| General quality management |
ISO 9001:2015
Quality management system standard
|
The supplier operates a documented quality management system focused on consistent processes, customer requirements, risk-based thinking, monitoring, and continual improvement.
|
General CNC milling, turning, drilling, grinding, sheet-metal fabrication, finishing, inspection, and assembly support.
|
Current certificate, certification scope, certificate validity dates, issuing certification body, site address, and any exclusions or limitations.
|
ISO 9001 certification does not by itself prove a specific dimensional tolerance, material capability, surface-finish capability, or sector-specific regulatory compliance.
|
| Aerospace and defense quality |
AS9100D
Aerospace quality management system standard
|
ISO 9001-based quality management with additional aerospace-focused controls, including product safety, configuration management, operational risk, counterfeit-part prevention, and supply-chain controls.
|
Aerospace structural parts, flight-hardware components, complex machined parts, tight-tolerance assemblies, and controlled production programs.
|
Current AS9100 certificate, exact certified site, scope of activities, audit status, approved process list, traceability records, and nonconformance-control procedure.
|
AS9100 is a management-system certification. Buyers should separately verify approved materials, special processes, inspection methods, export-control requirements, and customer-specific clauses.
|
| Medical-device quality |
ISO 13485:2016
Medical-device quality management system standard
|
A quality management system designed for organizations involved in the life-cycle stages of medical devices, including applicable regulatory, risk-management, documentation, validation, and traceability controls.
|
Medical-device components, surgical-instrument parts, diagnostic-equipment components, implant-related non-sterile parts, and controlled assemblies where applicable.
|
Current ISO 13485 certificate, certified-site address, scope, device-related activities covered, process validation records, traceability method, and change-control procedure.
|
ISO 13485 certification does not automatically mean that a product is approved for clinical use or that the supplier is authorized to manufacture every type of medical device.
|
| Measurement and inspection capability |
ISO/IEC 17025
Testing and calibration laboratory competence standard
|
Demonstrates the competence, impartiality, and consistent operation of a testing or calibration laboratory within its accredited scope.
|
Dimensional inspection, calibration of gauges, material testing, surface measurement, hardness testing, and other laboratory-controlled verification activities.
|
Laboratory accreditation certificate, accredited scope, calibration traceability, equipment list, measurement uncertainty information, and sample inspection reports.
|
Accreditation applies only to the listed laboratory activities and methods. A supplier may use an external accredited laboratory for selected tests.
|
| Environmental management |
ISO 14001:2015
Environmental management system standard
|
A systematic approach to managing environmental responsibilities, legal obligations, resource use, operational controls, and environmental improvement objectives.
|
CNC production involving cutting fluids, metal chips, chemical processing, coating, anodizing, heat treatment, and waste management.
|
Current certificate, site scope, environmental objectives, waste-disposal controls, chemical-management records, and applicable regulatory permits.
|
ISO 14001 does not certify that a product is environmentally harmless or that every environmental impact has been eliminated.
|
| Information security and customer data |
ISO/IEC 27001
Information security management system standard
|
A risk-based framework for protecting information confidentiality, integrity, and availability through policies, controls, risk treatment, and continual improvement.
|
CNC projects involving proprietary CAD files, engineering drawings, product specifications, supplier portals, and controlled digital manufacturing data.
|
Current certificate, scope, statement of applicability, data-access controls, backup policy, incident-response procedure, and secure file-transfer process.
|
Certification scope matters. It may cover only selected locations, systems, or business processes rather than the entire supplier organization.
|
| Material and process traceability |
Buyer verification
Customer, regulatory, or contract requirement
|
The supplier can link raw material, certificates, production records, inspection results, operators, equipment, and shipment records to a defined part or lot.
|
Safety-critical parts, medical components, aerospace parts, regulated products, and projects requiring heat-lot or batch-level documentation.
|
Material test reports, heat or batch numbers, traveler records, lot-control procedure, inspection reports, certificates of conformity, and retention policy.
|
Traceability requirements should be written into the purchase order and quality agreement. Certification alone does not define the required traceability depth.
|
| Special-process control |
Process-specific approval
Customer or industry requirement
|
The supplier or approved subcontractor controls processes whose results cannot be fully verified by later inspection, such as certain heat treatments, coatings, welding, or surface treatments.
|
Anodizing, plating, passivation, heat treatment, welding, brazing, chemical processing, and other controlled finishing operations.
|
Process approval, qualified procedure, operator qualifications, process certificates, subcontractor controls, test results, and periodic requalification records.
|
Buyers should verify whether the process is performed in-house or outsourced and whether the subcontractor is approved for the exact material, specification, and revision.
|
| Dimensional and geometric capability |
Technical capability review
Drawing and specification based
|
The supplier has suitable machines, tooling, fixtures, measurement equipment, programming practices, and process controls for the specified tolerances and geometries.
|
3-axis, 4-axis, and 5-axis machining; turning; mill-turn work; tight-tolerance components; and complex freeform surfaces.
|
Machine list, work envelope, tolerance examples, capability studies, first-article inspection reports, CMM reports, gauge calibration records, and sample parts.
|
A certification does not establish machining accuracy. Capability must be assessed against the actual drawing, material, batch size, tolerance, and inspection plan.
|
| First Article Inspection |
AS9102-based review
Aerospace first-article practice
|
Provides documented evidence that production processes can manufacture a part conforming to design requirements, including characteristic-by-characteristic verification where applicable.
|
New aerospace parts, major design changes, production-process changes, relocated production, and other contracts requiring formal first-article documentation.
|
Completed first-article package, ballooned drawing, dimensional results, material and process certificates, nonconformance records, and revision-control evidence.
|
The applicable customer or contract requirement should define when a first article is required and which reporting format or standard must be followed.
|
| Supplier performance and delivery control |
Operational due diligence
Buyer-defined performance criteria
|
The supplier can plan capacity, control lead times, manage purchase orders, communicate risks, and provide corrective action when delivery or quality issues occur.
|
Prototype orders, recurring production, framework agreements, urgent replacement parts, and multi-stage global supply programs.
|
On-time delivery data, capacity plan, production schedule, escalation contacts, corrective-action examples, business-continuity plan, and quality performance history.
|
Certification status should be combined with an assessment of capacity, financial continuity, logistics, communication, packaging, and export or import responsibilities.
|
|
Buyer note: Certification claims should always be checked against the current certificate, certified legal entity or site, exact scope, expiration date, issuing certification body, and applicable exclusions. A management-system certificate supports supplier qualification but does not replace technical review, sample approval, contract requirements, or incoming inspection.
|
