AS9100 certification requirements center on one thing: a documented quality management system that meets every ISO 9001 clause and adds the aerospace controls the standard demands, from risk and product safety to configuration management, counterfeit part prevention, first article inspection, and special process control.
In the systems we build for aerospace and manufacturing clients, the certificate is never the hard part. The hard part is proving the system runs on its own, with records, internal audits, and a management review that show the QMS working before an auditor ever walks in.
Key takeaways
- AS9100 is ISO 9001 plus aerospace-specific requirements published by SAE and the IAQG.
- You need a fully documented QMS, not just a written manual, with evidence it operates day to day.
- Aerospace additions include risk management, product safety, configuration management, counterfeit part prevention, first article inspection, and special processes.
- Certification means passing a two-stage audit by an accredited certification body, then keeping it through surveillance audits.
What AS9100 certification requirements actually cover
AS9100 certification requirements start with the full ISO 9001 quality management framework: context of the organization, leadership commitment, planning, support, operation, performance evaluation, and improvement. On top of that base, the aerospace standard layers controls written for flight-critical work. You cannot pass by meeting only the ISO 9001 clauses. The auditor checks both the general QMS and the aerospace-specific requirements, and a gap in either area can hold up the certificate.
The aerospace additions that trip up most first-time applicants include risk management applied to operational processes, product safety and awareness of counterfeit parts, configuration management so every revision is controlled, first article inspection to verify a new or changed part matches its design records, and control of special processes such as heat treating, welding, or non-destructive testing. Our AS9100 overview breaks down how these clauses connect inside a single system rather than as separate paperwork exercises.
Who needs to be AS9100 certified?
Organizations that design, produce, or maintain products for the aviation, space, and defense supply chain are the ones that need AS9100. In practice, most primes and major suppliers list it as a purchase-order condition, so if you want to win or keep contracts with companies like Boeing, Lockheed Martin, or their tier-one suppliers, certification is effectively mandatory. Distributors follow AS9120, and maintenance organizations follow AS9110, but the core QMS requirements read from the same family.
How to get AS9100 certified: the step sequence
Getting certified follows a predictable path. The timeline usually runs six to twelve months depending on how mature your current processes are.
- Run a gap analysis against the AS9100 clauses to find what is missing.
- Build or update the documented QMS, including procedures, work instructions, and controlled records.
- Assign process owners and train the team on the new system.
- Operate the QMS for a defined period so real records accumulate.
- Complete a full cycle of internal audits covering every clause and process.
- Hold a management review where leadership evaluates QMS performance and acts on the findings.
- Correct any nonconformities and verify the corrective actions worked.
- Pass the Stage 1 readiness audit, where the certification body reviews your documentation.
- Pass the Stage 2 audit, where the auditor tests the system in operation and issues the certificate.
ISO 9001 base versus the AS9100 additions
The table below shows where AS9100 goes beyond ISO 9001. Both sets of requirements apply at once, and the aerospace column is where certification most often stalls.
| Area | ISO 9001 base requirement | AS9100 aerospace addition |
|---|---|---|
| Risk | Risk-based thinking across the QMS | Formal operational risk management with documented actions |
| Product safety | Not specifically required | Planned processes to manage product safety |
| Parts integrity | General control of nonconforming output | Counterfeit part prevention and reporting |
| Change control | Control of documented information | Configuration management across the product lifecycle |
| Verification | Monitoring and measurement | First article inspection for new or changed parts |
| Production | Control of production | Validation and control of special processes |
How much does AS9100 certification cost, and how hard is it?
Cost varies with company size, process complexity, and the certification body you choose, so a small shop and a multi-site manufacturer will see very different quotes. The certification body audit is only one line item. The larger investment is usually the internal work to build the QMS, train people, and run it long enough to generate evidence. Difficulty tracks the same factors. A company with orderly processes and good records finds the aerospace additions manageable, while an organization starting from informal habits has more to formalize. The system does not need to be complicated, but every requirement has to be met and shown to work.
The OQS AS9100 readiness checklist
These are the checks we run before recommending any client book a Stage 2 audit. They come from certification projects, not a template, and they catch the gaps auditors flag most.
- One full internal audit cycle is closed. Every clause and process has been audited at least once, with findings recorded and corrective actions verified as effective.
- Configuration and first article records agree. The current part revision, its design records, and the first article inspection report all match, with no orphaned change notices.
- Special processes are qualified. Any welding, heat treat, coating, or testing is validated, with operator qualifications and process parameters on file.
- Management review produced decisions, not minutes. Leadership reviewed QMS performance and assigned actions with owners and dates, showing the system drives the business.
- Counterfeit and safety controls are live. Purchasing, receiving, and product safety planning show working controls, not just a written policy.
AS9100 certification requirements FAQ
How hard is it to get AS9100? The difficulty depends on how mature your processes already are. The standard itself is achievable for any disciplined shop, but you have to build a real system, run it, and document it, which takes months of consistent effort rather than a single push before the audit.
How long does AS9100 certification stay valid? A certificate is typically valid for three years, subject to annual surveillance audits. You keep it by maintaining the QMS, closing findings, and passing a full recertification audit at the end of the cycle.
Do I need ISO 9001 first? No. AS9100 already contains the complete ISO 9001 text, so a single AS9100 certification covers both. You do not certify to ISO 9001 separately.
Can we prepare without a consultant? Many companies do, especially when they have quality staff and time. A consultant shortens the path and reduces the risk of a failed audit. Our AS9100 readiness and consulting service and our team are available if you want a second set of eyes, and you can contact us to talk through your gaps.
Ready to meet your AS9100 certification requirements?
Optimal Quality Solutions helps aerospace, defense and manufacturing teams build audit-ready quality systems, with a 98% first-time certification success rate and 15+ years of hands-on experience.


