counterfeit parts decision flow infographic showing the process for verifying traceability, quarantining suspect parts, investigating suppliers, reporting findings, and completing corrective actions.
This AS9100 counterfeit parts workflow shows the recommended process for handling suspect counterfeit parts, from documentation review through quarantine, investigation, reporting, and corrective action.

Before your team can detect a suspect counterfeit part, they need a working definition of what one looks like. In practice, a part gets flagged as suspect counterfeit when one or more of these conditions shows up:

  • Altered certifications — a certificate of conformance or test report that’s been modified, or that doesn’t match the part it accompanies
  • Relabeled or remarked materials — physical evidence of resurfacing, re-etching, or blacktopping to hide the original part marking
  • Missing or inconsistent traceability records — no documented path back to an authorized source, or documentation that doesn’t align with the physical part
  • Incorrect manufacturer markings — logos, date codes, or lot numbers that don’t match known authentic formatting for that manufacturer
  • Mismatched lot or date code information — a cert referencing one lot while the physical part is marked with another
  • Unauthorized substitutions — a part that performs the intended function but wasn’t sourced through an approved or franchised channel

None of these alone proves a part is counterfeit — but any one of them is enough to trigger quarantine and further investigation under a properly scoped 8.1.4 procedure. Training personnel to recognize these indicators, rather than assuming counterfeit detection requires lab equipment, is often the single highest-value control in a right-sized program.


The Three SAE Standards Behind Counterfeit Prevention

Registrars auditing Clause 8.1.4 don’t expect you to have memorized these standards, but they do expect your procedure to reflect the intent behind them. All three are published by SAE International, the same standards body responsible for the AS9100-series documents. Three matter most:

StandardScopeWho Needs It
AS5553Counterfeit electronic parts — avoidance, detection, mitigation, dispositionAny organization that procures or integrates electrical, electronic, or electromechanical (EEE) parts
AS6174Counterfeit materiel more broadly — not limited to electronicsOrganizations sourcing raw material, hardware, and non-electronic components with counterfeit risk
AS6081Prescriptive avoidance requirements for independent distributors buying from the open marketDistributors and brokers, not manufacturers buying direct from OEMs

If your organization operates as an independent distributor or broker rather than buying direct from OEMs, AS6081 is written specifically for your position in the supply chain — it sets prescriptive avoidance requirements for open-market purchases that AS5553 and AS6174 don’t fully address.

AS5553 has gone through several revisions since it was first published in 2009, reflecting how counterfeit detection techniques and supply chain risk have evolved. The current edition is AS5553E, published in 2025 — always confirm you’re referencing this edition rather than an older one sitting in a binder from your last certification cycle. Get the current AS5553E standard through ANSI Webstore — it’s the source document for the avoidance, detection, mitigation, and disposition requirements referenced throughout this section. The same discipline applies to the AS9100 standard itself: buy from an authorized source and confirm you’re working from the current revision before you build a procedure around it.

AS9100 counterfeit parts infographic comparing authorized aerospace supply chains with high-risk open market sourcing, highlighting traceability, supplier approval, and counterfeit prevention.
This comparison illustrates how authorized suppliers, complete traceability, and approved sourcing reduce AS9100 counterfeit parts risk compared to open-market purchasing and broken documentation.

If your shop doesn’t touch electronic components at all — pure machining, fabrication, or coatings work — AS6174 is the more relevant reference, since it covers materiel counterfeiting broadly rather than EEE parts specifically. Don’t assume “no electronics” means “no counterfeit exposure.” Counterfeit and mismarked raw material, fasteners, and castings are a documented problem in the fabrication supply chain too.

⚠️ Most common finding: Suppliers write a counterfeit parts procedure that references AS5553 by name but only handles electronic components — leaving raw material and hardware purchasing completely uncovered. If you’re under customer pressure to certify quickly → prioritize scoping your procedure correctly before you invest time drafting it.


DFARS: When Defense Contracts Raise the Bar

If any part of your supply chain touches a Department of Defense contract, two DFARS clauses may apply on top of your AS9100 obligations: DFARS 252.246-7007 (Contractor Counterfeit Electronic Part Detection and Avoidance System) and DFARS 252.246-7008 (Sources of Electronic Parts).

What the Two Clauses Actually Require

These clauses apply specifically to contractors subject to Cost Accounting Standards, and they require a documented system addressing a defined set of risk areas — training, inspection and testing criteria, traceability from the original manufacturer through to Government acceptance, supplier qualification, reporting and quarantining, and monitoring of industry alert databases for suspect parts. The requirement traces back to Section 818 of the 2012 National Defense Authorization Act, which was the original legislative response to counterfeit electronic parts turning up in military hardware.

Flow-Down Applies Regardless of Contract Size

If you supply into the defense industrial base — even as a sub-tier supplier several layers removed from the prime contractor — these requirements can flow down contractually regardless of contract size. Don’t assume flow-down doesn’t apply to you because you’re small. Check your purchase order terms and conditions directly.


The Three Control Points Auditors Check

AS9100 counterfeit parts infographic showing the three critical control points of purchasing, receiving inspection, and final inspection for counterfeit prevention.
The three primary control points for AS9100 counterfeit parts prevention are purchasing, receiving inspection, and final inspection, each playing a critical role in protecting the aerospace supply chain.

Regardless of which standards you reference, a workable counterfeit prevention program controls three points in your process:

Purchasing — Your procedure needs to define authorized sources: original component manufacturers, authorized distributors, or franchised sources. Any purchase from the open market or an unfranchised broker should trigger additional scrutiny, not the same approval as a direct-from-OEM buy. If a prospective supplier claims AS9100 certification, verify it against the IAQG OASIS database rather than taking the certificate at face value.

Receiving — Incoming inspection needs criteria specific to counterfeit detection, not just dimensional and functional acceptance. This can be as simple as visual inspection for remarking or resurfacing on lower-risk parts, up to X-ray or decapsulation testing for high-consequence electronic components.

Final inspection — A last check before parts move into production or assembly, catching anything that slipped through receiving inspection or that entered through an internal process gap.

If you are preparing for your first AS9100 certification → start with these three control points before you draft a single page of procedure text, and map them against your overall AS9100 implementation timeline so counterfeit prevention isn’t the piece you scramble to finish in the final weeks. Registrars will trace your process through all three during the stage 2 audit — the same receiving and final inspection points also show up in First Article Inspection requirements, so it’s worth aligning both procedures rather than building them in isolation. Gaps at any one point are a common nonconformance.


👉 Not Sure This Applies to You?

Before you decide your counterfeit exposure is low → verify it against your actual purchasing data, not your assumption. Download the AS9100 Rev D Gap Assessment Checklist and run your procurement records against the clause 8.1.4 criteria in under 45 minutes.


GIDEP and Reporting Obligations

The Government-Industry Data Exchange Program (GIDEP) is the primary clearinghouse where confirmed and suspect counterfeit parts get reported across the aerospace and defense industry. It isn’t mentioned by name inside AS9100 itself, but registrars routinely ask during audits whether your organization monitors GIDEP alerts and has a documented process for screening incoming reports against your active part numbers.

Reporting works both directions. If you discover a suspect counterfeit part, your procedure should define who reports it, to whom, and on what timeline — both internally and, where required by contract, externally to GIDEP or your customer’s designated reporting channel. A procedure that only covers detection and not reporting is incomplete against both AS9100’s intent and most customer flow-down requirements.


Right-Sizing Your Program

Not every AS9100-certified supplier needs a full electronic parts testing lab. If you’re a small or mid-size fabrication or machining operation with limited electronic content in your product mix, a right-sized program typically includes:

  • A documented supplier approval list limited to OEMs, authorized distributors, or franchised sources
  • A written procedure defining what triggers additional scrutiny — any open-market or broker purchase
  • Incoming inspection criteria that specifically call out counterfeit indicators, not just dimensional checks
  • A process for screening GIDEP alerts relevant to your part numbers, even if that’s a manual monthly check rather than an automated feed
  • A defined reporting and quarantine process for suspect parts

Quick Audit Checklist

  • ✅ Counterfeit parts procedure exists and is controlled as a quality document
  • ✅ Approved supplier list distinguishes OEM/franchised sources from open-market sources
  • ✅ Receiving inspection includes counterfeit-specific criteria
  • ✅ Personnel who approve purchases have received counterfeit awareness training
  • ✅ GIDEP monitoring process is documented, even if manual
  • ✅ Reporting and quarantine process defines responsible roles and timelines
  • ✅ Obsolete part sourcing is addressed separately from standard procurement

Common Audit Findings

The objection I hear most from operations managers building this out for the first time is cost — the assumption that counterfeit prevention means investing in testing equipment they can’t justify for their volume. That’s rarely what triggers a nonconformance. The findings that actually show up during AS9100 audits are almost always documentation and scope gaps, not technical capability gaps:

  • A counterfeit parts procedure exists but was never updated after the organization started sourcing a new part category
  • Training records don’t show counterfeit awareness training was actually delivered, even though the procedure references it
  • The approved supplier list doesn’t distinguish franchised distributors from open-market brokers
  • No evidence of GIDEP monitoring, even informally
  • Reporting process is undefined — the procedure says “report suspect parts” without naming who, how, or within what timeframe

If you are already ISO 9001 certified → the good news is your document control and corrective action processes already exist. You’re not building a new management system, just a new procedure that plugs into the one you have — see our full breakdown of AS9100 vs ISO 9001 for the other clauses in the same category. Counterfeit prevention is also just one piece of the broader aerospace supplier compliance picture, which is worth reviewing if you’re building out your quality system section by section.


FAQ

Does AS9100 require a separate written procedure for counterfeit parts?

AS9100 Clause 8.1.4 doesn’t explicitly mandate a standalone written procedure, but in practice nearly every registrar expects to see one as objective evidence that your organization has planned, implemented, and controlled the required processes. A reference buried inside a general purchasing procedure rarely satisfies an auditor looking for a documented, controllable process.

Do I need AS5553 certification to pass an AS9100 audit?

No. AS5553 is a standard your counterfeit prevention procedure can be built around, but AS9100 doesn’t require separate certification to it. Some customers request AS5553 alignment or certification as a flow-down requirement, which is different from what your registrar checks during your AS9100 surveillance or recertification audit.

What’s the difference between AS5553 and AS6174?

AS5553 covers counterfeit electrical, electronic, and electromechanical (EEE) parts specifically. AS6174 covers counterfeit materiel more broadly, including raw material, hardware, and non-electronic components. If your product mix includes both, your procedure should reference both.

Does a machine shop with no electronic components need a counterfeit parts program?

Yes. Clause 8.1.4 applies to counterfeit and suspect counterfeit parts generally, not just electronics. Fabrication and machining operations should scope their program around AS6174’s materiel-focused guidance rather than assuming AS5553’s electronic parts focus is the only relevant reference.

What is GIDEP and do I have to use it?

GIDEP (the Government-Industry Data Exchange Program) is the industry clearinghouse for counterfeit and nonconforming part alerts. AS9100 doesn’t name it directly, but registrars commonly expect evidence that your organization monitors relevant GIDEP alerts as part of your detection process, and reports confirmed or suspect counterfeit parts through it when required by contract.

Do DFARS counterfeit parts clauses apply to me if I’m not a prime defense contractor?

Possibly. DFARS 252.246-7007 and 252.246-7008 apply to contractors subject to Cost Accounting Standards, but the requirements can flow down contractually to sub-tier suppliers regardless of your direct relationship with the government. Check your purchase order terms rather than assuming your distance from the prime contractor exempts you.

How often should the approved supplier list be reviewed for counterfeit risk?

There’s no fixed interval mandated by AS9100 itself, but most effective programs review the approved supplier list at least annually, and immediately whenever a new part category or supplier is added — particularly if that supplier isn’t a franchised distributor or the original manufacturer.

What’s the most common reason suppliers fail this clause during an audit?

Scope gaps, not missing technology. A procedure that names AS5553 but never addresses non-electronic materiel, or a training program that exists on paper but has no records showing it was delivered, are the findings that show up most often — not a lack of expensive test equipment.


📥 Free Resources


Not Sure What to Do Next?

🔹 Still researching what your program needs to look like? Download the free AS9100 Rev D Gap Assessment Checklist and map your current procurement controls against all 74 clauses before you draft anything.

🔹 Ready to build the documentation? 9001Simplified’s AS9100 packages include a counterfeit parts prevention procedure template built to satisfy Clause 8.1.4 — a faster starting point than drafting from scratch. Not sure if a documentation kit is worth it? Read our honest 9001Simplified review first.

🔹 Need to reference the standard itself while you write your procedure? Get the current SAE/AS9100 standard through ANSI Webstore — use code CC2026 for 5% off through December 31, 2026.

🔹 Need your team trained on how this fits into your broader QMS? BSI’s AS9100 training courses cover counterfeit prevention alongside the rest of the AS9100 clause set. Weighing BSI against another registrar? Compare BSI vs ISOQAR before you commit.

Clause 8.1.4 isn’t the hardest requirement in AS9100 — it’s the one most suppliers underestimate because it looks like a paperwork exercise until an auditor asks to see a GIDEP screening process that doesn’t exist. The Standards Navigator will keep tracking this requirement as counterfeit risk across the aerospace supply chain continues to shift.


Stay Ahead of Aerospace Compliance Requirements

Suppliers that treat Clause 8.1.4 as an afterthought find out the hard way, mid-audit. Suppliers that build the procedure early, with clear supplier approval criteria and a documented GIDEP screening process, walk into that same audit with one less place for a nonconformance to hide. That’s the gap The Standards Navigator exists to close for aerospace suppliers working through AS9100.

👉 Get updates on AS9100 clause interpretation and aerospace compliance
👉 Be first to access new aerospace gap assessment tools and documentation resources

Subscribe

* indicates required

The Standards Navigator — Industrial Compliance. Clearly Explained.

AS9100 vs ISO 9001: Key Differences for Aerospace Suppliers (2026 Guide)

AS9100 and ISO 9001 are both quality management system standards — but they serve fundamentally different purposes. AS9100 Rev D incorporates every ISO 9001 requirement and adds over 100 aerospace-specific requirements covering product safety, configuration management, first article inspection, and counterfeit parts prevention. This guide explains exactly where the standards differ, who needs AS9100, and how ISO 9001 certification reduces your implementation timeline.

How AS9100 Rev D builds on ISO 9001 — and what aerospace suppliers need to know before choosing a certification path

Affiliate Disclosure: Some links in this article are affiliate links. If you purchase through them, The Standards Navigator may earn a commission at no additional cost to you.


The Question Every Aerospace Supplier Asks Eventually

You are ISO 9001 certified — or you are thinking about getting there. Then a prime contractor drops a supplier questionnaire on your desk with one question that changes the conversation: Are you AS9100 certified?

Those four letters carry weight in aerospace. They signal that your quality management system has been evaluated against requirements that go well beyond general manufacturing. Traceability, configuration management, first article inspection, counterfeit parts prevention — these are not optional considerations in aerospace. They are audited requirements.

The difference between AS9100 and ISO 9001 is not just a longer checklist. It is a fundamentally different level of risk tolerance built into the standard itself. Understanding that distinction before you invest in certification is the difference between a smooth implementation and a year of unexpected rework.

This guide breaks down exactly where AS9100 expands on ISO 9001, who needs which standard, and how to navigate certification if you are coming from an ISO 9001 foundation.


