AS9100D is the international quality management system standard for organizations that design, produce or maintain products for aviation, space and defense. It takes every requirement of ISO 9001:2015 and adds aerospace-specific ones, such as product safety, configuration management, first article inspection and counterfeit parts prevention. Most aerospace primes, and many government customers, require their suppliers to be certified to it.
This guide skips the clause-by-clause recitation. Instead, it covers what the AS9100D standard actually asks of a manufacturer: how it differs from ISO 9001, the requirements that change how work gets done on the floor, the records auditors ask to see, and how certification works.
What is the AS9100D standard?
AS9100D is the fourth revision ("Rev D") of AS9100, published in 2016 by the International Aerospace Quality Group (IAQG) through SAE International. Its formal name is AS9100:2016 Rev D. The same requirements are published as EN 9100:2018 in Europe and JISQ 9100 in Asia-Pacific, so a certificate to one is recognized across the industry.
The standard follows the same 10-clause structure as ISO 9001:2015:
Scope
Normative references
Terms and definitions
Context of the organization
Leadership
Planning
Support
Operation
Performance evaluation
Improvement
Clauses 4 through 10 hold the auditable requirements. Clause 8, Operation, is where most aerospace additions live, and it's the clause that touches the shop floor most directly.
Who needs AS9100D certification?
AS9100D applies to organizations that design, develop or produce aviation, space and defense products. That includes OEMs, tier 1 and tier 2 suppliers, and machine shops, electronics assemblers and other build-to-print suppliers. Two sister standards cover other parts of the supply chain: AS9110 for maintenance, repair and overhaul (MRO) organizations, and AS9120 for distributors.
AS9100D vs. ISO 9001: what's different?
AS9100D contains ISO 9001:2015 word for word, then adds aerospace requirements on top. If you're ISO 9001 certified, you already have the foundation. The gap is in how tightly you control product, risk, suppliers and records.
| Area | ISO 9001:2015 | AS9100D adds |
|---|---|---|
| Risk | Risk-based thinking across the QMS | Operational risk management for product and delivery (8.1.1) |
| Product safety | Not addressed directly | Processes to manage product safety through the life cycle (8.1.3) |
| Configuration | General change control | Formal configuration management (8.1.2) |
| Counterfeit parts | Not addressed | Prevention, detection and quarantine of counterfeit parts (8.1.4) |
| First article | Not addressed | Production process verification, typically first article inspection to AS9102 (8.5.1.3) |
| Key characteristics | Not addressed | Identify, control and monitor key and critical characteristics |
| Suppliers | Control of external providers | Requirement flowdown, approved supplier status and ongoing performance monitoring (8.4) |
| Human factors | Not addressed | Considered in work environment and root cause analysis |
| Performance | Customer satisfaction | On-time delivery and product conformity measured as part of customer satisfaction (9.1.2) |
| Ethics and awareness | General awareness | Staff aware of their contribution to product safety and ethical behavior (7.3) |
Key aerospace requirements in AS9100D
Seven requirements shape day-to-day manufacturing more than any others. Each one needs a working process and evidence that the process ran.
Operational risk management (8.1.1)
You need a defined process to identify, assess and mitigate risks to product and delivery, such as a single-source supplier, a fragile process or a long-lead part. Auditors look for risks that are tracked to closure, not a register that was filled in once.
Configuration management (8.1.2)
The product you build must match the approved design at the revision in effect. That means controlled drawings and work instructions, a defined change process, and a record of which configuration each unit was built to. Outdated instructions on the floor are one of the most common ways this breaks.
Product safety (8.1.3)
You must plan, implement and control the processes that assure product safety across the product's life. In practice, that covers hazard assessment, control of safety-critical items, and communication of safety events.
Prevention of counterfeit parts (8.1.4)
AS9100D requires a process to prevent counterfeit or suspect parts from entering product. Typical controls include buying from authorized sources, verifying certificates of conformance, training staff to recognize suspect parts, and quarantining and reporting anything questionable.
Production process verification and first article inspection (8.5.1.3)
Before committing to production, you must verify that the process can produce a conforming part. Most customers expect this as a first article inspection (FAI) to AS9102, repeated when the design, process, tooling, location or supplier changes.
Key characteristics and special processes
Where the design or customer identifies key characteristics, you must control and monitor them, often with statistical methods. Special processes, such as heat treating, welding or plating, must be validated, because you can't fully verify their output by inspection afterward.
Control of nonconforming output (8.7) and corrective action (10.2)
Nonconforming parts must be identified, segregated and dispositioned by authorized people. Use-as-is and repair dispositions often need customer approval. Root cause analysis must consider human factors, and corrective actions must be checked for effectiveness.
