ISO 9001 vs AS9100: What Changes for Aerospace Suppliers
ISO 9001 vs AS9100 explained: what AS9100 adds, which one your customers require, and how it affects coating and finishing suppliers on aerospace parts.
ISO 9001 vs AS9100: What Changes for Aerospace Suppliers
ISO 9001 is a general quality management standard that any organization can use. AS9100 is the aerospace version: it contains the ISO 9001 requirements and adds more for aviation, space and defense. If your customer is an aerospace prime or a tier-one supplier, expect AS9100 to come up in the contract. If your customers are in general manufacturing, telecom or power, ISO 9001 is usually the baseline.
This guide is written for engineers, quality managers and buyers who have to decide which standard a supplier needs to hold, and what each certificate tells you about the parts you receive.
professionalpowdercoating.ca
professionalpowdercoating.ca
Coating Quality for Aerospace Parts
Professional Powder Coating applies ISO 9001:2015 processes to complex components, with in-house quality testing and documented assurance.
AS9100 is built on ISO 9001 and keeps its structure, then adds aerospace requirements such as product safety, counterfeit-parts prevention, configuration management and tighter risk control.
An AS9100 system covers everything in ISO 9001, but an ISO 9001 system does not cover everything in AS9100.
AS9100 is not a law. Primes and agencies write it into contracts, so your customer decides whether you need it.
ISO does not certify anyone. Independent certification bodies audit and issue the certificates, so always check who issued yours.
For finishing suppliers, the standard matters most where it shows up on the shop floor: documented process control, testing records and traceable packaging.
ISO 9001 sets out requirements for a quality management system (QMS). It applies to organizations of any size or sector. ISO’s standard page describes it as a framework to establish, maintain and improve QMS processes, and it now lists the 2026 edition as current. Many certificates in circulation, including ours, were issued against the 2015 edition, and certification bodies run transition periods when a new edition appears.
The standard does not tell you how to coat, machine or weld anything. It asks whether you define your processes, control them, measure results, act on problems and keep improving.
AS9100
AS9100 is published by the International Aerospace Quality Group (IAQG) in the Americas as AS9100 and under the common name 9100 worldwide. The IAQG’s 9100 page describes it as a QMS standard for aviation, space and defense organizations with additional requirements over an ISO 9001 system. The same page offers a 9100 Gap Assessment Worksheet and Evaluation Guidance Material, which we come back to below.
The revision most suppliers hold today is AS9100D, released in 2016. Its text says it standardizes QMS requirements as far as possible and aims to improve quality, cost and delivery performance across the supply chain. In practice that means fewer company-specific supplier forms and more common ground between primes.
How the two relate
The two are not rivals. AS9100 follows the same high-level structure as ISO 9001, known as Annex SL, which NSF notes helps align and integrate management systems. DNV makes the same point: both are built on ISO’s harmonized structure, with AS9100 being more detailed and broader in scope for aerospace quality and safety.
That gives you a simple mental model:
Take the ISO 9001 clauses.
Keep every one of them.
Add aerospace-specific requirements inside those same clauses.
This is why a company with a healthy ISO 9001 system is closer to AS9100 than it looks, and why the reverse is not true.
What AS9100 adds to ISO 9001
According to DNV, AS9100 adds requirements for risk management in design, development and manufacturing, product safety across the product lifecycle, counterfeit-parts prevention, configuration management and project management. The AS9100D text also lists operational risk management and control of externally provided processes.
Here is how those additions read from a supplier’s desk.
Topic
ISO 9001
AS9100
Scope
Any industry
Aviation, space and defense
Structure
Annex SL
Same Annex SL, with added aerospace requirements
Risk
Risk-based thinking across the QMS
Operational risk management for product realization
Product safety
Not a dedicated topic
Required across the product lifecycle
Counterfeit parts
Not addressed specifically
Prevention required
Configuration management
Not addressed specifically
Required
Project management
General planning
Explicit requirement
External providers
Controlled as suppliers
Flow-down and control of externally provided processes, a major point for sub-tier finishers
Why the external-processes point matters to finishers
Coating, plating, heat treatment and blasting are often “special processes” that a prime sends to a sub-tier shop. Under AS9100, the prime has to control those providers. In practice that means requirement flow-down, approved-source lists, records for every lot, and sometimes customer audits. A coater with a disciplined ISO 9001 system is already practicing much of this: written procedures, calibrated test equipment, retained records.
Documentation is more flexible than people assume
A common worry is that AS9100 means a mountain of paper. NSF notes that the quality manual can take forms such as a video, an intranet or another medium that demonstrates, communicates and manages compliance. The evidence still has to exist; the format is flexible.
Does AS9100 cover ISO 9001?
In terms of requirements, yes: an organization that meets AS9100 meets the ISO 9001 requirements within it. Many AS9100 certification bodies issue both certificates from one audit, and some customers accept the AS9100 certificate wherever ISO 9001 is asked for. Check the wording in your contract rather than assuming.
The reverse fails. An ISO 9001 certificate says nothing about configuration management, counterfeit-parts controls or the aerospace risk requirements, so it will not satisfy a purchase order that names AS9100.
Who issues the certificate
ISO states that it does not perform certification. Independent third-party certification bodies (registrars), often accredited under the International Accreditation Forum, do the audits. For AS9100, a certification body also has to be authorized within the aerospace scheme, so a quality manager should ask the supplier for the certificate number, the issuing body and the scope statement. The scope matters: a certificate covering “machining” does not cover coating.
Audit cycle
According to NSF, AS9100 certification runs on a three-year cycle, with annual audits and a recertification audit at the end of the three years. Budget for that rhythm if you are the one certifying.
