AS9100 Rev D Clauses Explained: A Complete Clause-by-Clause Breakdown (2026)

AS9100 Rev D shares its ten-clause structure with ISO 9001, but aerospace-specific additions are layered inside it — from counterfeit parts prevention to configuration management. This guide breaks down every clause, maps it to ISO 9001, and shows exactly where auditors focus.

Every AS9100 Rev D clause, mapped to ISO 9001 and explained in plain shop-floor language

Affiliate Disclosure: Some links in this article are affiliate links. If you purchase through them, The Standards Navigator may earn a commission at no additional cost to you.


Most AS9100 Nonconformances Trace Back to One Thing: Not Knowing What the Clause Actually Requires

Auditors don’t fail organizations for not trying. They fail them for gaps between what a procedure says and what a clause actually demands — and with AS9100 Rev D clauses, those gaps concentrate in the aerospace-specific additions layered inside the ISO 9001 structure.

AS9100 Rev D is built on the ISO 9001:2015 core structure — ten clauses, the same high-level framework shared across ISO 14001 and ISO 45001. The standard doesn’t present its aerospace requirements as a separate numbered list — its own foreword states that additional aviation, space, and defense requirements are shown in bold, italic text directly inside the ISO 9001 clause structure. Organizations that already run a certified ISO 9001 QMS often assume AS9100 is “the same thing with extra paperwork.” It isn’t. Those embedded additions carry real audit weight, and Clause 8 (Operation) carries the heaviest concentration of them.

This guide walks through all ten AS9100 Rev D clauses, what each one requires, and exactly where the aerospace-specific language sits inside the ISO 9001 framework — being careful throughout to separate what the standard actually requires from what auditors commonly emphasize in practice. Those aren’t always the same thing, and conflating them is one of the more common ways organizations misjudge their own audit readiness.

As an ISO 9001 Internal Auditor, I’ve sat in enough audit rooms to know the pattern: a work instruction gets followed to the letter, but the calibration record behind the measurement it relies on has already lapsed. The paperwork says compliant. The process says otherwise. That’s clause 7.1.5 in real life, not on paper — and it’s the kind of gap AS9100 auditors can uncover when they trace a documented process back to the evidence supporting it.

Before your next audit, run a clause-by-clause gap check against the full standard → Get the free AS9100 Rev D Gap Assessment Checklist and find out exactly which clauses your QMS is weakest on before an auditor does.

In This Guide:

  • What AS9100 Rev D actually adds to the ISO 9001 clause structure
  • A clause-by-clause breakdown of all ten sections
  • The aerospace-specific sub-clauses that deserve the closest audit attention
  • Where AS9100 and ISO 9001 requirements diverge — and where they’re identical
  • FAQ on AS9100 clause numbering, scope, and audit focus areas


Start Here — Top Resources

If you’re working from the standard itself while you read this breakdown, get the official text directly rather than a summary. AS9100 Rev D — ANSI Webstore is the authorized source for the current edition, available in print and PDF, with worldwide shipping and multi-language options for suppliers outside the U.S. Use code CC2026 for 5% off through December 31, 2026.

If your team needs to understand how auditors actually interpret these clauses in practice — not just what they say — BSI Group’s AS9100 Training Courses cover clause-level interpretation and internal auditor certification specific to the aerospace series.


How AS9100 Rev D Clauses Are Structured

AS9100 Rev D uses the same ten-clause Annex SL structure as ISO 9001:2015 — Context, Leadership, Planning, Support, Operation, Performance Evaluation, and Improvement. If you’ve already worked through our ISO 9001 clause breakdown, the numbering will look familiar.

What’s different is what’s been inserted inside that structure. AS9100 doesn’t renumber clauses — it adds sub-clauses at the points where aerospace risk is highest: configuration management, counterfeit parts prevention, product safety, first article inspection, and control of production equipment and tooling. Those additions are catalogued in the standard’s own comparison annex, and they’re the reason a shop that’s ISO 9001 certified still has real implementation work to do before an AS9100 Stage 1 audit.

If you’re not yet sure how the two standards differ at a strategic level, our AS9100 vs ISO 9001 comparison covers the bigger picture. This article goes clause by clause.

AS9100 Rev D clauses structure map showing the 10-clause ISO 9001 framework and aerospace-specific requirements
AS9100 Rev D clauses follow the ISO 9001:2015 10-clause structure with aerospace-specific requirements embedded throughout.

Clause 1–3: Scope, Normative References, Terms and Definitions

These three clauses establish the scope, references, and terminology that auditors use to frame everything that follows. They don’t contain the operational QMS requirements that make up the bulk of an AS9100 audit, but they still matter when determining your certification scope and how requirements are interpreted.

Clause 1 — Scope defines AS9100 as applicable to organizations that design, develop, and/or produce aviation, space, and defense products, and to organizations providing post-delivery activities including maintenance, spares, or repair. Scope statements get checked against your actual certificate scope more often than new clients expect.

Clause 2 — Normative References points to ISO 9000:2015 for foundational terms and definitions.

Clause 3 — Terms and Definitions adds aerospace-specific vocabulary on top of the ISO 9000 base: counterfeit part, critical items, key characteristic, product safety, and special requirements. Auditors expect these terms used correctly and consistently across your documentation — not interchangeably with generic quality language.


