If you work in aerospace procurement, you’ve seen AS9100D on countless supplier capability statements. The certification has become something of a table-stakes requirement—a filter applied early in the supplier qualification process. But what does it actually mean? What does an AS9100D-certified machine shop have to do differently than a shop without the certification? And why should that matter to the buyer sourcing precision components for a flight-critical program?
AS9100D certification isn’t just a quality credential. For procurement and engineering teams sourcing components for aerospace, defense, and electronics programs, it shortens supplier vetting, lowers program risk, and helps avoid the kind of cost that doesn’t show up on a purchase order: failed qualifications, field retrofits, and schedule delays traced back to an unvetted supplier.
This article answers those questions directly, using the concrete requirements of the standard itself. We are not writing about AS9100D in the abstract; as a facility that holds this certification directly, we live it every day.
Explore our AS9100D-certified CNC machining services with full quality documentation →
1. What AS9100D Actually Is (And What It Isn’t)
AS9100D, formally titled “Quality Management Systems – Requirements for Aviation, Space, and Defense Organizations,” is the primary quality standard for the global aerospace supply chain. It incorporates the full text of ISO 9001:2015 and adds a substantial set of sector-specific requirements that address the unique risk profile of aviation and defense manufacturing.
The “D” designates the current revision, released in 2016. AS9100D changes from the previous Rev C included strengthened requirements around risk management, operational planning, and the integration of customer and regulatory requirements throughout the manufacturing process. Suppliers certified to earlier revisions are not considered current. When evaluating an AS9100D certified supplier, confirm the revision and that the certification scope covers the component types and processes relevant to your program.
The Difference Between ISO 9001 and AS9100D
This distinction matters. ISO 9001 vs AS9100D isn’t just a version question; it’s a scope question. The AS9100 series adds over 100 requirements to the ISO 9001 standard that apply specifically to the aerospace industry.
| Requirement Area | ISO 9001:2015 | AS9100D |
|---|---|---|
| Risk Management | Risk-based thinking encouraged; formal process not required | Formal, documented operational risk management mandatory |
| Product Safety | Not specifically addressed | Dedicated requirements for product safety throughout lifecycle |
| Counterfeit Parts Prevention | Not addressed | Mandatory processes to prevent, detect, and control counterfeit parts |
| Configuration Management | Basic document control | Rigorous control of engineering changes, revisions, and approvals |
| Traceability | General identification and traceability | Full supply chain traceability from raw material to delivery, including material certifications, process records, and inspection data |
| First Article Inspection | Not required | Mandatory FAI per AS9102 on new or changed parts; verifies the entire production process |
| Supplier Management | Basic supplier evaluation | Explicit flow-down of requirements to sub-tier suppliers |
| Human Factors | Not specifically addressed | Consideration of human factors in nonconformity analysis and corrective action |
| Ethical Behavior | Not specifically addressed | Awareness of ethical behavior and its contribution to product safety |
This gap—the additional 100+ requirements—is the whole ballgame for aerospace buyers. A shop with ISO 9001 alone has a quality system that may be adequate for commercial work. A shop with AS9100D has a quality system built specifically to address the risks inherent in aerospace manufacturing, where a single out-of-spec component can ground an aircraft or jeopardize a multi-million-dollar program.
Learn more about our quality certifications and what they mean for your parts →
2. Risk Management: Not a Concept—A Documented System
Under ISO 9001:2015, risk-based thinking is a concept. The standard encourages organizations to consider risk in planning and operations, but it does not mandate a formal, documented risk management process. ISO 9001 states that risk-based thinking is essential, but literally interpreted, the requirement could be minimal—organizations must address risks and opportunities “proportionate to their impacts” on the ability to deliver products and services.
AS9100D takes a fundamentally different approach. It makes risk management a requirement of the standard relative to operational processes. The standard defines risk as “a combination of severity and likelihood of having a potential negative impact to processes, products, services, customer, or end users.” This goes beyond ISO’s intent by making formal risk assessment mandatory for aerospace manufacturing operations.
