AS9120 Certification: The Quality Management Framework Every Aerospace OEM Buyer Should Require from Distributors

The Counterfeit-Parts Wake-Up Call: Why AS9120 Now Sits at Every OEM Supplier Portal

When a flight-critical avionics LRU fails because a capacitor marked “MIL-PRF” turned out to be a repainted commercial-grade part, the investigation doesn’t stop at the component. It tracks back through the distribution chain—often ending at a broker who operated with a generic ISO 9001 certificate and no aerospace-specific controls. That scenario, repeated across multiple programs, has made AS9120 a non-negotiable filter on every serious aerospace OEM’s supplier portal.

The problem isn’t theoretical. Unverifiable traceability and relaxed distributor controls have cost programs from satellites to engine controllers, and the International Aerospace Quality Group (IAQG) developed AS9120 precisely to standardize quality management system requirements at all supply chain levels [NQA]. Unlike a generic QMS, AS9120 has been developed to ensure that aerospace components meet the quality standards specified by the aviation, space and defense (AS&D) industries [NSF]. When a distributor lacks it, the buyer inherits the full burden of verifying traceability, shelf-life integrity, and counterfeit mitigation—often under program deadlines that make deep audits impractical.

From the procurement desk, the pattern is familiar: a non-certified distributor may offer a lower price or faster delivery, but the hidden costs surface during receiving inspection when paperwork doesn’t reconcile, date codes conflict, or the certificate of conformance references an unauthorized reseller. AS9120 closes that gap by enforcing a management system built for AS&D risk, not just warehouse logistics. As the ISO 9001Group notes, implementing the standard from the ground up demands a system that meets the latest standard's full intent, not a patchwork of existing procedures [ISO 9001Group]. For the OEM buyer, the takeaway is clear: the certificate isn’t a gold star; it’s the baseline evidence that the distributor manages the chain of trust you are staking your airworthiness certificate on.

Key Drivers That Make AS9120 a Procurement Mandate

Driver	Mechanism	Procurement Impact
Global supply chain complexity	Parts pass through multiple intermediaries before reaching OEM stockrooms; each handoff creates a traceability break point unless documented under a certified QMS.	Without AS9120, buyers must manually reconstruct provenance, increasing lead time for supplier qualification and BOM acceptance.
Counterfeit risk in aerospace aftermarket	Repainted, remarked, or relabeled components penetrate the supply chain when incoming verification lacks aerospace-specific rigor.	Mandate AS9120 to ensure the distributor maintains a suspect-part containment process; a generic ISO 9001 certificate does not address counterfeit detection.
Regulatory pressure (FAA/EASA)	Continued airworthiness rules (such as FAA 14 CFR Part 21 and EASA Part 21) require design approval holders to control supply sources; regulators increasingly scrutinize distributor qualification.	AS9120 becomes the objective evidence of a controlled supply chain during audits, reducing the buyer’s liability exposure.
Shelf-life-sensitive components	Aerospace programs rely on parts with finite storage lives (solderability, seal integrity, battery life). A standard QMS often lacks documented shelf-life extension logic.	AS9120 Clause 7.1.5 forces distributors to maintain shelf-life procedures and customer notification, preventing expired material from entering production without explicit acceptance.
OEM supplier consolidation	Primes are slashing approved vendor rosters and insisting on single-audit certifications to reduce qualification sprawl.	Distributors holding AS9120 gain preferred status; those without it are often locked out of RFQs, regardless of pricing.

These drivers collectively explain why a distributor’s AS9120 certificate has become a litmus test—not merely a marketing claim. In the next section, we dissect the standard’s internal machinery to show what exactly turns a commodity stockist into a trusted aerospace supplier.

Inside AS9120: The Three Requirements That Turn a Stockist Into a Trusted Aerospace Supplier

AS9120 is not a standalone document; it is an extension of ISO 9001, hardened with aviation, space, and defense-specific clauses that address the unique risks distribution introduces. The official SAE AS9120 standard demands that a distributor’s QMS go far beyond basic order-to-ship tracking. Three interrelated requirements separate an AS9120-certified stockist from a warehouse that operates a generic quality manual.

First, full lifecycle traceability. The standard mandates that distributors maintain documented evidence of each component’s origin, lot/date code, and chain of custody from original manufacturer through to customer delivery. Records must be retrievable for the defined retention period—commonly 10 years or more for aerospace programs. This means the distributor cannot treat a part’s history as a “best effort” memory; it must exist as an auditable trail that can be produced during surveillance audits or when an OEM flags a suspect part.