Clause 4: Context of the Organization

Clause 4.1 through 4.4 require you to identify internal and external issues affecting your QMS, determine interested parties and their requirements, define QMS scope, and document your processes and their interactions.

AS9100 doesn’t add new sub-clauses here, but auditors interpret “interested parties” more broadly than in general manufacturing — regulatory authorities, certifying agencies, and customer flow-down requirements all count, and your QMS scope statement needs to reflect the specific product lines and processes your certificate covers.


Clause 5: Leadership

Clause 5.1 covers leadership commitment, 5.2 covers the quality policy, and 5.3 covers organizational roles, responsibilities, and authorities.

The concrete AS9100 addition sits in 5.3, and it’s a narrow one: ISO 9001:2015 dropped the requirement for a single named “management representative,” but AS9100 explicitly retained it. Top management must appoint a specific person with the organizational freedom and unrestricted access to top management needed to oversee the QMS. If your quality function is spread across several roles with no one holding this explicit authority and access, that’s a real gap against the standard’s text — not just an auditor preference.


Clause 6: Planning

Clause 6.1 (actions to address risks and opportunities), 6.2 (quality objectives and planning), and 6.3 (planning of changes) are essentially unchanged from the ISO 9001 baseline — there’s no AS9100-specific addition inserted directly into Clause 6 itself. The standard’s own informative annex is explicit about where the aerospace risk emphasis actually lives: a formal operational risk management process is required under Clause 8.1.1, not Clause 6. If you’re looking for where AS9100 gets more demanding about risk, that’s the clause to focus on — Clause 6 planning should still look familiar if you’re coming from ISO 9001.


Clause 7: Support — Where the First Major Additions Appear

Sub-ClauseSource of the DifferenceWhat Actually ChangesWhy It Matters in Practice
7.1.3 InfrastructureSame as ISO 9001 baseline — no AS9100-specific textual addition hereNothing added at this clauseEquipment and tooling validation requirements do show up in AS9100 — but at 8.5.1.1, under Production, not here. Don’t confuse the two when building your clause cross-reference.
7.1.5 Monitoring & Measuring ResourcesAS9100 textual addition (7.1.5.2)Explicit calibration/verification against national or international measurement standards, a documented recall process for equipment due for calibration, and a maintained register (equipment type, unique ID, location, method, frequency, acceptance criteria)This is one of the most detailed sub-clauses in the entire standard. Shops tracking calibration informally, without a maintained register, are working against explicit standard text — not just an auditor’s preference.
7.1.6 Organizational KnowledgeSame as ISO 9001 baseline — no AS9100-specific textual additionNothing added at this clauseThe practical risk (tribal knowledge lost to turnover) is real and worth managing, but it’s not a distinct AS9100 requirement beyond what ISO 9001 already asks for.
7.2 CompetenceSame as ISO 9001 baseline — no AS9100-specific textual additionNothing added at this clauseDon’t confuse this with 7.3 below — product safety and ethics awareness live there, not in the competence clause itself.
7.3 AwarenessAS9100 textual additionTwo items added to the awareness list that don’t appear in the ISO 9001 baseline clause: personnel must be aware of their contribution to product safety and the importance of ethical behaviorTraining records built only around technical/skill competence, with no documented safety or ethics awareness element, are a common and genuine gap against this specific text.
7.5 Documented InformationAS9100 textual addition (narrow)An explicit requirement that when documented information is managed electronically, the organization defines data protection processes covering loss, unauthorized changes, unintended alteration, corruption, and physical damageElectronic document-control systems get checked specifically for this language — general version control isn’t automatically the same thing.

For a full breakdown of what documentation auditors expect to see at each stage, see our guide to AS9100 Documentation Requirements.


Clause 8: Operation — Where Most of the Standard’s Weight Lives

AS9100 Rev D clauses showing Clause 8 operational controls for aerospace manufacturing
AS9100 Rev D Clause 8 connects aerospace-specific controls from operational risk and configuration management through production verification and product release.

Clause 8 is where AS9100 diverges most sharply from the ISO 9001 baseline, with the greatest concentration of aerospace-specific operational requirements.

8.1 Operational Planning and Control gains four aerospace-specific sub-clauses:

  • 8.1.1 Operational Risk Management — requires a documented process for managing risk in operations, including risk of nonconformity affecting product safety
  • 8.1.2 Configuration Management — required for organizations where product configuration must be controlled and traceable through its lifecycle
  • 8.1.3 Product Safety — requires planning, implementation, and control of processes for product safety across the product lifecycle
  • 8.1.4 Prevention of Counterfeit Parts — requires a documented approach to preventing counterfeit or suspect counterfeit parts from entering the supply chain

If you haven’t yet mapped your counterfeit parts controls against clause 8.1.4 specifically, our AS9100 Counterfeit Parts Standards guide covers what auditors expect to see documented.

8.3 Design and Development carries three specific AS9100 additions worth knowing by number: 8.3.4.1 requires detailed test planning for verification and validation activities (test plans identifying the item, resources, objectives, conditions, and acceptance criteria); 8.3.5(e) requires design outputs to specify critical items, including key characteristics, and the specific actions to be taken for them; and 8.3.6 requires customer notification before implementing design changes that affect customer requirements, plus control of those changes in accordance with your configuration management process. Organizations that design as well as build have real implementation work here beyond the ISO 9001 baseline.

