AS9100D vs ISO 9001 for CNC Machining Suppliers: What Changes for FAI, Traceability and Cost

Is ISO 9001-only enough, or is AS9100D a hard gate?

AS9100D is not a separate standard sitting beside ISO 9001. It incorporates the full ISO 9001:2015 text and layers aerospace requirements on top: first article inspection, configuration management, counterfeit-part prevention, product safety and structured risk management^1,8,10,16,25.

A shop certified only to ISO 9001 has been audited against the general framework and none of those additions. The consequence is a qualification gate, not a preference.

That is the deciding fact for this program: if the part is flight-critical or safety-critical, an ISO 9001-only shop is out before its machining capability is assessed. If the part is not, ISO 9001 may be sufficient and the aerospace additions become optional controls you can request contractually.

Many aerospace OEMs and Tier-1 suppliers treat AS9100D certification as a baseline qualification requirement rather than an optional enhancement⁸. Before going further, confirm which category your part falls into — that single answer decides whether the rest of this check is a gate or a preference.

Rule out suppliers whose FAI process is informal or not repeatable

AS9100D clause 8.5.1.3 requires production process verification — evidence that the production process itself can produce conforming parts, not just that one part measured well^2,10,17. In practice this is satisfied by a First Article Inspection, and AS9102 is the SAE-published format most organizations use to document it^2,10.

ISO 9001 has no equivalent production process verification requirement^2,10. The AS9102 package has three accountabilities: part-number accountability, product accountability for materials and special processes, and characteristic accountability, often presented on a ballooned drawing^2,19.

A quote that offers "FAI on request" without naming the format is a warning sign — ask to see a completed package for a comparable part number. The requirement is also not one-and-done.

FAI must be redone whenever there is a significant process change, supplier change, or design revision¹⁰. That is where informal processes break: a shop that produced a good first article but cannot regenerate the package after moving a fixture or changing a material supplier has a gap that surfaces mid-program.

An AS9100-certified supplier will have a formal FAI process and records on hand; an ISO 9001-only supplier may or may not, depending on whether it adopted the practice independently¹⁰.

Can the supplier trace a delivered part back to its heat lot?

AS9100D requires material traceability from mill certificate through final shipment^8,25. For a machined part that means the chain runs from the mill certificate and heat lot, through the job traveler and material test report, to the finished part and its inspection records²⁵.

The purpose is containment: if a material problem is found later, the supplier can identify which delivered parts came from the affected lot before they reach flight hardware^18,20,25. Retention is where the sources diverge.

One source states a minimum of 10 years with 100% documentation retention from raw material to finished part³; another states records that survive for the life of the aircraft, often 30+ years²⁹.

The applicable period depends on the specific customer or regulatory requirement, and no source establishes a single mandatory period for all aerospace programs^3,29. Ask the customer for the contract retention clause rather than accepting the supplier's default.

A related check: paper travelers without controlled revision numbering or electronic archiving create traceability gaps that surface during customer audits rather than at qualification³⁰. Ask how records are stored and how a specific serial number would be retrieved.

Nonconformance, configuration and counterfeit-part controls

AS9100D adds configuration management and counterfeit-part prevention controls that ISO 9001 does not require^1,10,16,25. Configuration management means maintaining consistency in a product's performance and physical attributes across its lifecycle, including drawings, BOMs, work instructions, fixtures and test programs^1,25.

Counterfeit-part prevention covers documented controls at receiving and procurement, including quarantine protocols and customer notification procedures^16,25. The most common disqualifier in aerospace supplier audits is an incomplete or undocumented corrective action system.

AS9100D requires nonconformance and corrective action logs with root cause analysis, implemented corrections, and verification of effectiveness, and buyers typically request the prior 12 months of records¹⁶. A shop with open corrective actions and no implemented responses fails this review regardless of machining capability¹⁶.

The second cluster is counterfeit parts: a shop with a general incoming inspection procedure but no written counterfeit-parts procedure is non-compliant with the clause¹⁶.

The third is configuration management for NC programs and work instructions — a shop that cannot demonstrate version-controlled access to machining programs, with documented sign-off authority for changes, is not operating under configuration control¹⁶. Ask for the corrective action log, the counterfeit-parts procedure, and the revision-control method for CNC programs before releasing an RFQ.

