Field Guide · Aerospace
My customer just told me I need AS9100 — now what?
Last updated: August 2026
A plain-English triage guide for the small shop that just got the aerospace flow-down email. What AS9100 actually adds to ISO 9001, what to do in the first 30 days, and the findings that really get small suppliers written up.
What is AS9100 and do I need it?
That distinction is the first question to ask before you spend a dollar. Some primes require a certificate from an accredited registrar; others accept "compliant to AS9100" — you run your system to the standard and prove it at their audit. The prep overlaps almost completely, but certification adds registrar selection, Stage 1 and Stage 2 audits, and real calendar time.
The part that should lower your blood pressure: if you already run anything like an ISO 9001 system — even uncertified — you're not starting over. AS9100 contains the entire text of ISO 9001:2015. The aerospace additions are the delta, and that's where every hour of prep should go.
What does AS9100 add on top of ISO 9001?
In practice, six additions carry most of the weight at a small supplier:
- First Article Inspection (FAI) per AS9102. Dimension-by-dimension proof that your first production part meets every drawing requirement — the document a new aerospace customer asks for first.
- Counterfeit-part and material control 8.1.4. Buy from approved sources, verify certs, and control what happens if something suspect turns up.
- FOD prevention. Foreign Object Debris — chips, hardware, tools, rags — controlled so it can't end up inside a flight article. Auditors walk the floor looking for it.
- Configuration management 8.1.2. Proof you built the part to the right revision, with no old rev quietly alive on the floor.
- Product safety and risk management. Identifying risk in your processes up front, not just reacting to escapes.
- Tighter traceability. ISO 9001 asks for traceability "where required." Aerospace requires it, full stop: heat lot, cert of conformance (CoC), who ran it, which job it shipped on.
Notice what's not on the list: a thicker quality manual. The additions are records and floor discipline.
The customer wants AS9100 — a 30-day triage plan
I've watched a shop get that flow-down email on a Friday and spend the weekend pricing consultants — before anyone asked the customer whether they meant certification or compliance. The answer turned out to be compliance, and it cut the job roughly in half. Ask first.
- Days 1–2 — Ask the customer exactly what they need. Certification or compliance? Which revision? What flow-downs come with their POs? FAIs on every new part number? Get it in writing — it shapes everything else, and asking well makes you look like a supplier who's done this before.
- Week 1 — Gap-assess the aerospace deltas. Don't re-audit the whole standard. Map yourself against the additions only: FAI, counterfeit control, FOD, configuration management, traceability, risk. Score red/yellow/green, assign an owner and a date to every red. Our first-audit field guide covers the ISO 9001 base; this page is the aerospace layer.
- Week 2 — Stand up First Article Inspection. Get an AS9102-format FAI report ready and run one on a real part. Learn the re-run triggers now: a design change, a process change (method, tooling, materials, or location), or a two-year lapse in production all require a new or partial FAI.
- Week 2–3 — Tighten traceability and receiving. Pick a finished part at random and try to pull its heat lot and CoC in under a minute. If you can't, fix the job traveler and receiving record until you can. Add counterfeit checks at receiving: approved sources, cert verification, quarantine for anything suspect.
- Week 3 — Close the record gaps auditors always find. Calibration records 7.1.5 for every tool that touches the part. Competence records 7.2 — especially special processes, where the operator's qualification is the control. A written FOD practice the floor actually follows.
- Week 4 — Dry-run and commit. Walk one job end to end — PO → receiving → traveler → FAI → inspection → shipment — asking "show me the record" at every step. Close what you find with evidence 8.7 10.2. If certification is required, contact accredited aerospace registrars now; calendars book out, and the certificate is what lists you where primes look suppliers up.
The audit findings that actually bite small aerospace suppliers
First Article Inspection — missing, or never re-run (AS9102)
The classic finding I see isn't "no FAI" — it's an FAI from three years ago on a part whose process changed since. Auditors check the triggers: design change, process change (method, tooling, materials, location), or a two-year lapse in production. Any of those makes the old FAI stale. File FAIs by part number and revision, and note the trigger check on the traveler when a job restarts.
Traceability — "which heat lot is in this part?"
