The AS9100 Documentation Load: Traceability and Counterfeit Parts Prevention

AS9100-certified aerospace suppliers carry a documentation burden that goes well beyond standard ISO 9001 manufacturing: full material and process traceability tied to individual part numbers, formal counterfeit parts prevention records, accredited special process certifications, and First Article Inspection (FAI) reports for every configuration. The volume is large, the retention windows are long, and a single missing record can ground a part or stall a delivery. This is the practical shape of that load and where it tends to break down.

Why aerospace documentation outgrows a standard quality system

ISO 9001 asks a manufacturer to demonstrate control over its processes. AS9100 asks for that plus something closer to a chain of custody: the ability to answer, years after a part shipped, exactly which raw material lot went into it, which operator ran which machine on which day, which non-destructive testing (NDT) technician signed off on the weld, and which supplier furnished the fastener. That answer has to come from records, not memory, and it has to hold up under a customer audit, a regulatory inquiry, or a field investigation after an in-service event.

Four categories of documentation drive most of the day-to-day burden for AS9100 suppliers: material and process traceability, counterfeit parts prevention, special process certification, and FAI records. Each has its own retention logic, and none of them tolerates gaps.

Material and process traceability: the part's paper trail

AS9100 requires suppliers to maintain traceability of raw materials and, where the customer or the applicable design data calls for it, of the manufacturing and inspection processes a part goes through. In practice this means a documented link between:

• The raw material heat or lot number and its certified test reports (chemical composition, mechanical properties).
• Each manufacturing operation performed on the part — machining, forming, joining — with the equipment, operator, and date recorded.
• Every inspection and test result tied to that specific part or lot.
• The final part serial number or lot number that ships to the customer, linking back through every step above.

For flight-critical hardware, this chain frequently has to survive the part's entire operational life — which for an airframe or engine component can mean decades in service, well beyond the timeframe most manufacturers plan their record systems around. Exactly how long a given record must be kept is set by the customer's contract, the program's specific requirements, or the applicable regulatory framework — it is not a single fixed number across the industry, and suppliers should confirm retention periods against the governing contract or standard rather than assume a default.

Counterfeit parts prevention: proving where a component came from

AS9100 (aligned with AS9120 and AS6174/AS5553 practices across the supply chain) requires suppliers to have a documented counterfeit parts prevention process. This is not a policy statement filed away — it generates ongoing records:

• Supply chain verification: evidence that parts and materials were purchased from the original manufacturer, an authorized distributor, or another approved source, with documentation retained for each transaction.
• Obsolescence management: records showing how the supplier identifies parts approaching end-of-life or discontinued status, and what qualification steps were taken before sourcing a replacement or an alternate.
• Incoming inspection and testing: additional verification applied to parts from distributors or brokers rather than direct-from-OEM sources, particularly for higher-risk categories like electronic components.
• Detection and disposition records: documentation of what happens when a suspect or confirmed counterfeit part is found, including containment and reporting.

The documentation load here scales with how many components a supplier buys rather than makes. A prime with a deep bill of materials and long-tail obsolete electronics can end up maintaining counterfeit-risk records on thousands of part numbers, each needing periodic review as sourcing conditions change.

Special process certification: Nadcap and the accreditation layer

Certain manufacturing processes are considered "special" under AS9100 because their output cannot be fully verified by inspecting the finished part — the process itself has to be controlled and proven. Welding, heat treatment, and non-destructive testing are the classic examples, alongside plating, coating, and composite curing. Each typically requires:

• A separate accreditation for the process, commonly through the Nadcap program, which most major OEMs require or strongly favor for their supply chains.
• Documented and qualified procedures specific to each process and material combination.
• Personnel qualification records — operators and inspectors certified to the applicable standard (for NDT, typically NAS 410 or a customer-specific equivalent) at the correct level for the technique performed.
• Equipment calibration and process parameter records for every production run, not just periodic sampling.

A supplier running several special processes in-house is effectively managing several parallel accreditation programs, each with its own audit cycle, its own document set, and its own personnel certification tracking. Losing an accreditation — through a missed surveillance audit or an expired certification — can immediately disqualify parts already in production.

First Article Inspection: one record set per configuration

AS9102 governs First Article Inspection, and AS9100 requires it whenever a part is produced for the first time, after a process or design change that could affect fit, form, or function, after a break in production, or when a new manufacturing location or tooling set is introduced. An FAI record set typically includes a part number accountability report, product accountability report, and characteristic accountability report mapping every dimension and requirement on the drawing to objective evidence that it was met. The key operational detail is that FAI is not a one-time event per part number — it is per configuration. A change to a supplier, a tool, a process, or a drawing revision can trigger a new or delta FAI, and each one produces its own complete record set that has to be retrievable and matched to the exact configuration it covers.

