Machining Supplier Certifications: What to Require and How to Verify It
A PDF with a logo is not evidence. This guide explains what each standard certifies, how to verify a certificate's validity, scope and site, and which real guarantees a machining supplier should deliver beyond the paper.
You ask for certifications, a PDF arrives with a logo and a number, and the file is marked "complete." The problem is that this PDF may be expired, may have been issued by a body with no recognized accreditation, may cover a different plant from the one that will run your part, or may carry a scope that does not include machining.
This guide separates two things that usually get mixed: how to actually verify a certificate, and which concrete guarantees a machining supplier should deliver beyond the paper. The first protects you from the supplier who is not what they claim; the second protects you from the one who is and still ships a part with no evidence.
In Summary
- Require the standard that matches the part's destination. ISO 9001 as the floor, IATF 16949 for automotive production parts, AS9100 for aerospace, ISO 13485 for medical devices. Asking for the wrong one delays onboarding without adding safety.
- A certificate is read in four data points: certification body and its accreditation, number, validity dates, and above all scope with the site included.
- Verify in a register, not in the PDF. IAF CertSearch and the certifier's own register let you confirm status, standard, scope and accreditation.
- Certification is not a guarantee. What protects your part are deliverables: dimensional report, material certificate with heat number, lot traceability, and a written nonconformance policy.
- And it applies to the actual producer, not the middleman. Radii's network of shops is audited for ISO 9001 and AS9100 compliance, and Radii machines under IATF 16949 systems, which is not the same as holding that certificate.
1. What each standard certifies, and who needs it
| Standard | What it certifies | When to require it |
|---|---|---|
| ISO 9001 | A quality management system audited by a third party | Minimum floor for any recurring supplier |
| IATF 16949 | Automotive quality system at a site manufacturing production and service parts | Automotive series production parts |
| AS9100 | Quality system for aerospace and defense, built on ISO 9001 | Flight hardware, aerospace programs |
| ISO 13485 | Quality system for medical devices | Medical device components |
| ISO 14001 | Environmental management system | End customer sustainability requirement, not part quality |
Two practical notes. First: demanding IATF 16949 for a line spare bushing protects nothing and can leave you with no available supplier, because the certification targets production parts rather than maintenance. Second: AS9100 incorporates ISO 9001, so asking for both separately is redundant.
The detail of what the automotive industry requires and how it gets validated is in our piece on being an IATF 16949 supplier in Mexico.
2. The four data points to read on the certificate
When the PDF arrives, read in this order:
- Who issued it and who accredits them. The certification body must be accredited by a recognized authority. A certificate issued by a company accredited by nobody is a private document, not third-party certification.
- Certificate number and dates. Issue, expiry, and where shown, the date of the last surveillance audit. Certified systems are audited periodically; a certificate within validity but with overdue surveillance is a reason to ask.
- The scope. The description of covered processes. It is the line that decides whether the certificate is useful to you.
- The site or sites. The certified physical address. A company with three plants may have one certified and two not.
3. How to actually verify, in three minutes
- IAF CertSearch. The International Accreditation Forum's global database for verifying management system certifications issued under accreditation. You search by organization name or certificate number and it returns status, standard, scope, certification body and accreditation body.
- The certifier's register. Almost every body publishes a directory of certified clients. Confirm that the legal name, number and scope match the PDF you were sent.
- Direct contact. If it appears in no register, ask the supplier for their certifier's contact and confirm by email. A legitimate supplier has no problem with that.
Red flags this exercise surfaces: a certificate with no identifiable accreditation body, a legal name that does not match the invoicing entity, a scope that does not mention the processes you are buying, and a site different from the one that will produce.
4. Scope is what almost nobody reads
This is the most frequent finding when suppliers get qualified seriously. A certificate can be perfectly current and still be useless for your purchase:
- Scope that does not cover your process. "Design, integration and distribution of industrial equipment" does not back chip-removal machining.
- Wrong site. The certificate belongs to the head plant and your part will run in the building they opened last year.
- Subcontracted process with no declared control. Heat treatment or coating is done by a third party. The right question is not whether the supplier is certified, it is how they control that third party and what evidence they will hand you for that operation.
Closing it is simple: ask that the certificate scope mention the process you are buying and the address where it will be executed. If it does not match, that is not an automatic no, but it changes what you have to audit yourself.