The test is speed. An auditor points at a finished part and asks for the heat lot and the mill cert behind it. A shop that has the paper somewhere but needs twenty minutes to find it gets written up the same as a shop that doesn't have it. The fix is structural: the traveler carries the lot number from receiving to shipment, and the CoC files by lot.
Calibration records 7.1.5
The same finding that fails small shops on ISO 9001, and aerospace auditors are less forgiving. Records, not just stickers — each instrument, its calibration date, due date, and what happened when one came back out of tolerance.
Counterfeit-part control and FOD — the aerospace-specific gaps
These get skipped because they're new to shops coming from ISO 9001. Counterfeit control 8.1.4 is mostly purchasing discipline: approved or authorized sources, cert verification at receiving, quarantine and report anything suspect. FOD is floor discipline: tool control, debris cleanup at the point of work, packaging that can't shed into the product. Both need to be written down and visibly happening when the auditor walks the floor.
Corrective actions that never closed 8.7 10.2
Nonconformances get logged, corrective actions get opened, and the trail goes cold. The finding is the gap between "we fixed it" and evidence the fix stuck — a closed CAPA with a verified root cause and a re-check weeks later. One fully-closed corrective action beats ten open ones with good intentions.
Special-process training and competence 7.2
For special processes — welding, heat treat, NDT, plating — the operator's qualification is the process control, because you can't fully inspect the result into the part. A training matrix with sign-offs and current quals answers the question in one page. Some customers also flow down Nadcap accreditation for special processes on top of AS9100 — another reason step one is asking the customer exactly what they need.
ISO 9001 vs AS9100 — what's actually different?
| Area | ISO 9001:2015 | AS9100 adds |
|---|---|---|
| First article inspection | Not required | Required per AS9102, with defined re-run triggers (design change, process change, 2-year lapse) |
| Traceability | "Where required" 8.5.2 | Expected as standard practice — heat lot, CoC, and build records retrievable on demand |
| Counterfeit parts | Not addressed | Documented prevention process 8.1.4 — approved sources, cert verification, suspect-material control |
| FOD prevention | Not addressed | Foreign-object debris prevention on the floor and in packaging |
| Configuration management | Basic document control | Formal configuration management 8.1.2 — right revision, provable, floor-wide |
| Product safety | Not addressed as such | Explicit product-safety responsibility through the product lifecycle 8.1.3 |
| Risk management | Risk-based thinking (general) | Operational risk management in planning and production |
| Supplier flow-down | Supplier control 8.4 | Customer and regulatory requirements must flow down to your own suppliers |
The pattern: ISO 9001 asks whether you have a system. AS9100 asks whether that system can protect a part that ends up on an aircraft — provable with records, on demand.
Start with the free readiness check
Before you buy anything or call a registrar, find out where you stand. The free 12-question readiness assessment scores your shop and returns a prioritized gap punch-list mapped to real clauses — 2 minutes, no signup to start. The free 6-clause gap-assessment worksheet (.docx) is the paper version.
Both free. Questions? nick@morgenisgroup.com
What does AS9100 certification cost?
Published ranges for AS9100 are wide enough to be useless on their own — you will see “$15,000 to $40,000” quoted with no explanation of what moves the number. The useful way to think about it: AS9100 is priced as ISO 9001 plus a defined set of aerospace adders. Start from the ISO 9001 number for your headcount, then add the items below.
Start from the ISO 9001 baseline
AS9100 contains all of ISO 9001, so the ISO 9001 cost structure is your floor. Our free cost calculator gives a number for your shop, and the underlying figures are published openly as a CC BY 4.0 dataset — a 10-person shop building it in-house runs roughly $3,200–$7,500 in year one, most of it registrar Stage 1 + Stage 2 fees.
Then add the aerospace-only costs
- OASIS listing — $250 per year, and it is not optional. Every AS9100, AS9110 and AS9120 certificate has to appear in the IAQG’s OASIS database, and IAQG charges an annual per-company fee for it. Your certification body collects it and passes it through, so it usually shows up buried in a registrar invoice rather than as a line item you shopped for. An ISO 9001-only shop pays none of this.
- More audit days. Audit duration for the aerospace scheme is set by the IAQG’s own rules, not purely by headcount, and there is simply more to sample: counterfeit-part control, foreign object damage, special-process approvals, first-article inspection, and on-time-delivery/quality performance to your customers. Audit days are the single biggest driver of the registrar bill.