8.4 Control of Externally Provided Processes, Products, and Services requires flow-down of applicable requirements (including customer and regulatory requirements, and the duty to prevent counterfeit parts) to sub-tier suppliers, and requires verification that purchased product conforms before use in production or delivery. AS9100 also explicitly requires a maintained register of external providers that includes their approval status (approved, conditional, or disapproved) and the scope of the approval — a specific recordkeeping requirement, not just a general expectation. Supplier evaluation and monitoring get audited far more closely under AS9100 than under a standard ISO 9001 certificate.

8.5 Production and Service Provision is where the bulk of aerospace-specific sub-clauses sit — and where getting the exact sub-clause numbers right matters, because they’re easy to mix up:

  • 8.5.1.1 Control of Equipment, Tools, and Software Programs — equipment, tools, and software used to automate, control, monitor, or measure production processes must be validated prior to final release for production and maintained — a common audit gap on CNC-heavy shop floors
  • 8.5.1.2 Validation and Control of Special Processes — for processes where the output can’t be verified by subsequent inspection, requires defined approval criteria, facility/equipment approval, and personnel qualification
  • 8.5.1.3 Production Process Verification — this is the clause that requires production process verification, including first article inspection where applicable: a representative item from the first production run of a new or changed part must verify that production processes, documentation, and tooling meet requirements, repeated when changes invalidate the original results. Covered in detail in our First Article Inspection guide
  • 8.5.2 Identification and Traceability — extended traceability and configuration-identification requirements covered in our AS9100 Traceability Requirements breakdown
  • 8.5.4 Preservation — includes explicit requirements around foreign object debris (FOD) prevention, detailed in our FOD Control Standards guide
  • 8.5.5 Post-Delivery Activities — support and servicing requirements after product leaves your facility, including in-service data collection and technical documentation control

8.6 Release of Products and Services requires verifying that product and service requirements have been met before release proceeds, retaining documented evidence of conformity and traceability to the person authorizing release, and ensuring all documentation required to accompany the product is present at delivery. It’s a closely related idea to first article inspection, but it’s a separate requirement, not a restatement of 8.5.1.3.

8.7 Control of Nonconforming Outputs goes considerably further than the general ISO 9001 requirement. AS9100 requires that dispositions of “use-as-is” or repair be approved by an authorized representative of the design organization (or someone with delegated design authority) — and by the customer, if the nonconformity departs from contract requirements. Product dispositioned for scrap must be conspicuously and permanently marked, or positively controlled, until it’s physically rendered unusable. Counterfeit or suspect counterfeit parts must be controlled to prevent reentry into the supply chain. And nonconformities affecting delivered product require timely reporting to the customer and other relevant interested parties.


Clause 9: Performance Evaluation

Clause 9.1 (monitoring, measurement, analysis, evaluation), 9.2 (internal audit), and 9.3 (management review) follow the ISO 9001 structure without major aerospace-specific insertions — but auditors expect internal audit programs to demonstrate coverage of the AS9100-specific clauses above, not just the ISO 9001 baseline. A shop running internal audits against a generic ISO 9001 checklist and calling it AS9100-compliant can leave significant aerospace-specific requirements untested before Stage 2.

For a full walkthrough of building an internal audit program that actually covers these clauses, see our AS9100 Internal Audit Process guide.


Clause 10: Improvement

Clause 10.1 (general), 10.2 (nonconformity and corrective action), and 10.3 (continual improvement) mirror ISO 9001 directly. The practical difference is scale and documentation rigor: corrective action records tied to product safety or counterfeit parts findings tend to get far closer scrutiny during surveillance audits than a routine process nonconformance.


Objection: “Isn’t This Just ISO 9001 With More Paperwork?”

This is the single most common misconception I run into with shops transitioning from ISO 9001 to AS9100. It’s not more paperwork — it’s more scope. Requirements like 8.1.4 (counterfeit parts prevention), 5.3’s retained management representative, and 7.3’s product safety and ethics awareness items don’t appear in ISO 9001 in this form. They require new processes, not just new forms. Organizations that treat AS9100 as an ISO 9001 add-on typically underestimate the implementation timeline by months — see our AS9100 Implementation Timeline guide for a realistic planning window.

AS9100 Rev D clauses audit evidence trail showing the connection between requirements, procedures, implementation, and objective records
AS9100 Rev D clauses are verified through the complete audit evidence trail from requirements and procedures to shop-floor implementation and objective records.

Quick Clause Audit Checklist — AS9100-Specific Additions

[ ] Documented counterfeit parts prevention process (8.1.4)
[ ] Configuration management process, if applicable to your product line (8.1.2)
[ ] Product safety planning documented across the product lifecycle (8.1.3)
[ ] A named management representative with unrestricted access to topmanagement (5.3)
[ ] Calibration register maintained per 7.1.5.2 — equipment type, ID, location, method, frequency, acceptance criteria
[ ] First article inspection records for new or changed part numbers (8.5.1.3)
[ ] Equipment, tooling, and software validated before release to production (8.5.1.1)
[ ] FOD prevention program documented and implemented (8.5.4)
[ ] Ethics and product safety awareness included in training records (7.3)


FAQ

Does AS9100 Rev D use the same clause numbers as ISO 9001:2015?

