counterfeit parts prevention - The Standards Navigator

AS9100 Documentation Requirements: What Auditors Actually Check (2026)

This guide breaks down what AS9100 Rev D actually requires in documented information — from first article inspection and traceability records to counterfeit parts prevention and configuration management. It explains which records auditors pull first, where most aerospace suppliers fall short, and how AS9100 documentation differs from a standard ISO 9001 system.

A clause-by-clause breakdown of what your aerospace QMS documentation needs — and where most suppliers fall short

Affiliate Disclosure: Some links in this article are affiliate links. If you purchase through them, The Standards Navigator may earn a commission at no additional cost to you.

The Documentation Gap That Fails Aerospace Audits

AS9100 documentation requirements cover the documented information needed to operate and demonstrate an aerospace QMS, along with aerospace-specific records and controls in areas such as configuration management, traceability, counterfeit parts prevention, first article inspection, and FOD control. The exact documents and records an organization maintains depend on its processes, applicable requirements, and customer flow-downs.

AS9100 documentation isn’t ISO 9001 paperwork with an aerospace label stuck on it. Traceability records, first article inspection (FAI) data, and configuration management records aren’t background paperwork — auditors use them as objective evidence that aerospace parts were manufactured and controlled according to applicable requirements.

Most suppliers assume a quality manual and a stack of procedures covers it. Then an auditor selects a part number, asks for the traceability record behind its FAI, and finds the two don’t connect — what looked like a minor gap becomes a major nonconformance.

Whether you’re mapping documentation before your first Stage 1 audit or checking an existing system against Rev D, this breaks down exactly what auditors pull first — and where the gaps usually are.

FROM THE SHOP FLOOR: I’ve sat across the table from an AS9100 auditor who skipped the quality manual entirely and went straight for first article inspection records on a part we’d shipped eight months earlier. We had the FAI — what we didn’t have was the linked traceability record showing which material heat lot went into it. That gap alone became a major finding. Auditors aren’t grading your paperwork; they’re testing whether your records actually trace back to the part in front of them.

👉 Most AS9100 documentation gaps don’t surface until an auditor asks for a specific record — by then it’s too late to fix quietly. Run the AS9100 Rev D Gap Assessment Checklist before your next audit and find out exactly where your documentation stands.

In this guide:

What AS9100 documented information actually requires — and where it goes beyond ISO 9001
Whether you still need a quality manual under Rev D
The core records auditors pull first: FAI, traceability, counterfeit parts, FOD
Two documentation areas most suppliers underbuild
Common findings and how to close them before your audit
Where to buy the standard and find training if you’re building this from scratch

👉 Start Here

Buy the AS9100 Rev D Standard — ANSI Webstore — the current edition, direct from the authorized source. Use code CC2026 for 5% off through December 31, 2026.
AS9100 Training — BSI Group — covers documentation requirements clause by clause if you’re building this system without a consultant.
AS9100 Rev D Gap Assessment Checklist — free 74-item clause-by-clause checklist.

What “Documented Information” Actually Means Under AS9100

AS9100 Rev D uses the same “documented information” language as ISO 9001 — but the aerospace-specific clauses layer on requirements that don’t exist in a standard ISO 9001 system at all.

AS9100 Rev D does not explicitly require a document called a quality manual. The practical takeaway is that eliminating a document called a “quality manual” does not eliminate the need to document and communicate how your QMS is structured.

Many aerospace organizations continue to use a quality manual because it provides a practical way to describe the QMS and its relationship to the applicable requirements — and it’s the document reviewers commonly use to navigate everything else.

Where AS9100 genuinely goes further than ISO 9001 is in the aerospace-specific documented information requirements: first article inspection, more extensive material and process traceability, counterfeit parts prevention, foreign object debris (FOD) control, and configuration management. None of these have a real equivalent in a baseline ISO 9001 system — see What Is AS9100? for the full standard overview if you’re still mapping out scope.

If you’re building this documentation structure from scratch rather than adapting an existing ISO 9001 system, the ISO Documentation Kits for Manufacturers page is a reasonable starting point for the underlying procedures and forms — just plan to adapt anything generic to AS9100’s aerospace-specific requirements before relying on it for certification.

AS9100 documentation requirements showing an aerospace auditor reviewing FAI, traceability, counterfeit parts prevention, FOD control, and process records — AS9100 documentation requirements include objective evidence showing that aerospace parts and processes were controlled as required.

The Core Records Auditors Pull First

First Article Inspection Records

A common audit approach is to select a specific part number and request the FAI record supporting it, along with the traceability behind it. FAI reporting itself is governed by AS9102, published by SAE International. Full requirements — including what counts as a valid FAI and when a re-FAI is triggered — are covered in First Article Inspection Requirements.

Traceability Records

Traceability records should allow applicable material, batch/lot, and process information to be traced through the product lifecycle to the shipped part, based on the organization’s processes and applicable requirements — not just exist as separate records. See AS9100 Traceability Requirements for what Clause 8.5.2 actually demands.

Counterfeit Parts Prevention Records

Documented controls for counterfeit parts prevention are required under Clause 8.1.4 — and auditors check whether they’re actually followed, not just written. Full breakdown in AS9100 Counterfeit Parts Standards.

FOD Control Records

AS9100 expects documented controls and evidence appropriate to the organization’s processes for preventing foreign object debris — the specific form that takes varies by operation. See FOD Control Standards for what Clause 8.5.4 requires.

A recurring pattern I’ve seen: these four record types exist independently but aren’t cross-referenced. An auditor pulls an FAI, asks for the traceability record behind it, and finds no clear link between the two documents — even though both technically exist. In practice, that kind of disconnect often draws more scrutiny than a missing document, because it suggests the system isn’t actually being used to trace parts, just to generate paperwork.

The Audit Trail: Part Number → Revision → Material Lot → Process Route → FAI → Final Record

An auditor doesn’t just want to see that each record in that chain exists individually. They want to see how the records relate to each other and to the specific part in front of them. (This makes a strong visual for the published page — worth building as a simple graphic rather than just text.)

👉 If your traceability records and FAI paperwork don’t reference each other by part number and revision, that’s a gap worth closing before an audit tests it. Download the Manufacturing Compliance Checklist and confirm your records connect.

AS9100 documentation requirements audit trail showing part number, drawing revision, material heat lot, process routing, FAI, and shipped product — AS9100 documentation requirements connect the part number, revision, material, process, inspection, and final shipment into a traceable audit trail.

Two Documentation Areas Most Suppliers Underbuild

Configuration Management Documentation (Clause 8.1.2)

Configuration management — tracking exactly which design revision, engineering change, and customer-approved deviation applies to a given part — gets far less attention than FAI or traceability, but auditors increasingly check it as a standalone item. If your documentation doesn’t clearly show which configuration was in effect at the time of manufacture, that’s a gap worth closing before it becomes a finding. This is dense enough to deserve its own dedicated breakdown — flagging it here as a topic to watch.

Risk-Based Documentation for Special Processes

Special processes — such as welding, heat treating, and nondestructive testing — carry their own documented risk requirements under AS9100’s risk-based thinking clauses. Nadcap accreditation may apply separately when required by a customer or applicable supply-chain requirements; that accreditation question is covered in NADCAP vs AS9100. The documentation angle specifically — how you document special-process risk decisions, distinct from whether you’re Nadcap-accredited — is underserved content-wise and worth a dedicated piece.

How AS9100 Documentation Differs from ISO 9001

Category	ISO 9001	AS9100
Quality Manual	Not explicitly mandated	Not explicitly mandated, but commonly used in practice
First Article Inspection	No aerospace-specific FAI requirement	Incorporated through AS9100 and applicable customer requirements; AS9102 (SAE) governs FAI reporting
Traceability	General requirement, scope flexible	More extensive material/process traceability, including customer- and product-specific requirements where applicable
Counterfeit Parts Prevention	No equivalent requirement	Documented controls required (Clause 8.1.4)
Configuration Management	No equivalent requirement	Required (Clause 8.1.2)
FOD Control	No equivalent requirement	Documented controls and evidence appropriate to the organization’s processes and applicable requirements

For the full standard-by-standard comparison beyond documentation specifically, see AS9100 vs ISO 9001.

👉 Building this documentation structure without a consultant is realistic — but only if you’re working from the current edition. Buy the AS9100 Rev D standard through ANSI Webstore and use code CC2026 for 5% off.

What Happens When Documentation Doesn’t Hold Up

A documentation gap doesn’t automatically fail an audit — but an auditor who finds one disconnected record set often digs deeper, and what started as a single finding turns into a pattern of findings across the whole system. That’s the real cost: not the first gap, but what it triggers.

The cost objection: it’s fair to wonder whether this level of documentation rigor is overkill for a small shop with a handful of part numbers. When FAI and traceability requirements apply, a five-person shop and a five-hundred-person supplier may need to maintain the same core record types for a given part number; the difference is the complexity of the system used to manage them.

