AS9100D Certification Roadmap for Aerospace Suppliers

What AS9100D actually asks of a supplier

AS9100 is the aerospace quality management standard published by SAE International and adopted worldwide by primes, tier-one integrators and the wider supply chain. The current revision, AS9100D, was released in 2016 and is built directly on the ISO 9001:2015 structure. If you already understand ISO 9001, you understand roughly seventy per cent of AS9100D. The remaining thirty per cent is where aerospace suppliers spend most of their effort, because it reflects the reality that a defective part can put an aircraft or a crew at risk.

For a Bangalore SME feeding HAL, a tier-one exporter or a defence programme, the practical additions over plain ISO 9001 are the parts that auditors probe hardest. They include the following:

• Configuration management so that every part is built to a known, controlled revision of its drawing and specification.
• Risk-based thinking applied to operations, including operational risk on specific programmes and products, not just business risk.
• Counterfeit part prevention, with controls to keep suspect or unapproved material out of the supply chain.
• Product safety as an explicit management responsibility with hazard awareness through the lifecycle.
• First article inspection, the formal proof that your process can make a conforming part before you run production.
• Special process control for operations such as heat treatment, welding, plating and non-destructive testing whose results cannot be fully verified by later inspection.
• Control of records and traceability that can survive an audit years after the part has shipped.

None of this is optional. AS9100D is a contractual gate. Many primes will not even place you on an approved vendor list, let alone release a purchase order, until you hold current certification from an accredited body. Understanding the standard early, rather than treating it as a checklist to satisfy at the end, is what separates an eight-month journey from a two-year one. Our aerospace QMS software guide explains how these clauses map to day-to-day quality workflows.

Step one: the gap analysis

The certification journey starts with an honest look at where you stand today. A gap analysis compares your current way of working, clause by clause, against every requirement of AS9100D. It is tempting to skip this and jump straight into writing procedures, but that almost always produces a QMS that describes an idealised company rather than the one that exists. Auditors find the gap between the manual and the shop floor very quickly.

A good gap analysis for a first-time supplier produces three things. First, a clause-by-clause conformance register that marks each requirement as met, partially met or absent. Second, a prioritised action list that separates quick administrative fixes from structural changes such as introducing configuration control or a formal first article process. Third, a realistic resource and time estimate, because the gap analysis is where you discover whether certification is a six-month or a fourteen-month project.

Two findings appear in almost every SME gap analysis. The first is that the company already does much of the right thing but does not record it in a way an auditor can trust. The second is that quality knowledge lives in a few experienced heads rather than in a system, which is a business risk as much as a compliance one. Both point to the same conclusion: you need a controlled system of record before you scale the paperwork, not after. Suppliers already running an aerospace and defence ERP tend to close the evidence gaps far faster because the records already exist.

Step two: designing the QMS

With gaps identified, you design the quality management system that will run the business. The deliverables are the quality manual or its equivalent, the mandatory documented processes, the risk framework, and the objectives and metrics you will manage the business against. AS9100D does not demand a heavy paper manual, but it does demand that your processes are defined, resourced, measured and improved.

The single biggest design decision is how process interactions will be controlled. Aerospace quality is a chain: a customer order flows into a controlled bill of materials, into procurement of approved material, into production against a released routing, through inspection and special processes, and out as a traceable, certified shipment. Every link needs an owner, a defined input and output, and a record. Designing this on paper alone tends to create silos. Designing it around a single configured platform means the handoffs are enforced by the system.

This is also the stage to decide your approach to configuration management and traceability, because retrofitting them later is painful. Every part should be tied to a controlled revision, every batch to its raw material certificates, and every operation to the person and equipment that performed it. Our aerospace traceability software overview shows how genealogy from raw material to shipped part is captured, and the first article inspection software guide covers the FAI records AS9100D expects before production release.

Step three: implementation and evidence generation

A designed QMS earns nothing until people work to it and it starts generating records. This implementation phase is usually the longest, because it is where behaviour changes and where the evidence an auditor will sample is created. You cannot pass a certification audit on procedures alone. The certification body needs to see that your processes have been running long enough to produce real records: completed inspections, closed non-conformances, calibration certificates, management reviews and internal audits.

Most certification bodies expect at least three months of operating records before a Stage 2 audit, and many suppliers plan for more. During this window you should be capturing evidence continuously rather than reconstructing it. Key record streams to have running include:

• Non-conformance reports and corrective actions, with root-cause analysis and verified closure.
• Calibration and gauge records proving that measuring equipment is controlled and in date.
• Supplier approval and incoming inspection records, including material certificates.
• Traceability records linking finished parts to batches, operators and equipment.
• Internal audit reports covering the full scope of the QMS at least once.
• At least one management review that examines objectives, audit results and improvement.

