✈️ AS9100
AS9100 Rev D Milling Suppliers for Flight-Critical Machined Hardware
Milling a structural fitting for a wing box is a different universe from milling a bracket for a conveyor, and AS9100 Rev D exists to enforce that difference. Built on ISO 9001:2015 and published by the IAQG as the 9100:2018 series, the standard wraps aviation, space, and defense-specific controls around every chip cut on flight hardware. Here is what those controls demand of a milling supplier and how to confirm they are real.
AS9100ISO 9001NADCAP
What Rev D layers on top of ISO 9001 inside a mill
AS9100 Rev D contains the entire text of ISO 9001:2015 plus aerospace additions, and several of those additions land squarely on the milling floor. Clause 8.1.2 requires formal management of key characteristics: the drawing's KCs and critical items must be flowed into the program, the setup, and the inspection plan, with variation actively monitored rather than just checked pass/fail. Clause 8.1.4 mandates a prevention-of-counterfeit-parts process, which for a machine shop means verified raw-material provenance and controls against using uncertified bar stock or remarked tooling. Clause 8.1.3 adds product-safety obligations, forcing the shop to identify and manage features whose failure could affect flight safety.
First article inspection is effectively mandatory through clause 8.5.1.3, performed to the AS9102 standard with its Form 1 (part-number accountability), Form 2 (raw material, process, and special-process certifications), and Form 3 (characteristic accountability bubbled against the drawing). A genuine AS9100 milling supplier produces a full AS9102 FAI on first production, on any change to design, process, tooling, or source, and after a two-year lapse in production. Foreign object debris prevention under clause 8.5.4 drives chip control, tool accountability, and clean-handling at part release.
Clause 8.4 (control of external providers) is far heavier than in plain 9001. The milling shop must maintain an approved-supplier list, flow down all customer and regulatory requirements to subcontractors, and control any special processes, anodize, NDT, heat treat, sent outside. This is where AS9100 and NADCAP interlock: AS9100 makes the shop responsible for special-process control, and NADCAP accreditation on the processor is how that control is typically demonstrated.
Verifying AS9100 through OASIS, not a PDF
Aerospace gave buyers a tool that most other certifications lack: the IAQG OASIS database (Online Aerospace Supplier Information System). Every legitimate AS9100 certificate is registered there by the certification body, and OASIS is the authoritative place to confirm status, scope, certificate number, the accredited CB, and the certification structure (single site, multiple site, or campus). If a shop's certificate is not findable in OASIS, treat the claim as unverified regardless of what the framed wall certificate says.
Read the scope and the site exactly as in 9001 verification, but with the added aerospace nuance that AS9100 certificates can carry sector codes and the OASIS record shows the auditing CB and accreditation body. Confirm the registration is active and not suspended, and check the expiry. Recertification runs on the standard three-year cycle with annual surveillance, and aerospace CBs are aggressive about suspending lapsed systems.
The common scope trap in machining: a supplier holds AS9100 for assembly or for distribution but subcontracts the actual milling to an uncertified job shop. The certificate is real, the OASIS record is clean, but your chips are being cut outside the certified system. Confirm the milling itself happens inside the AS9100 boundary, and that any pass-through of customer flow-downs to a machining subcontractor is controlled under clause 8.4.
Documentation package and regulatory tie-ins
Expect a substantially heavier data package than commercial work. Standard deliverables include the AS9102 FAI report (all three forms) on qualifying orders, a Certificate of Conformance, raw-material certs traceable to heat or lot, certifications for every special process performed, dimensional reports against the drawing's characteristics, and frequently a serialized record tying each part to its inspection data. For defense end-use, the shop must also handle ITAR-controlled technical data correctly, since most flight-hardware drawings are USML-controlled and the milling shop becomes a recipient of controlled technical data under the State Department's DDTC regime.
Regulatory tie-ins make AS9100 the floor, not the ceiling, for many programs. Parts on type-certificated aircraft fall under FAA oversight, and the prime's Production Approval Holder obligations (14 CFR Part 21) flow quality requirements down to the milling supplier. Space hardware adds AS9100's space-specific clauses and often customer-unique requirements from NASA or launch providers. Where the milled part feeds a defense article, ITAR registration and an export-compliance program sit alongside AS9100. None of these replace the others; a single fitting can simultaneously require AS9100, ITAR registration, and NADCAP-accredited downstream processing, which is genuinely common at the prime-tier supply base and worth confirming up front rather than at first article.