If you’re deciding whether your existing system is ready, AS9100 Internal Audit Process walks through running that check yourself before a registrar does it for you. And if you haven’t picked a certification body yet, AS9100 Certification Bodies — Ranked & Reviewed is a good next stop — worth confirming the body you choose is itself accredited by a recognized accreditor such as ANAB.

In practice, traceability is a significant part of aerospace QMS auditing because auditors need objective evidence that product and process records can be connected to the requirements they support.

Quick Documentation Checklist

✅ Quality manual (or equivalent scope document) references all applicable Rev D clauses

✅ FAI records exist and cross-reference traceability records by part number and revision

✅ Traceability records identify applicable material heat/lot/batch information for shipped parts, based on customer, product, and process requirements

✅ Documented controls for counterfeit parts prevention are in place and actively followed, not just written

✅ FOD controls are documented and supported by evidence appropriate to the organization’s processes and applicable requirements

✅ Configuration management records show which design revision applied at time of manufacture

✅ Special process records (welding, heat treat, NDT, etc.) are retained per customer and registrar requirements

AS9100 documentation requirements showing the difference between controlled documents and records used as objective audit evidence — AS9100 documentation requirements distinguish controlled information from records that provide objective evidence processes were performed.

FAQ

Is a quality manual required under AS9100 Rev D?

Not explicitly by the standard’s own wording — but many aerospace organizations continue to use one because it provides a practical way to describe the QMS and map it to the standard’s structure. Skipping it entirely can create more audit friction than it saves in paperwork, since certification bodies commonly expect some document that fills that role.

What documents does an AS9100 auditor ask for first?

A common audit approach is to select a specific part number and request the first article inspection record supporting it, followed by the traceability record behind that FAI. Auditors use this pairing to test whether your documentation system actually connects, not just exists.

What’s the difference between documented information and records under AS9100?

Documented information is the broader AS9100 term covering anything required to be created, maintained, and controlled — procedures, work instructions, and forms all count. Records are a specific type of documented information that provide evidence of results, like a completed FAI or a calibration record. Every record is documented information, but not everything documented is a record.

How long do AS9100 records need to be retained?

Retention periods vary by customer contract and registrar requirement rather than a single fixed AS9100 rule — many aerospace customers require retention well beyond typical ISO 9001 timeframes, sometimes for the life of the program. Check your specific customer flow-down requirements rather than assuming a default period applies.

Do I need separate documentation for each customer?

Not necessarily separate systems, but you likely need customer-specific supplemental requirements layered onto your core AS9100 documentation — most aerospace OEMs have their own flow-down requirements beyond the base standard.

What is a common AS9100 documentation finding?

One recurring documentation problem is records that exist individually but aren’t cross-referenced — an FAI with no linked traceability record, or a traceability record that doesn’t tie back to the part it supports. The documents technically exist; they just don’t function as a connected system.

Can I use the same documentation system for ISO 9001 and AS9100?

Largely yes for the shared core structure, but AS9100-specific records (FAI, counterfeit parts prevention, configuration management, FOD control) have no ISO 9001 equivalent and need to be built as additions, not substitutions.

Do I need software to manage AS9100 documentation, or can spreadsheets work?

Spreadsheets can work for a small shop with limited part numbers, but the risk grows with volume — the more parts and revisions you’re tracking, the easier it becomes for records to silently disconnect from each other, which is the exact failure pattern auditors catch most often.

How much documentation does a small aerospace supplier actually need?

The same core record types as a larger supplier — a small shop doesn’t get a reduced list of required records. What differs is the complexity of the system used to manage them; a simpler operation can often meet the same requirements with a leaner, more manual system than a high-volume supplier needs.

📥 Free Resources

AS9100 Rev D Gap Assessment Checklist — 74-item clause-by-clause checklist for aerospace suppliers assessing their QMS before certification
ISO 13485 Gap Assessment Checklist — free checklist for medical device manufacturers assessing their QMS against ISO 13485 requirements
ISO 9001 Roadmap — step-by-step implementation guide for manufacturers building or improving a quality management system
Manufacturing Compliance Checklist — practical compliance reference covering key ISO, OSHA, and quality requirements for production environments
Supplier Quality Checklist — evaluation tool for assessing supplier quality controls and flow-down compliance before audits or new contracts

Not Sure What to Do Next?

🔹 Still researching what AS9100 documentation actually requires? Start with What Is AS9100? for the full standard overview.

🔹 Ready to build your documentation structure? Buy the current AS9100 Rev D standard through ANSI Webstore — you can’t build compliant documentation from an outdated edition.

🔹 Need training to get your team up to speed? BSI Group’s AS9100 training courses cover documentation requirements clause by clause.

🔹 Want a professional gap assessment first? Download the free AS9100 Rev D Gap Assessment Checklist.

Documentation is where AS9100 audits are actually won or lost — not in the quality manual, but in whether your records connect to the parts they’re supposed to trace. Get the structure right from the beginning, and maintaining audit-ready evidence becomes far easier. That’s the standard The Standards Navigator holds every AS9100 guide to.

Stay Ahead of Your Next AS9100 Audit

Most aerospace suppliers don’t fail audits because they lack documentation — they fail because their documentation doesn’t connect. FAI records that don’t reference traceability. Traceability that doesn’t tie to configuration. Individually complete, collectively disconnected.

Suppliers who struggle treat documentation as a checklist exercise, built once and left alone. Suppliers who succeed build cross-referencing into every record from day one, so nothing has to be reconstructed under audit pressure.

The Standards Navigator covers AS9100 implementation for aerospace suppliers building audit-ready quality systems from the ground up.

👉 Get updates on AS9100 and aerospace compliance

👉 Be first to access new gap assessment checklists and documentation templates

Industrial Compliance. Clearly Explained.

AS9110 vs AS9120: Which Aerospace Standard Does Your Business Actually Need? (2026)

AS9110 and AS9120 are both aerospace quality standards built on ISO 9001 — but they serve completely different operations. This guide compares MRO certification (AS9110) against stockist distributor certification (AS9120), covering scope, clause differences, cost, and how to confirm which standard actually matches your business.

MRO certification vs. stockist distributor certification — how to tell which AS91XX standard applies to your operation

Affiliate Disclosure: Some links in this article are affiliate links. If you purchase through them, The Standards Navigator may earn a commission at no additional cost to you.

Confusing These Two Standards Can Cost You a Contract

A prime contractor asks if you’re “AS certified.” You say yes — but you say it without knowing which AS certification they mean. That gap shows up fast in a supplier qualification review, and understanding AS9110 vs AS9120 before that conversation happens is what keeps you from losing a bid before you ever quote a price.

AS9110 and AS9120 are both aerospace quality management system standards built on the same ISO 9001 foundation as AS9100. But they exist for two completely different kinds of operations. AS9110 governs maintenance, repair, and overhaul (MRO) organizations. AS9120 governs stockist distributors — companies that buy, store, and resell aerospace parts without altering them. Certify to the wrong one, or assume one covers what the other requires, and you’ll fail a customer audit or lose a contract before the certificate is even printed.

If you’re evaluating which standard applies to your operation — or a supplier is asking which one you hold — this guide breaks down the real differences: scope, clause focus, cost, and how to know which one is actually right for you.

From the Floor: I’ve sat at the table with a smaller machine shop during an onboarding audit with a much larger aerospace manufacturer who assumed AS9100 covered their distribution operation — it didn’t, and it cost them weeks in corrective action before we could approve them as a source. The standard has to match what you actually do on the floor, not what sounds closest to what your customer asked for.

Before you go further, know exactly where your QMS stands. Run your operation against the AS9100 Rev D Gap Assessment Checklist — a 74-item, clause-by-clause tool that also flags where MRO- and distribution-specific requirements diverge from base AS9100. Most gap findings are found six weeks too late. Don’t be one of them.

In This Guide

What AS9110 covers and who needs it
What AS9120 covers and who needs it
Side-by-side clause and scope comparison
Certification cost and timeline differences
How to know which standard — or standards — your operation needs
What’s changing in the 2026 IAQG standards revision
FAQs on dual certification, transition, and audit prep

👉 Start Here (Top Resources)

Building your documentation from scratch or closing gaps fast? 9001Simplified’s documentation kits give you a QMS framework built around ISO 9001 that you can adapt to AS9110 or AS9120’s additional clauses — without hiring a consultant.
Need the actual standard text? AS9110 — ANSI Webstore and AS9120 — ANSI Webstore — both standards are available for direct purchase.
Shopping for training or a certification body? BSI’s aerospace training catalog covers AS9100-family courses, including MRO and distributor-specific tracks.

What Is AS9110?

Quick Answer: AS9110 is the aerospace quality management system standard for organizations that perform maintenance, repair, and overhaul (MRO) work on aircraft, engines, components, or related equipment. The current edition, AS9110 Rev C (2016), is titled “Quality Management Systems — Requirements for Aviation Maintenance Organizations” and is built on the ISO 9001:2015 clause structure.

