What “AS9100 Compliant” Actually Requires of a Vendor

What AS9100 Actually Is

AS9100 is not a standalone standard. It’s built on ISO 9001:2015, with a layer of aerospace-specific requirements added on top, covering configuration management, risk-based thinking, first article inspection, and traceability through the supply chain. It’s published by the International Aerospace Quality Group, a consortium of major aerospace manufacturers who wrote the standard specifically because ISO 9001 alone doesn’t address the failure modes that matter in flight-critical and defense hardware. A vendor holding AS9100 has already built a quality system that assumes things will go wrong and requires a documented process for catching it before a part ships, not after.

Certification Is Not Self-Reported

This is the part that gets skipped over. AS9100 certification requires an independent third-party audit, not an internal declaration. The process runs in two stages: a documentation and readiness review, followed by an on-site assessment of whether the quality system actually operates the way the paperwork says it does. Certified vendors then go through annual surveillance audits to keep the certification active. A vendor who says “we follow AS9100 practices” without holding an actual certificate from an accredited body has not been through this process, and that distinction is the entire point of asking for the credential in the first place.

What Changes on the Shop Floor

The aerospace-specific additions in AS9100 show up most in how a vendor handles product realization, the clause covering everything from process planning through delivery. Configuration management has to be documented and controlled. First article inspection can’t be treated as a formality. And when a customer specifies which sub-tier suppliers or materials must be used, the vendor has to maintain a documented process for communicating that requirement down the supply chain and verifying it was actually followed. None of this is optional once a shop is certified, and none of it is visible from a capability list on a website.

The Standard Is Changing, Which Is Its Own Flag

The rename is already confirmed: AS9100 is being reissued as IA9100, timed to follow the ISO 9001:2026 release. Current industry guidance points to a Q4 2026 publication, with a transition window expected to run roughly three years after that. The core structure carries over, so this isn’t a rebuild for certified vendors, but it does add ground in supplier controls, information security, and quality-culture requirements. None of that changes what a buyer should do today: certification status isn’t static regardless of which version of the standard is current. A vendor certified several audit cycles ago isn’t automatically current on today’s requirements, and a lapsed or expired certificate is functionally the same as never having one.

What a Buyer Should Actually Ask For

Don’t stop at the word “compliant” on a capability page. Ask for the certificate itself, the name of the accredited certification body that issued it, and the current audit date. Aerospace-specific certifications are also listed in a searchable industry database, which is worth checking independently rather than taking a vendor’s word for it. If a vendor can’t produce a current certificate on request, treat that the same as not being certified at all.

Our vetted vendor network holds AS9100 Compliant certification where the work requires it, alongside ITAR Registration and ISO 9001:2015 as the baseline underneath it. We verify certification status as part of vetting a shop into the network, not as a one-time checkbox. Send us the drawings and we’ll tell you plainly which of our partners is qualified for the work, and why.