Yes. AS9100 Rev D uses the identical ten-clause Annex SL structure as ISO 9001:2015, with aerospace-specific sub-clauses inserted at relevant points rather than renumbered separately.

How many additional requirements does AS9100 add to ISO 9001?

The standard itself doesn’t present the additions as a numbered list — AS9100’s own foreword states that aerospace-specific requirements, definitions, and notes are shown in bold, italic text directly inside the ISO 9001:2015 clause structure. They’re concentrated most heavily in Clause 8 (Operation), which carries more distinct aerospace sub-clauses than any other section of the standard.

Which clauses generate the most AS9100 audit findings?

We don’t have access to statistically representative registrar-wide nonconformance data, so we won’t put a ranking on this. What we can say from direct clause-level audit experience is that 7.1.5 (calibration and measurement traceability), 8.1.4 (counterfeit parts prevention), and 8.5.1.1 (control of production equipment, tools, and software) are recurring finding areas in practice — worth checking closely even if you can’t quantify exactly how common each one is industry-wide.

Do I need a separate quality manual for AS9100 versus ISO 9001?

No — most organizations integrate AS9100-specific requirements into a single QMS manual structured around the same ten clauses, rather than maintaining two parallel systems.

Is clause 8.1.2 (Configuration Management) mandatory for every AS9100 organization?

It applies where product configuration control is relevant to your scope — typically design-and-build organizations and complex assemblies. A pure build-to-print machine shop may have limited applicability, though this should be confirmed with your registrar, not assumed.

Does AS9100 replace ISO 9001 certification?

No. AS9100 certification incorporates and is audited alongside ISO 9001 requirements — it is not a separate parallel certificate. Organizations certified to AS9100 do not need a separate ISO 9001 certificate for the same scope.

Will IA9100 change this clause structure?

AS9100 Rev D remains the current, active standard as of this writing, and everything in this breakdown reflects it. The IAQG has published a roadmap targeting IA9100 for 2026, and its current public material confirms the revision is still in progress rather than finalized. At least one industry newsletter has separately reported a possible slip to mid-2027 — we’re noting that as a secondary, less-authoritative data point rather than treating it as equally confirmed. What’s consistently reported across sources is that IA9100 is expected to preserve the core clause structure while adding requirements in areas like information security, digital assurance, and supplier controls — not a ground-up rebuild. We’ll update this breakdown once a publication date and the actual clause text are confirmed, rather than guess at either now.

here can I verify a supplier’s AS9100 certification status by clause scope?

The IAQG OASIS Database is the authoritative source for verifying a supplier’s certification status, scope, and certifying body.


📥 Free Resources


Not Sure What to Do Next?

🔹 Still researching how AS9100 differs from what you already know? Start with AS9100 vs ISO 9001 for the strategic-level comparison before diving deeper into clause specifics.

🔹 Ready to start closing clause gaps before your next audit? Run the free AS9100 Rev D Gap Assessment Checklist against your current QMS this week.

🔹 Need the official standard to reference clause language directly? Get the current edition from ANSI Webstore — code CC2026 takes 5% off through the end of 2026.

🔹 Want your team trained on how auditors actually interpret these clauses? BSI Group’s AS9100 training courses cover clause-level interpretation for internal teams.

The Standards Navigator will update this breakdown when IA9100 is formally published and its transition requirements are established. Until then, this guide reflects the current AS9100 Rev D requirements.


Get Ahead of the Clause Gaps Auditors Actually Find

Shops can miss AS9100 audit gaps on the clauses they assumed were “basically the same as ISO 9001” — counterfeit parts prevention, production equipment control, FOD, ethics awareness — requirements that don’t appear in ISO 9001 in this form.

Organizations that treat these as genuinely new requirements build the process controls early and walk into Stage 2 with evidence already in hand. Organizations that treat AS9100 as an ISO 9001 add-on end up building those same controls under audit pressure, on a clock they don’t control.

The Standards Navigator tracks every AS9100 clause, sub-clause, and upcoming IA9100 change so you don’t have to reverse-engineer them from a nonconformance report.

👉 Get updates on AS9100 and the IA9100 transition
👉 Be first to access new aerospace gap assessment tools and clause references

Subscribe

* indicates required

Industrial Compliance. Clearly Explained.

Aerospace Supplier Compliance Standards: What Every Supplier Needs to Know in 2026

Aerospace suppliers face a layered compliance landscape — AS9100 certification is the baseline, but NADCAP accreditation, First Article Inspection, counterfeit parts controls, and customer flow-down requirements are equally enforced. This guide covers every standard and program aerospace primes audit against, with practical checklists and implementation guidance for quality managers.

The complete guide to AS9100, NADCAP, FAI, and the quality requirements aerospace primes actually enforce

Affiliate Disclosure: Some links in this article are affiliate links. If you purchase through them, The Standards Navigator may earn a commission at no additional cost to you.


