Platform
Modules
By sector
By sector
By standard
Blog
News
Events
STANAG 6538
National authorities implementing Allied joint doctrine, and defence suppliers who meet AJP-3.23 named in a contract or tender
STANAG 6538 is NATO's agreement committing member nations to implement AJP-3.23, Allied joint doctrine for countering weapons of mass destruction in military operations; it binds nations rather than suppliers.
STANAG 6538 is a short agreement, not the doctrine it exists for. That doctrine is AJP-3.23, Allied joint doctrine for countering weapons of mass destruction in military operations, edition A, and everything substantive is in the publication rather than the cover. The agreement's own purpose is to provide guidance to military authorities and inform NATO political and civil authorities of their recommended roles in countering weapons of mass destruction efforts within a joint and multinational framework.
That distinction is the thing readers most often have wrong about a STANAG. It is the instrument by which NATO nations commit to implement a standard. A nation ratifies it, implements it domestically, and a company meets it only because a contract or a tender says so. Ratification and implementation are separate steps, a nation can ratify with reservations, and so "is STANAG 6538 mandatory" has no general answer, only a contractual one.
The agreement is "effective upon receipt for use by the participating nations and NATO bodies", and nations are invited to examine their ratification and tell the NATO Standardization Office what they intend. Responses are recorded in NATO's Standardization Document Database.
This STANAG and AJP-3.23 are implemented once the procedures set out in AJP-3.23 have been written into national regulations, manuals and training. Allies and NATO bodies report their implementation details through the electronic reporting tool (e-Reporting), and partner nations are invited to do the same.
It describes no certification, no notified body, no government quality assurance and no audit of any organisation. The only check it names is of itself: a review in line with AAP-03, with the result recorded in the NSDD. And it places no obligation on a supplier: nothing in the text addresses a manufacturer, a contractor or a product.
This is Edition 1, promulgated 20 September 2023. "This STANAG does not supersede any document." It covers AJP-3.23, Edition A, and lists seven other STANAGs as related, each one the cover for an Allied joint doctrine publication in the same family: STANAG 2437 (AJP-01), STANAG 2490 (AJP-3, the conduct of operations), STANAG 2451 (AJP-3.8, comprehensive chemical, biological, radiological and nuclear defence), STANAG 2528 (AJP-3.14, force protection), STANAG 2616 (AJP-3.22, stability policing), STANAG 2526 (AJP-5, the planning of operations), and STANAG 2596 (AJMedP-7, CBRN medical support doctrine).
There is no compliance work in STANAG 6538 for a company, so there is nothing here to map onto a platform, and we will not pretend otherwise. Where it becomes relevant to a defence supplier is at one remove: a programme or a tender may expect familiarity with how a customer frames counter-WMD roles and responsibilities, and what a customer can reasonably ask to see is the ordinary evidence that the expectation was met.
ComplyTrain holds that kind of evidence: the controlled documents a team works to, a record of who was trained on what and when, and the trail those generate. It does not draft doctrine, plan operations, or make a nation's ratification or implementation decision.
Which documents a given contract actually invokes, and what tier of requirement comes with them, is set by the contract and the customer's quality clause, never by us. The standards explorer shows what else sits alongside this agreement in the catalogue, and we are glad to talk through what a specific contract requires.
Tell us how you need to work with STANAG 6538 and what you need from it. We will come back to you about what ComplyTrain can do.
Thank you. Your list is on its way to your inbox, and we will come back to you on what working with these standards in ComplyTrain involves, usually within one business day.
Not by itself. It binds the nations that ratify it. A company encounters it when a contract or a tender invokes AJP-3.23 or the counter-WMD doctrine it carries.
STANAG 6538 is the agreement; AJP-3.23 is the doctrine. The agreement commits nations to implement the publication, and the publication holds the doctrine for countering weapons of mass destruction in military operations.
No. The agreement names no certification scheme, no notified body and no audit of an organisation. Its only stated check is a periodic review of the agreement itself under AAP-03.
When the procedures detailed in AJP-3.23 have been incorporated into national regulations, manuals and training. Allies and NATO bodies then report those details through the electronic reporting tool.
Edition 1, promulgated 20 September 2023. This STANAG does not supersede any earlier document.
One system for the whole compliance programme. Start with the module you need most.
Collect information the same way every time, and decide in advance what happens next.
Know whether your controls are operating, not just whether a policy says they exist.
Turn the compliance work you already know about into a plan with owners, dependencies and dates.
Know what you can offer, and hold the evidence behind every configuration you offer it in.
Eight built-in reports across every module, scheduled, delivered, and filed where the evidence lives.
The sector news that matters to your organisation - read and rated by AI, and delivered as a scheduled digest in your own language.
AI reads the tender pack and pulls out the requirements, deadlines and rules - then helps you draft the response from your own approved content, with you reviewing every step.
One current register of the suppliers and partners you depend on - each risk-assessed, re-assessing itself on schedule, and wired straight into your risk register.
See every requirement you face - across every standard, plus your own contracts and policies - traced to the documents, evidence and processes that satisfy it.
Identify, score, treat and review your risks in one place - with AI to help anyone run a proper assessment, and a defensible trail behind every decision.
Assign training, prove it was understood, and hold the competence records an auditor asks for.
Draft compliance documents with AI, keep every version under control, and export them beautifully branded - all in one place.
Audits, corrective actions, processes and approvals in one quality system, organised around ISO 9001.
Medical device manufacturers operate under more regulatory pressure than almost any other sector outside pharmaceuticals. The rules govern how you design a device, how you make it, how you track it after it ships, and how you respond when something goes wrong.
Learn how EU dual-use export controls apply to encryption, sensors, and software, how classification works under Annex I, and why sending source code by email can count as an export.
A practical way to turn in-your-head risk management into a register that survives staff turnover and answers the risk questions now showing up in tenders.