⚠️ Not sure where your QMS stands against AS9100 requirements? Most aerospace suppliers don’t fail certification audits because they don’t understand the standard. They fail because they assumed their ISO 9001 foundation covered more than it did. Run a clause-by-clause gap check before you commit to an implementation timeline.

👉 Download the free AS9100 Rev D Gap Assessment Checklist →


In This Guide

  • What AS9100 is and how it relates to ISO 9001
  • The four AS9100-specific requirement areas that have no ISO 9001 equivalent
  • A clause-by-clause comparison table
  • Who needs AS9100 vs. who can stay with ISO 9001
  • How to use an existing ISO 9001 certification as a foundation
  • Certification cost and timeline comparison

👉 Start Here — Top Resources for This Topic


What Is AS9100 Rev D?

AS9100 is the quality management system standard for the aerospace, aviation, and defense industries. It is published by SAE International and managed by the International Aerospace Quality Group (IAQG).

Rev D — the current revision — was released in 2016 and aligned AS9100 with the ISO 9001:2015 structure. Every requirement in ISO 9001:2015 is incorporated directly into AS9100 Rev D. The aerospace-specific additions sit on top of that foundation — often embedded within the same clause structure.

The standard uses the term Aerospace Quality Management System (AQMS) rather than QMS — a minor but document-important distinction if your QMS manual language needs to align with the standard.

2026 update: The IAQG is developing IA9100, a globally harmonized successor that will replace regional variants including AS9100 (Americas), EN 9100 (Europe), and JISQ 9100 (Asia-Pacific). Final publication is targeted for Q4 2026 with a 24–36 month transition window. Organizations certifying today should certify to AS9100 Rev D — IAQG guidance confirms this is the correct path now.

For the full scope of AS9100 before comparing it to ISO 9001, see What Is AS9100? — The Complete Guide.


How AS9100 Builds on ISO 9001

ISO 9001:2015 provides the quality management framework. AS9100 Rev D starts there and expands.

LayerStandardWhat It Covers
FoundationISO 9001:2015Quality management system — any industry
Aerospace additionsAS9100 Rev D100+ aerospace-specific requirements on top
CombinedAS9100 Rev D fullComplete aerospace quality management system

You cannot hold an AS9100 certification without meeting every ISO 9001 requirement. The reverse is not true — ISO 9001 certification does not satisfy AS9100 requirements.

In practical terms: if you are already ISO 9001 certified, your QMS covers roughly 70–75% of what AS9100 requires. The remaining 25–30% is where most implementation effort concentrates — and where most audit findings are issued.


The Four Key Differences Between AS9100 and ISO 9001

Infographic comparing the four major differences between AS9100 and ISO 9001, including product safety, configuration management, first article inspection, and counterfeit parts prevention.
AS9100 builds on ISO 9001 by adding aerospace-specific requirements for safety, configuration control, first article inspection, and counterfeit parts prevention.

1. Product Safety and Risk Management

ISO 9001 requires risk-based thinking throughout the QMS. AS9100 goes further — it requires explicit, documented product safety considerations and assigns responsibility for communicating safety-critical requirements throughout the supply chain.

Where ISO 9001 says “consider risk,” AS9100 says “identify critical items, establish controls for key characteristics, and document how safety requirements flow to every affected process.”

In a fabrication or machining environment, this means identifying which dimensions, materials, or process parameters are safety-critical — and creating documented evidence that those specific requirements are controlled and verified at every step.

Most common finding: Organizations carrying over their ISO 9001 risk register without adding the AS9100-required safety-criticality designation to individual product characteristics.

2. Configuration Management

ISO 9001 has no equivalent requirement. AS9100 requires a formal configuration management process that controls the definition of a product throughout its lifecycle — including design documentation, approved deviations, and change control.

Your QMS must include a documented process for managing engineering changes, maintaining configuration baselines, and controlling which revision of a drawing, specification, or process document applies to any given production lot.

If you manufacture to customer-furnished drawings in aerospace, your configuration management process must trace which revision was active at time of manufacture — and any deviations from that revision must be formally approved.

3. First Article Inspection (FAI) Requirements

AS9100 requires that organizations establish, document, and implement a first article inspection process — verifying that the product realization process can produce conforming product before full production begins.

The governing document for FAI in aerospace is AS9102. AS9100 does not replicate all of AS9102’s requirements, but it does require that an FAI process exists and is maintained. If your prime contractor flows down AS9102 requirements, you need to address those specifics as well.

ISO 9001 has no first article inspection requirement. This is one of the clearest examples of the risk gap between the two standards.

If you are already ISO 9001 certified → review your current first article or pre-production verification process. It likely needs formal documentation, defined acceptance criteria, and records retention aligned with AS9100 before your Stage 1 audit.

4. Counterfeit Parts Prevention

AS9100 requires a documented process to detect and prevent the use of counterfeit or unapproved parts in aerospace products. This includes supplier controls, parts identification verification, and handling procedures for suspect material.

ISO 9001 addresses supplier controls but makes no mention of counterfeit parts. In aerospace, this is not a theoretical risk — counterfeit electronic components, fasteners, and raw materials have caused documented failures. AS9100 treats it as an auditable requirement.

Your QMS must include counterfeit part risk mitigation in the procurement process, suspect parts handling procedures, and evidence that your suppliers understand and comply with the requirement.


AS9100 vs ISO 9001: Clause-by-Clause Comparison

Both standards share the same high-level clause structure (Clauses 4–10). The table below shows where AS9100 adds requirements within that structure.

Aerospace engineering drawing with revision control block, quality approval stamp, precision-machined component, and mechanical pencil illustrating AS9100 configuration management and document control requirements.
Configuration management in AS9100 requires organizations to control engineering revisions, document changes, and maintain traceability throughout the product lifecycle.
ClauseISO 9001:2015 RequirementAS9100 Rev D Addition
4 — ContextDetermine internal/external issuesAdd: identify applicable statutory/regulatory requirements for aerospace
5 — LeadershipTop management QMS commitmentAdd: communicate importance of meeting aerospace customer requirements
6 — PlanningRisk and opportunity assessmentAdd: product safety risk — identify safety-critical items explicitly
7 — SupportCompetence, awareness, communicationAdd: employee awareness of contribution to product safety and conformity
8.1 — OperationsPlan production/service provisionAdd: configuration management, counterfeit parts prevention, FAI process
8.4 — External providersSupplier evaluation and monitoringAdd: AS9100 flow-down; approved supplier list management
8.5 — Production controlProcess controls and identificationAdd: key characteristics, critical items, lot/serial traceability
8.6 — ReleaseVerification of conformityAdd: documented authority for concessions/deviations; objective evidence retention
9 — PerformanceInternal audits, management reviewAdd: trend analysis of quality data; corrective action effectiveness review
10 — ImprovementNonconformance and corrective actionAdd: escape point analysis; prevent recurrence at supply chain level

Who Needs AS9100 vs. ISO 9001?

You need AS9100 if:

  • ✅ You manufacture, overhaul, or maintain aerospace or defense components
  • ✅ Your customer is a prime contractor (Boeing, Airbus, Lockheed Martin, Raytheon, L3Harris, etc.)
  • ✅ Your purchase orders or supplier agreements specify AS9100 certification
  • ✅ You are pursuing DCMA oversight or government contract qualification
  • ✅ You are on — or want to be on — an Approved Supplier List (ASL) for an aerospace customer

ISO 9001 alone is sufficient if:

  • ✅ You manufacture for non-aerospace industries only
  • ✅ Your customer requires ISO 9001 but does not specify AS9100
  • ✅ You are a commercial manufacturer considering AS9100 as a future growth target

The gray area — Tier 2 and Tier 3 suppliers:

Not every supplier in the aerospace supply chain is required to hold AS9100. Some Tier 2 and Tier 3 suppliers hold ISO 9001 — but the trend is toward AS9100 flow-down requirements going deeper into supply chains. If your prime contractor has added AS9100 to their supplier qualification requirements in the last two years, that is a signal.

Check the IAQG OASIS database to verify certification status of suppliers you are evaluating — and to understand what your prime contractor is likely to require.

If you are evaluating whether AS9100 applies to your organization → review the supplier flow-down requirements in your prime contractor agreement first. The answer is almost always in the purchase order or the Supplier Quality Requirements (SQR) document.


⚠️ Waiting until a customer audit to discover your AS9100 gaps is a costly mistake. Most findings at Stage 1 audits come from undocumented FAI processes, missing configuration management records, and supplier flow-down gaps — all addressable before the auditor walks in the door.

👉 Run the AS9100 Rev D Gap Assessment now — it takes under 45 minutes →


Can ISO 9001 Certification Serve as a Foundation?

Yes — and it is the most efficient path to AS9100.

If you are already ISO 9001 certified, your QMS infrastructure is in place. Document control, internal audit, CAPA, and management review all carry over. The transition work focuses on the AS9100-specific additions.

👉 Run the AS9100 Rev D Gap Assessment before you build your implementation plan — clause-by-clause, free, takes under 45 minutes →

Realistic scope of the gap for an ISO 9001-certified organization:

AreaISO 9001 StatusAS9100 Gap Work Required
Document controlCompliantMinimal — add configuration management layer
Risk managementCompliantModerate — add product safety and critical item designation
Supplier controlsCompliantSignificant — add AS9100 flow-down, approved supplier list, counterfeit prevention
Production controlsCompliantModerate — add key characteristics, lot/serial traceability
First article inspectionNot addressedNew process — build from scratch or formalize existing practice
Internal audit programCompliantMinimal — add aerospace-specific audit criteria
Split-panel aerospace quality management graphic showing ISO 9001 as the foundation on the left and expanded AS9100 requirements, including first article inspection and configuration management documentation, on the right.
ISO 9001 provides a strong quality management foundation, but AS9100 adds aerospace-specific requirements for configuration management, first article inspection, product safety, and counterfeit parts prevention.

Most ISO 9001-certified organizations completing AS9100 gap remediation report 6–12 months of active implementation before Stage 1 audit readiness. Organizations starting from scratch typically need 12–18 months.

If you are already ISO 9001 certified → focus your implementation effort on the four AS9100-specific requirements that have no ISO 9001 equivalent: product safety documentation, configuration management, first article inspection, and counterfeit parts prevention.


Certification Cost and Timeline Comparison

FactorISO 9001AS9100 Rev D
Standard document cost~$175 (ANSI Webstore) — or buy AS9100 and ISO 9001 together and save~$140 (SAE/ANSI)
Implementation timeline (from scratch)9–12 months12–18 months
Implementation timeline (from ISO 9001)N/A6–12 months
Stage 1 audit cost$1,500–$3,000$2,000–$4,500
Stage 2 audit cost$3,000–$8,000$5,000–$12,000
Annual surveillance audit$2,000–$5,000$3,000–$6,500
Consultant support (optional)$5,000–$25,000$10,000–$40,000
Certification body optionsWide choiceMust be IAQG-approved

For a full breakdown by company size and scope, see How Much Does AS9100 Certification Cost?

One critical distinction: AS9100 auditors must be approved through the IAQG certification scheme. Not every ISO 9001 registrar is authorized to issue AS9100 certificates. BSI Group and ISOQAR are both IAQG-approved — BSI Group offers AS9100-specific audit preparation and lead auditor training if you want to build internal competency before your Stage 2 audit. Verify your certification body’s IAQG approval status before engaging.


How to Get Certified: Next Steps

If you are starting from an ISO 9001 foundation:

  1. Download the gap assessment checklist and work through it clause by clause

If your documentation infrastructure needs rebuilding around the AS9100-specific additions, 9001Simplified’s QMS documentation kits provide the ISO 9001 foundation layer that maps directly into AS9100 implementation — cutting initial document build time by 40–60% compared to starting from blank procedures.

  1. Identify your critical items — flag which product characteristics carry safety implications
  2. Build your configuration management process — a documented change control log is a starting point
  3. Formalize your FAI process — if you already do first article checks informally, document them to AS9102 framework
  4. Update your supplier controls — add AS9100 flow-down language to purchase orders and supplier questionnaires
  5. Select an IAQG-approved certification body — get quotes from at least two before committing
  6. Complete your internal audit against the full AS9100 requirements
  7. Schedule your Stage 1 audit — confirm documentation readiness before Stage 2 is booked

If you are starting without ISO 9001:

Consider building to AS9100 directly — you will need to meet every ISO 9001 requirement anyway. Starting with ISO 9001 as an intermediate milestone adds cost and time without a corresponding benefit unless your customer base genuinely splits between ISO 9001 and AS9100 requirements.

If under customer pressure to certify quickly → prioritize training and select your certification body before building documentation. Audit scheduling lead times at major certification bodies currently run 2–4 months.


📥 Free Resources


AS9100 Rev D gap assessment checklist showing aerospace quality management requirements, audit readiness evaluation, and certification preparation for aerospace manufacturers and suppliers.
Use an AS9100 Rev D gap assessment checklist to identify quality management system weaknesses before your certification audit.

📬 Stay Ahead of Your Next Audit

AS9100 auditors find the same gaps year after year — configuration management records, FAI documentation, and supplier flow-down evidence. We track what is actually being flagged in the field and send it directly to your inbox.

Subscribe and get the AS9100 Rev D Gap Assessment Checklist delivered immediately.

Sign up here →


FAQ

Is AS9100 the same as ISO 9001?

No. AS9100 contains every requirement in ISO 9001:2015 but adds more than 100 aerospace-specific requirements covering product safety, configuration management, first article inspection, counterfeit parts prevention, and traceability. ISO 9001 is a general-industry standard; AS9100 is specific to aerospace, aviation, and defense.

Can I be certified to both AS9100 and ISO 9001?

AS9100 certification already incorporates all ISO 9001 requirements, so holding an AS9100 certificate demonstrates compliance with both. Many organizations hold a single AS9100 certificate. Some certification bodies will issue both certificates simultaneously if your customer base specifically requires the ISO 9001 certificate by name.

Does ISO 9001 certification help with AS9100 certification?

Yes, significantly. An existing ISO 9001 QMS provides the document control, internal audit, CAPA, and management review infrastructure that AS9100 builds on. Most ISO 9001-certified organizations can reach AS9100 audit readiness in 6–12 months rather than the 12–18 months typically required from scratch.

Who manages AS9100?

AS9100 is published by SAE International and managed by the International Aerospace Quality Group (IAQG), a consortium of aerospace manufacturers including Boeing, Airbus, and Lockheed Martin. Certification auditors must be approved through the IAQG scheme.

What is IA9100 and does it replace AS9100?

IA9100 is the globally harmonized successor to AS9100 currently being developed by the IAQG. It will replace regional variants including AS9100, EN 9100, and JISQ 9100. Final publication is targeted for Q4 2026 with a 24–36 month transition window. Organizations should certify to AS9100 Rev D now — IAQG guidance confirms this is the correct path.

Do all aerospace suppliers need AS9100?

Not all — but the requirement is flowing deeper into supply chains. Tier 1 suppliers to major primes almost universally require AS9100. Tier 2 and Tier 3 suppliers are increasingly seeing it added to supplier qualification requirements. Verify your specific requirements by reviewing your purchase orders, Supplier Quality Requirements documents, and any flow-down clauses from your prime contractor.

How long does AS9100 certification take?

From a standing start with no existing QMS: 12–18 months. From an existing ISO 9001 certification: 6–12 months. Timeline depends on scope, number of sites, and the extent of gap remediation required after your initial assessment.