The practical impact: where the load actually hurts

None of this is unusual for an experienced quality team to understand conceptually. What makes it operationally hard is volume combined with retrieval speed. A mid-size Tier 1 or Tier 2 supplier can be holding active traceability, special process, and FAI records across hundreds of part numbers and dozens of customer programs simultaneously, each with slightly different customer-specific requirements layered on top of AS9100's baseline. When a customer audit, a corrective action request, or a field investigation lands, the question is rarely "do we have the record" — it's "how fast can we produce the exact document, cross-referenced to the exact part serial number and configuration, from a filing structure built years ago for a different purpose." That retrieval gap is where audit findings and delivery delays tend to originate, more often than an actual absence of documentation.

Common mistakes suppliers make with AS9100 documentation

• Treating retention periods as fixed and universal. Teams sometimes apply a single retention rule across all customers and programs, when the governing period is usually set by the specific contract, program requirement, or applicable regulation and can vary considerably between customers.
• Storing traceability and special process records in separate systems that don't cross-reference. A weld certification sitting in a Nadcap-specific folder disconnected from the part's traceability file makes audits slower and increases the risk of an incomplete response.
• Letting FAI records go stale after a minor change. A process or tooling change that should trigger a delta FAI sometimes gets treated as too small to matter, leaving the configuration undocumented.
• Under-scoping counterfeit prevention to only the highest-value parts. Obsolescence and supply chain verification records are often weakest for low-cost, high-volume components — exactly the category where counterfeit risk in electronics tends to concentrate.
• Losing personnel certification currency. NDT or welding operator certifications expiring without a tracked renewal process can invalidate work performed after the lapse, even if the process itself was sound.

This is also where Igera fits into a supplier's quality operation. Instead of searching across FAI binders, Nadcap certificates, traceability logs, and customer-specific requirement documents by hand, Igera's AI answers questions directly from a company's own uploaded documents and cites the exact source — the specific certificate, traceability record, or FAI report — so an audit response or a customer query gets answered in seconds rather than a records search that eats an afternoon.

Frequently asked questions

How long must AS9100 traceability records be retained?

There is no single retention period that applies across the industry. The applicable duration is set by the customer contract, the specific program requirements, or the governing regulatory framework, and aerospace records are commonly retained well beyond typical ISO 9001 timeframes given how long parts stay in service. Confirm the exact period against your contract or the relevant customer-specific requirements rather than assuming a default.

What is the difference between AS9100 and Nadcap accreditation?

AS9100 is the overall quality management system standard for aerospace organizations. Nadcap is a separate, process-specific accreditation program (for welding, heat treat, NDT, and other special processes) that many aerospace customers require in addition to AS9100 certification for suppliers performing those processes.

Does every part require a new First Article Inspection?

FAI is triggered by first production of a part, a break in production, a change affecting fit, form, or function, or a new manufacturing source or tooling set — not simply by producing more units of an already-qualified configuration. Each triggering event produces its own record set tied to that specific configuration.

Who is responsible for counterfeit parts prevention — the supplier or the buyer?

Under AS9100, the certified organization is responsible for having a documented counterfeit parts prevention process covering its own purchasing and receiving activities, regardless of where in the supply chain it sits. This typically flows down contractually to sub-tier suppliers as well.

What counts as a "special process" under AS9100?

A special process is one whose output cannot be fully verified through inspection of the finished part alone — welding, heat treatment, non-destructive testing, plating, coating, and composite curing are the most common examples in aerospace manufacturing. The specific list applicable to a given supplier depends on its manufacturing scope and customer requirements.

Can AS9100 documentation be maintained entirely on paper?

AS9100 does not mandate a specific medium, but the practical retrieval demands of audits, customer queries, and field investigations make electronic, searchable records systems the norm for suppliers managing meaningful part volume across multiple programs.

What happens if a supplier can't locate a required record during an audit?

Consequences vary by severity and customer, ranging from a minor nonconformance requiring corrective action to, in serious or repeated cases, suspension of the supplier's approval status with that customer. The specific consequence depends on the customer's supplier quality requirements and the nature of the finding.

This content is informational and does not constitute professional, legal, or regulatory advice. Requirements, retention periods, and customer-specific requirements vary by contract and program — confirm specifics with a qualified aerospace quality professional, your customer's supplier quality organization, or the current published text of AS9100 and AS9102 before making compliance decisions.