Frequently Asked Questions
AS9100 Rev D is ISO 9001:2015 plus roughly a hundred aerospace-specific additions, so an AS9100 shop is by definition also running a 9001-compliant system. The additions that matter on a mill are key-characteristic management (clause 8.1.2), counterfeit-part prevention (8.1.4), product-safety controls (8.1.3), mandatory first-article inspection to AS9102 (8.5.1.3), foreign-object-debris prevention (8.5.4), and far stricter control of external providers and special processes (8.4). ISO 9001 lets a shop define its own inspection depth and does not require FAI or counterfeit controls; AS9100 removes that latitude for the characteristics that affect airworthiness. Practically, AS9100 means you receive serialized traceability, full AS9102 documentation, and assurance that any outsourced heat treat or NDT was controlled and typically NADCAP-accredited. If your part flies, defends, or goes to space, you need AS9100. If it does not, AS9100 is overhead you are paying for without benefit, and a strong 9001 shop is the better value.
Under AS9100 clause 8.5.1.3 and the AS9102 standard, a full FAI is required on the first production run of a part number, and a partial or full re-FAI is triggered by specific changes. Those triggers are a change to the design or drawing revision affecting form, fit, or function; a change in manufacturing source, location, or process; a change in tooling such as a new fixture or program that could affect conformance; a natural or man-made event that could adversely affect the process; and a lapse in production of two years or more. The AS9102 package has three forms: Form 1 documents part-number accountability and the FAI scope, Form 2 captures raw-material and special-process certifications, and Form 3 bubbles every drawing characteristic to a measured result with the inspection method recorded. A reputable AS9100 milling shop performs this without prompting and retains it. Buyers should confirm which trigger applies to their order, because a re-FAI obligation that is missed becomes a nonconformance at the prime's receiving inspection.
Use OASIS, the IAQG's Online Aerospace Supplier Information System, which is the authoritative registry for AS9100 certificates. Search the supplier and confirm the certificate is present, active, and not suspended, then read the scope statement, the certified site address, and the accredited certification body listed in the record. The certificate must explicitly cover machining or CNC milling and the site must be the plant that will cut your parts. The most common trap is a supplier certified for assembly or distribution who subcontracts the actual milling to an uncertified shop, so confirm the milling happens inside the certified boundary. Check the expiry and the surveillance status, since aerospace CBs suspend lapsed systems quickly. If the certificate is not in OASIS, do not accept a framed wall certificate or a PDF as proof; insist on the OASIS record. Reputable aerospace suppliers expect this verification and will point you to their OASIS entry without friction.
Yes, meaningfully. AS9100 milling typically runs higher than commercial work because the system carries real cost: full AS9102 first-article inspection can add hundreds to a few thousand dollars on the first article depending on characteristic count, serialized traceability and record retention add per-lot overhead, counterfeit-part controls drive verified material sourcing, and FOD and special-process flow-downs add inspection and subcontractor-management labor. Lead times also extend, since FAI, source inspection where required, and controlled special-process routing to NADCAP-accredited processors add days to weeks versus a commercial part. The premium is not arbitrary; it reflects documentation and control that a commercial shop does not perform. The way to manage it is to specify exactly what is required, do not order a full FAI on a part that does not need one, confirm whether re-FAI triggers apply, and consolidate special processes. For flight hardware the cost is non-negotiable; the optimization is in scoping the documentation to what the program actually demands rather than gold-plating every line item.
Yes, and at the prime-tier defense and aerospace supply base it is common, because the three credentials cover different things and frequently apply to the same part. AS9100 governs the quality management system around the milling. ITAR registration with the State Department's DDTC covers the shop's handling of export-controlled technical data and defense articles, which applies because most flight-hardware drawings are USML-controlled. NADCAP accredits the special processes, anodize, chem film, heat treat, penetrant or other NDT, that follow milling, and is usually held by the processor rather than the machine shop itself, though vertically integrated shops can carry their own NADCAP accreditations. A single structural fitting can simultaneously require an AS9100 milling shop, ITAR-compliant data handling, and NADCAP-accredited downstream processing. The practical takeaway for buyers is to map all three requirements before placing the order and confirm each is satisfied either in-house or through controlled, approved subcontractors, rather than discovering a gap at first-article or at customs.
Last updated: July 2026
Find AS9100-Certified Milling Suppliers
Search verified milling shops that hold AS9100.
No logins. No email gates. Just results.