What is the difference between AS9100 and NADCAP?

AS9100 is a quality management system standard covering the organization’s overall AQMS. NADCAP (National Aerospace and Defense Contractors Accreditation Program) is a process-specific accreditation program covering special processes — heat treatment, NDT, chemical processing, welding, and others. Many aerospace suppliers hold both. They are complementary, not competing certifications.


Not Sure What to Do Next?

🔹 Need the AS9100 Rev D standard documentBuy AS9100 Rev D — ANSI Webstore. Use code CC2026 for 5% off.

🔹 Need training before your auditAS9100 Lead Auditor and Implementation Courses — BSI Group

🔹 Building your ISO 9001 foundation firstBuy ISO 9001:2015 — ANSI Webstore and review the ISO 9001 Certification Guide before committing to an AS9100 timeline.

The gap between ISO 9001 and AS9100 is real — but it is not insurmountable. Aerospace suppliers make this transition every day. The ones who do it efficiently run their gap assessment first, build their implementation plan around the actual findings, and select a certification body before they start writing procedures. The Standards Navigator covers every step of that process. Start with the gap assessment — everything else follows.


AS9100 vs ISO 9001: The Gap Is Closeable. Start with the Right Information.

The aerospace suppliers that struggle with AS9100 transition are almost always the ones working from assumptions — assuming their ISO 9001 foundation covers more than it does, assuming FAI is informal enough to pass, assuming their supplier flow-down language is sufficient.

The ones that pass their first AS9100 Stage 1 audit without major findings are the ones who ran the gap assessment before they called a consultant.

At The Standards Navigator, AS9100, ISO 9001, and the full aerospace compliance landscape are covered in plain-language, field-level detail — from the standard itself to implementation strategy, audit preparation, and certification body selection.

👉 Get updates on aerospace quality standards, implementation guidance, and compliance insights delivered directly.

👉 Be first to access new AS9100 guides, checklists, and tools as they publish.

Subscribe below to stay ahead.

Subscribe

* indicates required

The Standards Navigator — Industrial Compliance. Clearly Explained.

Buy AS9100 Rev D Standard: Where to Get the Official Document in 2026

AS9100 Rev D is the quality management standard for aviation, space, and defense — and it must be purchased from an authorized source. This guide covers where to buy it, current pricing, format options, what the document includes, and what the upcoming IA9100 transition means for buyers in 2026.

How to purchase AS9100 Rev D from authorized sources — pricing, formats, and what comes with the standard

Affiliate Disclosure: Some links in this article are affiliate links. If you purchase through them, The Standards Navigator may earn a commission at no additional cost to you.


If You’re Sourcing AS9100, You Need to Get This Right

AS9100 Rev D is the quality management standard for aviation, space, and defense. If you’re a supplier to Boeing, Lockheed Martin, Raytheon, or any prime contractor in the aerospace sector, there’s a good chance AS9100 certification is either already required or will be before your next contract renewal.

Getting the standard wrong at the start creates problems that compound. Counterfeit copies circulate online. Outdated revisions get used for implementation. Organizations spend months building a QMS to the wrong requirements and then face nonconformances during Stage 1 audit because the auditor is working from the current text and they’re not.

This guide covers exactly where to buy AS9100 Rev D, what you’re actually getting when you purchase it, the formats available, and what to know about the upcoming transition to IA9100.


In This Guide:

  • Where to buy AS9100 Rev D from authorized sources
  • Pricing and format options (PDF vs. print)
  • What the standard document includes
  • Related aerospace standards worth purchasing together
  • What the IA9100 transition means for buyers in 2026
  • How to verify your certification body is OASIS-listed

👉 Start Here — Top Resources for AS9100

👉 Buy AS9100 Rev D (PDF or Print): ANSI Webstore — Official SAE/AS9100 Standard — use code CC2026 for 5% off through December 31, 2026

👉 Save on Standard Bundles: ANSI Standard Packages — up to 50% off

👉 Build Your AS9100 QMS Documentation: 9001Simplified — Documentation Kits for Aerospace QMS

👉 AS9100 Training Courses: BSI Group — AS9100 Training and Certification

👉 ISO 9001 Training (Foundation for AS9100): ISOQAR — ISO/AS9100 Training Courses


Where to Buy AS9100 Rev D

AS9100 Rev D is published by SAE International on behalf of the International Aerospace Quality Group (IAQG). It is not freely available. To access the official, enforceable text of the standard, you must purchase it from an authorized source.

There are three legitimate options:

SourceFormat AvailableBest For
ANSI WebstorePDF, print, multi-user, bundlesU.S. buyers; international orders; bundle purchases — multiple languages available
SAE International (sae.org)PDF, printDirect from publisher; SAE members may receive discounts
BSI GroupPDF, printUK and European buyers; combined standard and training purchases
Comparison infographic showing authorized AS9100 Rev D purchase sources versus unauthorized sources, including pricing ranges, compliance benefits, and risks of unofficial copies.
Purchasing AS9100 Rev D from authorized sources helps ensure document accuracy, compliance, support, and access to the latest revision.

The ANSI Webstore is the recommended source for most buyers. It carries the full SAE AS9100 series in PDF and print formats, processes international orders, offers standards in multiple languages, and includes bundle packages that reduce per-standard cost when you need more than one document. Use code CC2026 at checkout for 5% off through December 31, 2026.

Avoid third-party resellers offering discounted PDFs, “free downloads,” or document-sharing platforms. Copies obtained outside authorized channels are almost always outdated, incomplete, or counterfeit — and your registrar will ask to see that you’re working from a current, controlled copy of the standard.

See also: Where to Buy ISO Standards — Complete Guide to Official Sources


Pricing and Formats

AS9100 Rev D pricing through the ANSI Webstore runs approximately $200–$260 for a single-user PDF. Hardcopy print editions are similarly priced. Multi-user and enterprise licenses are available for organizations that need broader access.

FormatPrice RangeNotes
Single-user PDF$200–$260Immediate download; searchable; single-user license only
Hardcopy (print)$200–$260Physical copy; useful for shop floor reference; single license
PDF Multi-User$400–$500Shared access across your implementation team
Enterprise License$1,000–$1,800Organization-wide access; contact ANSI for quote
Bundle (AS9100 + related standards)Up to 50% offBest value when purchasing multiple aerospace standards together

If you’re buying AS9100 alongside AS9102 (first article inspection), AS9101 (audit requirements), or ISO 9001, the ANSI standard bundle packages are worth evaluating — savings of up to 50% off list price apply when you bundle. That’s meaningful when you’re stacking multiple documents for a full implementation.

For a full breakdown of what AS9100 certification costs beyond the standard itself — including registrar fees, audit costs, and consultant expenses — see How Much Does ISO Certification Cost?


What the Standard Includes

AS9100 Rev D is the full quality management system requirements document for aviation, space, and defense. It is built on the ISO 9001:2015 framework — every clause from ISO 9001 is present — with aerospace-specific additions layered on top.

When you purchase AS9100 Rev D, you get:

  • The complete text of all 10 clauses, including all aerospace add-ons
  • Annex A — mapping of clause additions to ISO 9001 structure
  • Annex B — quality management principles (informative)
  • Bibliography of related standards

Key aerospace-specific requirements that go beyond ISO 9001 include:

Requirement AreaAS9100-Specific Addition
Product safetyDedicated clause — must identify, document, and manage product safety risks
Counterfeit parts preventionExplicit controls required for prevention, detection, and disposition of counterfeit EEE parts
Configuration managementRequired for products throughout lifecycle — more rigorous than ISO 9001 traceability requirements
First article inspectionReferenced requirement — cross-references AS9102 for full FAI requirements
Human factorsAddressed explicitly — organizations must consider human factors in their processes
Operational risk managementExpanded beyond ISO 9001 risk-based thinking — more prescriptive requirements

The standard text itself does not include implementation guidance, checklists, or templates. Those are separate documents. If your team needs a ready-made documentation system, 9001Simplified’s aerospace documentation kits are built to the AS9100 clause structure and can significantly compress implementation time.

See also: ISO Documentation Packages — Are They Worth It for Manufacturing?


⚠️ Most teams don’t fail AS9100 audits because they misread the standard. They fail because they assumed their existing QMS covered it. If you haven’t run a clause-by-clause gap check against Rev D, do it before you schedule your Stage 1.

👉 Download the AS9100 Rev D Gap Assessment Checklist — free


AS9100 Rev D references several companion standards. If you’re implementing or certifying to AS9100, these are the documents your auditor will expect you to know — and in some cases, demonstrate compliance with.

StandardWhat It CoversRequired?
AS9101FAudit requirements for aviation, space, and defenseUsed by your registrar during audits — worth understanding
AS9102BFirst Article Inspection (FAI) requirementsFrequently customer-mandated; cross-referenced in AS9100
AS5553Counterfeit parts avoidance, detection, mitigationDirectly referenced by Clause 8.1.4 of AS9100
ISO 9001:2015Quality management system requirements (base standard)AS9100 incorporates ISO 9001 in full — purchasing separately is optional
AS9110QMS requirements for aviation maintenance organizationsMRO-specific — not needed unless you’re an aviation maintenance operation
AS9120QMS requirements for aviation distributorsDistributors only — not a manufacturing standard

For most manufacturers, the priority purchases alongside AS9100 Rev D are AS9102 if your customers require FAI, and AS5553 if you handle electronic or electromechanical components. Both are available through ANSI standard bundle packages. The full SAE International aerospace standards catalog is available if you need to browse the complete series before deciding.

If you are also ISO 9001 certified — or working toward it as a foundation for AS9100 — see What Is AS9100? for a full breakdown of how the two standards relate clause by clause.


The IA9100 Transition — What Buyers Need to Know in 2026

This is the most important context for anyone buying AS9100 in 2026.

The IAQG is in the process of rebranding and revising AS9100 Rev D as IA9100 — where “IA” stands for International Aerospace. The name change reflects the IAQG’s goal of publishing a single, unified global document rather than separate regional versions. The target publication date is late 2026, aligned with the anticipated release of ISO 9001:2026.

What this means practically:

  • AS9100 Rev D remains the current, enforceable standard. Buy it now if you need to implement or certify to AS9100. It is the document your registrar will audit against.
  • The transition window after IA9100 publishes will likely be two to three years. Organizations with current AS9100 Rev D certificates will have time to transition — similar to how ISO 9001:2015 gave organizations three years to move from 2008.
  • Key changes expected in IA9100 include expanded product safety requirements, new information security clauses, stronger counterfeit parts controls, and alignment with the revised ISO 9001 high-level structure.
  • You are not behind by purchasing Rev D today. Every organization that certifies in 2026 will need to transition later — that’s standard practice in ISO and aerospace standards management.
Timeline infographic showing the expected transition from AS9100 Rev D certification to IA9100 publication and the anticipated 2-3 year aerospace industry transition period.
This timeline illustrates the expected path from AS9100 Rev D certification to the future IA9100 standard and transition window.

⚠️ Buyer’s Note: If you see a listing for “IA9100” or “AS9100 Rev E” as a published, purchasable standard in 2026, verify the source carefully. As of June 2026, IA9100 has not been published. AS9100 Rev D (2016) is the current edition.

For a deeper look at what AS9100 requires and how certification works, see What Is AS9100? — Complete Guide to the Aerospace Quality Standard.

See also: ISO Implementation Timeline for Manufacturers and Best ISO Certification Bodies — Ranked and Reviewed for 2026


How to Verify Your Certification Body Is OASIS-Listed

Not every ISO 9001 registrar is accredited to certify AS9100. This is a common mistake — organizations assume that because a CB holds ISO 9001 accreditation, they can issue an AS9100 certificate. They can’t unless they hold separate AS9100 accreditation.

The IAQG maintains the OASIS database — the authoritative registry of AS9100-certified organizations and accredited certification bodies. Before you sign with a registrar:

  • ✅ Search the OASIS database to confirm your CB is listed and active for AS9100
  • ✅ Verify ANAB accreditation for AS9100 in North America — this is the recognized accreditation body
  • ✅ Ask specifically which aerospace sectors and scopes the CB is accredited for — aerospace scopes vary
  • ✅ Confirm your organization’s OASIS listing after certification — your prime contractor customers will check it

An AS9100 certificate from an unaccredited CB is not recognized by prime contractors, DoD, or the commercial aerospace supply chain. This is not a technicality. It is a disqualifier for contract eligibility in most aerospace programs.

If you are evaluating which certification body to use → see Best ISO Certification Bodies — Ranked and Reviewed for 2026 for a full breakdown of accredited options.

If you are comparing AS9100 certification against your existing ISO 9001 scope → see ISO 9001 Certification Guide for how the two audit processes compare.er for contract eligibility.


Frequently Asked Questions

Where can I buy AS9100 Rev D officially?

AS9100 Rev D is published by SAE International and available through authorized resellers including the ANSI Webstore, SAE.org directly, and BSI Group. The ANSI Webstore is the recommended source for U.S. and international buyers — use code CC2026 for 5% off through December 31, 2026.

How much does AS9100 Rev D cost?

A single-user PDF runs approximately $200–$260 through most authorized resellers. Hardcopy editions are similarly priced. Multi-user PDFs run $400–$500, and enterprise licenses run $1,000–$1,800. Bundle pricing through ANSI reduces costs significantly when you’re purchasing multiple aerospace standards together.

Is AS9100 Rev D the same as ISO 9001?

No — but it contains all of ISO 9001:2015. AS9100 Rev D incorporates the full ISO 9001:2015 text and adds aerospace-specific requirements on top: product safety, counterfeit parts prevention, configuration management, first article inspection references, human factors, and expanded operational risk management. If you are certified to AS9100, you are also meeting ISO 9001 requirements — but not the reverse.

Should I wait for IA9100 before implementing AS9100?

No. AS9100 Rev D is the current, enforceable standard. IA9100 is expected in late 2026 with a transition window of approximately two to three years after publication. If your customers require AS9100 certification now, implement and certify to Rev D. You will transition to IA9100 when it’s published, as every currently-certified organization will need to do.

Can I share the AS9100 PDF with my whole team?

Not on a single-user license. Standard single-user PDF licenses do not permit multi-user access. If your implementation team needs simultaneous access, purchase a multi-user license. Using a single-user PDF across your organization is a license violation your registrar may flag during document control review — a finding you do not want going into Stage 1.

Do I need to buy AS9101 separately?

AS9101F (audit requirements) is used by your registrar, not your organization. You are not required to purchase it, but many quality managers find it useful for understanding what auditors will look for during Stage 1 and Stage 2 assessments. It’s available separately through ANSI.

What’s the difference between AS9100, AS9110, and AS9120?

AS9100 is for aerospace manufacturers. AS9110 is for aviation maintenance, repair, and overhaul organizations. AS9120 is for aviation distributors. Most companies in the aerospace manufacturing supply chain need AS9100. The standard you need is determined by your scope of work, not your customer’s preference.

Is a free version of AS9100 available anywhere?

No. There is no legally free version of AS9100 Rev D. Documents labeled “free AS9100 download” online are either counterfeit, illegally distributed, or are summaries rather than the full standard text. Your QMS must be built from the official, current document — auditors will ask to see your controlled copy.


📥 Free Resources for Aerospace QMS Implementation


Not Sure What to Do Next?