The manufacturing records auditors ask for
An AS9100D audit is largely a records exercise: auditors pick a part, a work order or a nonconformance and follow the evidence. These are the records they ask for most often on the manufacturing side.
| Record | What it proves | Related clause | What auditors check |
|---|---|---|---|
| Work order or traveler (as-built record) | Each step was done, in order, by a qualified person | 8.5.1 | Every step signed off, data recorded, revision matches the released configuration |
| First article inspection report (AS9102) | The process can make a conforming part | 8.5.1.3 | FAI exists for the current revision, and was redone after changes |
| Inspection and test records | Product met acceptance criteria | 8.6 | Results recorded against requirements, inspector identified, release authorized |
| Traceability records | Material, parts and lots can be traced to each unit | 8.5.2 | Serial and lot numbers link from raw material to finished product |
| Nonconformance reports (NCRs) | Bad product was caught, contained and dispositioned | 8.7 | Disposition authority, customer approval where needed, rework reinspected |
| Corrective action (CAPA) records | Problems were fixed at the root | 10.2 | Root cause analysis, human factors considered, effectiveness verified |
| Calibration records | Measurements were made with accurate equipment | 7.1.5 | Gauges in calibration when used, recall process for out-of-tolerance tools |
| Training and qualification records | People were competent for the work they signed off | 7.2 | Operator qualifications current for special processes and inspections |
| Supplier records and certificates of conformance | Purchased material is genuine and conforming | 8.4, 8.1.4 | Approved supplier list, requirement flowdown, CoCs on file |
| Engineering change records | Changes were approved and reached the floor | 8.1.2, 8.5.6 | Change approval, effectivity, and evidence that work instructions were updated |
The common thread is linkage. Auditors aren't only checking that a record exists. They want to see that the traveler points to the right drawing revision, the inspection uses a calibrated gauge, and the NCR links to a corrective action. Paper and spreadsheet systems make those links slow to prove, which is why many manufacturers move build records into a digital system.
How AS9100D certification works
You're certified by an accredited certification body (CB), often called a registrar, working under the IAQG certification scheme. Auditors follow AS9101, which sets out how aerospace QMS audits are run and reported.
Run it, keep records
Management review
Listed in OASIS
The Stage 1 audit checks that your system is documented and ready. The Stage 2 audit checks that it actually works, mostly by sampling records. Any nonconformities must be answered with corrective actions before the certificate is issued.
Once certified, you're listed in IAQG's OASIS database, which customers use to confirm supplier status. The certificate lasts three years, with surveillance audits in between and a recertification audit before it expires.
Common AS9100D audit findings and how to avoid them
Most findings aren't about missing procedures. They're about gaps between what the procedure says and what the records show.
| Common finding | How to prevent it |
|---|---|
| Work instructions on the floor don’t match the current revision | Release instructions from one controlled source and pull superseded versions automatically |
| Missing or incomplete sign-offs on travelers | Require each step to be completed and signed before the next can start |
| FAI not repeated after a process or supplier change | Tie FAI triggers to your change process so a change flags a new FAI |
| Corrective actions closed without proof they worked | Schedule an effectiveness check before closure, with evidence attached |
| Out-of-calibration gauge used, with no impact assessment | Record which gauge was used on each measurement, so you can find affected product fast |
| Supplier requirements not flowed down on purchase orders | Use standard PO clauses by part type and check them at order release |
| Risk register not updated | Review operational risks in regular production or program meetings |
The most reliable way to stay audit-ready is to capture evidence while the work happens, rather than assembling it before the audit. When each step, measurement and sign-off is recorded at the point of work, the audit trail builds itself.
The bottom line
AS9100D is ISO 9001 plus the controls aerospace customers depend on: risk, configuration, product safety, counterfeit prevention, first article inspection and tight records. Certification proves you have those processes. Audits test whether your records prove you follow them.
The manufacturers who find audits easiest treat records as a byproduct of doing the work, not a separate task. Get configuration, execution and nonconformance records connected, and both your AS9100D audits and the move to IA9100 get much simpler.
Frequently Asked Questions (FAQ)
-
No law requires it. In practice, though, most aerospace primes and many defense and space customers make it a condition of doing business, either in supplier requirements or in individual purchase orders. If you want to sell into aerospace supply chains, plan on it.
-
AS9100 is the name of the standard. The letter marks the revision. AS9100D (2016) replaced AS9100C (2009), and it's the version organizations are certified to today.
-
AS9100D includes all of ISO 9001:2015, so an AS9100D audit covers the ISO 9001 requirements too. You don't need a separate ISO 9001 audit. Ask your certification body whether it also issues a separate ISO 9001 certificate if a customer requests one.
-
It depends on where you start. A shop with a mature ISO 9001 system may need a few months to close the aerospace gaps. Starting from scratch usually takes longer, because you need several months of records showing the system works before the Stage 2 audit.
-
AS9100D requires you to define retention periods, and customer, contract and regulatory requirements usually set them. Aerospace build records are often kept for the life of the product or longer, so check every contract and flowdown before choosing a period.
-
Yes. IAQG is revising the standard and renaming it IA9100, with release expected in late 2026 or early 2027 alongside the revision of ISO 9001. Certification bodies expect a fixed transition period after publication, and AS9100D certificates remain valid until it ends. Building a strong AS9100D system now is the best preparation, since the core requirements carry forward.
