AS9100: Aerospace Quality Management Explained

AS9100 is the quality management system standard for aviation, space, and defense. It contains the full text of ISO 9001:2015 and adds aerospace-specific requirements on top, including product safety, counterfeit-parts prevention, configuration management, operational risk, and first article inspection. It is maintained by the International Aerospace Quality Group and is the entry ticket to most aerospace supply chains.

The logic behind AS9100 is that aerospace failures kill people and cost fortunes, so a generic quality system is not enough. ISO 9001 sets the management-system baseline any industry can use; AS9100 keeps every word of that baseline and layers on the controls a wing spar or an engine bracket demands. The current revision, AS9100 Rev D, was released in September 2016 and is built directly on ISO 9001:2015's structure.

What is AS9100 and who needs it?

AS9100 is the aerospace industry's common quality standard, used by manufacturers of parts, assemblies, and systems for aviation, space, and defense, and increasingly required by prime contractors of their entire supply chain. If you want to sell machined parts, castings, electronics, or assemblies into an aircraft or spacecraft program, your customer will almost certainly require AS9100 certification as a condition of doing business.

It belongs to a family of standards published under the 9100 series. AS9100 covers organizations that design and make product; its siblings cover the rest of the supply chain, so a business picks the one that matches what it actually does.

Certification is granted by accredited certification bodies and recorded in the industry's shared OASIS database, so a prime contractor can verify a supplier's certificate rather than take a logo at face value. That shared registry is part of what makes AS9100 a supply-chain passport rather than a private badge.

How does AS9100 build on ISO 9001?

AS9100 Rev D incorporates the complete text of ISO 9001:2015 and adds roughly a hundred aerospace-specific requirements, printed in shaded text so an auditor can see exactly which clauses go beyond the generic standard. Nothing from ISO 9001 is removed; the aerospace content is strictly additive. So if you already run an ISO 9001 system, you have the skeleton, and AS9100 is the aerospace muscle you bolt onto it.

What are the main aerospace additions?

The additions are the reason AS9100 exists. Each one answers a failure mode that generic quality management does not specifically address:

• Product safety. A dedicated requirement to plan, implement, and control activities that ensure product safety across the lifecycle, treating safety as a managed process rather than an assumed outcome.
• Prevention of counterfeit parts. Explicit controls to keep fraudulent or misrepresented parts and materials, a real and dangerous problem in aerospace supply chains, out of product, covering purchasing, verification, and traceability.
• Configuration management. Disciplined control of product configuration and its changes, so the as-designed, as-built, and as-delivered states are known and traceable, and no unapproved change slips in.
• Operational risk management. Beyond ISO 9001's general risk-based thinking, AS9100 requires managing risk within operational processes, including contingency planning for disruptions.
• Key characteristics. Identification and control of the attributes whose variation most affects fit, form, function, performance, or safety, the features that get the tightest control and the most SPC attention.
• Human factors. Consideration of human factors in the cause of nonconformities and in corrective action, recognizing that people, not just machines, drive escapes.
• First article inspection. Production process verification, implemented as FAI per AS9102, to prove the production process can make a conforming part before it runs at rate.

Why do counterfeit parts and configuration management get their own clauses?

Because both have caused real, expensive failures that generic quality management did not stop. Counterfeit parts, relabeled, salvaged, or fraudulently graded components, have made their way into aerospace and defense hardware, where a fake fastener or a substandard electronic part can fail catastrophically. AS9100's counterfeit-parts clause forces a shop to buy from approved sources, verify authenticity, control returned and scrapped material so it cannot re-enter the stream, and keep traceability tight enough to answer "where did this actually come from?" for every part in the build.

Configuration management addresses a quieter failure: the part is genuine, but it is the wrong revision. Aerospace programs run for decades, drawings revise repeatedly, and an assembly can mix parts made to different revision levels. Configuration management keeps the as-designed, as-built, and as-delivered states aligned and traceable, so an unapproved change or a stale revision cannot slip into a flight article unnoticed. Together, these two clauses are why aerospace traceability is stricter than almost anywhere else: the system has to prove, on demand, that every part is both real and current. This is a sharper version of the discipline behind the automotive core tools tuned for a world where the consequences of an escape are measured in lives.

How does AS9100 relate to first article inspection?

AS9100 requires production process verification, and in aerospace that requirement is met by first article inspection per AS9102. FAI is the complete, documented check that a part made by the actual production process, on production tooling, conforms to every characteristic on the drawing. AS9100 makes it a system requirement; AS9102 defines how to do it and the three-form report it produces. The two standards are designed to work together, which is why an AS9100 audit will expect to see FAI records, ballooned drawings, and the certifications behind them.

How do you get and keep AS9100 certification?

Certification follows a familiar arc, but with aerospace-specific rigor at every step. The path, in order:

1. Build on ISO 9001. Establish or confirm a QMS that meets ISO 9001:2015, since that is the entire base of AS9100.
2. Add the aerospace requirements. Implement product safety, counterfeit-parts controls, configuration management, operational risk, key characteristics, human factors, and FAI, and document how each is controlled.
3. Run internal audits and a management review. Prove the system operates, generates records, and gets leadership attention, using tools like FMEA to demonstrate risk is managed, not assumed.
4. Pass a two-stage certification audit. A Stage 1 readiness review of documentation, then a Stage 2 audit of the system in operation by an accredited certification body, against the AS9101 audit requirements.
5. Maintain it. Surveillance audits keep the certificate live between full recertification cycles, and the certificate is published in OASIS for customers to verify.

Aerospace certification audits are stricter than a generic ISO 9001 audit in ways that catch shops off guard. Auditors evaluate not just whether procedures exist but whether processes actually perform, scoring effectiveness against objectives rather than accepting a documented process as proof. They sample real product records end to end, follow a characteristic from drawing to FAI to shipping, and expect on-time-delivery and quality performance data to back the system. A binder that looks perfect but is not lived on the floor will not survive that scrutiny.

The record-keeping load is where certified shops feel the weight: configuration records, FAI packages, counterfeit-avoidance evidence, calibration and supplier data, and a nonconformance trail that has to survive a customer audit years later. That documentation burden is the real cost of AS9100, and where its cost of quality mostly lands.

How is AS9100 different from IATF 16949?

Both are industry-specific quality standards built on ISO 9001, but they serve different worlds. IATF 16949 is automotive and leans on the AIAG core tools (APQP, PPAP, FMEA, MSA, SPC) and customer-specific requirements from the OEMs. AS9100 is aviation, space, and defense, and leans on configuration management, counterfeit prevention, product safety, and FAI. A supplier serving both industries runs one ISO 9001 core with two different sets of additions bolted on, which is exactly why understanding the shared base matters. The standards facts worth pinning down:

• AS9100 Rev D was released in September 2016 and incorporates the full text of ISO 9001:2015 plus aerospace-specific requirements (SAE AS9100D).
• The 9100-series QMS standards are developed and maintained by the International Aerospace Quality Group (IAQG) for aviation, space, and defense organizations (IAQG, 9100).
• AS9100 additions include product safety, prevention of counterfeit parts, configuration management, and production process verification via first article inspection (IAQG).

AS9100 is demanding on purpose: in aerospace manufacturing the paperwork is the product almost as much as the part is, because a control the auditor cannot see is a control the customer will not trust. The hard part is rarely understanding the clauses; it is keeping configuration records, FAI packages, and supplier certs linked and findable across years and revisions. That is the scattered-paperwork problem Harmony's paperwork digitization and AI search was built to solve on your existing systems, working alongside your QMS rather than replacing it. See it on a plant floor in the CLS case study.