🔹 If you’re ready to buy the standard: AS9100 Rev D — ANSI Webstore — use code CC2026 for 5% off

🔹 If you need multiple standards: ANSI Standard Packages — up to 50% off bundles

🔹 If you need training before you implement: BSI Group — AS9100 Training Courses

🔹 If you’re not sure whether AS9100 applies to you: What Is AS9100? — Complete Guide

🔹 If you need to find an accredited registrar: Best ISO Certification Bodies — Ranked for 2026

🔹 If you want to check your gap before you commit: AS9100 Rev D Gap Assessment Checklist — free download

The Standards Navigator covers AS9100, ISO 9001, ISO 13485, and the full range of standards affecting aerospace, manufacturing, and defense supply chains. If you found this useful, there’s more where it came from.


Stay Ahead of AS9100 and IA9100 Changes

The IA9100 transition is coming. When it publishes, certified organizations will have a limited window to update their QMS. Subscribers to The Standards Navigator get clause-level breakdowns, implementation guidance, and audit prep resources delivered directly — before the deadline pressure hits.

👉 Subscribe below and get the AS9100 Rev D Gap Assessment Checklist free. Know exactly where your QMS stands before your next audit.

Subscribe

* indicates required

What Is AS9100? The Complete Guide to Aerospace Quality Management (2026)

AS9100 Rev D is the quality management system standard for aviation, space, and defense. It builds on ISO 9001 and adds over 100 aerospace-specific requirements — product safety, counterfeit parts prevention, configuration management, first article inspection, and more. If your organization supplies to aerospace primes, this is not optional. This guide covers what AS9100 requires, how it differs from ISO 9001, what certification costs, and what the upcoming IA9100 revision means for your organization.

The aerospace quality management standard explained — what AS9100 Rev D requires, who needs it, how it differs from ISO 9001, the five core tools, certification costs, and what IA9100 means for your organization.

Affiliate Disclosure: Some links in this article are affiliate links. If you purchase through them, The Standards Navigator may earn a commission at no additional cost to you.


AS9100 Is Not Optional in Aerospace. It Is the Price of Entry.

If your organization supplies to Boeing, Lockheed Martin, Raytheon, Airbus, or any Tier 1 aerospace prime — AS9100 certification is not a differentiator. It is a baseline requirement. Without it, you do not get on the approved supplier list. Full stop.

AS9100 Rev D is the quality management system standard for the aviation, space, and defense industries. It builds on ISO 9001:2015 and adds over 100 aerospace-specific requirements covering product safety, configuration management, counterfeit parts prevention, first article inspection, key characteristics, and human factors — areas where ISO 9001 alone is insufficient for the risk profile of aerospace manufacturing.

This guide covers what AS9100 actually requires, who publishes it, how it differs from ISO 9001, what the five core tools are, what certification costs, and what you need to know about the upcoming transition to IA9100.


In This Guide

  • What AS9100 is and who publishes it
  • AS9100 Rev D — the current edition and what it requires
  • How AS9100 differs from ISO 9001
  • The aerospace-specific requirements ISO 9001 doesn’t cover
  • The five core tools of AS9100
  • Who needs AS9100 certification
  • AS9100 certification process — Stage 1 and Stage 2
  • AS9100 certification costs
  • IA9100 — the upcoming revision and what it means
  • Where to buy the AS9100 standard
  • Training and certification resources


👉 Start Here (Top Resources)

👉 Purchase the official AS9100 Rev D standard from the authorized source → SAE AS9100D — ANSI Webstore — use coupon CC2026 for 5% off through December 31, 2026

👉 Get AS9100 certified with an accredited aerospace certification body → BSI Group AS9100 Certification

👉 Get AS9100 training for your team → BSI Group AS9100 Training

👉 Save up to 50% buying aerospace standards as a bundle → ANSI Standard Packages


What Is AS9100?

AS9100 is the international quality management system standard for the aviation, space, and defense industries. The current edition is AS9100 Rev D, formally designated SAE AS9100D:2016 — Quality Management Systems: Requirements for Aviation, Space, and Defense Organizations.

It is published by the International Aerospace Quality Group (IAQG) — a consortium of aerospace manufacturers from the Americas, Asia/Pacific, and Europe — and distributed in the United States through the Society of Automotive Engineers (SAE) and the ANSI Webstore.

AS9100 is used globally across three regional designations:

RegionDesignationRequirements
AmericasAS9100 Rev DIdentical requirements
EuropeEN9100:2018Identical requirements
Asia/PacificJISQ9100:2016Identical requirements

All three are functionally equivalent. A certificate issued under any of them is recognized across the global aerospace supply chain.

AS9100 is built on the foundation of ISO 9001:2015 — it includes all ISO 9001 requirements verbatim and adds over 100 aerospace-specific requirements on top. Organizations certified to AS9100 automatically satisfy ISO 9001 requirements. The reverse is not true.

For a full comparison of the two standards, see AS9100 vs ISO 9001.


AS9100 Rev D — The Current Edition

AS9100 Rev D was published in September 2016 and became the only version accepted for certification in September 2018 when the transition period from Rev C closed. It remains the current active standard.

Rev D introduced the most significant structural changes in the standard’s history — primarily because it aligned with the simultaneously released ISO 9001:2015, which introduced risk-based thinking as a foundational requirement and eliminated prescriptive documentation requirements in favor of a results-based approach.

What Rev D Changed From Rev C

AreaRev C ApproachRev D Approach
Risk managementPreventive action clauseRisk-based thinking embedded throughout
DocumentationPrescribed procedures and recordsDocumented information — flexible and scalable
LeadershipManagement representative requiredTop management direct accountability
Product safetyImplied through quality controlsExplicit dedicated clause
Counterfeit partsGeneral supplier controlsDedicated counterfeit parts prevention requirement
Human factorsNot addressedExplicit human factors clause
Configuration managementBasic requirementExpanded requirements

Rev D also introduced specific requirements for key characteristics — the product and process features that most affect safety, fit, form, and function — and strengthened first article inspection (FAI) requirements under AS9102.

Most common finding in Rev D audits: Organizations that mapped their Rev C system to Rev D clause numbers without genuinely embedding risk-based thinking throughout their processes. The standard is not just restructured — it requires a different way of thinking about quality management.


AS9100 vs ISO 9001 — Key Differences

Comparison infographic showing the key differences between ISO 9001 and AS9100 Rev D, including aerospace-specific requirements such as product safety, counterfeit parts prevention, configuration management, and first article inspection.
AS9100 builds upon ISO 9001 by adding more than 100 aerospace-specific requirements focused on safety, risk, traceability, and product integrity.

AS9100 Rev D contains all of ISO 9001:2015 plus approximately 105 additional aerospace-specific requirements. The additions are not cosmetic — they address the specific risk profile of aviation, space, and defense manufacturing, where product failures can result in loss of life and billions in liability.

Requirement AreaISO 9001:2015AS9100 Rev D
Product safetyNot explicitly addressedDedicated clause — must identify and manage product safety risks
Counterfeit partsNot addressedExplicit requirement to prevent counterfeit part use
Configuration managementNot addressedRequired — must control product configuration throughout lifecycle
First article inspectionNot requiredRequired for new parts and significant changes (AS9102)
Key characteristicsNot addressedRequired — identify, control, and document key characteristics
Human factorsNot addressedRequired — consider human factors in design and production
Customer-designated special requirementsBasic supplier controlsEnhanced flow-down requirements to sub-tier suppliers
Project managementNot addressedRequired for programs above a defined complexity threshold
Risk managementRisk-based thinkingRisk-based thinking plus specific product and program risk requirements
Production process verificationStandard process controlFirst article inspection plus ongoing process monitoring

The practical implication: an organization with ISO 9001 certification has the QMS foundation but needs significant additional controls to meet AS9100 requirements. The gap is not insurmountable — but it is real, and underestimating it is the most common implementation mistake.

For organizations already certified to ISO 9001, see ISO 9001 Certification Guide for the foundational QMS requirements that carry directly into AS9100.


Aerospace-Specific Requirements

These are the clauses and requirements in AS9100 Rev D that have no direct equivalent in ISO 9001. They are where most nonconformances occur in organizations transitioning from ISO 9001 or building an aerospace QMS for the first time.

Product Safety (Clause 8.1.1)

AS9100 requires organizations to identify product safety risks, implement controls, and maintain documentation that traces safety-critical decisions throughout the product lifecycle. This is not a general quality objective — it is a formal, documented process.

Most common finding: Product safety risk assessments that exist as standalone documents rather than being integrated into design controls, supplier qualification, and production process planning.

Counterfeit Parts Prevention (Clause 8.1.4)

Organizations must implement controls to detect and prevent the use of counterfeit or suspect unapproved parts. This includes procurement controls, approved supplier lists, incoming inspection procedures, and training for personnel involved in purchasing and receiving.

The counterfeit parts problem is significant in aerospace — the FAA and DoD have documented thousands of counterfeit parts incidents. AS9100 treats this as a systemic risk requiring a systemic response, not just an inspection step.

Most common finding: Counterfeit parts procedures that address purchasing but not the full supply chain — particularly for legacy parts and spot-buy procurement.

Configuration Management (Clause 8.1.3)

Configuration management ensures that the product delivered matches the approved design — and that any changes to the design are controlled, approved, and documented throughout the product’s lifecycle. This is particularly critical in defense programs where product configurations may be legally specified in contracts.

Most common finding: Configuration management that covers the initial production baseline but lacks controls for engineering changes, customer-approved deviations, and product updates in the field.

Key Characteristics (Clause 8.1.2)

Key characteristics are the features of a product or process whose variation most significantly affects safety, fit, form, function, or service life. AS9100 requires organizations to identify key characteristics, establish controls for them, and communicate them to suppliers.

In practice this means manufacturing engineers and quality engineers working together to identify which dimensions, material properties, or process parameters are truly critical — and building specific inspection and control plans around them rather than treating all characteristics equally.

First Article Inspection (FAI)

AS9100 references AS9102 — the First Article Inspection standard — which requires a documented review of the first production article against engineering drawings and specifications before series production begins. FAI is required for new parts and for significant design or process changes.

FAI is one of the most rigorous requirements new AS9100 implementers underestimate. A complete FAI includes dimensional verification, material certifications, process documentation, and a formal review package that must be retained as a quality record.

Most common finding: FAI records that are incomplete, filed incorrectly, or not updated after engineering changes that should have triggered a partial or full re-FAI.

Human Factors (Clause 8.1.5)

AS9100 requires organizations to consider human factors in the design of work processes and environments — particularly in maintenance, assembly, and inspection operations where human error can have safety consequences.

This is not an ergonomics requirement. It is a quality control requirement — addressing how process design, workstation layout, lighting, task complexity, and shift patterns affect the likelihood of errors in safety-critical operations.


The Five Core Tools of AS9100

Infographic showing the Five Core Automotive Quality Tools framework, including APQP, FMEA, Control Plan, MSA, and PPAP, arranged in a continuous improvement cycle used in IATF 16949 and automotive quality management systems.
The Five Core Tools work together as an integrated framework that helps automotive manufacturers prevent defects, reduce risk, and achieve consistent product quality.

The aerospace supply chain — particularly in the defense sector — references five core quality tools that support AS9100 implementation. Organizations pursuing certification should have working knowledge of all five.

StepToolPurposeWhen Used
1APQP (Advanced Product Quality Planning)Structured product development process that defines what will be built and how — integrating quality planning from design through productionNew product launches, design changes
2FMEA (Failure Mode and Effects Analysis)Systematic identification of potential failure modes and their effects on safety and quality — used to prioritize risk reduction before production beginsDesign, process, and system risk analysis
3Control PlanDocument that specifies control methods, reaction plans, and responsibilities for each step in the production process to prevent defectsProduction process control
4MSA (Measurement System Analysis)Evaluation of measurement equipment and processes to ensure measurement systems are accurate and reliable before production data is trustedGauge R&R studies, calibration validation
5PPAP (Production Part Approval Process)Formal submission that validates all requirements are met and obtains customer approval before production launchCustomer approval before production

These tools originated in the automotive sector (they are also requirements of IATF 16949) and were adopted by aerospace because they provide structured methods for quality planning that align with AS9100’s risk-based approach. For a comparison of automotive and aerospace quality standards, see ISO 9001 vs IATF 16949.


Who Needs AS9100 Certification?

AS9100 certification is required or effectively required in the following situations:

Prime Contractors and Tier 1 Suppliers

Boeing, Lockheed Martin, Northrop Grumman, Raytheon, Airbus, and other aerospace primes require AS9100 certification from their direct suppliers. This requirement flows down through the supply chain — Tier 1 suppliers typically require AS9100 from their Tier 2 suppliers for safety-critical work.

OASIS Database Registration

The OASIS database (Online Aerospace Supplier Information System) is the global registry of AS9100, AS9110, and AS9120 certified organizations. Prime contractors use OASIS to verify supplier certification status. If you are not in OASIS, you cannot demonstrate certification to a prime.

Certification to AS9100 by an IAQG-recognized certification body results in automatic OASIS registration.

Defense Contractors

U.S. Department of Defense contracts frequently specify AS9100 or an equivalent quality management system. DFARS clauses and contract quality requirements often reference the IAQG 9100 series. Organizations pursuing defense work should verify specific contractual quality requirements — some programs require additional standards beyond AS9100.

MRO and Repair Stations

Maintenance, Repair, and Overhaul (MRO) organizations and FAA Part 145 repair stations often pursue AS9110 — the AS9100 variant for aviation maintenance organizations — rather than AS9100 itself. AS9110 addresses the specific quality requirements of maintenance operations.

Aviation Parts Distributors

Organizations that distribute aviation parts without performing manufacturing use AS9120 — the AS9100 variant for distributors. AS9120 focuses on traceability, documentation, and counterfeit parts prevention in the distribution chain.

For a full breakdown of which ISO and quality standards apply to different manufacturing operations, see ISO Standards Required for Manufacturing.


The AS9100 Certification Process

AS9100 certification follows the same two-stage audit structure as ISO 9001, with additional aerospace-specific audit requirements governed by AS9104/1 — the standard that defines how certification bodies must conduct AS9100 audits.

Stage 1 — Documentation Review

The certification body reviews your QMS documentation — the quality manual, procedures, work instructions, and records — against AS9100 requirements. Stage 1 identifies gaps that must be addressed before the Stage 2 audit.

Stage 1 for AS9100 is more rigorous than ISO 9001 Stage 1 because auditors must verify that aerospace-specific documentation is present — FAI procedures, key characteristics identification, counterfeit parts controls, product safety risk processes, and configuration management documentation.

Typical duration: 1–2 days on-site or remote.

Stage 2 — System Audit

The certification body conducts a full on-site audit of your QMS in operation. Auditors evaluate not just whether procedures exist but whether they are being followed, whether records are accurate, and whether the system is producing conforming products.

AS9100 Stage 2 audits routinely include shop floor walkthroughs, review of production records, FAI package review, supplier qualification records, and interviews with operators and inspectors — not just quality and management staff.

Typical duration: 2–5 days depending on organization size and scope.

Surveillance Audits

AS9100 certificates are valid for three years. Annual surveillance audits are required in years 1 and 2. The surveillance audit scope is determined by the certification body but must cover a rotating sample of the certified QMS — it is not a light-touch check-in.

Recertification

A full recertification audit is required in year 3. If your organization is preparing for recertification, treat it with the same rigor as the initial certification audit — auditors are looking at three years of records, trends, and management review history.


