AS9100 vs IATF 16949 vs ISO 9001: Which Standard Actually Applies to You
If a customer asks whether you're AS9100 or IATF 16949 certified and your only certification is ISO 9001, the honest answer is: you're most of the way there, not starting over. Both standards are built directly on top of ISO 9001:2015, not separate from it. Confusing the three, or assuming they're competing options rather than a base plus an add-on, is the most common mistake engineers and quality managers make when a new customer contract requires one.
The base: ISO 9001
ISO 9001 is the generic quality management system standard, applicable to any industry. It defines the ten-clause structure (documented in full in our ISO 9001 checklist): context, leadership, planning, support, operation, performance evaluation, and improvement.
Every sector-specific standard below starts here. If you're not ISO 9001 certified, that's the first step regardless of which industry you're in.
AS9100 (becoming IA9100): the aerospace layer
What it adds on top of ISO 9001: over 100 additional aerospace-specific requirements, on top of the same Annex SL structure as ISO 9001. The additions center on:
- Configuration management, controlling exactly which design, drawing, and process revision built a specific part, traceable years later
- Product safety, a formal requirement to identify and manage risks that could result in an unsafe condition, not just a nonconforming one
- Counterfeit parts prevention, specifically relevant to aerospace's long supply chains and long service-life parts
- First article inspection (AS9102), a detailed dimensional and characteristic verification before a part enters production
- Special requirements, critical items, and key characteristics flow-down from the customer through the entire supply chain, not just the prime contractor
2026 change worth knowing: the AS9100 family (AS9100 for design/production, AS9110 for maintenance, AS9120 for distribution) is being rebranded from "AS" to "IA" (IA9100, IA9110, IA9120) as part of aligning with ISO's 2026 structure update and reflecting the standard's international governance under the IAQG. If you're starting a certification now, expect this naming shift during the process, the underlying requirements are converging with the update, not disappearing.
Who needs it: any organization designing, producing, maintaining, or distributing parts into the aerospace, space, or defense supply chain. Most primes require it contractually from their direct suppliers, and it often flows down further.
IATF 16949: the automotive layer
What it adds on top of ISO 9001: requirements built specifically around high-volume, zero-defect automotive production. The core additions:
- APQP (Advanced Product Quality Planning), a structured process for planning a new part's quality requirements before production starts, not after problems appear
- PPAP (Production Part Approval Process), formal customer sign-off that a part and its process are validated before regular shipments begin
- Control plans, documented process controls for every production step, tied to the part's specific risk points
- Statistical process control and continuous improvement requirements aimed specifically at reducing part-to-part variation at scale
- Manufacturing feasibility review before a quote is even accepted, confirming the process can actually hold the required tolerances at volume
Where it's headed: the IATF 16949 2nd Edition is expected in Q1 2027, following ISO 9001's own update. No name change is planned for IATF 16949 itself, unlike AS9100.
Who needs it: automotive parts manufacturers and their suppliers. IATF 16949 is a mandatory customer requirement, not optional, for most Tier 1 and Tier 2 automotive supply relationships. It's one of the few quality standards where certification is effectively a condition of doing business, not a differentiator.
Side-by-side
| | ISO 9001 | AS9100 (→ IA9100) | IATF 16949 | |---|---|---|---| | Base standard | Itself | Built on ISO 9001 | Built on ISO 9001 | | Sector | Any | Aerospace, space, defense | Automotive | | Signature additions | None, generic QMS | Configuration mgmt, product safety, counterfeit prevention, first article inspection | APQP, PPAP, control plans, SPC | | Typical driver | General credibility, some customer requirements | Contractual requirement from primes/supply chain | Mandatory for automotive OEM/Tier 1-2 relationships | | 2026 status | Update in progress | Rebranding to IA9100, aligning with ISO update | 2nd edition expected Q1 2027 |
Do you need one, both, or neither
- You sell into aerospace only: AS9100 (soon IA9100), which already includes everything ISO 9001 requires.
- You sell into automotive only: IATF 16949, same relationship, it subsumes ISO 9001.
- You sell into both: you can hold both certifications simultaneously. Many manufacturers serving both sectors do exactly this, there's no conflict between them since they share the same ISO 9001 base.
- Neither sector, or a customer hasn't asked yet: ISO 9001 alone is a reasonable starting point, and everything you build toward it carries forward if a sector-specific requirement shows up later.
The practical risk isn't picking the wrong standard, it's discovering the requirement after a customer contract is already signed with a certification deadline attached. If a specific customer or program requires AS9100 or IATF 16949, that requirement is usually stated explicitly in the RFQ or contract, worth confirming before quoting, not after.
Auditing a design against one of these directly: ForgePilot's Compliance Check tool reviews a design clause-by-clause against ISO 9001, AS9100, IATF 16949, or whatever standard actually governs your part, with a pass, fail, or needs-more-info verdict and the specific clause cited.