The Aerospace Supply Chain Has a Short Memory for Second Chances

You get one bad audit. One missed First Article Inspection. One nonconformance that reaches the flight line. That is all it takes to lose an aerospace contract you spent years building.

Aerospace primes — Boeing, Lockheed Martin, Raytheon, Northrop Grumman — do not operate on goodwill. They operate on documented, auditable evidence that every supplier in their chain meets a defined set of compliance requirements. Those requirements are not flexible. They are not negotiable. And they are layered — meaning AS9100 certification alone does not cover everything your customer may require.

This aerospace supplier compliance standards guide breaks down the full compliance landscape: the standards, the programs, the certification requirements, and what aerospace suppliers actually get audited against on the shop floor.

If you are preparing for your first aerospace contract, adding an aerospace customer to an existing customer base, or trying to understand why your customer’s supplier quality team keeps asking for documentation you did not know you needed — this is where to start.

Before your Stage 1 audit, know exactly where your QMS stands. Run a clause-by-clause gap assessment now — before your registrar does. Download the AS9100 Rev D Gap Assessment Checklist →


In This Guide

  • The AS9100 Rev D standard and what it requires beyond ISO 9001
  • NADCAP accreditation — what it is, which processes require it, and when it applies
  • First Article Inspection (AS9102) — scope, deliverables, and common findings
  • Counterfeit parts prevention and AS5553/AS6174
  • FOD control requirements
  • Customer-specific flow-down requirements and how to manage them
  • How to verify a supplier’s certifications before awarding a contract


👉 Start Here — Top Resources for Aerospace Suppliers

Before you read further, these are the resources aerospace suppliers actually use:


AS9100 Rev D: The Foundation of Aerospace Quality

Quality engineers review aerospace supplier compliance standards inside a modern aircraft manufacturing facility with a fuselage assembly, machining equipment, and inspection stations
Quality personnel review engineering documentation on the aerospace shop floor while aircraft structures and manufacturing operations continue in the background.

AS9100 is the non-negotiable baseline. Every organization supplying parts, assemblies, or services to the aerospace and defense industry — whether you are a Tier 1, Tier 2, or Tier 3 supplier — is expected to hold AS9100 certification or demonstrate that your QMS meets equivalent requirements.

AS9100 Rev D is the current revision, published in 2016. It incorporates all of ISO 9001:2015 verbatim and adds aerospace-specific requirements on top of the quality management foundation. The IAQG — International Aerospace Quality Group — governs the standard and maintains the OASIS certification database.

What AS9100 Adds Beyond ISO 9001

The standard adds requirements that reflect the risk profile of aerospace manufacturing — where a single nonconformance can have catastrophic consequences. Key additions include:

AS9100 RequirementISO 9001 EquivalentWhy It Matters in Aerospace
Risk management (beyond Clause 6.1)Risk-based thinkingFormal risk identification, mitigation, and tracking for each program
Configuration managementNot requiredEnsures part revisions are controlled and traceable across the supply chain
First Article Inspection (FAI)Not requiredRequired verification that first production part meets all design requirements
Product/process change controlChange managementAny deviation from approved baseline requires documented approval
Counterfeit parts preventionNot requiredDocumented controls to prevent unapproved or fraudulent parts from entering the supply chain
FOD preventionNot requiredForeign Object Damage/Debris programs with documented procedures
Customer-designated special requirementsNot requiredFlow-down and implementation of prime contractor requirements
Key characteristicsNot requiredIdentification and control of dimensions or features with elevated risk

Most common finding: Organizations that are ISO 9001 certified assume the gap to AS9100 is small. It is not. The configuration management, FOD, and counterfeit parts requirements alone require building procedures that do not exist in a typical ISO 9001 QMS.

If you are already ISO 9001 certified, the AS9100 vs ISO 9001 comparison breaks down every additional requirement clause by clause.

For complete scope on what AS9100 certification involves, what it costs, and how long it takes, the What Is AS9100? pillar article covers the full picture.


NADCAP: Special Process Accreditation

NDT technician performing ultrasonic testing on an aerospace aluminum component using an ultrasonic probe and portable inspection instrument displaying waveform data.
An NDT technician conducts ultrasonic inspection on an aerospace component to verify material integrity and identify potential internal defects.

NADCAP is separate from AS9100 — and your customer will require both.

NADCAP — National Aerospace and Defense Contractors Accreditation Program — is a special process accreditation program managed by the Performance Review Institute (PRI). It applies to organizations performing specific high-risk manufacturing processes where process control is critical to product integrity.

AS9100 certifies your quality management system. NADCAP accredits specific processes within that system. A machined airframe component supplier may need AS9100 certification. If that same supplier performs heat treating, NDT, or chemical processing in-house, NADCAP accreditation is required for those processes — regardless of AS9100 status.

Processes That Require NADCAP Accreditation

Process CategoryExamples
Heat TreatingAnnealing, aging, stress relief, case hardening
Non-Destructive Testing (NDT)Ultrasonic, radiographic, penetrant, magnetic particle, eddy current
Chemical ProcessingAnodizing, plating, passivation, conversion coating
WeldingFusion welding per aerospace specifications
CoatingsThermal spray, paint (where specified by prime)
CompositesLay-up, cure, bonding operations
Electrical/Electronic ProcessingSoldering, conformal coating
Fluid Distribution SystemsTube bending, assembly

What NADCAP Audits Cover

NADCAP audits are process-specific and technically rigorous. Auditors evaluate process parameters, equipment qualification, operator qualification, traceability of materials, and conformance to applicable customer and industry specifications.