AS9100 Certification Costs

AS9100 certification is more expensive than ISO 9001 certification — the audit is longer, the audit requirements are more stringent, and IAQG-accredited auditors command a premium over general ISO 9001 auditors.

Typical Cost Ranges (2026)

Cost CategorySmall Org (under 50 employees)Mid-Size Org (50–250 employees)Large Org (250+ employees)
Standard purchase (AS9100D)~$200~$200~$200
Gap assessment$3,000–$8,000$8,000–$20,000$20,000–$40,000
Implementation (internal)$15,000–$40,000$40,000–$100,000$100,000–$250,000+
Consultant (if used)$10,000–$25,000$25,000–$60,000$60,000–$150,000+
Stage 1 + Stage 2 audit$8,000–$15,000$15,000–$30,000$30,000–$60,000+
Annual surveillance audits$4,000–$8,000/yr$8,000–$15,000/yr$15,000–$30,000/yr

These are ranges, not quotes. The single biggest cost variable is internal labor — the hours your quality team, engineers, and production personnel spend on implementation. Organizations that underestimate internal labor consistently run over budget.

Factors That Drive Cost Up

  • Multiple sites — each site requires separate audit coverage
  • Complex scope — machining, welding, special processes, and NDT all require additional audit time
  • Low starting point — organizations with no formal QMS pay significantly more for implementation than those building on an existing ISO 9001 system
  • Special processes — welding, heat treatment, plating, NDT, and similar processes require specific procedure documentation and personnel qualification records that take significant time to build

The ROI Case

AS9100 certification pays for itself through contract access. A single aerospace contract that requires AS9100 certification — and that your organization could not pursue without it — typically exceeds the full cost of certification in revenue. The question is rarely whether AS9100 is worth the cost. The question is whether your organization is positioned to win the contracts that certification unlocks.

For a full cost breakdown with calculator, see ISO Certification Cost Calculator.


IA9100 — The Upcoming Revision

This is the most important current development in aerospace quality management that every AS9100-certified organization should be tracking.

Timeline infographic showing the anticipated transition from AS9100 Rev D to IA9100, including development activities beginning in 2022, a target publication date of 2026, a 2 to 3 year transition period, and expected industry adoption by 2028 to 2029.
This roadmap illustrates the expected evolution from AS9100 Rev D to IA9100 and highlights the key milestones aerospace organizations should monitor as the next generation aerospace quality standard develops.

The IAQG is developing the next revision of AS9100, which will be published under the new name IA9100. Beginning in 2022, IAQG adopted a new global naming convention — all new standards and revisions now use the “IA” prefix rather than the regional designations (AS9100 for Americas, EN9100 for Europe, JISQ9100 for Asia/Pacific). IA9100 will be a single unified global document, replacing all three regional versions simultaneously.

Why the Timing Matters

IA9100 is being developed in parallel with ISO 9001:2026, which is scheduled for publication in Q3 2026. This is intentional — AS9100 and its successor IA9100 incorporate ISO 9001 text verbatim, so IA9100 cannot be finalized until ISO 9001:2026 is published. ISO 9001:2026 is expected to introduce updates to risk-based thinking, change management, and sustainability considerations — all of which IA9100 must incorporate. The IAQG has indicated a 2026 release target for IA9100 to coincide with the ISO 9001:2026 publication.

For organizations already certified to AS9100 Rev D, the verbatim inclusion of ISO 9001 text in IA9100 means continuity — not a complete rewrite. The QMS foundation you build today carries forward. The changes will be additive, not a teardown.

Timeline

MilestoneTiming
IAQG new naming convention adopted2022
IA9100 development begins2022
ISO 9001:2026 target publicationQ3 2026
IA9100 target publication2026 (aligned with ISO 9001:2026)
Transition window (historical precedent)2–3 years after publication

What This Means for Your Organization

Organizations currently certified to AS9100 Rev D do not need to do anything differently today. Rev D remains the valid and active standard. Certification bodies are still issuing AS9100 Rev D certificates.

What you should do:

✅ Continue pursuing or maintaining AS9100 Rev D certification — there is no reason to wait for IA9100

✅ Begin monitoring IAQG communications for formal transition requirements

✅ Note that the transition window (estimated 2–3 years) gives certified organizations significant time to adapt

⚠️ Do not let IA9100 uncertainty delay certification decisions — the aerospace supply chain is not pausing AS9100 requirements while the revision is finalized


Where to Buy the AS9100 Standard

AS9100 Rev D is an SAE standard distributed through authorized channels. The ANSI Webstore is the authorized U.S. source for SAE standards and serves international buyers with standards available in multiple languages.

SAE AS9100D — ANSI Webstore — use coupon CC2026 for 5% off through December 31, 2026

Save up to 50% on ANSI Standard Packages — bundles covering AS9100 with ISO 9001 and related aerospace standards

The ANSI Webstore also offers a SAE AS9100D and ISO 9001 QMS Requirements Set — a bundle that includes AS9100D, ISO 9001:2015, and the ISO 9001 amendment, which is particularly useful for organizations building a combined AS9100/ISO 9001 system or transitioning from ISO 9001 to AS9100.

For a full guide on purchasing from authorized sources, see Where to Buy ISO Standards.


AS9100 Training and Certification Resources

Pursuing AS9100 certification requires trained personnel — internal auditors who understand the aerospace-specific requirements, quality managers who can build and maintain a compliant system, and leadership that understands what AS9100 commitments mean operationally.

Training Options

👉 BSI Group AS9100 Training — BSI Group is one of the most recognized certification bodies globally, offering AS9100 foundation, internal auditor, and lead auditor training. Their training is built around real audit experience and reflects what auditors actually look for.

👉 ISOQAR AS9100 Training — ISOQAR offers ISO-family training courses covering auditor qualifications and QMS implementation. Position alongside BSI as a second training option for your team.

Choosing an AS9100 Certification Body

Only certification bodies accredited under the IAQG’s ICOP (International Certification Organization for OASIS) scheme can issue AS9100 certificates that appear in the OASIS database. Verify any certification body’s ICOP accreditation status directly at ANAB before signing a contract — this is non-negotiable. A certificate from a non-ICOP certification body does not satisfy prime contractor requirements.

Major ICOP-accredited certification bodies include BSI Group, Bureau Veritas, DNV, Intertek, DEKRA, NQA, Perry Johnson Registrars, and SGS. For a ranked comparison of certification bodies, see Best ISO Certification Bodies.


AS9100 Implementation Checklist

Before your Stage 1 audit, verify these aerospace-specific elements are in place:

✅ Product safety risk assessment documented and integrated into operations

✅ Counterfeit parts prevention procedure — procurement, receiving, and storage controls

✅ Configuration management procedure covering design baseline, changes, and deviations

✅ Key characteristics identified on drawings and linked to control plans

✅ First Article Inspection (FAI) procedure referencing AS9102

✅ Human factors considered in work instruction and process design

✅ Special process controls — welding procedures, heat treatment specs, NDT procedures, qualified personnel records

✅ Supplier qualification records for all external providers supplying safety-critical items

✅ OASIS registration completed after certification

✅ Internal auditors trained to AS9100 Rev D requirements — not just ISO 9001

Download the Free AS9100 Rev D Gap Assessment Checklist

Knowing the requirements is one thing. Knowing where your organization actually stands against them is another.

The AS9100 Rev D Gap Assessment Checklist gives you a structured, clause-by-clause evaluation of your current QMS across 74 requirements and 12 sections — including the four AS9100-specific areas that generate the majority of first-time audit failures:

  • Product safety (Clause 8.1.1)
  • Counterfeit parts prevention (Clause 8.1.4)
  • Configuration management (Clause 8.1.3)
  • Key characteristics (Clause 8.1.2)

Mark each item YES, PARTIAL, or NO. The scoring guide tells you exactly where you stand and what to prioritize before you invest in certification.

It takes under 45 minutes and is completely free.

👉 Download the AS9100 Rev D Gap Assessment Checklist

AS9100 Rev D gap assessment checklist showing aerospace quality management requirements, audit readiness evaluation, and certification preparation for aerospace manufacturers and suppliers.
Use an AS9100 Rev D gap assessment checklist to identify quality management system weaknesses before your certification audit.

Frequently Asked Questions

What is AS9100 certification?

AS9100 certification is formal third-party verification that an organization’s quality management system meets the requirements of AS9100 Rev D — the aerospace industry quality standard. Certification is issued by IAQG-accredited certification bodies and results in registration in the OASIS database, which prime contractors use to verify supplier qualification.

What is the difference between AS9100 and ISO 9001?

AS9100 Rev D includes all ISO 9001:2015 requirements plus approximately 105 aerospace-specific additions covering product safety, counterfeit parts prevention, configuration management, key characteristics, first article inspection, and human factors. Organizations certified to AS9100 automatically satisfy ISO 9001 requirements. ISO 9001 certification alone does not satisfy AS9100 requirements.

What does AS9100 Rev D mean?

Rev D indicates the fourth major revision of the AS9100 standard. AS9100 was first published in 1999 (Rev A), revised in 2001 (Rev B), 2004 (Rev C), and 2016 (Rev D). Rev D is the current active edition and the only version accepted for certification. A new revision — to be rebranded as IA9100 — is expected in late 2026.

How long does AS9100 certification take?

Organizations with no existing QMS typically require 12–24 months to implement AS9100 and achieve certification. Organizations with an existing ISO 9001 system can often achieve AS9100 certification in 6–12 months, depending on the gap between their current QMS and AS9100’s aerospace-specific requirements. See How Long Does ISO Certification Take for a phase-by-phase timeline breakdown.

Do I need AS9100 if I already have ISO 9001?

ISO 9001 is the foundation of AS9100 — but it is not a substitute. If your aerospace customers or contracts require AS9100 certification, ISO 9001 alone does not satisfy that requirement. The aerospace-specific requirements in AS9100 (product safety, counterfeit parts, configuration management, FAI, key characteristics) are not addressed in ISO 9001.

What is OASIS and why does it matter?

OASIS (Online Aerospace Supplier Information System) is the global database of AS9100, AS9110, and AS9120 certified organizations maintained by the IAQG. Prime contractors use OASIS to verify that suppliers hold valid certification from an ICOP-accredited certification body. Only certification bodies operating under ICOP accreditation can register certifications in OASIS. A certificate from a non-ICOP body does not appear in OASIS and does not satisfy prime contractor supplier qualification requirements.

What is IA9100 and when will it replace AS9100?

IA9100 is the next revision of the AS9100 aerospace quality management standard, developed by the IAQG. Beginning in 2022, IAQG adopted a new global naming convention — all new standards and revisions now use the “IA” prefix. IA9100 is being developed in parallel with ISO 9001:2026 because IA9100 incorporates ISO 9001 text verbatim and cannot be finalized until ISO 9001:2026 is published. ISO 9001:2026 is expected to introduce updates to risk-based thinking, change management, and sustainability considerations — all of which IA9100 must incorporate. ISO 9001:2026 is scheduled for Q3 2026, and the IAQG has indicated a 2026 release target for IA9100 as well. Once published, organizations will have a formal IAQG-defined transition period — historically 2–3 years — to migrate from AS9100 Rev D. Because IA9100 incorporates ISO 9001 text verbatim, the transition will be additive rather than a complete system rewrite. Both the IAQG and NASA have explicitly stated that organizations should continue certifying to AS9100 Rev D now rather than waiting for IA9100.

How much does AS9100 certification cost?

AS9100 certification costs vary significantly by organization size and complexity. A small organization (under 50 employees) with a limited scope can expect total first-year costs of $30,000–$80,000 including implementation, training, and audit fees. Mid-size organizations typically spend $80,000–$200,000. Annual surveillance audits run $4,000–$15,000 depending on size. See How Much Does ISO Certification Cost for a full breakdown.


📥 Free Resources


Not Sure What to Do Next?

🔹 You need the official AS9100 Rev D standard

SAE AS9100D — ANSI Webstore — use coupon CC2026 for 5% off through December 31, 2026

🔹 You want to save buying AS9100 with ISO 9001 and related standards

Save up to 50% on ANSI Standard Packages — AS9100D and ISO 9001 bundle available

🔹 You’re ready to pursue AS9100 certification

BSI Group AS9100 Certification

🔹 You need AS9100 training for your quality team

BSI Group AS9100 Training

ISOQAR ISO Training Courses

🔹 You want to understand how AS9100 compares to ISO 9001

ISO 9001 vs IATF 16949 — covers the ISO 9001 vs industry-specific standard comparison framework

ISO 9001 Certification Guide

🔹 You want to understand certification costs before committing

How Much Does ISO Certification Cost?

ISO Certification Cost Calculator

🔹 You need a certification body recommendation

Best ISO Certification Bodies

🔹 You want to understand implementation timelines

How Long Does ISO Certification Take?

ISO Implementation Timeline for Manufacturers


AS9100 Is the Standard. The Question Is When.

If your organization is in aerospace, defense, or aviation manufacturing — or wants to be — AS9100 certification is not a question of if. It is a question of when and how to get there efficiently.

The organizations that struggle with AS9100 are almost always the ones that treat it as a documentation project rather than a genuine quality system. The organizations that pass their first audit without major findings are the ones that understand the standard’s intent — that in aerospace, quality failures are not defects you rework or customer complaints you manage. They are incidents with consequences that cannot be reversed.

At The Standards Navigator, AS9100 and the broader aerospace compliance landscape are covered in depth — from the standard itself to implementation strategy, audit preparation, and certification body selection.

👉 Get updates on aerospace quality standards, implementation guidance, and compliance insights delivered directly.

👉 Be first to access new AS9100 guides, tools, and checklists as they publish.

Subscribe below to stay ahead.

Subscribe

* indicates required

ISO Standards for Contract Manufacturers (2026 Complete Guide)

Choosing the right ISO standards as a contract manufacturer isn’t about collecting certifications—it’s about aligning with customer requirements, industry expectations, and operational risk. This 2026 complete guide breaks down the most relevant standards, including ISO 9001, ISO 14001, ISO 45001, IATF 16949, AS9100, ISO 3834, AWS D1.1, and ASME Section IX, helping you determine which apply to your business and how to use them to win work, improve quality, and stay compliant.

Which ISO standards for contract manufacturers are needed, how to manage the quality requirements flowing from multiple customers simultaneously, and what audit-ready compliance looks like when every job has different specifications.

Affiliate Disclosure: Some links in this article are affiliate links. If you purchase through them, The Standards Navigator may earn a commission at no additional cost to you.


From the Shop Floor: The Most Expensive Word in Contract Manufacturing Is “Assumed”

In my experience managing supplier quality across heavy industrial fabrication and coatings projects, the single most consistent compliance failure I’ve seen in contract manufacturing environments isn’t welding defects, nonconforming material, or missed deadlines. It’s incomplete information delivery.

A purchase order or contract specifies exactly what documentation, inspection hold points, and quality records the customer requires. The contract manufacturer reads the commercial terms, acknowledges the order, and begins production — assuming that the quality deliverables are understood. They’re not always. I’ve seen it repeatedly with ITP (Inspection and Test Plan) requirements where specific coating inspection hold points were contractually required but never implemented because the production team didn’t connect the ITP requirement to their daily work. I’ve seen it with PO-specific documentation requirements — material certifications, dimensional records, third-party inspection reports — that the customer listed explicitly and the supplier delivered incompletely or not at all.

The pattern is consistent: the contract said it. The supplier missed it. The customer rejected the deliverable, the relationship was damaged, and the cost of fixing it far exceeded the cost of getting it right the first time.

