Certifications are the fastest, most reliable way to filter a shortlist of Indian suppliers down to the ones worth your time. They are not a guarantee of quality, but they are a verifiable signal that a supplier runs a real quality system or has been independently assessed for a process, which is exactly what you need when you are evaluating a factory you may never visit.
Two mistakes are common. The first is requiring too few, ending up with a supplier who has no audited quality system to fall back on. The second, less obvious, is requiring too many, demanding an aerospace certification for a simple general-engineering part and shrinking your supplier pool while paying for compliance you do not need. The right answer is to match the certification to your part and your sector.
This guide covers the core quality certifications you should know, what each one actually means, when to require it, how to check it is real, and the nuance that a certificate filters suppliers but does not inspect your parts for you.
The certifications at a glance
| Certification | What it is | Require it when |
|---|---|---|
| ISO 9001 | The general quality management system standard, the baseline for any manufacturer | Always, as a minimum, for any industrial supplier |
| AS9100 | The aerospace quality management standard, built on ISO 9001 with aviation, space, and defence requirements added | Aerospace and defence components |
| EN 9100 | The European equivalent of AS9100, technically identical | Aerospace work, especially for European supply chains |
| IATF 16949 | The automotive quality management standard, built on ISO 9001 with automotive requirements added | Automotive components and tiered auto supply |
| NADCAP | An accreditation for specific special processes (heat treatment, welding, NDT, coatings), not a company-wide system | Aerospace or defence parts involving a special process |
The rest of this guide explains each one and how to apply it.
The core quality certifications
ISO 9001: the baseline
ISO 9001 is the general quality management system standard, published by the International Organization for Standardization, and it applies to any company in any industry. The current version is ISO 9001:2015. It certifies that a supplier runs a documented, independently audited quality system built around process control, risk-based thinking, traceability, and continual improvement.
It is the floor, not the ceiling. ISO 9001 does not certify that any specific part is good; it certifies that the system that should produce good parts exists and is audited. For that reason, treat it as a baseline requirement for any serious industrial supplier, the minimum you accept before looking at anything more specialized. An Indian machine shop or forging supplier without at least ISO 9001 is one to question. With it, you have a foundation to build on.
AS9100: the aerospace standard
AS9100 is the quality management standard for aerospace, defence, and space. It is built directly on ISO 9001 and adds the requirements that sector demands: configuration management, counterfeit-parts prevention, first article inspection, risk and product-safety management, and control of critical items. The current revision is AS9100D. A supplier holding it has been assessed against a far more rigorous bar than ISO 9001 alone.
If you are sourcing aerospace or defence components, AS9100 is the certification to require. Many aerospace primes mandate it throughout their supply chains, so a supplier exporting into aerospace will usually already hold it. India has a real and growing AS9100-certified ecosystem, which is part of why the country has become a credible aerospace sourcing option rather than just a general-engineering one.
A note on the family: AS9100 covers manufacturers, AS9110 covers maintenance and overhaul, and AS9120 covers distributors and stockists. For machined and fabricated parts, AS9100 is the one that applies.
EN 9100: the European equivalent
EN 9100 is the European version of AS9100, and technically the two are equivalent, because the 9100 series is harmonized globally by the International Aerospace Quality Group. An Indian supplier serving European aerospace customers may hold EN 9100 rather than AS9100; for your purposes they carry the same weight. If your parts feed a European aerospace supply chain, EN 9100 is the form you will most often see required.
IATF 16949: the automotive standard
IATF 16949 is the quality management standard for the automotive sector, published by the International Automotive Task Force. The current version is IATF 16949:2016, and it is built on and used in conjunction with ISO 9001, adding automotive-specific requirements: the Production Part Approval Process (PPAP), Advanced Product Quality Planning (APQP), control plans, defect prevention, and a strong focus on reducing variation and driving toward zero defects.
If you are sourcing automotive components, or supplying into a tiered automotive chain, this is the certification to require. A supplier certified to IATF 16949 effectively meets ISO 9001 as well, plus the automotive layer on top.
ISO 9001 versus IATF 16949, briefly: ISO 9001 is the general quality system for any industry. IATF 16949 is the automotive-specific version, built on ISO 9001 but adding the automotive requirements above. If you are in automotive, require IATF 16949. If you are in general engineering, ISO 9001 is enough, and demanding IATF 16949 would only narrow your options without benefit.
NADCAP: special-process accreditation
NADCAP is different in kind from the others, and the difference matters. It is not a company-wide quality management system. It is an accreditation, administered by the Performance Review Institute, for specific special processes in aerospace and defence: heat treatment, welding, non-destructive testing, chemical processing, coatings, and surface treatments, among others.
The key point is that NADCAP is process-specific, not general. A supplier is NADCAP accredited for a particular special process, not for the company as a whole. So you require it for the specific processes your part involves. If your aerospace component needs heat treatment, welding, or NDT, ask whether those processes are NADCAP accredited, usually in addition to the supplier holding AS9100. For aerospace and defence work, this combination, AS9100 at the company level plus NADCAP on the relevant special processes, is the standard buyers and primes expect.
Other certifications you might need
Depending on your part and market, a few others come up:
- ISO 13485 is the quality management standard for medical devices. If you are sourcing medical components, require this rather than relying on ISO 9001.