AS9110 applies to organizations that touch a product’s airworthiness after it’s already in service — not organizations designing or manufacturing it new. That includes:

FAA Part 145 certified repair stations
Engine and component overhaul shops
Organizations performing continuing airworthiness management
MRO providers serving commercial, private, or military aircraft

The clause set adds requirements around configuration control of repaired items, release-to-service documentation, component traceability through the repair cycle, and management of customer-supplied product — all specific to the risk profile of returning a used part to service rather than shipping a new one.

If you’re comparing AS9110’s foundation to base ISO 9001, our AS9100 vs ISO 9001 breakdown covers the shared clause structure that AS9110 inherits.

What Is AS9120?

Quick Answer: AS9120 is the aerospace quality management system standard for stockist distributors — companies that procure aerospace parts, materials, or assemblies and resell them without physically modifying the product. The current edition, AS9120 Rev B, is titled “Quality Management Systems — Requirements for Aviation, Space and Defense Distributors.”

AS9120 is intentionally narrow in scope. It’s built for organizations that buy from an approved source, store product under controlled conditions, and ship it back out — sometimes splitting larger lots into smaller quantities, or performing a customer- or regulatory-required inspection before delivery. It is explicitly not intended for organizations that repair, maintain, or perform any process that changes the product’s characteristics or conformity.

That distinction matters because it drives the clause focus. AS9120 emphasizes:

Purchasing controls and approved source verification
Prevention of counterfeit and suspect unapproved parts
Storage, handling, and shelf-life control
Traceability of parts back to the original manufacturer

If counterfeit parts prevention is a gap area for your operation, our Counterfeit Parts Standards guide covers the AS9100-family clause requirements — including how AS9120 handles it for distributors specifically.

Infographic comparing AS9110, AS9120, and AS9100 to help aerospace organizations determine the correct quality management standard based on maintenance, distribution, or manufacturing activities. — This decision guide helps aerospace organizations determine whether AS9110, AS9120, or AS9100 best aligns with their operational scope and certification requirements.

AS9110 vs AS9120: Side-by-Side Comparison

Category AS9110 (MRO) AS9120 (Distributors) Who it applies to Maintenance, repair, and overhaul organizations Stockist distributors, no physical modification of product Current edition Rev C (2016) Rev B Base standard ISO 9001:2015 ISO 9001:2015 Primary risk addressed Airworthiness of returned-to-service parts Traceability and authenticity of resold parts Key added clauses Release-to-service documentation, configuration control, maintenance data control Approved source verification, counterfeit parts prevention, lot control Typical certified organizations FAA Part 145 repair stations, engine overhaul shops Parts distributors, stockist suppliers, kitting operations Physical modification of product Yes — repair, overhaul, alteration No — resale only, with limited exceptions (splitting lots, inspection) Can be held alongside AS9100 Yes, for operations doing both design/production and MRO Yes, though less common — usually a standalone certification

⚠️ Most common finding: Auditors regularly flag distributors who hold AS9120 but perform light processing — such as re-marking, relabeling, repackaging, or other activities that affect traceability documentation — without realizing that activity may push them out of AS9120’s defined scope and into AS9110 or AS9100 territory. Know exactly what your operation does to the product before you pick a standard.

If you are unsure which standard matches your actual operation → map every process step against the AS9110 and AS9120 scope statements before you approach a certification body, not after you’ve already scheduled an audit.

Side-by-side AS9110 vs AS9120 comparison infographic showing differences in maintenance, repair, overhaul, distribution, traceability, documentation, and quality management requirements. — This AS9110 vs AS9120 comparison highlights where the two aerospace quality management standards share common requirements and where their operational focus differs.

Certification Cost and Timeline

Neither AS9110 nor AS9120 certification is dramatically more expensive than base AS9100 — the cost driver is usually organization size and audit complexity, not which standard you’re certifying to. Expect the same general cost structure: registrar audit fees, any documentation or consulting spend, and internal resource time for gap closure and internal audits.

For a full breakdown of what drives AS9100-family certification cost, see How Much Does AS9100 Certification Cost? — the same cost categories apply to AS9110 and AS9120 audits, with adjustments for scope.

If you are budgeting for certification this year → don’t assume AS9120 is cheaper because the standard is “smaller.” Distributor audits still require full documentation review, internal audit evidence, and a two-stage certification audit through an accredited registrar.

How Long Does Implementation Take?

Timeline follows the same general phases as AS9100: gap assessment, documentation build-out, implementation and internal audit, then the two-stage certification audit. Organizations with an existing ISO 9001 QMS typically move faster because the foundational clause structure is already in place — AS9110 and AS9120 add to that structure rather than replacing it.

For a phase-by-phase breakdown you can apply to either standard, our AS9100 Implementation Timeline walks through the realistic timeline most organizations should plan for.

Most teams miss this step — run a gap check against the specific standard you’re pursuing before you start building documentation. A generic AS9100 gap assessment won’t fully capture AS9110’s release-to-service requirements or AS9120’s distributor-specific traceability and counterfeit-part controls. Check yours before you invest in a documentation build-out you’ll have to redo →

Do You Need Both?

Some organizations legitimately need more than one AS91XX certification — a Tier 1 supplier that manufactures parts and also runs an internal repair operation might hold both AS9100 and AS9110. A distributor that occasionally performs approved rework might need to evaluate whether AS9120 alone still covers their scope, or whether they’ve drifted into AS9110 or AS9100 territory.

If you are already AS9100 certified and expanding into MRO or distribution work → don’t assume your existing certificate covers the new activity. Confirm scope with your registrar before you take on contracts that depend on AS9110 or AS9120 coverage you don’t actually have.

Traceability requirements run through all three standards, just with different emphasis. If you’re building out traceability documentation, our AS9100 Traceability Requirements article covers the clause 8.5.2 requirements that AS9110 and AS9120 both extend from.

Decision flowchart comparing AS9110 vs AS9120 and AS9100, helping aerospace organizations determine the correct quality management standard based on maintenance, distribution, or manufacturing activities. — This AS9110 vs AS9120 decision flowchart guides aerospace organizations to the quality management standard that best matches their operational scope and certification needs.

Objection: “We’re Small — Do We Really Need to Certify to the Exact Right Standard?”

Yes, and here’s why it’s not just paperwork. Prime contractors and OEMs use your certification scope to determine what work they can flow down to you without additional oversight. If your certificate doesn’t match your actual scope of work, you risk being disqualified from a bid, or worse, passing an audit on paper while operating outside your certified scope — which becomes a much bigger problem the first time there’s a quality escape traced back to your facility.

Small organizations especially benefit from getting this right the first time, because a second certification audit to fix a scope mismatch costs real money and real time you don’t get back.

What’s Changing: The 2026 IAQG Standards Revision

The International Aerospace Quality Group is currently working through a comprehensive revision of the AS9100 series. Current IAQG working materials indicate the standards are expected to transition to the IA9100-series naming convention, although final publication details and transition requirements have not yet been formally released. Planned changes include stronger supplier management requirements, formal cybersecurity risk integration, and expanded counterfeit parts prevention measures for distributors specifically.

⚠️ This revision has not been published as final text as of this writing, and no confirmed transition deadline has been set. Treat any specific 2026 publication date as preliminary until IAQG and SAE International confirm final release. We’ll update this article once the revised editions are formally published.

Quick Audit Checklist: Which Standard Applies to You?

✅ Does your organization physically repair, overhaul, or alter aerospace products after they’ve entered service? → AS9110

✅ Does your organization buy, store, and resell aerospace parts without modification? → AS9120

✅ Does your organization design, develop, or manufacture new aerospace products? → AS9100 — see our What Is AS9100? pillar guide

✅ Does your organization do more than one of the above? → You may need certification to more than one standard — confirm scope with your registrar before proceeding

✅ Have you mapped your actual process steps against the standard’s defined scope statement, not just its title? → Do this before scheduling any certification audit

FAQ

Is AS9110 harder to get certified to than AS9120?

Not inherently. Difficulty depends on how mature your existing quality processes are, not which standard you’re pursuing. AS9110 has more clauses focused on maintenance-specific documentation and release-to-service control, while AS9120 focuses heavily on purchasing and traceability controls. Neither is universally “easier.”

Can a distributor hold AS9100 instead of AS9120?

Technically a distributor could pursue AS9100, but it would include requirements around design and production control that don’t apply to a pure distribution operation. AS9120 is scoped specifically for distributors and avoids that mismatch — which is usually what customers and registrars expect to see.

Does AS9110 or AS9120 replace the need for ISO 9001 certification?

No. Both standards incorporate the full text of ISO 9001:2015 and add aerospace-specific requirements on top of it. You don’t need a separate ISO 9001 certificate in addition to AS9110 or AS9120 — the aerospace standard already contains it — but the underlying quality management principles are the same ones ISO 9001 establishes.

How do I verify a supplier’s AS9110 or AS9120 certification is real?

Check the IAQG’s OASIS database, which lists verified AS9100-family certifications, including AS9110 and AS9120, issued by accredited certification bodies.

What happens if my scope of work doesn’t match my certificate?