A NADCAP audit is not a QMS audit — it is a process performance audit. Findings are classified as Critical, Major, or Minor. Critical findings result in immediate suspension of work.

If you are a supplier: Do not assume your customer will accept your subcontractor’s NADCAP accreditation for flow-down purposes without reviewing the approved scope. NADCAP accreditation is scope-specific. Heat treating accreditation for aluminum alloys does not cover titanium heat treating.

If your aerospace customer has asked for NADCAP compliance in your supplier requirements — and you are not sure what processes in your facility are in scope — your AS9100 QMS needs a process risk review before your next customer audit. Download the AS9100 Rev D Gap Assessment Checklist →


First Article Inspection: AS9102

First Article Inspection is one of the most frequently cited sources of supplier nonconformances in aerospace.

AS9102 — Aerospace First Article Inspection Requirement — defines the methodology for verifying that the first production article (or first article after a significant change) meets all engineering, design, and manufacturing requirements. The standard is separate from AS9100 but is required by AS9100 Rev D Clause 8.1.3.

What FAI Covers

A complete FAI under AS9102 includes three forms:

FormTitleScope
Form 1Design DocumentationVerification that the correct drawing revision, specifications, and notes are captured
Form 2Product AccountabilityBill of materials, materials certification, and raw material traceability
Form 3Characteristic AccountabilityMeasurement of every dimension and characteristic on the drawing — not a sample

Form 3 is where most suppliers get tripped up. Every characteristic on the engineering drawing — not a selected subset — must be measured and documented. This includes tolerances, surface finishes, thread forms, and any geometric dimensioning and tolerancing (GD&T) callouts.

When FAI Is Required

FAI is not a one-time event. AS9102 specifies that a new or updated FAI is required when:

  • A new part number is introduced to production
  • A drawing or specification is revised (full or partial FAI, depending on the scope of change)
  • A manufacturing process, facility, or tooling is changed in a way that could affect form, fit, or function
  • Production has been inactive for more than two years

Most common finding: Suppliers treat FAI as a drawing check rather than a full measurement event. Partial FAIs submitted without Form 2 material traceability or without measuring all Form 3 characteristics are rejected by customer quality teams and result in production holds.


Counterfeit Parts Standards: AS5553 and AS6174

Counterfeit parts are a documented safety risk in aerospace. The FAA, DoD, and aerospace primes have all implemented mandatory controls. Your QMS must address them explicitly.

Two SAE standards define the requirements:

AS5553 — Fraudulent/Counterfeit Electronic Parts: Avoidance, Detection, Mitigation, and Disposition. Applies to electronic components — integrated circuits, semiconductors, connectors, and any electronics where counterfeit substitution is a risk.

AS6174 — Counterfeit Materiel: Avoidance, Detection, Mitigation, and Disposition. Broader scope covering raw materials, fasteners, and other non-electronic hardware.

What Your QMS Must Include

A compliant counterfeit parts program under AS9100 Rev D requires documented procedures covering:

  • Approved supplier lists (ASL): Purchasing only from authorized manufacturers, franchised distributors, or approved aftermarket sources
  • Receiving inspection: Risk-based inspection criteria for parts that cannot be sourced from authorized channels
  • Traceability: Certificate of conformance, test reports, and chain of custody documentation for all parts
  • Suspect/confirmed counterfeit parts: Quarantine, reporting, and disposition procedures — including mandatory reporting to GIDEP (Government-Industry Data Exchange Program) for defense contracts
  • Training: Evidence that personnel involved in procurement and receiving inspection are trained to identify suspect parts

If you are a manufacturer and not a distributor, the most critical element is your approved supplier list and purchasing controls — because your customer’s AS9100 audit will verify that you are buying from controlled sources.


FOD Control Requirements

Aerospace tool control shadow board displaying torque wrenches, calipers, safety wire pliers, borescope, and precision hand tools with one tracked tool removed.
A structured tool control system helps aerospace manufacturers maintain accountability, prevent FOD incidents, and ensure every tool is tracked throughout production.

Foreign Object Damage and Debris is a zero-tolerance issue in aerospace.

FOD — Foreign Object Damage or Debris — refers to any substance, material, or item that could potentially damage equipment or endanger personnel. A loose fastener in a fuel system. A rag left in an aircraft cavity. Metal chips in a precision assembly. In aerospace, these are not housekeeping issues — they are quality system failures.

AS9100 Rev D Clause 8.5.1 requires documented controls to prevent FOD throughout manufacturing, assembly, and test operations. Customer-specific FOD requirements are typically more detailed and flow down through purchase order terms.

Minimum FOD Program Elements

✅ Written FOD prevention procedure specific to your facility and processes
✅ Designated FOD critical areas with defined access controls
✅ Tool control program — shadow boards, tool counts, calibrated tool tracking
✅ Contamination controls during assembly and inspection operations
✅ FOD walks and documented area inspections on defined frequency
✅ Employee training and awareness records
✅ FOD incident reporting and corrective action process
✅ Customer notification procedure when FOD is suspected or confirmed

Most common finding: FOD programs exist as a procedure document but are not operationally active. Auditors look for evidence — completed FOD walk records, tool control logs, training records — not just a written procedure. The procedure without the records is a Major finding.


