If your organization manufactures components or assemblies for aircraft, spacecraft, or defense platforms, your customers will require AS9100 certification. This guide explains what AS9100 requires, where it goes beyond ISO 9001, the certification process, and the specific quality management system elements you need to build or strengthen to achieve and maintain compliance.

What is AS9100 and who publishes it?

AS9100 is published by the International Aerospace Quality Group (IAQG), a consortium of aerospace companies from the Americas, Europe, and Asia-Pacific. The standard is formally designated AS9100D:2016 by SAE International, with the “D” indicating Revision D, which was released in September 2016 to align with the ISO 9001:2015 structure.

AS9100 applies to organizations throughout the aerospace supply chain — OEMs, Tier 1 through Tier N suppliers, MRO organizations, and distributors of aviation hardware. As the IAQG notes, the standard specifies additional requirements beyond ISO 9001 to address the specific risks of aviation, space, and defense manufacturing, where quality failures can have life-safety consequences and where supply chains span multiple tiers across multiple continents.

AS9100 vs. ISO 9001: what’s different

AS9100 Rev D incorporates the full text of ISO 9001:2015 and adds approximately 100 additional requirements in shaded text throughout the document. The additions address concerns specific to aerospace, including:

Product and process safety

AS9100 explicitly requires that organizations identify and document the safety aspects of their products and manufacturing processes. Safety planning must consider not just product performance but the consequences of product failure in service. This requires formal risk assessments linked to product design and manufacturing processes — not just quality inspections at the end of the line.

Configuration management

Aerospace products are highly configuration-sensitive. A component that meets specification for one aircraft type may be out of tolerance for another. AS9100 requires documented configuration management processes that control and record the exact configuration of every product delivered — including which drawings, specifications, and approved variations apply.

Configuration management is directly connected to Process Change Notification requirements: any change to a product design or manufacturing process that affects form, fit, or function must be documented, reviewed, and communicated to affected customers before implementation.

First article inspection

AS9100 requires first article inspection (FAI) for new parts and for parts that have undergone design or process changes. FAI is a formal documented verification that the first production part conforms to all engineering documentation requirements. The FAI process and records must be maintained and available for customer and regulatory audit.

Key characteristics

Key characteristics are product or process parameters where variation significantly impacts product safety, fit, performance, or quality. AS9100 requires organizations to identify key characteristics, establish process controls specifically for them, and demonstrate that the manufacturing process is capable of consistently producing products within the key characteristic tolerances.

Counterfeit part prevention

The aerospace supply chain has a documented problem with counterfeit and fraudulent parts. AS9100 requires organizations to have documented processes for detecting and preventing the introduction of counterfeit or suspected unapproved parts into products. This includes supplier qualification requirements specific to sourcing and procurement risk.

Customer-directed sources

In aerospace, customers frequently specify which suppliers or sub-tier suppliers an organization must use for specific materials or components. AS9100 requires documented processes for managing these customer-directed source situations, including communication of quality requirements down the supply chain and verification that customer-directed sources meet applicable quality requirements.

The structure of AS9100 Rev D

AS9100 Rev D follows the ISO 9001:2015 High Level Structure (HLS), which means it uses the same clause numbering as ISO 9001. This makes it easier for organizations that already hold ISO 9001 certification to identify the AS9100-specific additions. The 10 clauses are:

• Clause 1: Scope
• Clause 2: Normative references
• Clause 3: Terms and definitions
• Clause 4: Context of the organization
• Clause 5: Leadership
• Clause 6: Planning
• Clause 7: Support
• Clause 8: Operation
• Clause 9: Performance evaluation
• Clause 10: Improvement

Clause 8 (Operation) contains the greatest concentration of aerospace-specific additions, covering product realization, design and development, production and service provision, and the supply chain controls described above.

Risk management in AS9100

AS9100 Rev D includes two separate risk management clauses. Clause 6.1 requires organizations to address risks and opportunities as part of quality management system planning. Clause 8.1.1 requires operational risk management — a systematic approach to identifying and mitigating risks throughout product realization.

As NSF’s aerospace team explains, the Clause 8.1.1 risk management requirement is more demanding than ISO 9001’s risk approach. It requires documented risk identification, analysis, and treatment plans for the specific risks of each product or program — not just a general organizational risk register.

Connecting the Risk Register to product realization processes, and making risk treatment actions trackable through the quality system, is an area where organizations frequently struggle during initial AS9100 implementation.

Supplier quality management under AS9100

The aerospace supply chain is one of the most complex manufacturing supply chains in any industry. AS9100 places significant requirements on how organizations manage their suppliers:

Suppliers must be evaluated and selected based on their ability to meet requirements. The evaluation must be documented and periodically reviewed. Suppliers delivering product or services that could affect safety must meet specific quality requirements communicated at the time of order or in a long-term quality agreement.