You risk failing a customer supplier audit, losing approved-source status with a prime contractor, or facing corrective action findings during your next registrar surveillance audit. If your operation has changed since your last certification cycle, confirm your certificate scope still matches before it becomes a customer’s finding instead of yours.

Is there a bundled cost savings if I need the text of both AS9110 and AS9120?

Is there a bundled cost savings if I need the text of both AS9110 and AS9120?
If you’re evaluating whether your operation needs both standards, buying multiple standards together through ANSI’s bundle packages saves meaningfully compared to purchasing each document separately.

Do AS9110 and AS9120 require the same registrar accreditation as AS9100?

Yes. Certification bodies auditing to any AS91XX standard must be accredited specifically for aerospace scope, not just general ISO 9001 accreditation. Verify your registrar’s aerospace accreditation through ANAB or your relevant national accreditation body before signing a contract.

Will the 2026 IAQG revision require re-certification?

Organizations already certified will go through a transition period once the revised standards (referred to in early IAQG materials as IA9100, IA9110, and IA9120) are formally published. No transition deadline has been confirmed yet — don’t plan around a specific date until IAQG publishes final transition guidance.

📥 Free Resources

ISO 9001 Roadmap — step-by-step implementation guide for manufacturers building or improving a quality management system
Manufacturing Compliance Checklist — practical compliance reference covering key ISO, OSHA, and quality requirements for production environments
Supplier Quality Checklist — evaluation tool for assessing supplier quality controls and flow-down compliance before audits or new contracts
ISO 13485 Gap Assessment Checklist — free checklist for medical device manufacturers assessing their QMS against ISO 13485 requirements
AS9100 Rev D Gap Assessment Checklist — 74-item clause-by-clause checklist for aerospace suppliers assessing their QMS before certification

Not Sure What to Do Next?

🔹 Still researching which standard applies to your operation? Run the AS9100 Rev D Gap Assessment Checklist — it flags MRO- and distributor-specific gaps alongside base AS9100 clauses, so you’ll know where you actually stand before talking to a registrar.

🔹 Ready to start building your QMS documentation? 9001Simplified’s documentation kits give you a structured starting point you can adapt to AS9110 or AS9120’s added requirements — no consultant required.

🔹 Need to purchase the standard itself? AS9110 — ANSI Webstore or AS9120 — ANSI Webstore. Use code CC2026 for 5% off through December 31, 2026.

🔹 Shopping for training or picking a certification body? BSI’s aerospace training catalog covers AS9100-family courses relevant to both MRO and distribution operations.

Picking the wrong AS91XX standard doesn’t just slow down your certification timeline — it can cost you a supplier qualification you were counting on. The Standards Navigator covers the full AS9100 family so you can certify to the standard that actually matches what your operation does, not just what sounds closest.

Stay Ahead of Aerospace Compliance Changes

Most operations don’t lose a bid because they can’t meet a requirement — they lose it because they certified to the wrong standard for what they actually do. Organizations that map their real scope of work against AS9110 and AS9120 before choosing a path move through certification once. The ones that guess end up doing it twice.

The Standards Navigator tracks the AS9100 family closely, including the upcoming IAQG revision that will affect every organization certified to AS9110 or AS9120.

👉 Get updates on AS9100-family standards, including AS9110, AS9120, and the 2026 IAQG revision
👉 Be first to access new aerospace gap assessment tools and documentation resources as they’re released

Industrial Compliance. Clearly Explained.

AS9100 Traceability Requirements: What Clause 8.5.2 Demands in 2026

Meeting AS9100 traceability requirements takes more than basic ISO 9001 identification — it requires documented traceability driven by customer, regulatory, and risk requirements. This guide breaks down the five components of Clause 8.5.2, acceptance authority media controls, configuration management, and the audit findings that repeat most often.

A practical breakdown of identification, traceability, and acceptance authority media requirements for AS9100-certified suppliers

Affiliate Disclosure: Some links in this article are affiliate links. If you purchase through them, The Standards Navigator may earn a commission at no additional cost to you.

When a Traceability Gap Grounds an Audit

Meeting AS9100 traceability requirements isn’t about paperwork for its own sake — it’s about being able to answer, on the spot, where a part came from. A missing serial number on a routing traveler doesn’t sound like much. Until an auditor asks you to trace a fastener lot back to its heat certification, and nobody in the building can produce it in under an hour.

That’s not a paperwork problem. That’s a finding — and depending on the part, it can be a stop-ship finding.

Aerospace traceability isn’t optional documentation. It’s the mechanism that lets a supplier prove, on demand, that every part on the shelf can be tied to a specific material lot, a specific operator, a specific inspection result, and a specific disposition. If you’re already ISO 9001 certified, you have identification and traceability controls. AS9100 asks for more — and the “more” is exactly where suppliers get flagged.

If you’re evaluating whether your current system meets AS9100 Rev D Clause 8.5.2, or you’re building traceability from scratch ahead of a Stage 1 audit, this breaks down what the clause actually requires, what auditors look for beyond the paperwork, and where most QMS builds fall short. AS9100 is published and maintained by SAE International, so the full clause text is worth reading directly rather than relying on secondhand summaries — including this one.

From the Floor: I ran operations at Baker Hughes Jacksonville on the valve and energy manufacturing side — 500 employees, and every valve body that left that facility had to trace back to a heat lot and a material cert. We weren’t AS9100 certified, but the discipline is identical: if a customer or regulator asked which heat of steel went into a specific valve six months after shipment, we had to answer it in minutes, not days. The suppliers who struggle with AS9100 traceability today are usually the ones who built that system as a spreadsheet instead of a process. It falls apart the first time volume increases or someone leaves.

Most operations managers underestimate how much this costs them until an auditor tests it live. Before your next audit, run this gap check on your identification and traceability controls →

Get the AS9100 Rev D Gap Assessment Checklist — a 74-item, clause-by-clause checklist built specifically for aerospace suppliers preparing for certification or surveillance audits.

In This Guide

What AS9100 Clause 8.5.2 requires, in plain language
The five components of identification and traceability under Rev D
Acceptance authority media (AAM) controls and why auditors probe them
Configuration management’s role in traceability
Supplier and sub-tier traceability flow-down
Common findings auditors cite in this area
How traceability connects to counterfeit parts prevention
FAQ: traceability depth, record retention, and consumables

👉 Start Here (Top Resources)

Get the AS9100 Rev D Standard from ANSI Webstore — the official SAE/AS9100 document, required reading before you build or revise traceability procedures. Use code CC2026 for 5% off through December 31, 2026.
9001Simplified ISO Documentation Kits — pre-built procedure templates for identification, traceability, and configuration management, so you’re not writing clause 8.5.2 procedures from a blank page.
BSI Group AS9100 Training — auditor-led training on Rev D requirements, useful if your internal auditor has never dug into traceability specifically.

AS9100 Traceability Requirements: What Clause 8.5.2 Actually Says

Infographic illustrating AS9100 traceability requirements with a complete aerospace traceability chain from raw material certification and heat lot identification to serialized finished components and customer delivery. — This infographic shows how AS9100 traceability requirements connect every stage of production, from raw material certification through final delivery, to maintain complete product traceability.

AS9100 Rev D Clause 8.5.2, Identification and Traceability, layers aerospace-specific requirements on top of the base ISO 9001:2015 clause. In plain terms: wherever it applies, the organization has to identify process outputs well enough to confirm they meet requirements, and it has to track the status of those outputs against inspection and testing milestones as production moves forward. Where stamps, electronic signatures, or passwords are used to indicate acceptance, those tools need documented controls governing who holds them and how they’re managed.

Where a customer or regulation makes traceability a requirement, the organization has to assign unique identification to process outputs and keep the records needed to maintain that traceability over time — not just at the point of manufacture, but for as long as the part or record needs to be reconstructable.

Put plainly: an auditor at a machine shop or a fabricator building to print doesn’t need to trace every part back to raw material by default. An AS9100-certified aerospace supplier more often does, because flight-safety and critical parts, customer contracts, and regulatory flow-downs frequently push the requirement that far — but the depth required is still driven by those specific requirements, not by the clause on its own. Two suppliers making different parts can have very different traceability depth and both be fully compliant.

If you are already ISO 9001 certified → the gap isn’t the concept of traceability. It’s the depth, and where that depth comes from. ISO 9001 asks you to identify outputs. AS9100 layers on the expectation that, wherever traceability is a customer, contractual, or regulatory requirement, you can document and reconstruct that chain from raw material through to the shipped part — for as long as your flow-down requirements demand it.

The Five Requirements of Identification and Traceability

AS9100 traceability requirements break down into five practical components auditors will test independently. Miss any one, and the finding lands on that specific element — not the clause as a whole.