What This Means in Daily Operations
AS9100D further defines risks to include those relative to product safety and counterfeit parts, enhanced product verification requirements, and driving risk identification and actions into management review as both an input and an output.
In practice, this means that before any new process, material, or drawing change is implemented in an AS9100D-certified shop, risks are assessed using formal methods, documented, and controlled. For the aerospace buyer, this translates to:
- Fewer production surprises. Risks that could cause non-conformance are identified and mitigated before they become quality escapes.
- Documented decision-making. Every process change has a risk assessment trail that can be reviewed during audits.
- Continuous management attention. Risk is reviewed at management level, not just on the shop floor.
Research shows that AS9100-certified suppliers deliver fifty to eighty percent reductions in quality issues compared to non-certified manufacturers. For mission-critical aerospace components, that’s the difference between reliable supply and program risk.
3. Traceability: From Raw Material to Finished Part
Traceability is the thread that runs through the entire AS9100D standard. Every component must be traceable from the finished part back through inspection records, machining records, and raw material certifications. AS9100D requires suppliers to demonstrate documented controls for full supply chain traceability from raw material to delivery, with corrective action processes that exist and have been validated.
This traceability requirement extends well beyond what is typical in commercial machining. Each lot of raw material must carry mill certifications that verify chemical composition and mechanical properties.
What the Traceability Chain Covers
For a typical aerospace CNC part, the traceability chain at an AS9100D-certified facility includes:
- Raw material certification. Mill test reports with heat numbers, chemical analysis, and mechanical properties. Material certifications must reference actual mill heat numbers and be signed and verified.
- Machining records. Documented information sufficient to demonstrate that processes have been carried out as planned—which program, which machine, which operator, which tools.
- In-process inspection data. Measurements taken during production at defined intervals, with recorded values linked to specific parts or batches.
- Final inspection records. CMM reports, surface finish verification, and functional test results, all traceable to calibrated equipment.
- Process certifications. For any special processes—heat treatment, surface finishing, plating, non-destructive testing—documentation that the process was performed by qualified operators to approved specifications.
- Unique identification. Every part or batch receives unique identification linked to its documentation package. This enables forward traceability (from a raw material lot to every part made from it) and backward traceability (from any part to its complete manufacturing history).
Why This Matters for the Buyer
If a material defect is discovered in service, the traceability chain enables the operator to identify and quarantine every affected part within hours rather than weeks. For long-life airframes where parts remain in service for decades, this documentation is not optional—it is a regulatory requirement.
The digital thread mandates now being required by major OEMs like Boeing and Airbus take this further: they require continuous, machine-readable data trails that connect raw material certification through manufacturing, inspection, and assembly. Boeing’s requirements for the 777X and 737 MAX supply chain define five levels of digital thread maturity, with most new contracts requiring Level 3 or higher—meaning automated data capture with structured formats and bidirectional traceability.
An AS9100D-certified supplier already operates the traceability infrastructure that makes digital thread compliance achievable, because the fundamental requirement—linking every part to its complete manufacturing history—is built into the certification itself.

4. Supply Chain Control: Certification That Extends Beyond Your Supplier
AS9100D requires more than just internal quality control. It mandates that certified organizations apply appropriate controls to their direct and sub-tier external providers, ensuring consistency throughout the entire supply chain.
This means that an AS9100D-certified CNC shop must:
- Evaluate and select suppliers based on their ability to meet aerospace requirements.
- Flow down applicable quality requirements to sub-tier suppliers—including raw material providers, heat treaters, surface finishers, and testing laboratories.
- Monitor supplier performance and take corrective action when suppliers fail to meet requirements.
- Maintain a documented supplier approval process that is subject to both internal and external audit.
- Implement controls to prevent the purchase of counterfeit or suspect/unapproved products.
What This Prevents
In aerospace supply chains, quality risks frequently originate not with the primary contractor, but with sub-tier suppliers whose processes may not be visible to the end customer. A counterfeit bolt brought down a commercial aircraft—the industry doesn’t forget. AS9100D’s supply chain requirements are designed to prevent precisely this scenario by ensuring that quality accountability extends through every tier of the supply chain.
