In short
- IATF 16949 builds on ISO 9001 with automotive-specific requirements, and certification is granted to your organisation, not to software.
- APQP is the launch process; PPAP is the submission that proves the process can make conforming parts.
- Control plans define what is checked, how often and what happens when a result falls out of limits.
- Audit pain comes from retrieval, not from capability. Records at lot and part level change everything.
How the pieces fit together
Suppliers often treat IATF 16949, APQP, PPAP and control plans as separate obligations. They are one connected system.
- IATF 16949 is the automotive quality management standard, built on ISO 9001 with sector-specific requirements. Confirm the current edition and requirements with IATF Global Oversight rather than relying on secondary sources.
- APQP is the structured product launch process, running through phases from planning to production with defined gates.
- PPAP is the package submitted at the end of launch to demonstrate the process can produce conforming parts consistently.
- The control plan is the ongoing production discipline: which characteristics are checked, at what frequency, with what reaction when out of limits.
Get the relationship right and the paperwork becomes logical rather than arbitrary.
APQP in practice
APQP is commonly described in five phases: planning, product design and development, process design and development, product and process validation, and then feedback, assessment and corrective action. For a Hosur component supplier receiving a customer design, the weight sits in process design and validation.
What matters operationally is that each phase has gate evidence: feasibility confirmed, process flow and PFMEA completed, control plan drafted, tooling and gauges ready, trial run performed, capability demonstrated. When a launch runs late it is almost always because one of these was assumed rather than evidenced.
Our quality management page covers how these gates are normally tracked so a launch status is visible rather than reconstructed.
See how this runs on your own part numbers, schedule to dispatch.
PPAP submission levels
PPAP defines what is submitted and retained. Submission levels vary by customer and situation, and the customer specifies which applies. Broadly:
| Level | Typical expectation |
|---|---|
| Level 1 | Part submission warrant only |
| Level 2 | Warrant with samples and limited data |
| Level 3 | Warrant with samples and complete supporting data (most common) |
| Level 4 | Warrant and other requirements as defined by the customer |
| Level 5 | Warrant with samples and complete data reviewed at your site |
Confirm the required level and element list with each customer, since expectations differ and change. The practical point is that whichever level applies, the underlying evidence, dimensional results, material certificates, capability studies, control plan, PFMEA, gauge studies, must exist and be retrievable.
Control plans and the reaction plan
The control plan is where quality intent becomes daily behaviour. For each characteristic it states the specification, the measurement method, the sample size and frequency, and critically the reaction plan when a result falls outside limits.
The reaction plan is the part most often weak. A control plan that says a characteristic is checked hourly but does not say what happens when it fails leaves the decision to whoever is on shift. Written reaction rules, containment of suspect material, notification, and a hold on further dispatch, are what prevent a local problem becoming a customer escape.
Where control plan characteristics are configured in the system, capture happens at the specified frequency and out-of-limit results trigger the reaction rather than depending on someone noticing.
Want a fixed-scope ERP plan for your Hosur plant?
The records auditors actually ask for
Consider a typical audit line of questioning: show me the PPAP for this part; show me the control plan currently in force; show me the last month's inspection results for this characteristic; show me the calibration status of that gauge; show me an NCR from last quarter and how it was closed; show me the traceability for this lot.
In a paper system each question triggers a search. Where evidence is captured against the part and lot, each is a query. That difference decides whether audit preparation takes a week or an afternoon.
A useful self-test before any external audit: pick five random dispatched lots and try to produce their full history, inspection results, gauges used and calibration status, material certificates and traceability. Whatever that exercise exposes is what the auditor will find.
Where suppliers commonly slip
- Treating certification as a project. Intense preparation before audit, drift afterwards.
- Control plans that do not match reality. The document says one frequency; the floor does another.
- Closing 8Ds without verification. The corrective action is not complete until someone confirms it held.
- Ignoring gauge calibration. A result from an overdue instrument is not credible evidence.
- Records at batch level only. Batch records cannot answer lot-level or part-level questions.
None of these are exotic failures. They are how good intentions decay into findings, and each is preventable with ordinary discipline supported by a system that makes the right behaviour the easy one.
Key Takeaways
- IATF 16949, APQP, PPAP and control plans are one connected system, not four separate obligations.
- APQP gates need evidence; launches run late when a phase is assumed rather than evidenced.
- PPAP submission levels vary by customer, so confirm the level and element list for each part.
- The reaction plan is the weakest part of most control plans and the most valuable to strengthen.
- Audit pain is a retrieval problem; records at part and lot level change the experience entirely.
- Verify corrective actions rather than merely recording them.
Frequently Asked Questions
APQP is the structured launch process with phases and gates. PPAP is the submission package at the end of that process demonstrating the process can produce conforming parts consistently.
The customer specifies it, and it varies by customer and situation. Level 3 is common but you should confirm the level and required element list per part with each customer.
No. Certification is granted to your organisation by a certification body based on your quality system. Software makes conformity demonstrable and audits far less painful, which is a different claim.
A clear reaction plan. Stating what is checked and how often is only half of it; what happens when a result falls out of limits is what prevents a customer escape.
A dimensional result produced by an instrument outside its calibration period is not credible evidence, so tracking calibration due dates protects the integrity of everything you have recorded.
Retention depends on the standard edition and customer-specific requirements, so confirm both. Practically, retaining lot-level records for the full warranty period plus a margin is sensible regardless.
An eight-discipline problem-solving process following a nonconformance. They most often fail at the verification step, where nobody confirms the corrective action actually held, so the defect returns.
Pick five random dispatched lots and try to produce their complete history end to end. Whatever that exercise exposes is what the auditor will find.
Yes, and it is worth doing. Characteristics configured with frequency and limits mean capture happens as specified and out-of-limit results trigger the reaction automatically.
Generally yes. Process, material, tooling or location changes commonly require re-submission. Confirm the specific triggers with each customer.
Conclusion
IATF 16949 compliance is decided in the ordinary months between audits, not in audit week. Most established Hosur suppliers already have the engineering competence and inspection capability to conform. What separates a smooth audit from a stressful one is whether conformity can be demonstrated on demand: PPAP evidence retrievable per part, control plans that match what the floor actually does, inspection results captured at the stated frequency with a real reaction plan, gauges in calibration, and 8Ds closed with verification. Build that habit and certification stops being a periodic scramble. Confirm current standard editions and customer-specific requirements directly with IATF and your customer, because both change.
Want PPAP and control-plan evidence retrievable in minutes?
Talk to our Hosur team, or book a free demo and see it on your own part BOM.