Requirement	What It Means	Where Suppliers Miss It
Suitable identification	Serial numbers, part numbers, or lot codes marked on the physical product or its packaging	Marking method not durable through the process (ink wears off before final inspection)
Status identification	Clear indication of what monitoring/measurement stage a unit has passed	Tags or travelers not updated in real time on the shop floor
Acceptance authority media control	Stamps, e-signatures, or passwords tied to a specific individual, with controlled assignment and retirement	Shared stamps, or no process for retiring a stamp when an employee leaves
Configuration management	Tracking part revisions, process revisions, and design listing alignment	No link between engineering change orders and what was actually built
Unique traceability identification	A documented, retrievable link from finished part back to raw material and process history	Traceability data exists but is scattered across paper travelers, spreadsheets, and supplier certs with no single retrieval path

Worth watching: auditors often pull a random serialized part and ask the supplier to produce the full traceability chain — material cert, heat lot, operator stamps, inspection records — on the spot. AS9100 doesn’t set a retrieval-time requirement, and an auditor can be satisfied with records that take a while to assemble as long as they’re complete and clearly demonstrate conformity. But in practice, a system that requires calling three different people and digging through file cabinets is a signal — to you, and often to the auditor — that the records exist without a real retrieval process behind them. That’s worth fixing on its own merits, separate from whether it triggers a finding.

Infographic illustrating the five core AS9100 traceability requirements, including suitable identification, status identification, acceptance authority media, configuration management, and unique traceability identification. — This infographic summarizes the five core AS9100 traceability requirements that aerospace suppliers must implement to maintain complete product identification, traceability, and audit-ready documentation under Clause 8.5.2.

Acceptance Authority Media Controls

Acceptance authority media (AAM) — stamps, electronic signatures, or passwords used to designate who performed or accepted a task — get their own line of scrutiny in Rev D. The requirement isn’t just that AAM exists. It’s that AAM is controlled: assigned to one individual, distinguishable from every other person’s media, and retired or reassigned in a documented way.

A stamp room with no log of who holds which stamp number is a finding waiting to happen. So is a digital sign-off system where a departed employee’s login credentials are still active six months later.

If you are under customer pressure to certify quickly → don’t skip the AAM control procedure to save time. It’s a small section of the standard and one of the easiest to fully close out, but it’s also one of the first things an experienced auditor tests, because it’s a fast way to gauge whether the whole QMS is disciplined or improvised.

Configuration Management and Traceability

Traceability without configuration management tells you what part number shipped. It doesn’t tell you what revision of that part number, or what revision of the manufacturing process, actually produced it.

Clause 8.5.2 requires organizations to maintain configuration — knowing what part revisions, process revisions, and design listings were actually in effect for a given build — so that as-built configuration can be compared against as-designed configuration whenever it matters. This becomes critical during engineering change activity, when older units in the field may be built to a prior revision while new production has moved on.

Objection: “We don’t have the software budget for a full configuration management system.” You don’t need one on day one. A controlled engineering change log, cross-referenced to serial number ranges, satisfies the requirement for most small and mid-size suppliers. The finding isn’t the absence of software — it’s the absence of a documented, followed process.

Supplier and Sub-Tier Traceability

Your traceability system is only as strong as your weakest supplier’s documentation. AS9100 expects flow-down of traceability requirements to sub-tier suppliers, meaning your purchase orders, supplier quality agreements, and receiving inspection process all need to confirm that incoming material or components arrive with adequate traceability documentation attached — not assumed.

This is where heat lot traceability on raw material becomes non-negotiable. A supplier that can’t produce a mill certification tying a specific heat lot to a specific shipment isn’t meeting the flow-down requirement, and that gap becomes your finding at your next audit, not theirs.

If you are preparing for your first AS9100 certification → verify your approved supplier list actually requires traceability documentation as a purchase order condition, not as an informal expectation. Auditors will pull supplier files and check for it directly.

Common Audit Findings

AS9100 traceability requirements illustrated during an aerospace audit with serialized components, material certifications, inspection records, configuration documents, and supplier traceability records. — An AS9100 audit often begins with a single serialized part and a request to reconstruct its complete traceability history using documented records from raw material through final acceptance.

Across AS9100 surveillance and certification audits, the traceability-related findings that repeat most often:

✅ Serialization exists, but status identification (what stage of test/inspection a unit has passed) isn’t visible on the floor without asking someone
⚠️ Acceptance authority media isn’t retired when an employee leaves or changes roles
⚠️ Consumables and process materials (sealants, primers, fasteners) have no lot traceability, even though the standard’s guidance material expects a reasonable link where practical
✅ Configuration records exist but aren’t cross-referenced to serial number ranges, so as-built vs. as-designed comparison takes hours instead of minutes
⚠️ Supplier traceability documentation is collected but not verified at receiving inspection

Pattern to watch for: the disconnect between paper records and physical parts on the floor. In many audits, the documentation exists somewhere in the system — the weak point is retrieval and cross-referencing, not the absence of data. That’s not a violation of Clause 8.5.2 by itself, but it’s a strong predictor of where a genuine finding will surface once an auditor starts pulling threads.

Traceability and Counterfeit Parts Prevention

Traceability and counterfeit parts controls are two separate clauses in AS9100, but auditors increasingly test them together. The International Aerospace Quality Group (IAQG) oversees the AS9100 certification scheme and has published extensive guidance connecting traceability and counterfeit parts risk, since gaps in one area routinely surface problems in the other. A strong traceability system supports your counterfeit parts defenses, because it forces documented chain-of-custody from an authorized source through to your receiving dock — but traceability alone doesn’t satisfy AS9100’s counterfeit parts requirements on its own. Those require a broader system: approved supplier controls, verification methods for incoming parts, risk assessment on part criticality, obsolescence management, and a documented process for reporting suspect counterfeit parts. Traceability is one piece of that system, not a substitute for it.

If your traceability records show unexplained gaps — material that appears without a documented supplier link, or components sourced outside your approved supplier list without justification — that’s a signal worth escalating into your counterfeit parts risk process, not just a documentation cleanup item. We’ll cover the full counterfeit parts prevention requirements in depth in the next article in this series.

You can verify a supplier’s AS9100 certification status directly through the IAQG OASIS database, which is worth checking before adding any new supplier to your approved list — regardless of what documentation they present.

Quick Audit Checklist

✅ Every serialized part has a durable, legible identification marking through final inspection
✅ Status of monitoring/measurement is visible on the traveler or in the digital record without cross-referencing another system
✅ Acceptance authority media (stamps, e-signatures) is individually assigned, logged, and retired when no longer applicable
✅ Configuration records cross-reference serial number ranges to specific part and process revisions
✅ Purchase orders and supplier quality agreements require traceability documentation as a condition of acceptance
✅ Receiving inspection verifies traceability documentation is present before material is released to production
✅ As a best practice (not a clause requirement), a random part pulled without notice can have its traceability chain assembled quickly — slow retrieval isn’t itself a nonconformance, but it’s often where real gaps get found

FAQ

Does AS9100 require traceability for every single part and material?

Not universally. Clause 8.5.2 requires traceability where it’s applicable — meaning where the customer, regulatory requirement, or your own risk assessment determines it’s needed. Critical and flight-safety parts almost always require full traceability. Some consumables may not, unless a specific contract or regulation requires it.

What’s the difference between identification and traceability under AS9100?

Identification tells you what a part is and its current status. Traceability tells you where it came from — the material lot, the process history, the operator, and the supplier chain behind it. AS9100 requires both, but traceability is the more demanding requirement because it has to be reconstructable after the fact.

Do consumables like sealants and primers need lot traceability?

The standard itself doesn’t explicitly mandate lot-level traceability for every consumable unless your contract or a regulatory requirement specifies it. That said, auditor guidance material treats consumables tied to critical processes as worth tracking at minimum by date range, and most experienced suppliers do this as good practice regardless of the strict letter of the clause.

How long do we need to retain traceability records?

AS9100 requires retention of documented information necessary to maintain traceability, but specific retention periods are typically driven by your customer contracts and applicable regulatory requirements, which commonly extend well beyond the life of the product. Check your contract flow-down requirements directly rather than assuming a default period.

What triggers a nonconformance in this area during an audit?

One of the most common triggers isn’t missing data itself, but an inability to quickly and confidently reconstruct the required traceability chain. Auditors often discover actual conformity gaps while testing retrieval and cross-referencing — pulling a random serialized part and asking the team to produce the material, process, inspection, and acceptance history is how a real gap in the records gets surfaced, not something a slow filing system causes on its own.

Does traceability apply differently to Tier 1 vs. lower-tier suppliers?

The clause requirements are the same regardless of tier, but the depth of flow-down expectations often increases the closer a supplier sits to final assembly. Tier 1 suppliers are typically expected to demonstrate traceability flow-down through their entire sub-tier supply base, not just their own operations.

Can a digital traceability system replace paper travelers entirely?

Yes, and most growing suppliers move this direction. A digital system needs to meet the same requirements as paper — durable identification, controlled acceptance authority media, and retrievable records — but it typically improves audit performance because retrieval time drops from hours to seconds.

Is acceptance authority media required, or only if we choose to use stamps?

If you use stamps, electronic signatures, or passwords to indicate acceptance or task completion, then the control requirements apply. If you use none of these methods, the specific AAM control clause doesn’t apply — but you still need another suitable, controlled method of indicating conformity status.