ISO 9001 Clause 8.4.3 exists precisely to prevent this. It requires that customer requirements be communicated — completely — to the people responsible for meeting them. But having the clause in your quality manual doesn’t prevent the failure. Building the operational discipline to review every contract, identify every quality deliverable, and communicate it to the production team before work begins is what prevents it. That discipline is what ISO certification is supposed to build.

This guide is written for contract manufacturers who want to build that discipline — and the quality system around it.


In This Guide

  • What makes contract manufacturing compliance different from dedicated production
  • Which ISO standards contract manufacturers need
  • How to manage quality requirements from multiple customers simultaneously
  • Purchase order and contract review requirements under ISO 9001
  • ITP and hold point management for contract manufacturers
  • Documentation deliverables — what customers require and how to manage them
  • Supplier quality requirements for contract manufacturers
  • What audit-ready compliance looks like in a contract manufacturing environment
  • Common contract manufacturer compliance failures


👉 Start Here (Top Resources)

👉 Purchase the official ISO 9001:2015 standard → ISO 9001:2015 — ANSI Webstore — use coupon CC2026 for 5% off through December 31, 2026

👉 Get ISO 9001 certified with an accredited certification body → ISOQAR ISO 9001 Certification

👉 Get ISO 9001 training for your team → BSI Group ISO 9001 Training

👉 Deploy a ready-to-use ISO 9001 documentation system → 9001Simplified Documentation Kits

👉 Save up to 50% buying ISO standards as a bundle → ISO Standards Packages — ANSI Webstore


What Makes Contract Manufacturing Compliance Unique

A dedicated production facility makes the same parts, to the same specifications, for the same customers, on a repeating schedule. Quality requirements are consistent, documentation deliverables are predictable, and the QMS can be built around a stable process landscape.

Contract manufacturers don’t work that way. Every job is potentially different — different customer, different specifications, different applicable standards, different documentation requirements, different hold points and witness points, different acceptance criteria. The quality system that serves a contract manufacturer must be flexible enough to adapt to all of these while remaining systematic enough to ensure nothing gets missed.

This creates a specific set of compliance challenges that generic ISO guidance doesn’t address well:

Multi-customer requirement management: How do you systematically capture and communicate quality requirements from a customer who specifies ASME Section IX welding, AWS D1.1 inspection, and a specific ITP with three customer hold points — alongside a different customer whose contract references only ISO 9001 and their internal quality requirements?

Contract review as a quality control: The commercial contract review that happens at order acceptance is also a quality control event. Every quality deliverable stated in the contract — documentation requirements, hold points, applicable standards, test and inspection requirements — must be identified, communicated to production, and tracked to completion. Missing a contractually specified requirement is both a quality failure and a commercial one.

Documentation deliverable management: Contract manufacturers frequently owe their customers significant documentation packages at project completion — data books, material certifications, weld maps, inspection records, hydro test results, coating inspection records, third-party inspection reports. Missing a single required document can hold payment, trigger customer audit findings, and damage relationships that took years to build.

Variable applicable standards: A contract manufacturer serving industrial, energy, and infrastructure customers may work under AWS D1.1, ASME Section VIII, API 650, AISC, and customer-specific specifications — sometimes simultaneously on different jobs. The QMS must accommodate this variability without losing control of which standards apply to which work.


Which ISO Standards for Contract Manufacturers Apply

StandardApplies When
ISO 9001:2015Almost always — required by most industrial customers as a supplier qualification prerequisite
ISO 14001:2026When customers have environmental supply chain requirements or significant environmental exposure exists
ISO 45001:2018High-hazard contract manufacturing environments — welding, heavy fabrication, coating operations
IATF 16949:2016When contract manufacturing automotive production components
AS9100 Rev DWhen contract manufacturing aerospace or defense components
ISO 3834When welding quality requirements are specified by international or global customers
AWS D1.1Structural steel fabrication contracts
ASME Section IXPressure system fabrication contracts

The standards that apply to any specific contract manufacturing operation depend entirely on the industries served and what customers specify in their contracts and supplier qualification requirements.

For the complete guide to which standards apply by market, see ISO Standards Required for Manufacturing and What ISO Standards Do Tier 1 Suppliers Need?.


ISO 9001 for Contract Manufacturers — The Core Requirements

ISO 9001 Clause 8 operation infographic showing production control, customer requirements, supplier management, inspection, and nonconformance processes in manufacturing
Visual guide to ISO 9001 Clause 8 operation requirements, covering production control, customer requirements, supplier management, inspection, and nonconformance handling.

ISO 9001 is the foundation quality management standard for contract manufacturers. The clauses that have the most operational significance in a contract manufacturing environment are not always the same ones that matter most in dedicated production facilities.

Clause 8.2 — Requirements for Products and Services

This is the most operationally critical clause for contract manufacturers — and the one most directly connected to the compliance failure described in this article’s opening.

Clause 8.2 requires that the organization determine, review, and confirm the requirements for products and services before committing to supply them. For contract manufacturers, this means every incoming contract, purchase order, and specification must be formally reviewed to:

  • Confirm your organization has the capability to meet the technical requirements
  • Identify every quality deliverable — documentation, inspection records, hold points, third-party inspection requirements, data book requirements
  • Identify every applicable standard referenced in the contract
  • Resolve any conflicts or ambiguities before production begins
  • Communicate all quality requirements to the functions responsible for meeting them

The critical operational step that most contract manufacturers handle inadequately: communicating quality requirements to production. The contract review happens in the office. The ITP hold point is required on the shop floor. If the connection between the two isn’t systematic — if there’s no formal mechanism to take quality requirements from the contract and put them into the production traveler — the hold point gets missed. The documentation requirement gets forgotten. The customer rejects the data book at delivery.

What a systematic contract review process looks like:

  • Dedicated contract review checklist identifying all quality deliverables
  • Production traveler that includes all hold points and witness points required by the contract
  • Documentation requirement list generated from contract review and attached to the job file
  • Pre-production review meeting for complex jobs — quality manager and production supervisor confirming mutual understanding of requirements before first piece is started

Clause 8.5.1 — Special Process Controls

Contract manufacturers frequently perform special processes — welding, heat treatment, coating application, NDT — that require qualified procedures and qualified personnel. These requirements apply regardless of whether a specific customer mentioned them, because ISO 9001 classifies these as special processes where quality cannot be fully verified by inspection after the fact.

For contract manufacturers performing structural welding, this means current WPS/PQR documentation. For those performing pressure work, ASME Section IX qualifications. For those performing coating application to coating specifications, documented application procedures and qualified applicators.

For the full special process and welding requirements guide, see Welding Standards: AWS vs ASME vs ISO and ISO 9001 Requirements for Fabricators.

Clause 8.4 — Supplier Controls

Supplier Quality Requirements (SQRM Guide) feature image showing ISO standards, supplier audit checklist, and manufacturing quality control process
Supplier quality requirements ensure consistent materials, controlled risk, and reliable manufacturing performance across your supply chain.

Contract manufacturers frequently use subcontractors — for NDT, heat treatment, specialized coating application, machining, or plating. These subcontractors must be qualified and controlled under your QMS.

Purchase orders to subcontractors must communicate the same quality requirements flowing from your customer contract — including applicable standards, required certifications, documentation deliverables, and hold point requirements. A common contract manufacturer compliance failure: flowing customer quality requirements to your own production team but not to the subcontractor performing the NDT or heat treatment that’s also subject to those requirements.

For the full supplier quality guide, see Supplier Quality Requirements for Manufacturers.


Contract and Purchase Order Review — Clause 8.2

The contract review process is the most important quality control event in a contract manufacturing operation. Everything downstream — production planning, documentation management, subcontractor communication, final inspection — depends on the contract review capturing every quality requirement completely.

What to Review in Every Contract

Technical specifications: What drawing revision? What applicable codes and standards — AWS D1.1, ASME, API, AISC, customer-specific specifications? What material specifications? What weld acceptance criteria? What surface preparation and coating requirements if applicable?

Inspection and test requirements: Is there an Inspection and Test Plan (ITP)? If so, what are the hold points — activities that cannot proceed until the customer or their representative has witnessed and signed off? What are the witness points — activities the customer must be notified of but can proceed if the customer doesn’t attend? What are review points — activities for which records must be submitted for customer review?

Documentation deliverables: What documents must be submitted with or at delivery? Material test reports? Mill certifications? Weld records? NDT reports? Dimensional inspection records? Hydro test records? Coating inspection records? Third-party inspection reports? Data book requirements?

Third-party inspection: Does the contract require a third-party inspector? If so, who arranges them — the customer or the contract manufacturer? What is the notification requirement before hold points?

Applicable certifications: Does the contract require the manufacturer to hold specific certifications — ISO 9001, AISC, ASME Code stamp, NADCAP? Are those certifications current?

Communicating Requirements to Production

Once the contract review identifies all quality requirements, those requirements must be transferred to the production control documents — not left in the contract file in the office.

The production traveler must include:

  • All hold points with notification requirements
  • All witness points with notification requirements
  • Required documentation to be generated at each production stage
  • Applicable welding procedures and qualification requirements
  • Material identification requirements
  • Special process requirements — heat input limits, preheat requirements, coating application conditions

A contract review that captures every requirement but doesn’t transfer those requirements to production is not a quality control. It’s paperwork that creates a false sense of compliance while the shop floor continues working without the information it needs.


ITP and Hold Point Management

The Inspection and Test Plan is the most operationally significant quality document in project-based contract manufacturing — and the one most frequently mismanaged.

An ITP defines every inspection and test activity for a project — what is being inspected, what standard it’s being inspected against, who performs the inspection, what the acceptance criteria are, and whether the activity is a hold point, witness point, or review point.

Hold points are non-negotiable. Work cannot proceed past a hold point until the required inspection is completed and signed off. In practice, this means your production scheduling must account for hold point notification lead times — if the customer requires 24-48 hours notice before a hold point inspection, that notification must happen before the preceding production activity is completed, not after.

Common ITP failures in contract manufacturing:

Not reading the ITP before production begins — the ITP sits in the contract file while production uses a generic traveler that doesn’t reflect the customer’s specific hold points.

Treating hold points as witness points — proceeding past a hold point without obtaining the required sign-off because “the customer can review it later.” This is a direct contract breach and generates significant customer quality findings.

Missing notification requirements — failing to notify the customer or third-party inspector with the required lead time before a hold point, causing inspection delays, production disruption, and schedule impact.

Incomplete ITP records — generating the required inspection records but leaving sign-off fields blank, using illegible entries, or failing to include all required data fields. Incomplete ITP records are a consistent cause of data book rejection at project completion.


Documentation Deliverables — Managing Customer Requirements

ISO documentation packages for ISO 9001 showing procedures, templates, and forms used to build a quality management system
ISO documentation packages provide pre-built procedures, templates, and forms that help manufacturers implement ISO 9001 faster and more efficiently.

Documentation package requirements in contract manufacturing are contract-specific — and frequently underestimated in scope until delivery, when a missing document holds project closeout and payment.

Common Documentation Deliverables in Industrial Contract Manufacturing

Document TypeWhen RequiredWho Generates
Material Test Reports (MTRs)Almost always for structural and pressure workMaterial supplier — collected at receiving
Weld Records / Weld MapsWhen specified in contract or applicable codeContract manufacturer
Welder Qualification Records (WPQs)When welding standards require certified weldersContract manufacturer
WPS/PQR DocumentationWhen applicable welding standard requires qualified proceduresContract manufacturer
Dimensional Inspection RecordsPer contract or ITP requirementsContract manufacturer or third party
NDT ReportsWhen NDT is specified — UT, MT, PT, RTContract manufacturer or NDT subcontractor
Hydrostatic Test RecordsPressure system workContract manufacturer
Coating Inspection RecordsWhen coating specification is included in contractContract manufacturer or third-party inspector
Third-Party Inspection ReportsWhen TPI is specifiedThird-party inspection agency
Certificate of ConformanceMost projects — customer confirmation of conformanceContract manufacturer
As-Built DrawingsWhen specifiedContract manufacturer or engineering

Building the Documentation Package From Day One

The most effective documentation management approach for contract manufacturers: build the data book from the first day of production, not the last week before delivery.

Start a project documentation folder at order acceptance. Add documents as they’re generated — MTRs at receiving, weld records as welds are completed, inspection records as inspections are performed. At project completion, the data book is assembled rather than created under deadline pressure.

The alternative — assembling the documentation package in the final week before delivery — consistently produces incomplete packages, requires hunting for records that should have been filed weeks earlier, and generates the customer rejections that damage relationships and hold payment.


Supplier Quality in a Contract Manufacturing Environment

Contract manufacturers frequently subcontract portions of their work — NDT services, heat treatment, specialized coating, machining operations. The quality requirements in your customer contract flow through to these subcontractors — and you remain responsible for their work quality.

The critical requirement: Your purchase orders to subcontractors must communicate the customer quality requirements that apply to their work. If your contract specifies MT examination to ASME Section V Article 7 with acceptance per ASME Section VIII UW-51, that requirement goes on the PO to your NDT subcontractor — not just in your internal quality file.

This is the contract manufacturer analog of the ITP communication failure described above — knowing what the customer requires but failing to communicate it to the party responsible for delivering it.

Subcontractor qualification for contract manufacturers: Subcontractors performing work on customer contracts must be qualified — their certifications current, their procedures qualified for the work scope, their personnel qualified for the processes they’ll perform. An NDT subcontractor whose Level II certifier has an expired certification creates a compliance gap in your customer deliverable regardless of how good your own qualification program is.

For the full supplier quality management guide, see Supplier Quality Requirements for Manufacturers.

👉 Download the Free Supplier Quality Checklist — all supplier qualification and subcontractor control requirements in one checklist.


Environmental and Safety Standards for Contract Manufacturers

ISO 14001 vs ISO 45001 comparison infographic showing environmental management systems versus occupational health and safety management systems in industrial organizations

ISO 14001:2026

Contract manufacturers with significant environmental exposure — paint and coating operations, chemical surface treatment, significant hazardous waste generation — increasingly face ISO 14001:2026 requirements from industrial customers with ESG supply chain requirements.

ISO 14001:2026 — ANSI Webstore — use coupon CC2026 for 5% off

ISO 45001

Contract manufacturing environments are almost always high-hazard — welding, crane operations, heavy material handling, coating applications with chemical exposure. ISO 45001 provides the systematic safety management framework that high-hazard contract manufacturers need and that industrial customers increasingly require.

ISO 45001:2018 — ANSI Webstore — use coupon CC2026 for 5% off

For the complete safety management guide, see ISO 45001 for High-Risk Manufacturing.


Industry-Specific Standards for Contract Manufacturers

Structural Fabrication Contracts — AWS D1.1

AWS D1.1/D1.1M:2025 — ANSI Webstore

Pressure System Contracts — ASME Section IX

ASME Standards — ANSI Webstore

Automotive Contract Manufacturing — IATF 16949

IATF 16949 Training & Standard — BSI Group

Welding Quality Certification — ISO 3834

ISOQAR ISO 3834 Certification

For the complete welding standards comparison, see Welding Standards: AWS vs ASME vs ISO.


What Audit-Ready Compliance Looks Like

Conformity Assessment Standards thumbnail featuring an auditor reviewing documents with certification stamp, checklist, and quality seal icons representing ISO/IEC 17000 series compliance and accreditation requirements.

