Every aerospace RFQ arrives with a stack of quality requirements, and certification claims sit at the top of the list. That makes the question of AS9100 vs ISO 9001 unavoidable for any buyer sourcing flight hardware. ISO 9001 gives a machine shop a general framework for managing quality. AS9100 starts from that same framework and adds the controls aerospace programs decided they needed: configuration management, deep traceability, formal product acceptance, and counterfeit part prevention. This guide explains the practical differences between the two standards and shows what a buyer should verify before releasing an aerospace order.
Why Buyers Compare AS9100 vs ISO 9001
Both standards come from the same family. AS9100, maintained by the International Aerospace Quality Group, contains the full text of ISO 9001 plus aerospace-specific additions. A valid AS9100 certificate therefore covers the ISO 9001 base for the audited scope, while the reverse is not true. The current revisions are ISO 9001:2015 and AS9100D, and both run on a three-year certification cycle with periodic surveillance audits.
For a shop quoting brackets, housings, and structural parts, that difference is decisive. A general industrial program usually finds ISO 9001 sufficient. An airframe or engine program typically will not issue a purchase order without AS9100 at the producing site. Working through AS9100 vs ISO 9001 lets a buyer match certification evidence to program risk instead of collecting paperwork that proves nothing about actual discipline. The comparison is a screening tool, and this article shows how to use it well.
The Foundation Both Standards Share
ISO 9001 sets out a process approach to management. A company identifies its processes, plans them, measures performance, and corrects what drifts. The standard asks for risk-based thinking, customer focus, leadership commitment, documented information, internal audits, management review, and a corrective action loop. It says nothing specific about any product, which is exactly why it works in banking, packaging, and precision machining alike.
In a CNC shop, that common foundation shows up as inspection plans, calibration schedules, nonconformance reports, operator training records, and supplier approvals. These are the basic habits of any organized quality system; our overview of CNC machining quality control covers how those elements fit together on the floor. AS9100 inherits all of it without change, so the interesting part of AS9100 vs ISO 9001 is the aerospace layer built on top.
What AS9100 Adds Beyond the Base Standard
The aerospace additions respond to failure modes that history taught the industry to fear. The first is configuration management: AS9100 sites control drawing revisions rigorously and record what was actually built, tying as-built records to every serial number. The second is traceability. Material lot numbers, heat treat batches, and plating chemistries must be traceable from raw stock to shipped part.
The third is required product acceptance, which pushes shops toward documented first article inspection practice. The fourth is counterfeit part prevention, covering approved distribution chains, inspection of purchased parts, and reporting obligations when suspect material appears. On top of those, the standard assigns explicit product safety responsibility, requires on-time delivery performance monitoring, addresses human factors in error prevention, calls for production process validation, and adds oversight of special processes and delegated inspection activities.
None of this is bureaucratic decoration. Configuration errors, counterfeit fasteners, and undetected process changes have caused real aerospace incidents, and each added requirement maps to one of those failure modes. Buyers can see how these controls surface in practice in our guide to aerospace CNC machining.
How Audits and Documentation Differ in Practice
An ISO 9001 auditor checks whether a company runs its own declared processes. An AS9100 auditor checks the same thing, then hunts for aerospace-specific evidence. Is the revision used on the floor the same one in the revision log? Can an inspector trace a serial number back to its material lot? Was a first article completed before production release? Are heat treat and plating sources held under approved-source control? The audit conversation is narrower, sharper, and far more evidence-driven.
Documentation duties are heavier too. AS9100 names specific items that must be documented rather than leaving those choices to the company, and it expects records around key characteristics and process monitoring. Auditor competence differs as well: aerospace registrars place sector-experienced auditors, and certificates carry the international recognition program marks that aerospace program offices look for. Requesting the latest surveillance audit summary is a fair preview of how a site behaves between visits.
Which Industries Expect Which Certificate
Aviation, space, and defense supply chains expect AS9100. Primes and tier-one companies usually require it contractually at the producing site, and many extend the requirement to subcontractors for critical items. Automotive sits on its own standard, IATF 16949, with product-specific controls of its own. Medical device manufacturing follows ISO 13485, which shares the ISO 9001 skeleton but adds regulatory duties around design controls and traceability; our article on medical CNC machining explains how those expectations change the sourcing conversation.
General industrial, energy, robotics, and consumer programs typically find ISO 9001 sufficient. Food equipment fabrication is a special case where pressure comes from material rules and hygiene design rather than a unique QMS certificate, as covered in our piece on food-grade CNC machining. The pattern for buyers is simple: certification should match the risk profile of the sector, and an AS9100 supplier can serve any lower tier of requirements while the reverse is not guaranteed.
What Buyers Should Verify Before Releasing an Order
Treat the certificate as a starting point, not the finish line. Confirm that it names the producing site rather than a corporate address, the standard revision, the exact scope wording, and the accreditation of the registrar. Then move from paper to process questions. Can the shop produce a completed AS9102 form set for a recent part? Does it record gauges used and calibration status on inspection reports? How does it handle an operator reading a geometric tolerance differently from the designer, a point we cover in GD&T basics for CNC buyers? Ask about counterfeit prevention policy, special process approvals, and how open nonconformances get closed.
For high-value or safety-critical work, back the paperwork with an on-site audit. Watch how the floor handles a flagged part, pull a random traceability record, and compare the router sheet on the machine to the released drawing revision. Shops that pass that walkthrough are usually the ones whose certification carries meaning beyond the wall plaque.
Is AS9100 a replacement for ISO 9001?
In the sense that matters, yes. AS9100 contains the complete ISO 9001 requirements plus aerospace additions, so a site certified to AS9100D already meets the ISO 9001 base for its audited scope. When weighing AS9100 vs ISO 9001 suppliers, the right question is not which standard is stronger overall but which one fits the risk profile of your program.
Can a shop with only ISO 9001 handle aerospace parts?
It can machine them physically, but most aerospace programs will not accept them as a source. The gap is procedural: without AS9100 there is no independent audit of configuration control, counterfeit prevention, first article practice, or special process oversight. Some buyers accept ISO 9001 shops for ground support equipment or non-flight hardware, where the consequence of failure is lower.
What is the difference between AS9100 and AS9100D?
AS9100 is the standard, and the letter marks the revision. AS9100D aligned the document with the structure of ISO 9001:2015 and strengthened requirements around product safety, human factors, counterfeit parts, and on-time delivery. Older revisions have been phased out of certification, so a current certificate should read AS9100D.