📥 Free Resources

AS9100 Rev D Gap Assessment Checklist — a 74-item, clause-by-clause checklist for aerospace suppliers assessing their QMS before certification, including identification and traceability requirements.
ISO 9001 Roadmap — step-by-step implementation guide for manufacturers building or improving a quality management system.
Manufacturing Compliance Checklist — practical compliance reference covering key ISO, OSHA, and quality requirements for production environments.
Supplier Quality Checklist — evaluation tool for assessing supplier quality controls and flow-down compliance before audits or new contracts.
ISO 13485 Gap Assessment Checklist — free checklist for medical device manufacturers assessing their QMS against ISO 13485 requirements.

Not Sure What to Do Next?

🔹 Still researching what AS9100 traceability actually requires? Read our What Is AS9100? pillar guide for the full framework before diving into individual clauses.

🔹 Ready to build or fix your traceability procedures now? The 9001Simplified documentation kits include identification, traceability, and configuration management procedure templates so you’re not starting from a blank page.

🔹 Need to buy the standard itself to confirm exact clause language? Get the AS9100 Rev D standard from ANSI Webstore — use code CC2026 for 5% off through December 31, 2026.

Meeting AS9100 traceability requirements is the clause-level detail that quietly decides whether your audit goes smoothly or turns into a multi-day scramble. Get the chain documented, controlled, and retrievable now — before an auditor tests it for you.

The Standards Navigator breaks down AS9100 clause by clause so aerospace suppliers know exactly what “compliant” looks like in practice, not just in theory.

📬 Stay Ahead of Your Next Traceability Audit

Most traceability failures don’t show up until an auditor pulls a random part and asks your team to reconstruct its history on the spot.

Suppliers who treat traceability as a real-time system — serialized, cross-referenced, quickly retrievable — walk into audits with confidence. Suppliers who treat it as a paper trail assembled after the fact spend audit week scrambling through file cabinets and spreadsheets.

The Standards Navigator covers AS9100 requirements clause by clause, built from real shop floor and audit experience — not summarized from the standard alone.

👉 Get updates on AS9100 clause breakdowns and aerospace compliance
👉 Be first to access new gap assessment tools and documentation resources

Subscribe below to stay ahead.

The Standards Navigator — Industrial Compliance. Clearly Explained.

Aerospace Supplier Compliance Standards: What Every Supplier Needs to Know in 2026

Aerospace suppliers face a layered compliance landscape — AS9100 certification is the baseline, but NADCAP accreditation, First Article Inspection, counterfeit parts controls, and customer flow-down requirements are equally enforced. This guide covers every standard and program aerospace primes audit against, with practical checklists and implementation guidance for quality managers.

The complete guide to AS9100, NADCAP, FAI, and the quality requirements aerospace primes actually enforce

Affiliate Disclosure: Some links in this article are affiliate links. If you purchase through them, The Standards Navigator may earn a commission at no additional cost to you.

The Aerospace Supply Chain Has a Short Memory for Second Chances

You get one bad audit. One missed First Article Inspection. One nonconformance that reaches the flight line. That is all it takes to lose an aerospace contract you spent years building.

Aerospace primes — Boeing, Lockheed Martin, Raytheon, Northrop Grumman — do not operate on goodwill. They operate on documented, auditable evidence that every supplier in their chain meets a defined set of compliance requirements. Those requirements are not flexible. They are not negotiable. And they are layered — meaning AS9100 certification alone does not cover everything your customer may require.

This aerospace supplier compliance standards guide breaks down the full compliance landscape: the standards, the programs, the certification requirements, and what aerospace suppliers actually get audited against on the shop floor.

If you are preparing for your first aerospace contract, adding an aerospace customer to an existing customer base, or trying to understand why your customer’s supplier quality team keeps asking for documentation you did not know you needed — this is where to start.

Before your Stage 1 audit, know exactly where your QMS stands. Run a clause-by-clause gap assessment now — before your registrar does. Download the AS9100 Rev D Gap Assessment Checklist →

In This Guide

The AS9100 Rev D standard and what it requires beyond ISO 9001
NADCAP accreditation — what it is, which processes require it, and when it applies
First Article Inspection (AS9102) — scope, deliverables, and common findings
Counterfeit parts prevention and AS5553/AS6174
FOD control requirements
Customer-specific flow-down requirements and how to manage them
How to verify a supplier’s certifications before awarding a contract

👉 Start Here — Top Resources for Aerospace Suppliers

Before you read further, these are the resources aerospace suppliers actually use:

AS9100 Rev D Standard — ANSI Webstore — The official SAE/AS9100 Rev D standard document. Required reading before certification. Use code CC2026 for 5% off through December 31, 2026.
AS9100 Training — BSI Group — Lead auditor, internal auditor, and implementation courses for AS9100 Rev D.
AS9100 Rev D Gap Assessment Checklist — Free 74-item clause-by-clause checklist. Know your gaps before your registrar does.

AS9100 Rev D: The Foundation of Aerospace Quality

Quality engineers review aerospace supplier compliance standards inside a modern aircraft manufacturing facility with a fuselage assembly, machining equipment, and inspection stations — Quality personnel review engineering documentation on the aerospace shop floor while aircraft structures and manufacturing operations continue in the background.

AS9100 is the non-negotiable baseline. Every organization supplying parts, assemblies, or services to the aerospace and defense industry — whether you are a Tier 1, Tier 2, or Tier 3 supplier — is expected to hold AS9100 certification or demonstrate that your QMS meets equivalent requirements.

AS9100 Rev D is the current revision, published in 2016. It incorporates all of ISO 9001:2015 verbatim and adds aerospace-specific requirements on top of the quality management foundation. The IAQG — International Aerospace Quality Group — governs the standard and maintains the OASIS certification database.

What AS9100 Adds Beyond ISO 9001

The standard adds requirements that reflect the risk profile of aerospace manufacturing — where a single nonconformance can have catastrophic consequences. Key additions include:

AS9100 Requirement	ISO 9001 Equivalent	Why It Matters in Aerospace
Risk management (beyond Clause 6.1)	Risk-based thinking	Formal risk identification, mitigation, and tracking for each program
Configuration management	Not required	Ensures part revisions are controlled and traceable across the supply chain
First Article Inspection (FAI)	Not required	Required verification that first production part meets all design requirements
Product/process change control	Change management	Any deviation from approved baseline requires documented approval
Counterfeit parts prevention	Not required	Documented controls to prevent unapproved or fraudulent parts from entering the supply chain
FOD prevention	Not required	Foreign Object Damage/Debris programs with documented procedures
Customer-designated special requirements	Not required	Flow-down and implementation of prime contractor requirements
Key characteristics	Not required	Identification and control of dimensions or features with elevated risk

Most common finding: Organizations that are ISO 9001 certified assume the gap to AS9100 is small. It is not. The configuration management, FOD, and counterfeit parts requirements alone require building procedures that do not exist in a typical ISO 9001 QMS.

If you are already ISO 9001 certified, the AS9100 vs ISO 9001 comparison breaks down every additional requirement clause by clause.

For complete scope on what AS9100 certification involves, what it costs, and how long it takes, the What Is AS9100? pillar article covers the full picture.

NADCAP: Special Process Accreditation

NDT technician performing ultrasonic testing on an aerospace aluminum component using an ultrasonic probe and portable inspection instrument displaying waveform data. — An NDT technician conducts ultrasonic inspection on an aerospace component to verify material integrity and identify potential internal defects.

NADCAP is separate from AS9100 — and your customer will require both.

NADCAP — National Aerospace and Defense Contractors Accreditation Program — is a special process accreditation program managed by the Performance Review Institute (PRI). It applies to organizations performing specific high-risk manufacturing processes where process control is critical to product integrity.

AS9100 certifies your quality management system. NADCAP accredits specific processes within that system. A machined airframe component supplier may need AS9100 certification. If that same supplier performs heat treating, NDT, or chemical processing in-house, NADCAP accreditation is required for those processes — regardless of AS9100 status.

Processes That Require NADCAP Accreditation

Process Category	Examples
Heat Treating	Annealing, aging, stress relief, case hardening
Non-Destructive Testing (NDT)	Ultrasonic, radiographic, penetrant, magnetic particle, eddy current
Chemical Processing	Anodizing, plating, passivation, conversion coating
Welding	Fusion welding per aerospace specifications
Coatings	Thermal spray, paint (where specified by prime)
Composites	Lay-up, cure, bonding operations
Electrical/Electronic Processing	Soldering, conformal coating
Fluid Distribution Systems	Tube bending, assembly

What NADCAP Audits Cover

NADCAP audits are process-specific and technically rigorous. Auditors evaluate process parameters, equipment qualification, operator qualification, traceability of materials, and conformance to applicable customer and industry specifications.

A NADCAP audit is not a QMS audit — it is a process performance audit. Findings are classified as Critical, Major, or Minor. Critical findings result in immediate suspension of work.

