AS9100 Quality Compliance for Aerospace

AS9100 is the aerospace industry's primary quality management system (QMS) standard, specifying requirements for organizations that design, develop, and manufacture aviation, space, and defense products. Published by SAE International and the International Aerospace Quality Group (IAQG), AS9100 builds on ISO 9001 requirements while layering approximately 100 aerospace-specific additions covering risk management, configuration control, and first-article inspection. Certification to AS9100 is a contractual prerequisite for suppliers participating in most commercial and defense aerospace supply chains.

Definition and scope

AS9100 Revision D, released in 2016 by IAQG and SAE International, defines the QMS requirements applicable to any organization in the aviation, space, and defense sector — from raw material processors to final aircraft assemblers. The standard is codified as AS9100D in North America, EN9100:2018 in Europe, and JISQ9100:2016 in Japan; all three are technically equivalent and managed under the IAQG's International Aerospace Quality Group framework.

Scope extends across the full product lifecycle: design and development, production, installation, and post-delivery support. Organizations operating under contracts with the U.S. Department of Defense (DoD) or NASA frequently face AS9100 certification as a baseline supplier qualification requirement, supplemented by additional flow-down clauses from prime contractors such as Boeing or Lockheed Martin.

The standard applies to four major organization types:

  1. Design and development organizations — entities that hold type certificates or design authority
  2. Manufacturing organizations — facilities producing parts, assemblies, or finished articles
  3. Maintenance, repair, and overhaul (MRO) facilities — organizations providing continued airworthiness services
  4. Distribution and supply chain entities — stockists and brokers handling aerospace-grade material

The Federal Aviation Administration (FAA) references industry-developed quality standards through its Production Approval Holder (PAH) oversight framework under 14 CFR Part 21, making AS9100-aligned quality systems directly relevant to regulatory compliance, though FAA certification and AS9100 certification are legally distinct processes.

How it works

AS9100D follows the same high-level structure (HLS) as ISO 9001:2015, organized into ten clauses. The aerospace-specific requirements are embedded within and alongside the ISO 9001 base text, identifiable by bold or italicized formatting in the published standard.

The certification process follows a defined sequence:

  1. Gap analysis — the organization benchmarks its existing QMS against AS9100D clause requirements, identifying nonconforming processes and documentation gaps
  2. Implementation — corrective actions close identified gaps; documentation requirements are fulfilled, including a quality manual, procedures, and records
  3. Internal audit — a full-cycle internal audit confirms system readiness before external assessment; see internal audit procedures
  4. Stage 1 audit — the accredited certification body (CB) reviews documented systems for completeness and adequacy
  5. Stage 2 audit — on-site assessment of implemented processes against all AS9100D clauses
  6. Certification decision — the CB issues a certificate valid for 3 years, with annual surveillance audits required in years 1 and 2
  7. Recertification audit — a full reassessment occurs at the 3-year interval

Certification bodies must be accredited by a recognized accreditation body — in the United States, typically ANAB (ANSI National Accreditation Board) or A2LA — and must be verified in the IAQG's Online Aerospace Supplier Information System (OASIS) database. OASIS is the authoritative public registry where prime contractors and OEMs verify supplier certification status.

AS9100D places heightened emphasis on operational risk management (Clause 8.1.1), product and process risk assessment, and the use of a dedicated risk register. Configuration management (Clause 8.1.3) requires documented control of design baselines, engineering changes, and associated records.

Common scenarios

Supplier qualification represents the most frequent driver for AS9100 certification. Prime contractors commonly require Tier 2 and Tier 3 suppliers to hold a valid AS9100D certificate as a condition of approved vendor list (AVL) inclusion.

Defense contract flow-down occurs when DoD prime contracts incorporate Defense Federal Acquisition Regulation Supplement (DFARS) clauses that reference quality system requirements aligned with AS9100 — making certification functionally mandatory for subcontractors even when not explicitly stated in contract language.

FAA Production Approval situations arise when a Part 21 Production Approval Holder uses AS9100D as the documented quality system underpinning its FAA-accepted Quality Management System. While FAA acceptance is separate from IAQG certification, the two systems share substantial structural overlap.

Space and satellite programs administered through NASA or commercial launch providers apply AS9100D alongside program-specific quality requirements such as NASA-STD-8739 series standards for workmanship.

Decision boundaries

AS9100 vs. AS9110 vs. AS9120 represents the primary classification boundary within the IAQG standards family:

An organization that both manufactures and distributes aerospace parts may require dual certification scopes or a combined audit addressing both standards.

The boundary between AS9100 certification and FAA regulatory approval requires precise understanding. AS9100 certification is a private-sector, customer-driven requirement managed through the IAQG/OASIS system. FAA Production Approval is a federal regulatory authorization issued under 14 CFR Part 21. Neither automatically confers the other, though an AS9100-compliant QMS can form the documented basis for an FAA Quality Management System as described in FAA Order 8120.22.

Organizations subject to International Traffic in Arms Regulations (ITAR) or Export Administration Regulations (EAR) must manage AS9100 audit access carefully — disclosure of controlled technical data to foreign-national auditors or certification body personnel requires specific authorization, a compliance boundary that intersects directly with supplier qualification protocols and regulatory framework obligations.

References