Platform
Modules
By sector
By sector
By standard
Blog
News
Events
STANREC 4874
National quality assurance authorities and NATO bodies aligning how they use AQAP-2030 for QMS certification and confirmation
STANREC 4874 recommends that NATO nations use AQAP-2030 Edition A as the basis for national quality assurance authority certification and confirmation of a QMS, with no ratification obligation attached.
STANREC 4874 is short: four pages recommending a practice rather than requiring one. Its stated aim is "NATO nations' approaches for the use of Allied Quality Assurance Publications as the basis of quality management system (QMS) certification." Unlike a STANAG, which a nation ratifies and then implements domestically, a STANREC only asks nations to use the standard it points at and report back on how they use it. That difference is the one thing to take from this page: it does not bind in the way an agreement does. It is a coordination step between NATO nations' own quality assurance authorities and NATO bodies, not a document addressed to suppliers or manufacturers.
The recommendation itself is narrow: AQAP-2030, Edition A, named as "the following Allied and/or non-NATO standard" that nations' quality assurance authorities should use as the basis for QMS certification and confirmation. Two related civil documents are listed alongside it: ISO 19011:2018, general guidance on auditing management systems, and ISO/IEC 17021-1:2015, which sets requirements for bodies that audit and certify management systems. STANREC 4874 names them as related reading without setting out how a national authority is to apply them; the substance of what a QMS actually has to demonstrate sits in AQAP-2030 itself, not here.
The document's own title pairs both words, "AQAP certification/confirmation", for what a national quality assurance authority does when it applies AQAP-2030. This is not third-party accredited certification of the kind ISO 9001 uses: it is government quality assurance, carried out by each nation's own authority, which is how the AQAP family has always worked. Nothing in the document describes a central NATO certification scheme, an accredited body, or a notified body, and this STANREC does not create one; it only recommends that national authorities converge on AQAP-2030 as their common basis.
A STANREC needs no ratification step. It is effective on receipt by participating nations and NATO bodies, and nations are simply invited to use the standard it covers and give feedback to the NATO Standardization Office. STANREC 4874 does not supersede any document; it is the first recommendation on this specific topic. It is reviewed in line with AAP-03, with the outcome recorded in the NATO Standardization Documents Database, and it sits under the CNAD Life Cycle Management Group, Working Group 2 on Quality. It does not itself set an audit cycle, an evidence list, or which tier of certification applies on a given contract; that detail lives in AQAP-2030 and in each nation's own process. As with all NATO documents, it is free of charge and not sold; it is retrieved from the NATO Standardization Document Database or through a national standardization authority, never from a third-party copy.
STANREC 4874 does not itself create work for a supplier: it is a coordination document between NATO nations' quality assurance authorities, not a specification to implement. What a supplier actually has to evidence is whatever a contract's quality clause invokes, most often AQAP-2030 itself. ComplyTrain helps organisations hold that evidence in one auditable place: the documented procedures an AQAP-based QMS requires, training records tied to named people and dates, internal audit findings, and the corrective actions raised against them, so the paper trail is already there and controlled when a national quality assurance authority or a customer asks for it.
ComplyTrain does not act as a national quality assurance authority, does not confirm or certify a QMS against AQAP-2030, and does not carry out the government quality assurance surveillance this STANREC describes. The applicable tier and which standards accompany it are set by the contract and the customer's quality clause. Take a look at what sits alongside AQAP-2030 in the standards explorer, or talk to us about the evidence trail your quality management system needs to hold.
Tell us how you need to work with STANREC 4874 and what you need from it. We will come back to you about what ComplyTrain can do.
Thank you. Your list is on its way to your inbox, and we will come back to you on what working with these standards in ComplyTrain involves, usually within one business day.
No. It is a NATO Standardization Recommendation, not a Standardization Agreement, so it recommends rather than commits: nations are invited to use the standard it covers, with no ratification obligation attached.
It recommends AQAP-2030, Edition A, as the standard NATO nations' quality assurance authorities should use as the basis for QMS certification and confirmation, alongside ISO 19011:2018 and ISO/IEC 17021-1:2015 as related reading.
No. It states plainly that it does not supersede any document; it is a new recommendation on this topic.
Directly from NATO. It is free of charge and retrieved from the NATO Standardization Document Database or through your national standardization authority, never as a paid or third-party copy.
One system for the whole compliance programme. Start with the module you need most.
Collect information the same way every time, and decide in advance what happens next.
Know whether your controls are operating, not just whether a policy says they exist.
Turn the compliance work you already know about into a plan with owners, dependencies and dates.
Know what you can offer, and hold the evidence behind every configuration you offer it in.
Eight built-in reports across every module, scheduled, delivered, and filed where the evidence lives.
The sector news that matters to your organisation - read and rated by AI, and delivered as a scheduled digest in your own language.
AI reads the tender pack and pulls out the requirements, deadlines and rules - then helps you draft the response from your own approved content, with you reviewing every step.
One current register of the suppliers and partners you depend on - each risk-assessed, re-assessing itself on schedule, and wired straight into your risk register.
See every requirement you face - across every standard, plus your own contracts and policies - traced to the documents, evidence and processes that satisfy it.
Identify, score, treat and review your risks in one place - with AI to help anyone run a proper assessment, and a defensible trail behind every decision.
Assign training, prove it was understood, and hold the competence records an auditor asks for.
Draft compliance documents with AI, keep every version under control, and export them beautifully branded - all in one place.
Audits, corrective actions, processes and approvals in one quality system, organised around ISO 9001.
A 90-day plan for the smallest defence suppliers: let the tender set your scope, document what you already do, fix the security basics primes check, and keep the system small enough for two people to maintain.
Learn how to qualify, approve and monitor sub-suppliers, flow down requirements through purchase orders, and keep the records an auditor will ask to see under ISO 9001 clause 8.4 and AQAP.
Learn how to run an ISO 9001 Clause 9.3 management review that turns evidence into decisions, with the right inputs, actionable outputs, and a cadence that fits your risks.