AQAP-2000 NATO policy for quality through the life cycle

What it is

AQAP-2000 is NATO's top-level policy for quality across the whole life of a defence product, from concept to disposal. It is Edition D, Version 1, promulgated November 2023, and it sets out the "integrated systems approach" that the rest of the Allied Quality Assurance Publication (AQAP) family works within. It is a policy statement, not itself a set of testable requirements: it explains why NATO Nations run government quality assurance the way they do, and it hands the actual requirements to other publications.

Who it binds, and how it reaches a supplier

The policy is addressed directly to NATO Programmes, NATO Nations and NATO Organisations. Interoperability Platform (Partnership for Peace) nations are only invited to follow it, and are not obliged to. Within that framework, an acquirer is a governmental or NATO body that enters a contractual relationship with a supplier, and the supplier is the party responsible for demonstrating compliance with the resulting contractual requirements.

This is the part readers most often get backwards: the policy binds nations, not companies. A NATO Nation is bound as Alliance policy from the moment it is promulgated. A supplier is bound only once an acquirer's contract invokes a specific AQAP as a quality requirement, because acquirers are required to use the common contractual quality requirements defined in the AQAPs. For a supplier this is a contract clause, not a document they sign up to directly, and it can arrive at any stage of the acquisition process, from pre-concept through to retirement.

What it actually requires

An organisation working within the policy runs its quality activity through a Quality Management System built on ISO 9000 principles: it determines its objectives and the processes needed to reach them, and seeks assurance through monitoring, measuring and analysing its own performance.

Acquirers must commit resources to quality assurance proportionate to the complexity, criticality and risk of the acquisition programme. NATO Nations specifically must ratify and implement STANAG 4107, and implementing STANAG 4107 requires them to have adequate infrastructure and processes for their National Quality Assurance Authority (NQAA), appoint a Government Quality Assurance (GQA) focal point, establish competent GQA representative resource and implement AQAP-2070, monitor and improve delivery of Government Quality Assurance Surveillance (GQAS), promote the contractual use of AQAPs, and support NATO AC/327 Working Group 2. NATO Organisations carry a parallel duty to appoint their own quality focal point and promote AQAP use through their supply chains.

GQA itself gives an acquirer confidence that a supplier will meet its contractual quality responsibilities. It runs from risk-based thinking in the acquisition strategy, through supplier selection and monitoring performance during contract execution, to acceptance of the product, and it extends to post-delivery activities such as fault investigation. GQAS, the surveillance activity, can happen at any level of the supply chain, is based on a risk assessment, and draws on objective evidence from the supplier, sub-suppliers and the GQA activity itself.

What GQAS is told not to do matters as much as what it checks. It should not replicate the broader quality-management-system (QMS) assurance that accredited third-party certification already provides, and it should not replace the supplier's own quality control or inspection activities. It is a check on the supplier's capability, performance and application of its QMS against the specific contract, and irrespective of any accredited certification the supplier holds elsewhere, GQAS can still result in the supplier's QMS being rejected in relation to that contract.

Mutual GQA is the case where one NATO nation provides this surveillance on behalf of another nation, or of a NATO Organisation. It can only be provided by an NQAA, only once a contractual arrangement is in place, and only for nations that have ratified STANAG 4107. It does not include any kind of product certification, such as airworthiness or seaworthiness: compulsory or legal requirements of that kind stay the responsibility of the acquirer and supplier, not of GQA.

How Government Quality Assurance is evaluated, and why "AQAP certified" is not a thing

AQAP-2000 states plainly that no AQAP certification scheme exists at NATO level. NATO does not publish a sector scheme, does not have arrangements to award certification, and does not recognise AQAP certification. What exists instead is Government Quality Assurance Surveillance: a National Quality Assurance Authority's staff, or another government body's staff, assess a supplier against its contract, not against this document, and the document sets no fixed audit cycle. Surveillance is proportionate to the complexity, criticality and risk of the programme, so its frequency and depth follow the acquirer's risk assessment rather than a calendar.

NATO separately recognises the relevance of ISO 9001 and AS EN 9100 series quality-management-system certification, so long as it comes from a body accredited by an International Accreditation Forum recognised National Accreditation Body. That certification gives confidence in the organisation's QMS, but it does not imply the product or service itself is certified, and it is a different, decoupled mechanism from GQA. Some individual nations do offer their own AQAP certification or confirmation as a national supplier-assessment choice, but that is a national arrangement, not something AQAP-2000 defines or NATO recognises, and acquirers are told they must not use AQAP certification as a discriminator at supplier selection, precisely because it is not available to every potential supplier.

The publications this policy points to

AQAP-2000 sits above a family of documents that carry the actual requirements. It is carried by STANAG 4107, the agreement NATO Nations ratify to implement mutual government quality assurance and the use of the AQAPs. It names AQAP-2110 for its definition of "product," and points to AQAP-2070 for further guidance on risk in the context of GQA. Life-cycle terms used throughout come from AAP-48, which defines Life Cycle Processes, and AAP-20, which defines the NATO Life Cycle Model. It also recognises ISO 9001 and AS9100 quality-management-system certification as relevant across the defence life cycle, and notes that the contractual AQAPs invoke those civil standards and add NATO-specific requirements on top.

Where to get it

AQAP-2000 is published by the NATO Standardization Office and, like all NATO standardization documents, it is free of charge. NATO's Standardization Document Database is the authoritative source; we credit NATO for the catalogue and do not sell or host a copy of the document ourselves.

Standards it references

• AQAP-2110Background
• AQAP-2070Background
• AAP-48Background
• AAP-20Background
• ISO 9001Background
• EN 9100Background