When a certification auditor or customer quality representative audits a contract manufacturer, here’s what audit-ready compliance looks like across the areas that matter most:

Contract review records: A completed contract review checklist for every active and recently completed project — identifying all quality deliverables, applicable standards, hold points, and documentation requirements. Not a verbal understanding — a documented record.

Production travelers: Travelers that reflect the actual requirements of each specific contract — not generic templates applied identically to every job. Hold points visible on the traveler. Documentation requirements listed alongside the production activities that generate them.

ITP compliance records: Completed ITP records with all sign-offs current. No hold points bypassed. Notification records showing customers or third-party inspectors were contacted with required lead times.

Documentation packages: Current project data books organized and accessible — demonstrating that documentation is managed throughout the project, not assembled at the end.

Subcontractor POs: Purchase orders to NDT providers, heat treatment subcontractors, and other external providers that communicate the customer quality requirements applicable to their scope of work.

Calibration records: All measurement equipment used for inspection on customer contracts current on the calibration register.

For the full calibration guide, see Calibration Standards for Industrial Equipment.

👉 Download the Free Manufacturing Compliance Checklist — verify all compliance areas are in order before your next audit.


Common Contract Manufacturer Compliance Failures

Incomplete contract review — the root of most downstream failures A contract review that covers commercial terms but misses quality deliverables. The production team starts work without knowing about the ITP hold points, the specific documentation requirements, or the third-party inspection requirement. Every downstream quality failure in contract manufacturing can usually be traced to an incomplete contract review.

ITP hold points bypassed under schedule pressure The most dangerous contract manufacturing compliance failure — proceeding past a customer hold point without the required sign-off because the schedule is tight and “the customer can review it later.” It cannot. Bypassed hold points generate contract findings, rework requirements, and in severe cases, rejection of the entire deliverable.

Quality requirements not communicated to subcontractors Knowing what the customer requires but failing to put those requirements on the subcontractor’s PO. The NDT subcontractor performs examination to their standard procedure — not the customer-specified standard that differs in examination technique, coverage, or acceptance criteria.

Documentation packages assembled at the last minute Waiting until the week before delivery to compile the data book — discovering that receiving records were lost, weld maps were never completed, and the third-party inspection reports haven’t been received yet. Building documentation packages from day one of production is the only reliable approach.

Calibration gaps on inspection equipment Measurement equipment used for customer inspection activities — dimensional tools, coating thickness gauges, temperature measurement equipment — that aren’t on the calibration register or have expired calibration. Customer auditors and third-party inspectors will check calibration status of equipment used in their witness activities.

Not flowing customer standards to production A contract references AWS D1.1 and a specific preheat requirement. The production team welds without preheat because the requirement was in the contract file, not on the traveler. The customer’s third-party inspector witnesses the weld and flags the preheat deviation. The weld must be evaluated, documented, and potentially repaired — at the contract manufacturer’s cost.

For the full picture of what compliance failures cost, see Cost of Non-Compliance in Manufacturing.


Frequently Asked Questions

What ISO standards do contract manufacturers need?

Most contract manufacturers need ISO 9001 as their quality management foundation. Additional standards depend on the industries served — IATF 16949 for automotive, AS9100 for aerospace, AWS D1.1 for structural welding, ASME Section IX for pressure work. ISO 14001:2026 and ISO 45001 are increasingly required by industrial customers in energy and heavy industrial supply chains.

What is an ITP and why does it matter for contract manufacturers?

An Inspection and Test Plan (ITP) is a project-specific document that defines every inspection and test activity — what is being inspected, against what standard, by whom, and whether it’s a hold point, witness point, or review point. Hold points are legally binding under the contract — work cannot proceed past them without the required sign-off. Missing or bypassing ITP requirements is a direct contract breach.

How does ISO 9001 Clause 8.2 apply to contract manufacturers?

Clause 8.2 requires that all customer requirements be determined, reviewed, and communicated before production begins. For contract manufacturers, this means every contract must be formally reviewed to identify all quality deliverables — documentation requirements, applicable standards, hold points, third-party inspection requirements — and those requirements must be communicated to production through the job traveler and production planning documents.

What documentation do contract manufacturers typically owe customers?

Common contract manufacturing documentation deliverables include material test reports (MTRs), weld records and weld maps, welder qualification records, WPS/PQR documentation, dimensional inspection records, NDT reports, hydrostatic test records, coating inspection records, third-party inspection reports, and certificates of conformance. Specific requirements vary by contract and applicable code.

How should contract manufacturers manage multiple customer requirements simultaneously?

Through a systematic contract review process that captures all quality requirements for each project, production travelers that communicate those requirements to the shop floor, and a documentation management system that builds the data book throughout the project rather than at the end. The key is systematic — not relying on memory or informal communication.

How much does ISO 9001 certification cost for a contract manufacturer?

For most small to mid-size contract manufacturers, first-year certification costs range from $8,000–$40,000 depending on organization size, operational complexity, and implementation approach. See ISO Certification Cost Calculator and How Much Does ISO 9001 Cost?

What is the difference between a hold point and a witness point?

A hold point is a mandatory stop — production cannot proceed until the required inspection is completed and signed off by the specified party (customer, third-party inspector, or internal quality). A witness point is a notification requirement — the specified party must be notified and given the opportunity to witness, but production can proceed if they don’t attend. Treating a hold point as a witness point is a contract breach.


📥 Free Resources


Not Sure What to Do Next?

🔹 You need the official ISO 9001:2015 standardISO 9001:2015 — ANSI Webstore — use coupon CC2026 for 5% off through December 31, 2026

🔹 You need AWS D1.1 for structural welding contractsAWS D1.1/D1.1M:2025 — ANSI Webstore

🔹 You need ASME standards for pressure system contractsASME Standards — ANSI Webstore

🔹 You need ISO 14001:2026 for environmental complianceISO 14001:2026 — ANSI Webstore — use coupon CC2026 for 5% off

🔹 You need ISO 45001:2018 for safety complianceISO 45001:2018 — ANSI Webstore — use coupon CC2026 for 5% off

🔹 You want to save buying multiple standards togetherSave up to 50% on ISO Standards Packages — ANSI Webstore

🔹 You’re ready to pursue ISO 9001 certificationISOQAR ISO 9001 Certification

🔹 You need ISO 3834 welding quality certificationISOQAR ISO 3834 Certification

🔹 You need ISO training for your contract manufacturing teamBSI Group ISO TrainingISOQAR ISO Training

🔹 You need a documentation system for contract manufacturing QMS9001Simplified Documentation Kits

🔹 You want to understand supplier and subcontractor quality requirementsSupplier Quality Requirements for ManufacturersWelding Standards: AWS vs ASME vs ISOCalibration Standards for Industrial Equipment

🔹 You want to understand certification costs and timelineHow Much Does ISO 9001 Cost?How Long Does ISO Certification Take?ISO Certification Cost Calculator

🔹 You want the full manufacturing compliance pictureISO Standards Required for ManufacturingQuality Standards for Fabrication ShopsBest ISO Certification Bodies


The Contract Said It. Make Sure Your Shop Floor Knows It.

The most expensive compliance failure in contract manufacturing isn’t a defective weld or a failed hydro test. It’s a hold point nobody knew about, a documentation requirement nobody tracked, a standard nobody communicated to the subcontractor performing the work.

ISO 9001 Clause 8.2 exists to prevent exactly that failure — by making contract review systematic, making customer requirement communication mandatory, and making documentation delivery traceable from day one of the project.

The contract manufacturers that consistently pass audits, deliver complete data books, and build long-term customer relationships aren’t the ones that know the standards better than everyone else. They’re the ones that built the systems to make sure the standards get followed — every job, every time.

At The Standards Navigator, complex standards are translated into practical, real-world guidance you can act on.

👉 Get updates on new standards, implementation strategies, and compliance insights 👉 Be first to access new guides, tools, and checklists

Subscribe below to stay ahead.

Subscribe

* indicates required

ISO Standards for Machine Shops & Job Shops (2026 Complete Guide)

What ISO standards do machine shops actually need? Learn which ISO standards for machine shops matter most, including ISO 9001, ISO 14001, ISO 45001, IATF 16949, AS9100, and ISO 13485- explaining when each applies and how they impact quality, safety, and compliance in manufacturing.

Which ISO standards general machine shops and job shops actually need — from first-time certification to multi-standard compliance — and how to implement them without shutting down production.

Affiliate Disclosure: Some links in this article are affiliate links. If you purchase through them, The Standards Navigator may earn a commission at no additional cost to you.


Job Shops Face a Different ISO Challenge Than Dedicated Production Facilities

A job shop isn’t a single-process facility. It’s a multi-process operation that might run turning, milling, grinding, drilling, boring, and secondary operations — often on the same shift, for different customers, to different specifications, with different quality requirements.

That variety is the job shop’s competitive strength. It’s also what makes ISO certification more complex than most implementation guides acknowledge.

When a dedicated production facility implements ISO 9001, they document a handful of well-defined processes. When a job shop implements ISO 9001, they must document a quality system that applies consistently across dozens of different part types, materials, tolerance ranges, and customer requirements — often with no two jobs exactly alike.

This guide addresses that reality directly — what ISO standards for machine shops and job shops, how to implement them in a high-variety environment, what the most common pitfalls are, and how to build a quality system that survives an audit without collapsing under the weight of its own documentation.


In This Guide

  • Why job shops face unique ISO implementation challenges
  • Which ISO standards apply to general machine shops and job shops
  • How ISO 9001 applies in a high-variety, low-volume environment
  • Customer and industry-specific requirements by market served
  • How to build a QMS that works across multiple processes and part types
  • Documentation that scales to job shop operations
  • What auditors look for in general machining environments
  • Common implementation mistakes job shops make
  • Cost and timeline expectations for machine shop certification

Table of Contents


👉 Start Here (Top Resources)

👉 Purchase the official ISO 9001:2015 standard → ISO 9001:2015 — ANSI Webstore — use coupon CC2026 for 5% off through December 31, 2026

👉 Get ISO 9001 certified with an accredited certification body → ISOQAR ISO 9001 Certification

👉 Get IATF 16949 for automotive supply chains → BSI Group IATF 16949

👉 Get ISO training for your team → BSI Group ISO Training

👉 Deploy a ready-to-use ISO 9001 documentation system → 9001Simplified Documentation Kits

👉 Save up to 50% buying ISO standards as a bundle → ISO Standards Packages — ANSI Webstore


The Job Shop ISO Challenge

Visual representation of ISO certification across industries including construction, healthcare, manufacturing, aerospace, and cybersecurity with icons representing quality, environmental management, safety, and information security standards.

Most ISO 9001 implementation guides are written with dedicated production facilities in mind — organizations that produce the same parts in high volume to the same specifications on a repeating schedule. Documentation is written once and applied consistently to the same process every day.

Job shops don’t work that way. A general machine shop or job shop typically:

  • Runs dozens of different part numbers simultaneously
  • Serves customers in multiple industries with different quality expectations
  • Has no standard production schedule — every week is different
  • Uses shared equipment across different processes and materials
  • Generates new setups, new drawings, and new customer requirements constantly

This creates specific ISO implementation challenges that don’t appear in standard guidance:

Process documentation scope: How do you document processes when every job is different? The answer is process-based documentation — documenting the how (inspection methods, setup verification, material control) rather than the what (specific dimensions and part numbers).

Customer requirement management: Different customers have different quality requirements — some require first article inspection, some require material certifications, some require PPAP, some require nothing beyond a certificate of conformance. ISO 9001 Clause 8.2 requires that all customer requirements are identified, reviewed, and met — which is more complex when every customer is different.

Record management: In a high-volume production environment, records accumulate predictably. In a job shop, records are tied to unique work orders, different customers, and varying inspection requirements — making a systematic record control process essential.

Calibration scope: Job shops typically use a wider variety of measurement equipment than dedicated production facilities — tooling for different processes, different gauges for different tolerances, CMM equipment alongside hand tools.

Understanding these challenges before implementation prevents the most common job shop ISO failure: building a documentation system designed for dedicated production and discovering it doesn’t survive the reality of daily job shop operations.


Which ISO Standards Apply to Machine Shops and Job Shops

StandardWhat It CoversApplies When
ISO 9001:2015Quality management systemAlmost always — required by most industrial customers
ISO/IEC 17025:2017Calibration laboratory competenceWhen selecting calibration service providers or operating an in-house lab
ISO 14001:2026Environmental managementSignificant coolant, chip, and chemical waste — ESG-driven customers
ISO 45001:2018Occupational health and safetyHigh-hazard operations — rotating equipment, material handling
IATF 16949:2016Automotive quality managementAutomotive production part supply
AS9100 Rev DAerospace quality managementAerospace and defense supply chain
ISO 13485:2016Medical device quality managementMedical device component manufacturing

The right combination depends entirely on who you supply and what your customer contracts require. A job shop serving general industrial customers needs ISO 9001. A job shop serving automotive customers needs IATF 16949. A shop serving all three needs a carefully structured system that addresses all applicable requirements.


ISO 9001 in a High-Variety Job Shop Environment

ISO 9001 is the right starting point for virtually every general machine shop and job shop. But implementing it in a high-variety environment requires a different approach than standard ISO 9001 guidance suggests.

Process-Based Documentation — The Key to Job Shop QMS

The most common job shop ISO implementation failure: writing part-specific procedures instead of process-based procedures. A procedure that describes how to machine a specific shaft doesn’t help when the next job is a housing with completely different requirements.

The correct approach for job shops is documenting the process — the consistent method — rather than the specific product:

Instead of: “Inspect shaft diameter to 2.000″ ± 0.001″ using a micrometer” Write: “Inspect critical dimensions per customer drawing using calibrated measurement equipment appropriate to the tolerance. Record actual measurements on the traveler inspection record.”

This approach produces documentation that applies to any part, any customer, any tolerance — while still satisfying ISO 9001’s requirement for documented processes.

Customer Requirement Management in Job Shops

ISO 9001 Clause 8.2 requires that customer requirements be determined, reviewed, and communicated to production before accepting orders. In a job shop, this means:

Order review process: Every new job must be reviewed before acceptance to confirm your shop has the capability, equipment, materials, and qualified personnel to meet the customer’s requirements. This review must be documented.

Customer-specific requirement files: Customers with specific quality requirements — particular inspection methods, certificate of conformance formats, PPAP requirements, material certifications — should have documented files that production can reference for every job from that customer.

Drawing revision control: The most dangerous quality risk in a job shop is machining to a superseded drawing. A systematic drawing revision control process — confirming current revision before setup and maintaining version-controlled records — is essential.

Inspection and Test Planning for Job Shop Operations

Rather than writing inspection plans for every part number (which is impractical in a high-variety environment), job shops can use a tiered inspection planning approach:

Standard inspection requirements: Applied to all jobs — incoming material verification, setup verification before first piece, first piece inspection, in-process dimensional checks at defined intervals, final inspection before shipment.

Customer-specific requirements: Added on top of standard requirements based on customer quality requirements — FAI documentation, material test reports, CMM reports, PPAP packages.

Product risk-based requirements: Additional controls applied based on the criticality of the part — tighter inspection frequency for tight-tolerance work, special material handling for surface-sensitive parts.

This tiered approach is more practical in job shop environments than attempting to document a unique inspection plan for every part number.