This is exactly where an ERP earns its place. When non-conformances, calibration due dates and approvals live in a configured system, the evidence accumulates automatically and is retrievable in seconds. When they live in spreadsheets and email, the same evidence has to be hunted down during the audit, which is stressful and error-prone. Our calibration and gauge management capability keeps measuring equipment provably in control, a detail auditors check early.

Step four: the Stage 1 and Stage 2 audits

Certification is a two-stage audit conducted by an accredited certification body. Stage 1 is a readiness or documentation review. The auditor confirms that your QMS is designed, that the mandatory processes exist, that you have conducted internal audits and a management review, and that you are genuinely ready for a full assessment. Stage 1 often surfaces gaps you can still fix before the deeper audit, so treat it as a valuable checkpoint rather than a formality.

Stage 2 is the full certification audit. The auditor samples your processes against every applicable clause, follows real jobs through the system, interviews staff, and tests whether the QMS actually controls the work. Findings are graded, typically as major or minor non-conformances. A major finding usually means a required control is absent or has broken down and must be corrected and verified before the certificate is issued. Minor findings need a corrective-action plan but do not always block certification.

The suppliers who pass cleanly share one trait: they can retrieve evidence instantly. When an auditor asks to see the traceability for a specific serial number, the calibration status of the gauge that measured it, and the disposition of a related non-conformance, the answer should be a few clicks, not a search through binders. That retrievability is the practical payoff of building the QMS on a system of record. The full audit sequence looks like this:

Realistic timeline and cost drivers

Suppliers always ask two questions: how long and how much. The honest answer is that both depend far more on your starting point and internal discipline than on the certification body. For a small Bangalore aerospace supplier starting without a mature QMS, a realistic timeline is eight to fourteen months. A company already certified to ISO 9001 with good records can move faster. A company building quality discipline from scratch should plan for the longer end and resist the temptation to compress the implementation window, because you cannot fake operating records.

On cost, the certification-body fee is the visible number, but it is rarely the largest. The dominant costs are internal: the effort to design and run the QMS, staff time in training and internal audits, any consulting support, and above all the cost of rework when weak evidence forces you to redo work or delay the audit. A supplier that captures clean records from day one spends far less on the hidden costs than one that scrambles to reconstruct evidence in the final weeks. The main cost drivers, in rough order of impact for most SMEs, are:

• Internal labour to design, implement and operate the QMS.
• Rework and delay caused by missing or untrustworthy records.
• Consulting and training support, where used.
• System and tooling costs to capture evidence reliably.
• The certification-body audit fee and ongoing surveillance fees.

This cost profile is the strongest argument for treating your system of record as an early investment rather than an afterthought. Elite Tech Corporation is a Zoho Advanced Partner in Bangalore that configures Zoho and builds custom apps on AWS. We do not sell our own ERP; we implement a platform shaped around AS9100D so that conformance evidence is captured as a by-product of normal work. Our aerospace ERP implementation services are built around exactly this outcome.

How an ERP evidences conformance

The recurring theme across every stage of certification is evidence. AS9100D does not reward good intentions; it rewards demonstrable, retrievable proof that your processes are controlled. This is where a well-configured ERP changes the economics of both certification and the surveillance audits that follow every year. Instead of maintaining a parallel paperwork system for the auditor, you let the system that runs the business also produce the compliance record.

A platform configured for aerospace holds the specific records AS9100D auditors sample. It ties every part to a controlled drawing revision for configuration management. It links finished goods back through operations, operators and equipment to raw-material certificates for traceability. It manages calibration schedules so no out-of-date gauge slips into use. It routes non-conformances through root cause and verified closure. It records supplier approvals and incoming inspection. And it timestamps approvals so the audit trail shows who released what and when. For suppliers to defence public sector units, our ERP for defence PSU suppliers extends this with the documentation those buyers demand.

The strategic point is that certification is not a one-time event. Once you hold AS9100D, you must sustain it through surveillance audits and a recertification cycle, typically every three years. A supplier relying on manual evidence has to re-mount the same scramble each year. A supplier whose evidence is a live output of its aerospace and defence ERP in Bangalore simply exports the reports. Certification stops being a project and becomes a state you continuously occupy, which is exactly what your primes want to see.

Conclusion

AS9100D certification is best understood not as a document to write but as an operating standard to live. The suppliers who earn it quickly and keep it cheaply are the ones who face the evidence problem early: they build a disciplined QMS on a trusted system of record, then let that system generate the traceability, calibration, non-conformance and approval evidence that auditors sample. That reframes certification from a stressful annual project into a state your business continuously occupies. Elite Tech Corporation helps Bangalore aerospace suppliers get there by configuring Zoho and building custom AWS apps around the exact clauses of AS9100D, so the platform that runs your factory also proves your conformance. Whether you are starting your first gap analysis or preparing for a surveillance audit, the roadmap is the same: understand the standard, close the gaps, capture the evidence as you work, and let retrievability carry you through the audit.