Customer Flow-Down Requirements

Your prime contractor’s requirements are your requirements.

This is the element that surprises suppliers who are new to aerospace. AS9100 certification means you have a compliant quality management system. It does not mean your prime contractor’s specific engineering, quality, and documentation requirements are automatically met. Those flow down — meaning they are passed from the prime to you through purchase order terms, quality clauses, and source control documentation.

Common Flow-Down Requirements

CategoryExamples
Quality planFirst Article requirements, inspection frequencies, statistical process control
EngineeringSpecification compliance, drawing revision control, DER approvals
MaterialMaterial certifications, approved material sources, trace requirements
ManufacturingApproved process specifications (e.g. BAC, SPE, DPS), NADCAP process approvals
DocumentationRecord retention requirements (typically 10+ years for flight-critical parts)
Access and oversightRight-to-access for customer source inspection, government source inspection
ReportingGIDEP reporting, escape reporting, timelines for nonconformance notification

Managing Flow-Down in Your QMS

Your QMS must have a documented process for:

  1. Reviewing purchase orders for quality clauses before accepting the order
  2. Translating customer requirements into internal work instructions and inspection plans
  3. Verifying that sub-tier suppliers (your suppliers) receive applicable flow-down requirements
  4. Maintaining records that demonstrate compliance with customer-specific requirements

If you are receiving flow-down requirements you do not understand: Your customer’s supplier quality team is your first contact. Do not guess. Documenting a misunderstood requirement incorrectly is worse than asking for clarification — because the audit finding will be a major nonconformance, not a simple misunderstanding.

If you are evaluating whether your quality system is ready for AS9100 certification, start with the How Much Does AS9100 Certification Cost? article for a complete breakdown of what certification actually involves.

BSI Group offers AS9100 training specifically designed for suppliers building compliant QMS documentation — covering the clause requirements and flow-down obligations that come with aerospace contracts.


How to Verify Supplier Certifications

Never take a supplier’s word for AS9100 certification. Verify it directly.

The IAQG OASIS Database is the official global registry for AS9100, AS9110, and AS9120 certifications. Every accredited certification is listed with scope, effective date, expiration date, and the certification body that issued it. If a supplier claims AS9100 certification and they are not in OASIS, the certification is not valid.

What to Verify in OASIS

  • Certification status: Active, suspended, or withdrawn
  • Scope of certification: Does it cover the specific product category or process your supplier is performing?
  • Expiration date: AS9100 certificates expire and require surveillance audits — a certificate that has not been renewed is not valid
  • Certification body: Is the CB accredited by a recognized accreditation body (ANAB, DAkkS, UKAS)?

For NADCAP accreditation verification, the PRI supplier database at pri-network.org lists all accredited suppliers by commodity and scope.

If you are a quality manager building or updating an approved supplier list for an aerospace program — your supplier evaluation process needs to include OASIS verification as a mandatory step before award and at each annual review.


Compliance Checklist for Aerospace Suppliers

Use this checklist to assess your current compliance posture before a customer audit or certification audit.

Quality Management System
✅ AS9100 Rev D certification current and active in OASIS
✅ QMS manual and procedures documented and controlled
✅ Internal audit program covers all AS9100 clauses — not just ISO 9001 requirements
✅ Management review records demonstrate review of aerospace-specific metrics

First Article Inspection
✅ FAI procedure documented per AS9102
✅ Form 1, Form 2, and Form 3 completed for all active part numbers
✅ FAI triggers defined — changes that require new or partial FAI
✅ FAI records retained and retrievable

Counterfeit Parts
✅ Counterfeit parts prevention procedure in place
✅ Approved supplier list (ASL) current and controls defined
✅ Receiving inspection criteria address suspect parts
✅ Personnel training records current

FOD
✅ FOD prevention procedure active and specific to your facility
✅ FOD walk and inspection records maintained on required frequency
✅ Tool control program in place with records
✅ Employee training documented

Flow-Down
✅ Purchase order review process in place
✅ Customer quality clauses translated to internal requirements
✅ Sub-tier flow-down process documented and verified
✅ Record retention meets customer requirements (typically 10+ years)

NADCAP (if applicable)
✅ All in-scope special processes identified
✅ NADCAP accreditation current for each process
✅ Scope of accreditation matches actual work performed
✅ Sub-tier NADCAP requirements verified and documented


FAQ

What is the difference between AS9100 and NADCAP?

AS9100 Rev D is a quality management system standard that certifies your organization’s overall quality processes — planning, documentation, corrective action, customer satisfaction, and so on. NADCAP is a special process accreditation that applies to specific manufacturing processes such as heat treating, NDT, chemical processing, and welding. AS9100 certification is a QMS-level requirement. NADCAP is a process-level requirement. Aerospace suppliers performing special processes are typically required to hold both.

Do I need AS9100 certification to supply aerospace parts?