Industry-Specific Standards by Market Served

ISO standards by industry showing IATF 16949 for automotive, AS9100 for aerospace, ISO 13485 for medical, ISO 9001 for manufacturing, ISO 14001 for environmental, and ISO 45001 for safety
Key ISO standards required for Tier 1 suppliers across automotive, aerospace, medical, manufacturing, environmental, and safety sectors

The markets your job shop serves determine which standards you need beyond ISO 9001.

Serving Automotive Customers — IATF 16949

Job shops that machine production components for automotive OEMs or Tier 1 automotive suppliers need IATF 16949, not ISO 9001 alone. The automotive-specific requirements that most affect job shops include:

Control plans for each production process: Every machining operation on an automotive production part must have a documented control plan identifying characteristics controlled, measurement methods, sample frequency, and reaction plans.

Process FMEA: A process FMEA must be completed for each machining operation — identifying potential failure modes and the controls in place to prevent or detect them.

PPAP submission capability: Job shops supplying automotive customers must be able to complete and submit PPAP packages — including dimensional results, material certifications, capability studies, and control plans.

Special characteristics: Automotive drawings identify special characteristics — features where variation directly affects vehicle safety or function. These require enhanced monitoring and control beyond standard inspection.

IATF 16949 Training & Standard — BSI Group

For the complete guide, see What Is IATF 16949? and ISO 9001 vs IATF 16949.

Serving Aerospace Customers — AS9100

Job shops machining aerospace components need AS9100 Rev D. The most significant AS9100 requirements for job shops include:

First Article Inspection (FAI): Comprehensive dimensional inspection and documentation of the first production part — confirming your process produces conforming parts before full production release.

Configuration management: Drawing revision control is more stringent in aerospace — every job must reference a specific drawing revision and that revision must be controlled, traceable, and authorized.

Counterfeit parts prevention: Raw material purchased for aerospace applications must come from verified, traceable sources — the aerospace community has zero tolerance for counterfeit or fraudulent material in their supply chain.

Key characteristics: Aerospace drawings identify key characteristics whose variation significantly affects safety or function. These require special process controls and documented monitoring.

AS9100 Standards — ANSI Webstore

Serving Medical Device Customers — ISO 13485

Job shops machining surgical instruments, implant components, or medical device parts need ISO 13485:2016. Key implications for job shops:

Validation of machining processes: ISO 13485 requires that production processes affecting product quality be validated — particularly where the output cannot be fully verified by subsequent inspection.

Traceability requirements: Medical device components require rigorous traceability — lot numbers, material certifications, and production records must be maintained and accessible throughout the product lifecycle.

Documentation control: ISO 13485 has stricter documentation control requirements than ISO 9001 — reflecting the regulatory audit environment that medical device customers operate in.

ISO 13485:2016 — ANSI Webstore

BSI Group ISO 13485 Training


Environmental Management in Machine Shops — ISO 14001:2026

ISO 14001:2026 — published April 15, 2026, replacing ISO 14001:2015 — is increasingly required by industrial customers with ESG commitments and environmental supply chain qualification programs.

Machine shops and job shops generate significant environmental aspects regardless of their primary processes:

Cutting fluid and coolant waste: Metalworking fluids are classified as hazardous waste in most jurisdictions. Coolant system maintenance, sump cleaning, and disposal require documented management.

Metal chip and swarf: Machining generates significant chip volumes. Segregation by material type for recycling, contamination control, and disposal documentation are all required under a systematic environmental management approach.

Chemical storage: Coolant concentrates, rust preventatives, cleaning solvents, and lubricants require secondary containment and spill response procedures.

Energy consumption: Multi-machine job shop operations consume significant energy — compressed air systems, machine tool power, environmental controls.

The 2026 edition adds explicit requirements for climate change impacts and biodiversity — broader than the environmental aspects focus of the 2015 edition. Organizations transitioning from ISO 14001:2015 have until April 2029 to complete the transition.

ISO 14001:2026 — ANSI Webstore — use coupon CC2026 for 5% off

ISOQAR ISO 14001 Certification


Safety Management in Machine Shop Environments — ISO 45001

ISO 45001:2018 occupational health and safety standard guide with hard hat, safety glasses, and ISO document

Machine shops and job shops operate significant workplace hazards — rotating equipment, material handling, cutting fluid exposure, noise, and ergonomic risks from varied setups and manual material handling.

ISO 45001:2018 provides the systematic framework for identifying these hazards, assessing risks, and implementing controls. For job shops specifically, the hazard identification challenge mirrors the quality challenge — hazards vary by job, by process, and by material being machined.

Key safety hazards in general machine shop environments:

Machine guarding: Lathes, mills, grinders, drill presses, and surface grinders all require guarding per OSHA 1910.212 and ANSI B11 machine safety standards. Rotating chucks, exposed cutting tools, and chip ejection are the primary guarding concerns.

LOTO for setups and maintenance: Every machine tool setup and maintenance activity requires energy isolation under OSHA 1910.147. Job shops with frequent setups — multiple setups per machine per day — face high LOTO activity volume.

Material handling: Heavy workpieces, fixtures, and tooling create strain injury exposure. Job shops with varied part sizes face ergonomic hazard identification challenges because no two jobs create the same handling requirement.

Cutting fluid exposure: Mist and vapor from turning, milling, and grinding operations create respiratory exposure. Coolant system maintenance and cleaning create skin exposure.

Noise: High-speed machining, grinding, and compressed air use generate significant noise exposure requiring monitoring and control.

ISO 45001:2018 — ANSI Webstore — use coupon CC2026 for 5% off

ISOQAR ISO 45001 Certification


Building a QMS That Works Across Multiple Processes

The most common reason job shop QMS implementations fail audits is that the system was designed for how management wishes the shop operated — not how it actually operates.

Principle 1: Document the process, not the part Every procedure, work instruction, and form must be written to apply to any job — not a specific part number. Inspection forms with blank fields for “drawing dimension” and “measured value” work for any part. Inspection forms that pre-populate specific dimensions only work for one part.

Principle 2: The traveler is the quality record In a job shop environment, the work order traveler is the most important quality document. Everything that happens to a job — material received, setup completed, first piece inspected, in-process checks, final inspection, shipment — should be documented on or referenced from the traveler. A complete traveler for every job is the evidence of a functioning QMS.

Principle 3: Calibration must be managed systematically Job shops use a wide variety of measurement equipment. A systematic calibration register — listing every piece of measurement equipment, its calibration due date, its calibration provider, and its status — is essential. Auditors walk the shop floor and check calibration stickers. Missing or expired stickers on equipment in active use generate immediate findings.

Principle 4: Nonconforming material must be physically controlled In a high-variety job shop, the risk of nonconforming material being shipped is higher than in a dedicated production facility — because every job is different and inspection escapes are harder to catch. A physical quarantine area, NCR tags, and a documented disposition process are the controls that prevent nonconforming material from reaching customers.


Documentation Strategies for Job Shops

The most effective job shop ISO documentation approach combines flexibility with structure:

Use process-based procedures: Write procedures that describe how processes are controlled — not what is produced. “How we control incoming material” applies to any material for any customer. “How we machine shaft diameters” only applies to shafts.

Build scalable forms: Design inspection forms, travelers, and records with blank fields rather than pre-populated product-specific data. This makes a single form serve hundreds of different jobs.

Leverage templates, not instructions: Work instructions that are job-specific create maintenance burden and document control complexity. Templates that production fills in for each job — referencing the customer drawing for dimensions — scale to job shop operations.

Keep the quality manual short: A quality manual that attempts to describe every scenario in a job shop becomes unmanageable. A short, high-level manual that references your procedures works better and is easier to maintain.

9001Simplified Documentation Kits — purpose-built ISO 9001 documentation designed for manufacturing environments including job shops

For documentation options and kit comparisons, see ISO Documentation Kits for Manufacturers.


What Auditors Look For in General Machining Environments

When a certification auditor walks a general machine shop or job shop, here’s what they’re evaluating:

At the machines:

  • Are operators working from current drawing revisions?
  • Is setup verification being completed and documented before first production parts?
  • Is in-process inspection happening at defined intervals and being recorded?
  • Is calibrated measurement equipment being used — with current stickers?

At receiving:

  • Is incoming material being verified against purchase order requirements?
  • Are material certifications or certificates of conformance being received and filed?
  • Is nonconforming incoming material being identified and quarantined?

In the quality records:

  • Are traveler packets complete for jobs in progress and recently shipped?
  • Is the calibration register current for all shop measurement equipment?
  • Are NCRs documented with completed dispositions?
  • Is there an approved vendor list with qualification records?
  • Has an internal audit been completed within the last 12 months?

In management review:

  • Has top management reviewed quality performance data?
  • Are quality objectives measurable and being tracked?
  • Are corrective actions from previous findings completed and effective?

Common ISO Implementation Mistakes Job Shops Make

Cost of non-compliance in manufacturing showing failed audits, OSHA risks, and financial losses in industrial setting
Non-compliance in manufacturing can lead to failed audits, fines, and significant financial losses.

Writing part-specific procedures The most common job shop documentation failure. Procedures that describe how to make a specific part require updating every time the customer changes their drawing. Procedures that describe how you control a process type are far more maintainable and survive customer changes without requiring document updates.

Treating calibration as a one-time project Many shops get all their equipment calibrated for the initial certification audit — then let calibrations lapse in the months that follow. Calibration management is an ongoing operational requirement, not a pre-audit event.

Underestimating customer requirement diversity Job shops that serve customers in multiple industries — automotive, aerospace, medical, general industrial — face different quality requirements from each. Without a systematic customer requirement management process, requirements get missed and customer-specific documentation is inconsistent.

Building a QMS that only works during audits The most common failure of job shop ISO implementations: a system that gets activated before audits and goes dormant between them. Auditors can usually tell within the first hour whether a system is genuinely operating or was recently revived. Records with suspiciously uniform dates, travelers that all look the same, and operators who can’t describe their quality responsibilities are the giveaways.

Ignoring the nonconforming material control requirement Physical segregation of nonconforming material — not just tagging it — is a Clause 8.7 requirement. In a busy job shop, the path of least resistance is tagging parts and leaving them in place. Auditors look for quarantine areas and physical separation.

Skipping internal auditor training A meaningful internal audit in a job shop requires the auditor to evaluate whether the system is actually functioning across different job types, different customers, and different processes — not just verify that procedures exist. This requires genuine training, not just clause familiarity.

For context on what these nonconformances cost when they reach customers, see Cost of Non-Compliance in Manufacturing.


Cost and Timeline for Machine Shop Certification

Cost Summary

Cost CategorySmall Shop (1–25)Mid-Size (26–100)Large (100+)
ISO 9001:2015 standard$150–$200$150–$200$150–$200
Training$2,500–$6,000$4,000–$9,000$6,000–$15,000
Documentation$1,500–$5,000$3,000–$10,000$8,000–$25,000
Consulting (if used)$0–$15,000$0–$35,000$0–$75,000+
Certification audit$4,000–$7,500$7,500–$15,000$15,000–$35,000
Total First Year$8,000–$35,000$15,000–$70,000$29,000–$150,000+

Realistic Timeline

Most small to mid-size machine shops and job shops complete ISO 9001 certification in 4–8 months. Shops with existing quality programs — documented procedures, calibration systems, inspection records — typically fall at the lower end. Shops starting from scratch typically need the full range.

For the detailed phase-by-phase breakdown, see How Long Does ISO Certification Take? and ISO Implementation Timeline for Manufacturers.

→ Use coupon CC2026 for 5% off the ISO 9001:2015 standard → Apply at ANSI


Frequently Asked Questions

Do machine shops and job shops need ISO 9001?

Most machine shops and job shops that supply to industrial OEMs, Tier 1 suppliers, or government contractors need ISO 9001 certification. It is the baseline quality management credential that customers require for supplier qualification in most precision machining supply chains.

What’s the difference between ISO certification for a job shop vs a dedicated production facility?

The requirements are identical — but the implementation approach differs significantly. Job shops need process-based documentation rather than part-specific documentation, scalable forms rather than product-specific inspection plans, and systematic customer requirement management to handle different requirements from different customers simultaneously.

Do job shops need IATF 16949?

If you supply production components to automotive OEMs or Tier 1 automotive suppliers, yes. IATF 16949 is required for automotive production part suppliers — ISO 9001 alone is not sufficient. See ISO 9001 vs IATF 16949.

What is the most common ISO audit finding in job shops?

Expired calibration records on measurement equipment in active use — consistently the most frequently found nonconformance. The second most common is nonconforming material not physically segregated from conforming stock.

Can a small job shop get ISO 9001 certified?

Yes — and many do specifically to win larger contracts. ISO 9001 scales to any organization size. Job shops with 5–10 employees certify regularly. See How to Get ISO 9001 Certified.

How does a job shop document its processes when every job is different?

By documenting processes — not parts. Procedures describe how your shop controls a type of process (how you conduct incoming inspection, how you set up machines, how you perform final inspection) rather than the specific dimensions and requirements of each part. This approach applies consistently across any job.

How long does ISO 9001 certification take for a job shop?

Most small to mid-size job shops complete certification in 4–8 months. See How Long Does ISO Certification Take?

What documentation does a job shop need for ISO 9001?

Core required documentation includes: quality policy and objectives, QMS scope, process maps, process-based work instructions, scalable inspection forms, calibration register, material certification filing system, approved vendor list, job travelers, NCR log, corrective action records, and internal audit records.


📥 Free Resources


Not Sure What to Do Next?

🔹 You need the official ISO 9001:2015 standardISO 9001:2015 — ANSI Webstore — use coupon CC2026 for 5% off through December 31, 2026

🔹 You supply automotive and need IATF 16949IATF 16949 Training & Standard — BSI Group

🔹 You need ISO 14001:2026 for environmental managementISO 14001:2026 — ANSI Webstore — use coupon CC2026 for 5% off

🔹 You need ISO 45001:2018 for safety managementISO 45001:2018 — ANSI Webstore — use coupon CC2026 for 5% off

🔹 You need ISO 13485 for medical device supplyISO 13485:2016 — ANSI Webstore

🔹 You want to save buying multiple standards togetherSave up to 50% on ISO Standards Packages — ANSI Webstore

🔹 You’re ready to pursue ISO 9001 certificationISOQAR ISO 9001 Certification

🔹 You need ISO training before implementationBSI Group ISO TrainingISOQAR ISO Training

🔹 You need a documentation system for job shop ISO 90019001Simplified Documentation KitsISO Documentation Kits for Manufacturers

🔹 You want the full manufacturing standards pictureISO Standards Required for ManufacturingISO Standards for CNC Machine ShopsQuality Standards for Fabrication Shops

🔹 You want to understand certification costs and timelineHow Much Does ISO 9001 Cost?How Long Does ISO Certification Take?ISO Certification Cost Calculator


Build a System That Works Every Day — Not Just on Audit Day

The job shops that pass ISO certification audits on the first attempt and sustain certification through surveillance cycles are the ones that built systems designed for how they actually operate — not for how an auditor wants to see them operate.

Process-based documentation. Scalable forms. Systematic calibration management. Complete traveler packets on every job. Physical control of nonconforming material. These are the practices that translate to certification — and to the contract access that makes certification worth pursuing.

At The Standards Navigator, complex standards are translated into practical, real-world guidance you can act on.

👉 Get updates on new standards, implementation strategies, and compliance insights 👉 Be first to access new guides, tools, and checklists

Subscribe below to stay ahead.

Subscribe

* indicates required