Supplier Quality Management requirements include flow-down of customer and regulatory requirements to sub-tier suppliers, supplier performance monitoring, and — for critical suppliers — on-site qualification audits. Organizations must be able to demonstrate that they know what quality system their suppliers operate under and that it is appropriate for the products or services supplied.

Supplier Corrective Action Requests (SCARs) are a standard mechanism for managing supplier quality issues. When a supplier delivers nonconforming product or a supplier quality issue is identified, a formal SCAR process requires the supplier to investigate the root cause, implement corrective actions, and provide documented evidence of effectiveness.

Nonconforming product management

AS9100 includes specific requirements for nonconforming product that go beyond ISO 9001. Nonconforming parts must be clearly identified, segregated, and dispositioned through a formal process. In aerospace, the disposition options are use-as-is, repair, rework, scrap, or return to supplier — and each must be documented with the engineering or quality authority making the disposition decision.

Use-as-is disposition for a nonconforming part requires documented justification that the deviation does not affect form, fit, or function. Customer concession requests — where customer approval is required for use-as-is disposition — must be processed and documented before the part is used. The Deviation Report and concession management process must be fully documented and auditable.

Internal audit requirements

AS9100 requires a planned internal audit program that covers all processes, products, and areas of the quality system at defined intervals. The audit program must address the relative risks and importance of different processes — higher-risk processes should be audited more frequently. Audit findings must be documented, communicated to relevant management, and corrective actions must be tracked to closure.

The Process Audit approach — auditing actual process performance against defined process criteria, rather than simply checking documentation compliance — is increasingly standard in aerospace quality. Internal auditors need both the QMS knowledge and the technical process knowledge to conduct effective process audits.

How to achieve AS9100 certification

AS9100 certification is granted by an accredited certification body (CB) following a successful third-party audit. The certification body must be accredited by an IAQG-recognized accreditation body, and the auditors must have aerospace-specific training and experience.

The certification process typically follows these stages:

First, conduct a gap analysis against AS9100 Rev D requirements. Identify which requirements your current QMS addresses, which need strengthening, and which are new requirements you have not yet implemented.

Second, implement and document all required QMS elements. This typically takes 6-18 months for organizations starting from an ISO 9001 baseline, and longer for organizations building from scratch.

Third, operate the QMS for a sufficient period to generate evidence. You need documented internal audits, management reviews, corrective actions, and operational records before a certification audit will be productive.

Fourth, engage a certification body for a Stage 1 (document review) audit followed by a Stage 2 (on-site) audit. The Stage 1 review checks your documentation against requirements. The Stage 2 audit verifies implementation through interviews, observation, and records review.

Certification is valid for three years, with annual surveillance audits and a recertification audit at the three-year mark.

Common AS9100 implementation challenges

Organizations implementing AS9100 for the first time consistently encounter several challenges:

Configuration management documentation is often the highest-effort area. Many manufacturers track configuration informally through tribal knowledge and drawing revision stamps. Building a formal configuration management system that meets the AS9100 documentation requirements requires a significant data organization effort.

Risk management at the product and process level is frequently underdeveloped. The AS9100 Clause 8.1.1 requirement for operational risk management is more specific than most organizations’ existing risk processes, and connecting risk assessments to actual manufacturing process controls takes meaningful quality engineering work.

Supply chain flow-down documentation is often inconsistent. Organizations can struggle to demonstrate that quality requirements have been formally communicated to all relevant sub-tier suppliers — particularly in complex programs where hundreds of suppliers may be involved.

Key characteristics identification and process capability demonstration requires manufacturing engineering and quality engineering to collaborate in ways that many organizations have not formalized.

How a QMS platform supports AS9100

AS9100 compliance across a complex aerospace manufacturing operation requires a quality management system that can manage documents, track nonconformances, manage supplier quality, run internal audits, and provide the traceability and audit trail that aerospace customers and certifying bodies expect.

Cloudtheapp’s QMS platform includes 60+ applications covering document control, nonconforming material management, Supplier Quality Management, CAPA, internal audits, risk management, and training management — all in one no-code, configurable platform. For aerospace manufacturers implementing AS9100, configuring the platform to your specific processes is faster than building a custom quality system from scratch, and the documented configuration management approach built into the platform supports the AS9100 configuration management requirement from day one.

To see how Cloudtheapp supports aerospace quality management, request a demo.

Summary

AS9100 Rev D is the foundational quality management standard for the aerospace, space, and defense supply chain. It incorporates ISO 9001:2015 and adds specific requirements for product safety, configuration management, first article inspection, key characteristics, counterfeit part prevention, and supplier flow-down that reflect the unique risks of aviation and defense manufacturing.

Organizations pursuing AS9100 certification benefit most from treating it as a quality infrastructure investment rather than a certification exercise. A well-implemented AS9100 QMS creates the documented, traceable quality processes that aerospace customers require — and that also reduce the internal costs of nonconformances, rework, and customer escapes that erode margins in precision manufacturing.

This post created by and appeared first on Cloudtheapp