For the aerospace buyer, this means that when you source from an AS9100D-certified supplier, you’re not just vetting one company—you’re sourcing from a supply chain where every link is subject to documented quality controls.
5. First Article Inspection: Proving the Process Before Production
One of the most operationally significant requirements in AS9100D is the mandate for First Article Inspection (FAI) on new or changed parts. FAI is not just a dimensional inspection of the first part off the machine—it is a systematic review that verifies the entire production process is capable of producing conforming parts repeatedly.
What a Complete FAI Includes
A complete FAI at an AS9100D-certified facility requires a full balloon-referenced dimensional report against the engineering drawing, material certifications with chemistry and mechanical properties, process certifications for any special processes (heat treat, surface treatment, plating), functional test results where applicable, and a review of the production documentation package. FAI reports are produced to AS9102 format or to customer-specific formats as required.
FAI is triggered not just for new part numbers, but for any change that could affect product conformity: a design change to an existing part, a change in manufacturing source or process, new or modified tooling or fixturing, a change in inspection method, or a change in production equipment. This ensures that the production process is validated after every significant change, not just when a part is first introduced.
Why This Protects the Aerospace Buyer
The FAI requirement provides important protection for aerospace buyers. It ensures that the supplier has not simply lucked into a conforming first piece, but has a controlled and documented process capable of producing conforming parts throughout the production run. For buyers who have experienced the unpleasant surprise of receiving production parts that deviate from approved first articles, AS9100D’s FAI requirements provide meaningful assurance.
6. Nonconformance Management: What Happens When Something Goes Wrong
No production process is perfect. Tooling wears, setups drift, and material batches vary. The difference between a certified supplier and an uncertified one is not that the certified supplier never produces a nonconforming part. It is what happens when a nonconformance is discovered.
The AS9100D Nonconformance Framework
When a nonconformity occurs, the organization must evaluate the need for action to eliminate the cause of the nonconformity, in order that it does not recur. This goes beyond simply reworking or scrapping the affected part—it requires documented root cause analysis and corrective action to prevent recurrence.
The standard adds two steps beyond ISO 9001 requirements: (g) requiring the organization to flow down corrective action requirements to external providers when it is determined that the external provider is responsible for the nonconformity, and (h) requiring specific actions to be taken when timely or effective corrective action is not achieved. This closed-loop approach ensures that nonconformance management extends throughout the supply chain, not just within the certified organization’s own walls.
The Critical Difference for Aerospace Buyers
In a non-certified shop, a nonconforming part might be scrapped and remade without any systematic investigation of why it occurred—setting the stage for the same problem to recur on a future order. Under AS9100D, every nonconformance must be evaluated, documented, and addressed at the root cause level.
The standard also requires consideration of human factors in nonconformity analysis—evaluating whether training, communication, fatigue, or procedural complexity contributed to the failure—and implementing corrective actions that address those human factors to prevent recurrence.
7. Counterfeit Parts Prevention: Protecting the Supply Chain
One of the most significant additions in AS9100D is the requirement for organizations to establish processes to prevent the use of counterfeit parts. This reflects a growing concern within the aerospace industry about parts that are not what they claim to be—whether through material substitution, falsified certifications, or fraudulent re-marking of used components as new.
What AS9100D Requires
The standard mandates that organizations plan, implement, and control processes for the prevention of counterfeit or suspect counterfeit part use. Identified counterfeit parts must be conspicuously marked, positively controlled, and physically rendered unusable—not simply returned to the supplier where they could re-enter the supply chain.
Counterfeit risk in aerospace takes multiple forms: material substitution (lower-grade alloys substituted for certified aerospace materials), improper heat treatment that leaves parts with incorrect mechanical properties, surface or coating fraud (non-compliant plating that passes visual inspection but fails in service), altered or forged markings on serial numbers and datasheets, and reuse of recovered flight hardware sold as new without refurbishment or requalification.