If you are a supplier: Do not assume your customer will accept your subcontractor’s NADCAP accreditation for flow-down purposes without reviewing the approved scope. NADCAP accreditation is scope-specific. Heat treating accreditation for aluminum alloys does not cover titanium heat treating.

If your aerospace customer has asked for NADCAP compliance in your supplier requirements — and you are not sure what processes in your facility are in scope — your AS9100 QMS needs a process risk review before your next customer audit. Download the AS9100 Rev D Gap Assessment Checklist →

First Article Inspection: AS9102

First Article Inspection is one of the most frequently cited sources of supplier nonconformances in aerospace.

AS9102 — Aerospace First Article Inspection Requirement — defines the methodology for verifying that the first production article (or first article after a significant change) meets all engineering, design, and manufacturing requirements. The standard is separate from AS9100 but is required by AS9100 Rev D Clause 8.1.3.

What FAI Covers

A complete FAI under AS9102 includes three forms:

Form	Title	Scope
Form 1	Design Documentation	Verification that the correct drawing revision, specifications, and notes are captured
Form 2	Product Accountability	Bill of materials, materials certification, and raw material traceability
Form 3	Characteristic Accountability	Measurement of every dimension and characteristic on the drawing — not a sample

Form 3 is where most suppliers get tripped up. Every characteristic on the engineering drawing — not a selected subset — must be measured and documented. This includes tolerances, surface finishes, thread forms, and any geometric dimensioning and tolerancing (GD&T) callouts.

When FAI Is Required

FAI is not a one-time event. AS9102 specifies that a new or updated FAI is required when:

A new part number is introduced to production
A drawing or specification is revised (full or partial FAI, depending on the scope of change)
A manufacturing process, facility, or tooling is changed in a way that could affect form, fit, or function
Production has been inactive for more than two years

Most common finding: Suppliers treat FAI as a drawing check rather than a full measurement event. Partial FAIs submitted without Form 2 material traceability or without measuring all Form 3 characteristics are rejected by customer quality teams and result in production holds.

Counterfeit Parts Standards: AS5553 and AS6174

Counterfeit parts are a documented safety risk in aerospace. The FAA, DoD, and aerospace primes have all implemented mandatory controls. Your QMS must address them explicitly.

Two SAE standards define the requirements:

AS5553 — Fraudulent/Counterfeit Electronic Parts: Avoidance, Detection, Mitigation, and Disposition. Applies to electronic components — integrated circuits, semiconductors, connectors, and any electronics where counterfeit substitution is a risk.

AS6174 — Counterfeit Materiel: Avoidance, Detection, Mitigation, and Disposition. Broader scope covering raw materials, fasteners, and other non-electronic hardware.

What Your QMS Must Include

A compliant counterfeit parts program under AS9100 Rev D requires documented procedures covering:

Approved supplier lists (ASL): Purchasing only from authorized manufacturers, franchised distributors, or approved aftermarket sources
Receiving inspection: Risk-based inspection criteria for parts that cannot be sourced from authorized channels
Traceability: Certificate of conformance, test reports, and chain of custody documentation for all parts
Suspect/confirmed counterfeit parts: Quarantine, reporting, and disposition procedures — including mandatory reporting to GIDEP (Government-Industry Data Exchange Program) for defense contracts
Training: Evidence that personnel involved in procurement and receiving inspection are trained to identify suspect parts

If you are a manufacturer and not a distributor, the most critical element is your approved supplier list and purchasing controls — because your customer’s AS9100 audit will verify that you are buying from controlled sources.

FOD Control Requirements

Aerospace tool control shadow board displaying torque wrenches, calipers, safety wire pliers, borescope, and precision hand tools with one tracked tool removed. — A structured tool control system helps aerospace manufacturers maintain accountability, prevent FOD incidents, and ensure every tool is tracked throughout production.

Foreign Object Damage and Debris is a zero-tolerance issue in aerospace.

FOD — Foreign Object Damage or Debris — refers to any substance, material, or item that could potentially damage equipment or endanger personnel. A loose fastener in a fuel system. A rag left in an aircraft cavity. Metal chips in a precision assembly. In aerospace, these are not housekeeping issues — they are quality system failures.

AS9100 Rev D Clause 8.5.1 requires documented controls to prevent FOD throughout manufacturing, assembly, and test operations. Customer-specific FOD requirements are typically more detailed and flow down through purchase order terms.

Minimum FOD Program Elements

✅ Written FOD prevention procedure specific to your facility and processes
✅ Designated FOD critical areas with defined access controls
✅ Tool control program — shadow boards, tool counts, calibrated tool tracking
✅ Contamination controls during assembly and inspection operations
✅ FOD walks and documented area inspections on defined frequency
✅ Employee training and awareness records
✅ FOD incident reporting and corrective action process
✅ Customer notification procedure when FOD is suspected or confirmed

Most common finding: FOD programs exist as a procedure document but are not operationally active. Auditors look for evidence — completed FOD walk records, tool control logs, training records — not just a written procedure. The procedure without the records is a Major finding.

Customer Flow-Down Requirements

Your prime contractor’s requirements are your requirements.

This is the element that surprises suppliers who are new to aerospace. AS9100 certification means you have a compliant quality management system. It does not mean your prime contractor’s specific engineering, quality, and documentation requirements are automatically met. Those flow down — meaning they are passed from the prime to you through purchase order terms, quality clauses, and source control documentation.

Common Flow-Down Requirements

Category	Examples
Quality plan	First Article requirements, inspection frequencies, statistical process control
Engineering	Specification compliance, drawing revision control, DER approvals
Material	Material certifications, approved material sources, trace requirements
Manufacturing	Approved process specifications (e.g. BAC, SPE, DPS), NADCAP process approvals
Documentation	Record retention requirements (typically 10+ years for flight-critical parts)
Access and oversight	Right-to-access for customer source inspection, government source inspection
Reporting	GIDEP reporting, escape reporting, timelines for nonconformance notification

Managing Flow-Down in Your QMS

Your QMS must have a documented process for:

Reviewing purchase orders for quality clauses before accepting the order
Translating customer requirements into internal work instructions and inspection plans
Verifying that sub-tier suppliers (your suppliers) receive applicable flow-down requirements
Maintaining records that demonstrate compliance with customer-specific requirements

If you are receiving flow-down requirements you do not understand: Your customer’s supplier quality team is your first contact. Do not guess. Documenting a misunderstood requirement incorrectly is worse than asking for clarification — because the audit finding will be a major nonconformance, not a simple misunderstanding.

If you are evaluating whether your quality system is ready for AS9100 certification, start with the How Much Does AS9100 Certification Cost? article for a complete breakdown of what certification actually involves.

BSI Group offers AS9100 training specifically designed for suppliers building compliant QMS documentation — covering the clause requirements and flow-down obligations that come with aerospace contracts.

How to Verify Supplier Certifications

Never take a supplier’s word for AS9100 certification. Verify it directly.

The IAQG OASIS Database is the official global registry for AS9100, AS9110, and AS9120 certifications. Every accredited certification is listed with scope, effective date, expiration date, and the certification body that issued it. If a supplier claims AS9100 certification and they are not in OASIS, the certification is not valid.

What to Verify in OASIS

Certification status: Active, suspended, or withdrawn
Scope of certification: Does it cover the specific product category or process your supplier is performing?
Expiration date: AS9100 certificates expire and require surveillance audits — a certificate that has not been renewed is not valid
Certification body: Is the CB accredited by a recognized accreditation body (ANAB, DAkkS, UKAS)?

For NADCAP accreditation verification, the PRI supplier database at pri-network.org lists all accredited suppliers by commodity and scope.

If you are a quality manager building or updating an approved supplier list for an aerospace program — your supplier evaluation process needs to include OASIS verification as a mandatory step before award and at each annual review.

Compliance Checklist for Aerospace Suppliers

Use this checklist to assess your current compliance posture before a customer audit or certification audit.

Quality Management System
✅ AS9100 Rev D certification current and active in OASIS
✅ QMS manual and procedures documented and controlled
✅ Internal audit program covers all AS9100 clauses — not just ISO 9001 requirements
✅ Management review records demonstrate review of aerospace-specific metrics

First Article Inspection
✅ FAI procedure documented per AS9102
✅ Form 1, Form 2, and Form 3 completed for all active part numbers
✅ FAI triggers defined — changes that require new or partial FAI
✅ FAI records retained and retrievable

Counterfeit Parts
✅ Counterfeit parts prevention procedure in place
✅ Approved supplier list (ASL) current and controls defined
✅ Receiving inspection criteria address suspect parts
✅ Personnel training records current

FOD
✅ FOD prevention procedure active and specific to your facility
✅ FOD walk and inspection records maintained on required frequency
✅ Tool control program in place with records
✅ Employee training documented

Flow-Down
✅ Purchase order review process in place
✅ Customer quality clauses translated to internal requirements
✅ Sub-tier flow-down process documented and verified
✅ Record retention meets customer requirements (typically 10+ years)

NADCAP (if applicable)
✅ All in-scope special processes identified
✅ NADCAP accreditation current for each process
✅ Scope of accreditation matches actual work performed
✅ Sub-tier NADCAP requirements verified and documented

FAQ

What is the difference between AS9100 and NADCAP?