In most cases, yes — if you are a direct supplier (Tier 1 or Tier 2) to an aerospace prime or defense contractor. Some lower-tier commodity suppliers may not be required to hold AS9100 certification, but customer flow-down requirements and purchase order quality clauses will define the specific requirement. Review your customer’s supplier quality requirements before assuming certification is not needed.

How do I know if my process requires NADCAP accreditation?

Review your customer’s purchase order quality clauses and their approved supplier requirements document. Primes typically maintain a list of processes that require NADCAP accreditation for their programs. If you perform heat treating, NDT, chemical processing, or welding on aerospace parts and your customer has not specified NADCAP — ask. The absence of a requirement on the PO does not always mean the requirement does not exist.

What is a First Article Inspection and when is it required?

A First Article Inspection (FAI) is a formal verification process, defined by AS9102, that the first production article meets all design and engineering requirements. It is required for new part introductions, after drawing or specification revisions, after significant manufacturing process or tooling changes, and after production gaps of two or more years. A complete FAI requires documentation on three forms covering design documents, material traceability, and measurement of every drawing characteristic.

How long does AS9100 certification take?

For an organization with no existing quality management system, the implementation and certification process typically takes 9 to 18 months. Organizations already certified to ISO 9001 can typically close the gap to AS9100 in 6 to 12 months, depending on the number of additional requirements that need to be built out. The How Much Does AS9100 Certification Cost? article covers timelines and costs in detail.

What is the OASIS database and how do I use it?

OASIS — Online Aerospace Supplier Information System — is the IAQG-maintained database of all AS9100, AS9110, and AS9120 certifications worldwide. You can search by organization name, location, or CAGE code to verify a supplier’s certification status, scope, expiration date, and issuing certification body. Access it at oasis.sae.org. Verifying supplier certifications in OASIS should be a standard step in your approved supplier list maintenance process.

What are customer flow-down requirements in aerospace?

Flow-down requirements are the specific quality, engineering, documentation, and process requirements that a prime contractor passes down to their supply chain through purchase order terms and quality clauses. They are legally binding once accepted on a PO. Common examples include FAI requirements, material certification requirements, NADCAP requirements for special processes, record retention periods, and customer source inspection rights. Your QMS must have a documented process for reviewing, implementing, and flowing these requirements to your own sub-tier suppliers.

Can I use my ISO 9001 certification for aerospace customers temporarily while pursuing AS9100?

In most cases, no. ISO 9001 certification does not meet AS9100 requirements. Some customers may grant a temporary waiver for lower-risk commodity suppliers, but for any direct aerospace supply involving flight-critical parts or assemblies, AS9100 certification is typically required before production can begin. Discuss your timeline with your customer’s supplier quality team — do not assume a waiver will be granted.


📥 Free Resources

AS9100 Rev D Gap Assessment Checklist — 74-item clause-by-clause checklist for aerospace suppliers assessing their QMS before certification. Covers every AS9100-specific requirement beyond ISO 9001.

ISO 9001 Roadmap — Step-by-step implementation guide for manufacturers building or improving a quality management system. Useful as a foundation before layering AS9100 requirements.

Manufacturing Compliance Checklist — Practical compliance reference covering key ISO, OSHA, and quality requirements for production environments.

Supplier Quality Checklist — Evaluation tool for assessing supplier quality controls and flow-down compliance before audits or new contracts.

ISO 13485 Gap Assessment Checklist — Free checklist for medical device manufacturers assessing their QMS against ISO 13485 requirements.


Not Sure What to Do Next?

🔹 If you are new to aerospace and need to understand AS9100 from the ground up — start with What Is AS9100? for a complete overview of the standard, certification process, and supply chain requirements.

🔹 If you are ready to buy the AS9100 Rev D standard — purchase the official document through the ANSI Webstore. Use code CC2026 for 5% off through December 31, 2026. The standard is available in digital and print formats and ships internationally.

🔹 If you need AS9100 training for your team or are selecting a certification bodyBSI Group offers the full range of AS9100 courses from awareness through lead auditor, and serves as both a training provider and accredited certification body.

Aerospace compliance is not a project with a finish line. Certification is the beginning. The organizations that hold their approvals and grow within the supply chain are the ones that build compliance into operations — not just into audit prep.

The Standards Navigator covers the full aerospace compliance landscape, from AS9100 certification requirements to NADCAP process accreditation and FAI methodology. Use the resources above to make your next audit a confirmation of what you already know — not a discovery of what you missed.


Stay Ahead of Aerospace Compliance Changes

Losing an aerospace approval because a standard revision or customer requirement changed while you were focused on production is the most preventable kind of failure. Most organizations that fall behind on compliance don’t miss the requirement — they miss the update.

The suppliers who keep their approvals long-term are the ones who treat compliance information the same way they treat production scheduling: as an ongoing operational discipline, not a one-time project.

The Standards Navigator covers AS9100, NADCAP, FAI, and the full aerospace supplier compliance landscape — explained in plain language for quality managers and operations teams who need to act on the information, not just read it.

👉 Get updates when new aerospace compliance articles are published
👉 Be first to access new AS9100 implementation resources and checklists

Subscribe below to stay ahead.

Subscribe

* indicates required

The Standards Navigator — Industrial Compliance. Clearly Explained.