How Certification Mitigates Counterfeit Risk
AS9100D certification addresses counterfeit risk at multiple levels: documented material traceability from certified mills makes it difficult to introduce counterfeit materials into the supply chain without detection; supplier qualification and monitoring processes ensure that materials are sourced from approved providers with verified quality records; incoming inspection requirements (including certificates of analysis and, where specified, material verification testing) catch non-conforming materials before they enter production; and the requirement to conspicuously mark and physically render unusable any identified counterfeit parts prevents them from re-entering the supply chain. These controls together establish a counterfeit parts avoidance, detection, and disposition program that satisfies both AS9100D and the related requirements of AS5553.
8. Configuration Management: Controlling Every Engineering Change
In aerospace manufacturing, engineering changes must be tracked, approved, and implemented through controlled processes to prevent unauthorized deviations. Configuration management ensures that every part reflects the correct engineering revision, with no unauthorized substitutions of materials, processes, or dimensions.
Configuration management is woven throughout AS9100D: organizations must maintain documented processes for managing changes to product design and production processes, revision control must extend to all documents that define the product—drawings, specifications, work instructions, material certifications—and customer approval must be obtained for any changes that affect fit, form, or function.
For the aerospace buyer, this means confidence that the part received matches the revision approved, with no undisclosed process or material changes that could affect performance or certification. In an industry where an unapproved process change can invalidate a type certificate, this control is essential.
9. What This Means for Your Parts
The practical implications for engineers and procurement managers evaluating CNC suppliers are straightforward:
For engineers:
- Specify your documentation requirements at RFQ stage. If you need FAI reports per AS9102, material certifications, or CMM inspection data, request this when soliciting quotes. An AS9100D-certified supplier can provide these as standard.
- Understand that AS9100D certification means the supplier’s measurement equipment is calibrated at defined intervals against traceable standards. The CMM report you receive is backed by a measurement system with documented accuracy.
- When a supplier holds AS9100D certification directly, the entire quality system operates under one auditable framework. There is no gap between the supplier of record and the manufacturer.
For procurement managers:
- Verify that the certification is current and held directly by the manufacturing facility—not through partners or subcontractors. A supplier whose certificate is expired or whose certification scope does not cover the processes your parts require is not an AS9100D-compliant source for your program.
- An AS9100D certificate is evidence that an accredited third-party registrar has verified compliance with all applicable clauses of the standard—not just the ones that are easy to document.
- AS9100D certification provides stronger supply chain confidence, increased quality assurance, reduced risk of defects or non-conformance, and compliance with aerospace and defense procurement standards.
How Baosheng Meets AS9100D Requirements
At Baosheng Industry, AS9100D certification is held directly by our facility—not through partners or subcontractors. Our quality management system is audited annually by an accredited certification body, and we maintain full compliance with all AS9100D requirements, including:
- Risk management: Formal, documented risk assessments before any new process, material, or design change
- Traceability: Complete chain from mill-certified raw material through machining, inspection, and delivery
- First Article Inspection: Full AS9102-format FAI reports for every new production run, including ballooned drawings and 100% dimensional verification
- Nonconformance management: Documented root cause analysis and corrective action with closed-loop verification
- Counterfeit prevention: Documented controls to prevent introduction of counterfeit materials and parts
- Supply chain control: Qualified suppliers with flow-down of aerospace quality requirements
- Configuration management: Controlled engineering change processes with customer approval for any fit, form, or function changes

With 582 CNC machines including 5-axis capability, 20 years of aerospace machining experience, and AS9100D/ISO 13485/IATF 16949 certifications held directly, we provide the documented quality that aerospace programs require. We welcome customer audits of our facility—because when quality documentation is the evidence that your supplier delivers what they claim, you should be able to verify it directly.
Upload your CAD for a free DFM review with AS9100D-compliant documentation →
Frequently Asked Questions (FAQ)
Q1: What is the difference between ISO 9001 and AS9100D for CNC machining?
