ISO 9001 vs AS9100: Choosing the Right CNC Quality Standard

What is the core difference between these two standards?

ISO 9001 is a general quality management system standard that applies across industries. It focuses on process management, customer satisfaction, and continuous improvement. AS9100, by contrast, is the aerospace industry’s quality standard. It incorporates ISO 9001 requirements but adds aerospace-specific elements such as stricter supplier controls, enhanced risk management, and more rigorous traceability of materials and processes.

Which standard is best for general CNC machining?

For CNC machining shops serving multiple industries—automotive, medical, consumer electronics, or industrial equipment—ISO 9001 is often the most appropriate baseline. It demonstrates that your shop operates a documented quality system, trains staff properly, controls processes, and addresses customer feedback. Many international buyers accept ISO 9001 as proof that a supplier can deliver consistent, repeatable results.

That said, ISO 9001 does not require the level of traceability or supplier oversight that aerospace or defense customers expect. If your clients are in regulated industries, they may ask for additional certifications beyond the general standard.

When is AS9100 the better choice for a CNC supplier?

AS9100 is the preferred standard when your primary customers are in aerospace, defense, or related high-reliability sectors. It addresses specific risks in those industries, such as the need for certified materials, controlled tooling, and detailed inspection records. If you work with OEMs or Tier-1 suppliers in these fields, AS9100 is often a prerequisite for contract qualification.

The standard also emphasizes product realization, nonconforming product control, and supplier approval in ways that go beyond general quality management. For shops that want to enter or expand into aerospace work, AS9100 signals credibility and operational discipline.

How do the requirements compare in practice?

Option	Best for	Limitations
ISO 9001	General manufacturing, multi-industry CNC shops, service providers	Lacks aerospace-specific controls; may not satisfy defense or aerospace customer mandates
AS9100	Aerospace, defense, and high-reliability product manufacturers	Higher audit complexity; more documentation burden; less flexible for non-aerospace markets
ISO 9001 + AS9100	Shops serving both general and aerospace clients	Requires maintaining two sets of records or an integrated system; higher cost
ISO 13485	Medical device manufacturers	Overly specific for non-medical CNC work; not applicable to general machining

A common approach is to start with ISO 9001 and add AS9100 when aerospace demand grows. Some shops integrate both into a single quality management system to reduce duplication, but this requires careful planning and often external consulting support.

What should you look for during supplier audits?

When evaluating a CNC supplier, ask whether their certification covers the full scope of the work you need. A certificate that only covers general machining may not include special processes, heat treatment, or material certification. Review their audit reports for findings, corrective actions, and management reviews.

Also check whether the certification body is accredited and recognized by your industry. For aerospace, look for approval by relevant aerospace authorities or customer quality departments. For general manufacturing, verify that the standard aligns with the expectations of your procurement team.

How often are these certifications renewed, and what does that mean for buyers?

Both ISO 9001 and AS9100 require periodic surveillance audits and recertification. Typically, initial certification is followed by annual surveillance audits, with a full recertification every three years. This means a supplier’s quality system is actively monitored, not just a one-time achievement.

As a buyer, you can request copies of the certificate and recent audit summaries. This gives you insight into the shop’s commitment to quality and helps you assess the risk of process changes or nonconformances.

How do I decide which certification to require from my CNC partner?

Start by mapping your product requirements to the customer mandates. If you are building parts for aircraft, AS9100 is non-negotiable. If you are producing consumer electronics or general industrial components, ISO 9001 is usually sufficient. If you operate across both, consider requiring the shop to hold both or an integrated system.

Your decision should also reflect the shop’s size and maturity. A small job shop may find AS9100 burdensome without enough aerospace work to justify the cost. In that case, a general ISO 9001 certification plus strong process controls may be more realistic and cost-effective.

Does holding multiple certifications improve quality?

Holding multiple certifications can signal a higher level of operational discipline, but it is not a guarantee of superior quality. What matters more is how the shop implements the system day-to-day. Look for evidence of training, internal audits, customer feedback loops, and corrective action processes.

A supplier with AS9100 and ISO 9001 integrated into one system often demonstrates strong process control and documentation practices. However, even a well-run ISO 9001 shop can outperform a poorly managed AS9100 shop in consistency and responsiveness.

What are the typical costs and timelines for certification?

Certification costs vary by company size, number of sites, and the certification body. Initial audits can take several months, depending on the complexity of the quality system and the need for corrective actions. Ongoing costs include surveillance audits, annual renewal fees, and internal maintenance of documentation.

For a small CNC shop, the cost of AS9100 may be higher than ISO 9001 due to additional requirements. For a larger operation with multiple departments, the cost difference may be less significant, especially if the shop already has a mature quality system.

How do I verify a supplier’s certification is current and valid?

Check the certificate number and expiration date directly with the issuing body’s website. Many certification bodies maintain public databases where you can verify the status of a certificate. You can also ask the supplier for a recent audit report or a management representation letter.

If you are in a regulated industry, your quality department may have specific procedures for supplier qualification. Follow those procedures and document your verification steps for traceability.

Final thoughts: matching the standard to your business needs

Choosing between ISO 9001 and AS9100 is not about which standard is “better.” It is about which standard fits your industry, your customers, and your operational reality. ISO 9001 provides a strong foundation for quality management. AS9100 adds the rigor required for high-reliability industries.

The right choice helps you reduce risk, meet customer expectations, and build long-term supplier relationships. As your business evolves, your certification strategy should evolve with it.