- A smaller pool of certification bodies. Your registrar must be recognised to certify to the aerospace scheme, which is a much shorter list than for ISO 9001 — less price competition, and sometimes more travel cost to get an auditor to you.
- Evidence you may not already keep. If your shop has no FAI reports, no FOD program, no counterfeit-part procedure and no special-process approvals, that is build work before Stage 1 — whether you do it internally or pay for it.
What registrars actually publish
For small and mid-size suppliers (under 250 employees), published certification-body pricing puts initial AS9100 certification at roughly $8,000–$30,000 including the audit and registration, with annual surveillance audits around $3,000–$15,000. Those are registrar-side figures from a certification body’s own published guidance, not our measurements, and the spread is real: it is almost entirely audit days, number of sites, and process complexity.
Sources: OASIS annual fee per IAQG, as described by an accredited certification body (2025); SME certification and surveillance ranges per Amtivo’s published aerospace certification cost guidance. Always get quotes from two or three registrars — price and scheduling both vary.
The part you control
You cannot negotiate the OASIS fee and you have limited leverage on audit days. What you do control is how much evidence exists before the auditor arrives — a shop that walks into Stage 1 with its FAI reports, calibration records, training matrix and traceability already running spends its audit days being audited, not explaining gaps. That is the difference between a clean certification and a second visit.
The documents to get in place first (and where to get them)
You can build all of these yourself in Word, or start from an editable template already laid out to the right clause and fill in your shop's specifics. For an aerospace flow-down, this is the priority order:
Every template is editable Word (.docx), instant download, commercial-use license included. The prices shown are each document’s value inside The Working Quality System — all 11 ship together for $69, which is where every card above goes. Built for fabrication, machining, welding, composite, and contract-manufacturing shops. New to audits entirely? Start with the first-quality-audit field guide.
Frequently asked questions
What is AS9100 in simple terms?
AS9100 is the aerospace industry's quality-management standard. It contains the full text of ISO 9001:2015 and adds aerospace requirements on top — First Article Inspection (AS9102), counterfeit-part prevention, FOD control, configuration management, product safety, and tighter traceability. ISO 9001 is the foundation; AS9100 is that foundation plus everything needed when the part ends up on an aircraft.
My customer asked for AS9100 — do I have to get certified?
Not always. Some customers require certification by an accredited registrar; others accept compliance — running your system to the standard and proving it at their audit, no registrar involved. Ask, in writing, before you spend anything. The prep work is nearly identical, but certification adds registrar fees, Stage 1 and Stage 2 audits, and months of calendar time.
How long does it take a small shop to get AS9100 certified?
Plan in months, not weeks. A small shop with a working ISO 9001-style system typically needs several months to close the aerospace gaps, build audit evidence, and get through a registrar's Stage 1 and Stage 2 audits; starting cold, closer to a year. Being compliant enough to pass a customer's own audit can happen much faster — the 30-day triage plan above is that path.
When does a First Article Inspection have to be redone?
Under AS9102, an FAI must be redone (fully or partially) when the design changes, when the manufacturing process changes — method, tooling, materials, or location — or when production lapses for two years. A stale FAI after a process change is one of the most common findings at small aerospace suppliers.
How much does it cost to get AS9100 certified?
Think of it as the ISO 9001 cost for your headcount plus aerospace adders. Published certification-body pricing for suppliers under 250 employees puts initial certification at roughly $8,000–$30,000 including audit and registration, with annual surveillance around $3,000–$15,000. On top of that, every aerospace certificate carries a mandatory $250-per-year IAQG OASIS listing fee that an ISO 9001-only shop never pays. The biggest variable is audit days, which scale with headcount, sites and special processes — see the cost breakdown above.
Is AS9100 much harder than ISO 9001?
It's stricter, not alien. Every ISO 9001 requirement carries over unchanged; the additions are specific and learnable: FAI, counterfeit control, FOD, configuration management, on-demand traceability. The hard part usually isn't understanding the additions — it's the record-keeping discipline to prove them every day.
Do I need a consultant for AS9100?
Not necessarily. A small shop can close most of the gap itself with a focused gap assessment and documents laid out to the right clauses. Outside help earns its fee mainly on the registrar-facing steps of full certification. Start with the free readiness assessment and see how big your gap actually is first.