Machining capability and special-process coverage are separate checks

A quality certificate says nothing about whether the shop can hold your tolerances. Achievable tolerances and finishes vary by material and feature criticality: flight-critical hole positions, bearing bores and structural mating surfaces each carry different requirements, and general non-critical features allow wider bands³¹.

For 7075 aluminum, one source puts typical achievable tolerances around ±0.02 mm with surface finishes of Ra 1.6 µm or better²⁸. These are capability observations, not a qualification of any specific shop — the sources do not establish whether a given supplier can achieve them or has the inspection equipment to verify them^28,31.

Special processes are a second, separate gate. NADCAP accreditation covers individual special processes such as heat treatment and NDT rather than the whole quality system^30–32.

A machining supplier may hold AS9100D and still need NADCAP-accredited outside processors for heat treating, chemical processing or coatings to satisfy customer flowdowns³⁰.

When that happens, the outside processor's certifications must be traceable to each specific job in the documentation package, and the contract shop is responsible for verifying that those processors hold current NADCAP accreditation for the specific processes performed³⁰. Tier expectations differ.

Tier 1 engine OEM direct supply requires full AS9100 Rev D with explicit engine component scope plus NADCAP for all applicable special processes; Tier 2 system integrator supply requires AS9100 Rev D plus customer-specific Supplier Quality Requirements, with NADCAP possibly required for specific processes³⁰.

Confirm which tier your program sits in and ask for the certificate scope and the special-process accreditation records.

Reading the quote: where certification cost actually sits

Certification cost does not appear as a line on the quote. A certified quality system is overhead spread across every machine hour in the shop — metrology equipment and its calibration, quality engineers, documented procedures, internal audits and external surveillance³².

That is why an uncertified supplier can look cheaper on paper while offering a different product³². Aerospace work also carries material and documentation cost that commercial work does not.

Titanium alloys, nickel-based superalloys and high-strength aluminum require rigid setups, coated carbide or ceramic tooling, high-pressure coolant and significantly lower cutting speeds, all of which increase cycle time and cost²⁹. Documentation expands alongside: material certification traceable to the mill, FAI per AS9102, dimensional inspection reports on critical features, and long-lived quality records²⁹.

On the other side of the ledger, one source states that AS9100D and ITAR certification can reduce the need for additional oversight or audits, potentially lowering the buyer's costs¹². The net effect on quoted price is not quantified by these sources^12,29,32.

When comparing quotes, ask whether the FAI package is quoted per program or bundled into every piece, and whether a repeat order is priced with setup amortised — a supplier quoting every batch as if it were the first is charging twice for work already done³².

Pre-RFQ qualification checklist

Work through these before releasing the RFQ. Each item maps to a requirement the standard places on the supplier, and each is something the buyer must confirm directly — the sources do not provide a method to verify a certificate's scope or a supplier's audit history remotely.

• ✓Confirm the AS9100D certificate is current and issued by an IAQG-recognized registrar, and that its scope names CNC machining
• ✓Request a completed AS9102 FAI package for a comparable part number, not a sample dimensional report
• ✓Ask how FAI is triggered and re-run on process change, supplier change or design revision
• ✓Trace one delivered part number back to its mill certificate and heat lot, and confirm the retention period against the contract
• ✓Request the prior 12 months of nonconformance and corrective action records, including root cause and verification of effectiveness
• ✓Ask for the written counterfeit-parts procedure, including quarantine and customer notification
• ✓Confirm how CNC program revisions are controlled and who holds sign-off authority for changes

Where the sources disagree

Two points in this article rest on sources that do not agree. Resolve both against the specific program requirement rather than assuming either figure applies.

What the sources do not establish

• No source provides a numeric cost or lead-time comparison between AS9100D-compliant and ISO 9001-only production.
• No source provides a method to verify that a specific supplier's AS9100D certificate scope covers CNC machining.
• No source details 8D, MRB, or specific customer-notification mechanics for nonconformance.
• No source names AS5553 or AS6174 in relation to AS9100D counterfeit-part prevention flow-down.
• No source provides a specific supplier's AS9100D audit results or customer approvals.
• No source establishes a single mandatory documentation retention period applicable to all aerospace programs.
• No source provides a specific supplier's demonstrated machining capability or inspection equipment inventory.