ISO 9001 vs AS9100: what aerospace and space suppliers need to know
See exactly where AS9100D extends ISO 9001:2015 for aerospace suppliers, from counterfeit parts prevention to configuration management, and learn which standard your customers require.
If you supply parts, assemblies, or services to the aviation, space, or defence sectors, you will encounter both ISO 9001 and AS9100. They are not competing standards. AS9100 (current revision: AS9100D, published 2016) incorporates ISO 9001:2015 in full and then adds requirements specific to the aerospace supply chain. Knowing exactly where AS9100 extends the baseline helps you scope your quality management system, whether you pursue certification to one standard or both.
The Relationship Between ISO 9001 and AS9100
ISO 9001 is the international standard for quality management systems (QMS). It applies across industries. Its structure (the Annex SL high-level structure) covers context of the organisation, leadership, planning, support, operation, performance evaluation, and improvement. Any organisation, from a bakery to a satellite manufacturer, can certify to ISO 9001.
AS9100 is published by the International Aerospace Quality Group (IAQG) through its regional bodies, including SAE International in the Americas. It reproduces every clause of ISO 9001:2015 and inserts additional aerospace requirements directly into the relevant clauses. An AS9100-certified organisation satisfies ISO 9001 requirements. The reverse is not true.
Where AS9100 Adds Requirements
The additional requirements cluster around a few themes that reflect the reality of aerospace manufacturing: the consequences of failure are severe, supply chains are deep and global, and product lifecycles can span decades. Below are the most significant extensions.
1. Risk Management Beyond ISO 9001 Clause 6.1
ISO 9001 requires organisations to determine risks and opportunities and plan actions to address them, but it does not prescribe a specific method. AS9100D requires documented risk management throughout product realisation, including operational risk assessment at the planning stage. Suppliers must show that risk has been evaluated for each product or project, not just at the system level. This connects directly to safety and reliability expectations in aviation and space programmes.
2. Configuration Management
ISO 9001 addresses design and development changes (Clause 8.3.6) in general terms. AS9100D adds explicit configuration management requirements. Suppliers must control the identity, status, and traceability of products against their design and configuration documentation. In practice, this means tracking every revision of a drawing, every deviation, and every concession across the product lifecycle. For organisations used to a simpler change-control process, this is a significant addition.
3. Counterfeit Parts Prevention
This requirement has no equivalent in ISO 9001. AS9100D (Clause 8.1.4) requires organisations to establish a process to prevent the use of counterfeit or suspect counterfeit parts. The standard calls for controls on purchasing from authorised and approved sources, methods for detection, and a process for reporting and quarantining suspect parts. A single counterfeit fastener can ground a fleet, so this clause carries real operational weight.
4. Product Safety and Special Requirements
AS9100D names product safety as a specific concern. Organisations must identify and manage safety-related items, including key characteristics designated by the customer or a regulatory authority. Where ISO 9001 addresses conformity in broad terms, AS9100D requires specific attention to critical items, safety items, and key characteristics, with corresponding documentation and monitoring.
5. First Article Inspection (FAI)
ISO 9001 requires inspection and verification. AS9100D references first article inspection as a defined activity. FAI, often conducted per AS9102, provides objective evidence that the manufacturing process produces a conforming part. The standard requires FAI to be planned, performed, and documented. For new production runs or after significant process changes, this is a mandatory gate.
6. On-Time Delivery and Customer Notification
AS9100D adds requirements for monitoring and measuring on-time delivery performance. It also requires organisations to notify the customer, and where applicable obtain customer approval, when product or processes have changed or when nonconforming product has been delivered. These notification requirements go beyond the general customer-communication requirements in ISO 9001 Clause 8.2.1.
7. Supplier Management and Flow-Down
ISO 9001 requires evaluation and selection of external providers. AS9100D extends this to flow-down of applicable requirements to the supply chain, including statutory, regulatory, and customer requirements. Suppliers must define the process for managing supply chain risk and maintain records of supplier approval status. The IAQG's OASIS database is commonly used to verify supplier certification status.
Certification: Two Audits or One?
Because AS9100D incorporates ISO 9001:2015 in full, a single AS9100D certification audit covers both standards. Certification bodies accredited for AS9100 audits issue a certificate that references both AS9100D and ISO 9001:2015. Organisations that do not serve aerospace customers directly can certify to ISO 9001 alone.
AS9100 audits are typically longer and more detailed than ISO 9001 audits. The IAQG mandates specific audit procedures via AS9101 and sets auditor qualification requirements. Expect greater scrutiny of process-level documentation and objective evidence.
Which Standard Do You Need?
If your customers are in aviation, space, or defence, they will almost certainly require AS9100D certification. Many OEMs and tier-one integrators will not approve a supplier without it. If you operate outside aerospace but want a robust QMS foundation, ISO 9001 is the appropriate choice.
Some organisations start with ISO 9001 and later extend their QMS to meet AS9100 requirements. This is a practical path. The shared clause structure means an ISO 9001 system provides a documented starting point, and the AS9100 gap analysis becomes a defined scope of work rather than a blank-page exercise.
How ComplyTrain Supports ISO 9001 and AS9100
ComplyTrain provides QMS functionality for both ISO 9001 and AS9100. You select the standard you are working to in the ComplyTrain interface. Selecting AS9100 activates the aerospace-specific requirements described above, including configuration management, counterfeit parts prevention, product safety and key characteristics, first article inspection records, and supplier flow-down. This lets you manage a QMS built to the full AS9100D requirement set, not only the ISO 9001 baseline.
For either standard, the platform supports document control, nonconformance tracking, corrective action workflows, and audit management. ComplyTrain does not certify organisations to either standard. Certification is performed by accredited third-party certification bodies.
The platform uses a silo-model tenant isolation architecture (schema-per-tenant, Cognito-pool-per-tenant, bucket-per-tenant) and is hosted in the EU on AWS eu-central-1 (Frankfurt). For organisations that need to keep quality records in a controlled, isolated environment, this architecture provides clear data boundaries between tenants.
You can see how the QMS module maps to clause requirements on our product page at /product/qms, or review our ISO 9001 standards overview at /standards/iso-9001 for a clause-by-clause breakdown.
If you are evaluating your QMS readiness for ISO 9001 or preparing for an AS9100 gap analysis, request a walkthrough of ComplyTrain's QMS module at /contact to schedule a 30-minute demo.