AS9100 Rev D is a quality management system standard that certifies your organization’s overall quality processes — planning, documentation, corrective action, customer satisfaction, and so on. NADCAP is a special process accreditation that applies to specific manufacturing processes such as heat treating, NDT, chemical processing, and welding. AS9100 certification is a QMS-level requirement. NADCAP is a process-level requirement. Aerospace suppliers performing special processes are typically required to hold both.

Do I need AS9100 certification to supply aerospace parts?

In most cases, yes — if you are a direct supplier (Tier 1 or Tier 2) to an aerospace prime or defense contractor. Some lower-tier commodity suppliers may not be required to hold AS9100 certification, but customer flow-down requirements and purchase order quality clauses will define the specific requirement. Review your customer’s supplier quality requirements before assuming certification is not needed.

How do I know if my process requires NADCAP accreditation?

Review your customer’s purchase order quality clauses and their approved supplier requirements document. Primes typically maintain a list of processes that require NADCAP accreditation for their programs. If you perform heat treating, NDT, chemical processing, or welding on aerospace parts and your customer has not specified NADCAP — ask. The absence of a requirement on the PO does not always mean the requirement does not exist.

What is a First Article Inspection and when is it required?

A First Article Inspection (FAI) is a formal verification process, defined by AS9102, that the first production article meets all design and engineering requirements. It is required for new part introductions, after drawing or specification revisions, after significant manufacturing process or tooling changes, and after production gaps of two or more years. A complete FAI requires documentation on three forms covering design documents, material traceability, and measurement of every drawing characteristic.

How long does AS9100 certification take?

For an organization with no existing quality management system, the implementation and certification process typically takes 9 to 18 months. Organizations already certified to ISO 9001 can typically close the gap to AS9100 in 6 to 12 months, depending on the number of additional requirements that need to be built out. The How Much Does AS9100 Certification Cost? article covers timelines and costs in detail.

What is the OASIS database and how do I use it?

OASIS — Online Aerospace Supplier Information System — is the IAQG-maintained database of all AS9100, AS9110, and AS9120 certifications worldwide. You can search by organization name, location, or CAGE code to verify a supplier’s certification status, scope, expiration date, and issuing certification body. Access it at oasis.sae.org. Verifying supplier certifications in OASIS should be a standard step in your approved supplier list maintenance process.

What are customer flow-down requirements in aerospace?

Flow-down requirements are the specific quality, engineering, documentation, and process requirements that a prime contractor passes down to their supply chain through purchase order terms and quality clauses. They are legally binding once accepted on a PO. Common examples include FAI requirements, material certification requirements, NADCAP requirements for special processes, record retention periods, and customer source inspection rights. Your QMS must have a documented process for reviewing, implementing, and flowing these requirements to your own sub-tier suppliers.

Can I use my ISO 9001 certification for aerospace customers temporarily while pursuing AS9100?

In most cases, no. ISO 9001 certification does not meet AS9100 requirements. Some customers may grant a temporary waiver for lower-risk commodity suppliers, but for any direct aerospace supply involving flight-critical parts or assemblies, AS9100 certification is typically required before production can begin. Discuss your timeline with your customer’s supplier quality team — do not assume a waiver will be granted.

📥 Free Resources

AS9100 Rev D Gap Assessment Checklist — 74-item clause-by-clause checklist for aerospace suppliers assessing their QMS before certification. Covers every AS9100-specific requirement beyond ISO 9001.

ISO 9001 Roadmap — Step-by-step implementation guide for manufacturers building or improving a quality management system. Useful as a foundation before layering AS9100 requirements.

Manufacturing Compliance Checklist — Practical compliance reference covering key ISO, OSHA, and quality requirements for production environments.

Supplier Quality Checklist — Evaluation tool for assessing supplier quality controls and flow-down compliance before audits or new contracts.

ISO 13485 Gap Assessment Checklist — Free checklist for medical device manufacturers assessing their QMS against ISO 13485 requirements.

Not Sure What to Do Next?

🔹 If you are new to aerospace and need to understand AS9100 from the ground up — start with What Is AS9100? for a complete overview of the standard, certification process, and supply chain requirements.

🔹 If you are ready to buy the AS9100 Rev D standard — purchase the official document through the ANSI Webstore. Use code CC2026 for 5% off through December 31, 2026. The standard is available in digital and print formats and ships internationally.

🔹 If you need AS9100 training for your team or are selecting a certification body — BSI Group offers the full range of AS9100 courses from awareness through lead auditor, and serves as both a training provider and accredited certification body.

Aerospace compliance is not a project with a finish line. Certification is the beginning. The organizations that hold their approvals and grow within the supply chain are the ones that build compliance into operations — not just into audit prep.

The Standards Navigator covers the full aerospace compliance landscape, from AS9100 certification requirements to NADCAP process accreditation and FAI methodology. Use the resources above to make your next audit a confirmation of what you already know — not a discovery of what you missed.

Stay Ahead of Aerospace Compliance Changes

Losing an aerospace approval because a standard revision or customer requirement changed while you were focused on production is the most preventable kind of failure. Most organizations that fall behind on compliance don’t miss the requirement — they miss the update.

The suppliers who keep their approvals long-term are the ones who treat compliance information the same way they treat production scheduling: as an ongoing operational discipline, not a one-time project.

The Standards Navigator covers AS9100, NADCAP, FAI, and the full aerospace supplier compliance landscape — explained in plain language for quality managers and operations teams who need to act on the information, not just read it.

👉 Get updates when new aerospace compliance articles are published
👉 Be first to access new AS9100 implementation resources and checklists

Subscribe below to stay ahead.

The Standards Navigator — Industrial Compliance. Clearly Explained.

The Documentation Gap That Fails Aerospace Audits

In this guide:

Table of Contents

👉 Start Here

What “Documented Information” Actually Means Under AS9100

The Core Records Auditors Pull First

First Article Inspection Records

Traceability Records

Counterfeit Parts Prevention Records

FOD Control Records

Two Documentation Areas Most Suppliers Underbuild

Configuration Management Documentation (Clause 8.1.2)

Risk-Based Documentation for Special Processes

How AS9100 Documentation Differs from ISO 9001

What Happens When Documentation Doesn’t Hold Up

Quick Documentation Checklist

FAQ

Is a quality manual required under AS9100 Rev D?

What documents does an AS9100 auditor ask for first?

What’s the difference between documented information and records under AS9100?

How long do AS9100 records need to be retained?

Do I need separate documentation for each customer?

What is a common AS9100 documentation finding?

Can I use the same documentation system for ISO 9001 and AS9100?

Do I need software to manage AS9100 documentation, or can spreadsheets work?

How much documentation does a small aerospace supplier actually need?

📥 Free Resources

Not Sure What to Do Next?

Stay Ahead of Your Next AS9100 Audit

Subscribe

Confusing These Two Standards Can Cost You a Contract

In This Guide

Table of Contents

👉 Start Here (Top Resources)

What Is AS9110?

What Is AS9120?

AS9110 vs AS9120: Side-by-Side Comparison

Certification Cost and Timeline

How Long Does Implementation Take?

Do You Need Both?

Objection: “We’re Small — Do We Really Need to Certify to the Exact Right Standard?”

What’s Changing: The 2026 IAQG Standards Revision

Quick Audit Checklist: Which Standard Applies to You?

FAQ

Is AS9110 harder to get certified to than AS9120?

Can a distributor hold AS9100 instead of AS9120?

Does AS9110 or AS9120 replace the need for ISO 9001 certification?

How do I verify a supplier’s AS9110 or AS9120 certification is real?

What happens if my scope of work doesn’t match my certificate?

Is there a bundled cost savings if I need the text of both AS9110 and AS9120?

Do AS9110 and AS9120 require the same registrar accreditation as AS9100?

Will the 2026 IAQG revision require re-certification?

📥 Free Resources

Not Sure What to Do Next?

Stay Ahead of Aerospace Compliance Changes

Subscribe

When a Traceability Gap Grounds an Audit

In This Guide

Table of Contents

👉 Start Here (Top Resources)

AS9100 Traceability Requirements: What Clause 8.5.2 Actually Says

The Five Requirements of Identification and Traceability

Acceptance Authority Media Controls

Configuration Management and Traceability

Supplier and Sub-Tier Traceability

Common Audit Findings

Traceability and Counterfeit Parts Prevention

Quick Audit Checklist

FAQ

Does AS9100 require traceability for every single part and material?

What’s the difference between identification and traceability under AS9100?

Do consumables like sealants and primers need lot traceability?

How long do we need to retain traceability records?

What triggers a nonconformance in this area during an audit?

Does traceability apply differently to Tier 1 vs. lower-tier suppliers?

Can a digital traceability system replace paper travelers entirely?

Is acceptance authority media required, or only if we choose to use stamps?

📥 Free Resources

Not Sure What to Do Next?

📬 Stay Ahead of Your Next Traceability Audit