Which one do you need?
AS9100 is not a regulatory requirement. NSF says it is frequently specified by aviation authorities, government agencies and prime contractors as a condition of business. Wikipedia’s summary, which cites DNV, adds that major aerospace manufacturers widely require it from suppliers.
Use this as a decision guide:
Read the purchase order and the prime’s supplier quality manual. If it names AS9100 or a 9100-series standard, that settles it.
Check where you sit in the chain. Direct suppliers to primes face the strictest expectations. Sub-tier suppliers are often flowed down the requirement, sometimes only for specific processes.
Look at the part, not only the industry. A bracket for a flight-critical assembly is treated differently from an enclosure for ground support equipment.
Consider the other 9100-series standards. AS9110 targets maintenance organizations and AS9120 targets distributors. Choose the one that matches what you do.
If no customer asks for it, ISO 9001 is usually enough to prove a mature process, especially in telecom, power, manufacturing and data-center hardware.
What it costs to certify
Published price lists are rare, and any figure depends on your size. What is consistent across certification bodies is the method: price follows the number of audit days, and audit days follow headcount, number of sites and process complexity. Add internal costs on top: staff time, training, internal audits, calibration and any consultant support.
Two practical points. First, AS9100 audits take more auditor time than ISO 9001 for the same organization, so expect a higher fee than an ISO 9001 audit. Second, ask for quotes from more than one accredited body and request the audit-day calculation in writing so you can compare like for like.
Moving from ISO 9001 to AS9100
Start with a gap assessment. The IAQG supplies a 9100 Gap Assessment Worksheet and evaluation guidance material on its 9100 page. A sensible order:
Map your current ISO 9001 procedures against the AS9100 clauses and flag what is missing.
Close the usual gaps first: product safety awareness, counterfeit-parts prevention, configuration control, operational risk records and customer-specific flow-downs.
Train people, not only procedures. Auditors interview operators.
Run a full internal audit against AS9100, not ISO 9001.
Choose a certification body, schedule the stage 1 and stage 2 audits, and fix findings before the certificate issues.
A company with weak ISO 9001 basics (uncontrolled records, uncalibrated gauges, closed-out corrective actions that are never verified) should fix those first. AS9100 will expose them quickly.
Our perspective at Professional Powder Coating
We finish large, heavy and complex metal parts for AI data centers, aerospace, telecommunications, defense, power and other demanding sectors. We hold ISO 9001:2015 certification and run our process around it. Our quality documentation and in-house laboratory testing are part of every job, not an extra.
Our view is that the standard on the wall matters less than what it forces on the floor. When an engineer sends us a part, the questions that decide whether the finish lasts are the same under either standard: was the surface prepared to a defined level, is adhesion tested and recorded, can the next batch be coated the same way, and does the part arrive undamaged? That is why we put weight on surface preparation, repeatable cure control, quality testing protocols and protective packaging that gets components to assembly ready to use.
If your contract names AS9100 or a specific customer approval for coating, tell us before quoting. We will review technical feasibility and the documentation you expect against what we can supply, and we will say so plainly if a requirement is outside our current certification. Aerospace buyers are better served by an honest answer at the start than a surprise at first article.
— PPC Technical Team
What this means when you source coating
When you qualify a finishing supplier, do not stop at the certificate logo. Ask:
Which standard, which edition, which issuing body, and what scope?
Which tests are done in-house, and are results issued with each lot?
How is the process controlled between batches: cure records, film thickness, adhesion checks?
How are parts packed and shipped, especially large and delicate assemblies?
Can the supplier flow down your specification and show traceability?
For engineers specifying finishes on large components, our industrial powder coating services cover surface preparation, blasting, automated and batch coating, testing and packaging with logistics across North America. You can see how we document quality on our quality and certifications page, or send a drawing and specification through the automated coating services page if your run is repeat production.
Common misunderstandings
“AS9100 is just ISO 9001 with a different name.” It shares the structure, but the added requirements are real and audited.
“An ISO 9001 certified shop can coat aerospace parts.” Possibly, if your customer accepts it. The prime decides, usually through its supplier quality requirements.
“Certification guarantees good parts.” It shows that a system exists and is audited. Part quality still depends on process control, inspection and testing on your actual job.
“One standard fits every industry.” Medical devices, automotive and rail each have sector standards too. Aerospace is one of several.
FAQ
What is the main difference between ISO 9001 and AS9100?
ISO 9001 is a generic QMS standard for any industry. AS9100 includes all of it and adds aerospace requirements, including product safety, counterfeit-parts prevention, configuration management and operational risk management. It is more detailed and has a broader scope for aerospace quality and safety.
Is AS9100 mandatory?
No law requires it. Prime contractors, government agencies and aviation authorities often make it a condition of doing business, so in practice it is mandatory for many aerospace suppliers. Your purchase order or supplier quality manual states the requirement.
Does AS9100 include ISO 9001?
Yes, AS9100 is built on ISO 9001 and keeps its clauses, so meeting AS9100 means meeting the ISO 9001 requirements. An ISO 9001 certificate, however, does not show compliance with the added aerospace requirements.
How much does AS9100 certification cost?
The fee depends on audit days, which depend on headcount, sites and process complexity, plus your internal preparation costs. Request written quotes from several accredited certification bodies. AS9100 audits typically take more time than ISO 9001 audits, so expect a higher fee.
How long does certification last?
AS9100 certification follows a three-year cycle of annual audits and a recertification audit at the end. ISO 9001 certificates run on a similar surveillance and recertification pattern.