- ISO 14001 and ISO 45001 cover environmental management and occupational health and safety respectively. Not quality standards as such, but increasingly required by buyers with sustainability or compliance obligations.
- Defence export controls. If you are sourcing defence-related parts, awareness of export-control regimes such as ITAR and EAR matters. These are not supplier certifications, but they shape what can be made, shared, and shipped, and a supplier experienced in defence work will understand them.
A certificate is a filter, not a guarantee
This is the most important point in the whole guide, and the one most likely to save you a bad batch.
Every certification above assesses a system or a process. None of them inspects your specific parts. ISO 9001 certifies that a quality system exists. AS9100 certifies a more rigorous aerospace system. NADCAP accredits a process. What none of them tells you is whether the parts in this particular shipment are within tolerance.
So certifications belong at the front of your process, as the filter that builds your shortlist, not at the end as proof of quality. You still verify the part itself with a first article inspection on a sample and a pre-shipment inspection before the goods leave the factory. Certifications get you to a supplier worth trusting; inspection confirms the supplier delivered. Treating a certificate as a substitute for inspection is how buyers who did everything "right" on paper still end up with defects.
Match the certification to the part
It is worth repeating the second common mistake, because it quietly costs money. Require the certifications your application genuinely needs, not the most impressive ones available.
Demanding AS9100 for a simple, non-critical general-engineering part does not make the part better. It just shrinks your pool of eligible Indian suppliers, pushes you toward more expensive aerospace-grade shops, and adds cost for compliance the part does not require. Conversely, accepting only ISO 9001 for a flight-critical aerospace component leaves you under-covered. The skill is matching the certification to the criticality and sector of the specific part, which is exactly what the sector checklist below is for.
A certification checklist by sector
| Your sector | Require as standard | Plus, if special processes are involved |
|---|---|---|
| General engineering | ISO 9001 | Not applicable |
| Automotive | IATF 16949 (includes ISO 9001) | Not applicable |
| Aerospace and defence | AS9100 or EN 9100 | NADCAP for heat treatment, welding, NDT, coatings |
| Medical devices | ISO 13485 | Not applicable |
How to verify a certificate is real
A certificate is only worth something if it is genuine, current, and in scope, and all three get misrepresented.
Always do two things. First, check the certificate number and the issuing certification body against that body's online registry, to confirm it is real and has not expired. Second, read the scope statement on the certificate. A supplier may be ISO 9001 certified for "manufacture of sheet metal components" but not for the precision machining you actually need, and a certificate without the matching scope is close to worthless for your purpose. This is a core part of how to verify an Indian supplier, and it takes minutes that can save a program.
Where a managed sourcing partner fits
Verifying certifications, reading scope statements, checking them against issuing bodies, and matching the right standard to each part across a whole supplier base is real, repetitive work. It is also exactly the qualification work a managed sourcing partner does before you ever place an order.
That is part of what Procurio is built to do. We act as the single, accountable partner between you and India's supplier base for metals and machined parts, and certification verification is built into how suppliers enter the network. You get suppliers whose certifications, ISO 9001, AS9100, IATF 16949, or NADCAP as your part requires, have been confirmed as genuine and in scope, matched to the criticality of your part, and backed by the first article and pre-shipment inspection that certificates alone cannot provide. The compliance filtering is handled, so the question you are left with is simply whether the part meets spec, which is the right question to be asking.
Whether you do this yourself or through a partner, the principles hold. Require the right certifications for your sector and no more, verify they are genuine and in scope, and remember that a certificate filters suppliers while inspection confirms parts. Get that balance right and certifications become what they should be: a fast, reliable shortcut to suppliers you can trust.
Quick answers
What quality certifications should I require from Indian suppliers?
ISO 9001 as a baseline for any supplier, AS9100 (or EN 9100 in Europe) for aerospace and defence, IATF 16949 for automotive, ISO 13485 for medical devices, and NADCAP accreditation for special processes such as heat treatment, welding, or NDT in aerospace work. Match the certification to your part's sector and criticality.
What is AS9100 certification?
AS9100 is the quality management standard for aerospace, defence, and space. It is built on ISO 9001 and adds sector-specific requirements such as configuration management, counterfeit-parts prevention, first article inspection, and product-safety controls. It is the standard to require for aerospace and defence components.
What is the difference between ISO 9001 and IATF 16949?
ISO 9001 is the general quality management standard for any industry. IATF 16949 is the automotive-specific version, built on ISO 9001 but adding automotive requirements such as PPAP, APQP, and control plans. A supplier with IATF 16949 also meets ISO 9001. Require IATF 16949 for automotive parts and ISO 9001 for general engineering.
What is NADCAP and when do I need it?
NADCAP is an accreditation for specific special processes in aerospace and defence, such as heat treatment, welding, non-destructive testing, and coatings. It is process-specific, not company-wide, and is usually required in addition to AS9100 for aerospace parts that involve those processes.
Do certifications guarantee part quality?
No. Certifications assess a supplier's quality system or a specific process, not your individual parts. They are a filter for building a shortlist of trustworthy suppliers. You still confirm the parts themselves with a first article inspection and a pre-shipment inspection before shipment.
Can Indian suppliers meet aerospace quality standards?
Yes. India has a real and growing ecosystem of AS9100 and NADCAP-accredited suppliers serving aerospace and defence customers. As with any country, the key is verifying that a specific supplier holds genuine, in-scope certifications for your part and backing that up with inspection.