5. Certification is not a guarantee: what must ship with the part
A certificate speaks about the system. Your part needs evidence of its own. These are the deliverables that constitute a real guarantee:
| Deliverable | What it demonstrates |
|---|---|
| Dimensional report on critical callouts | That the part being shipped was measured against the drawing |
| First-article report | That the run started within specification before releasing the lot |
| Material certificate with heat number | That the material is what you ordered, and where it came from |
| Lot traceability | That from one part you can trace back to material and run |
| Written acceptance criteria | What counts as conforming, so it is not argued after the fact |
| Nonconformance policy | What happens when something falls outside: containment, root cause, replacement or credit |
What is not a guarantee: "we have a CMM" is equipment, not evidence; "we work to quality standards" is not an auditable claim; and a photo of the part on the machine says nothing about the callout.
The full documentation package the automotive industry requires, with APQP, PPAP and SPC, is developed in the three quality pillars for a Tier 1 supplier, and the aerospace equivalent in ISO and AS9100 certifications for custom parts.
6. What to require based on what you are buying
| What you are buying | Reasonable certification | Evidence that actually matters |
|---|---|---|
| Line spare, MRO | ISO 9001 | Dimensional report on the functional callout, material certificate |
| R&D prototype | ISO 9001 | Dimensional report, and respect for the drawing revision |
| Tooling, fixtures, gauges | ISO 9001 | Full dimensional, traceability, and current instrument calibration |
| Automotive production part | IATF 16949 at the manufacturing site | PPAP at the level the customer requires, control plan, SPC, MSA |
| Aerospace part | AS9100 | FAI per AS9102, full traceability |
The principle behind the table: documentary demands should be proportional to the part's risk. Asking for the series-production package on a five-piece maintenance lot does not raise quality; it only moves the delivery date.
7. The middleman case, stated precisely
When your supplier is not the shop but a platform or integrator, the question moves: it is no longer only which certificate they hold, but how they qualify and control whoever manufactures.
Our position, so it is not left to interpretation: Radii's network of shops is audited for ISO 9001 and AS9100 compliance, and Radii machines under IATF 16949 systems. We do not claim to hold an IATF certificate, because that certification is issued to automotive part manufacturing sites and confusing the two is exactly the error this guide is meant to prevent. What we do deliver with the part is evidence: inspection with a report, traceability and material certificates, with the executing shop identified.
Frequently Asked Questions
What certifications should a machining supplier in Mexico hold?
It depends on where the part is going. ISO 9001 is the floor for an audited quality management system. For automotive production parts, the reference is IATF 16949, certified at manufacturing sites. For aerospace and defense, AS9100. For medical devices, ISO 13485. Demanding the wrong standard delays onboarding without adding safety.
How do I verify that an ISO 9001 certificate is current?
Through the issuing body's public register and through IAF CertSearch, the International Accreditation Forum database where accredited management system certifications are looked up: organization name or certificate number, status, standard, scope, certification body and accreditation body. If the certificate appears in no register, ask the supplier for their certifier's contact and confirm it directly.
What does a certificate's scope mean and why does it matter?
Scope states which processes and which sites the certification covers. A current certificate whose wording covers "design and distribution" does not back machining, and one issued to a plant in another city does not cover the plant where your part will run. It is the most common qualification error: validity gets checked and the scope line does not.
Is certification the same as a quality guarantee?
No. A certificate says an audited system exists; it says nothing about your part. Your part's guarantee is made of concrete deliverables: a dimensional report on critical callouts, a material certificate with its heat number, lot traceability, written acceptance criteria, and a nonconformance policy stating what happens when something falls outside.
Can a supplier without IATF 16949 certification sell to the automotive industry?
Yes, and it is common. IATF 16949 is certified at sites that manufacture automotive parts, and clause 8.4 requires the certified company to control its external providers and define a minimum level of quality management system development, with ISO 9001 as the initial floor and progression toward IATF as the goal for eligible organizations. In practice, what gets validated at the supplier is that it manufactures under the customer's system: control plan, PPAP where applicable, SPC, MSA and traceability.
Conclusion: the paper gets verified, the part gets demonstrated
Qualifying a supplier by certifications takes three minutes once you know what to read: accreditation, validity, scope and site, confirmed in a register rather than in the PDF. What does not get solved in three minutes is the other half, and it is the half that actually protects your line: what evidence will arrive with each lot, and what happens when something falls outside.
If you want to see what that package looks like for your part, upload the model or drawing at app.radii.com.mx. The quote arrives with the inspection the part calls for and the documentation inside the scope, not as an extra requested afterward.