Answer: ISO 9001:2015 is a generic quality management standard applicable to any industry. AS9100D incorporates all of ISO 9001:2015 and adds over 100 aerospace-specific requirements, including formal risk management, full material and process traceability, First Article Inspection per AS9102, counterfeit parts prevention, supply chain control, product safety, configuration management, and human factors consideration in nonconformance analysis. A shop with ISO 9001 alone has a quality system adequate for commercial work; a shop with AS9100D has a system built specifically for the risk profile of aerospace manufacturing.
Q2: Does AS9100D require full material traceability for every aerospace part?
Answer: Yes. AS9100D requires that every component be traceable from the finished part back through inspection records, machining records, and raw material certifications. Material certifications must reference actual mill heat numbers and be signed and verified. This traceability extends to special processes such as heat treatment, surface finishing, and non-destructive testing. The traceability chain supports forward traceability (from a raw material lot to every part made from it) and backward traceability (from any part to its complete manufacturing history).
Q3: What is First Article Inspection (FAI) under AS9100D?
Answer: First Article Inspection (FAI) is a complete dimensional verification of the first part produced from a new production run. It verifies that the entire production process—machine, program, tooling, fixture, and operator—is capable of producing conforming parts repeatedly, not just once. A complete FAI includes a full dimensional report against the engineering drawing with ballooned dimensions, material certifications with chemical and mechanical properties, process certifications for special processes, and functional test results where applicable. FAI is required for new parts and after any significant process change. Aerospace FAI reports typically follow AS9102 format.
Q4: How does AS9100D address counterfeit parts prevention in CNC machining?
Answer: AS9100D requires organizations to establish and maintain processes for preventing the use of counterfeit or suspect counterfeit parts. This includes documented controls for supplier qualification, material verification at receiving inspection, certificate of analysis review, and traceability of all materials and components. When a counterfeit part is identified, the standard requires it to be conspicuously marked, positively controlled, and physically rendered unusable—not simply returned to the supplier where it could re-enter the supply chain.
Q5: Can a supplier hold AS9100D certification through a partner or subcontractor?
Answer: No. AS9100D certification is facility-specific. The certification is issued to a specific organization at a specific location after an accredited third-party registrar has conducted a successful on-site audit. The certification scope defines which processes and product types are covered. A supplier cannot “borrow” AS9100D certification from a partner or subcontractor—the facility that manufactures your parts must hold its own certification with a scope that covers the processes used to produce those parts.
Q6: What happens when a nonconformance is discovered under AS9100D?
Answer: Under AS9100D, every nonconformance must be documented, evaluated, and addressed through a systematic process. The organization must take action to control and correct the nonconformance, evaluate the need for action to eliminate the root cause, implement corrective action to prevent recurrence, review the effectiveness of the corrective action, and consider human factors (training, communication, procedural complexity) that may have contributed to the failure. When an external provider is responsible, corrective action requirements flow down to that provider. This closed-loop approach ensures nonconformances are not simply corrected on the affected part but prevented from recurring.
Q7: How often are AS9100D-certified facilities audited?
Answer: AS9100D certification is typically valid for three years, subject to annual surveillance audits. The initial certification requires a two-stage audit: a Stage 1 documentation review and a Stage 2 on-site audit. Annual surveillance audits verify continued compliance. At the end of the three-year cycle, a full recertification audit is conducted. Between external audits, certified organizations are required to conduct regular internal audits of their quality management system to ensure ongoing compliance and identify opportunities for improvement.
Q8: Is AS9100D certification required for all aerospace CNC machining work?
Answer: While not every aerospace contract explicitly requires AS9100D certification in legal terms, it is a de facto requirement for most major OEMs and Tier 1 suppliers. Most aircraft manufacturers require their subcontractors and suppliers to obtain AS9100D certification. Without it, a supplier is unlikely to be approved by major aerospace companies. The certification provides documented evidence that the supplier operates under a quality management system designed specifically for the risk profile of aerospace manufacturing—a requirement that primes and regulatory bodies expect to see in their supply chain.