Second, counterfeit-part prevention and suspect-part containment. AS9120 (Clause 7.1.5) requires documented procedures for assessing supplier risk, verifying incoming material, and isolating any part that cannot be authenticated. The standard works in tandem with industry guidelines like AS5553, requiring the distributor to train personnel, perform visual and documentation inspections, and quarantine material until authenticity is confirmed. This is not an optional “nice-to-have”; it is a clause audited for effectiveness, and failure typically results in a major non-conformance.

Third, shelf-life management and change notification. Electronic components with limited storage life—such as connectors with lubricants, batteries, or certain passives—must be tracked with expiration dates. The distributor cannot ship expired material without the customer’s written acceptance based on valid re-test data (e.g., solderability retest). Furthermore, any change that might affect the delivered product, including a manufacturer’s process change or a relocation of the distributor’s own facility, must be communicated to the customer in advance. This closes a common loophole where a distributor would sell material from a new source without notification, relying on an outdated certificate of conformance.

The table below maps ISO 9001 baseline clauses against the aerospace-specific additions that make AS9120 a different animal entirely.

QMS Element	ISO 9001 Baseline	AS9120 Aerospace Addition
Traceability	Identify and trace product per customer and regulatory requirements.	Maintain full chain of custody records back to the original manufacturer; preserve lot/date code linkage for product retention period [ISO-Docs].
Counterfeit parts prevention	No explicit clause; covered loosely under supplier controls.	Documented counterfeit prevention process, including supplier risk assessment, incoming verification, quarantine, and reporting of suspect parts [NQA].
Shelf-life management	Preservation of product during internal operations.	Requires documented procedure for shelf-life monitoring, extension testing, and customer notification before shipping expired material [ISO-Docs].
Change control	Control changes to QMS and production.	Mandatory prior notification to the customer for any change affecting conformity of delivered product, including supplier or process changes.
Configuration management	Optional, implied in design control.	Formal configuration management plan for product delivered; ties into part number, revision, and technical data control.

These additions are not academic. They are what NQA describes as requirements that can be used at all levels of the supply chain by organizations around the world to improve quality, cost, and delivery performance [NQA]. For a procurement engineer, that means the difference between a supplier who can substantiate every line item on a C of C and one who hopes you won’t ask.

AS9120 vs. AS9100 vs. ISO 9001: Which Certification Actually Keeps Bad Parts Off Your BOM?

The alphabet soup of aerospace quality certifications creates confusion that can lead buyers to accept the wrong certificate for a given supplier role. A distributor proudly presenting an ISO 9001 certificate may meet the baseline for a commercial project, but it leaves massive aerospace-specific gaps. Similarly, a machine shop’s AS9100 certificate says nothing about its ability to manage shelf-life and traceability for stock you don’t manufacture. Understanding the scope of each standard is the first defense against a weak link in your approved vendor list.

AS9120 (Revision B) is intentionally scoped to stockists and distributors. It assumes you do not design, manufacture, or repair; you procure, store, and supply. AS9100 covers organizations that design, develop, or provide aviation, space, and defense products and services—including parts, components, and assemblies. AS9110 adds repair-station requirements on top of AS9100. ISO 9001, while foundational, lacks any aerospace context and places the burden of interpreting traceability, shelf-life, and counterfeit risks entirely on the buyer.

The practical test: ask a distributor holding only ISO 9001 to produce a documented suspect-part containment procedure or a shelf-life extension policy. Most cannot, because ISO 9001 does not require them. Yet those documents are precisely what an OEM needs when a mil‑spec connector shows up with a date code three years past its rated storage life.

Certification Scope and Strategic Impact

Segment / Certificate	Effect on Aerospace Procurement	Notes
AS9120 distributor	Provides documented traceability, shelf-life management, and counterfeit prevention out of the box; can integrate directly into OEM’s approved vendor system with minimal additional audit.	Reflects SAE’s focus on the distribution environment [SAE].
AS9100 manufacturer	Demonstrates design and production controls but does not substitute for distribution-specific risks when a manufacturer acts as a reseller of third-party parts.	NQA’s certification suite distinguishes clearly between these scopes [NQA Standards].
AS9110 repair station	Essential for maintenance organizations sourcing components for repair; does not apply to distribution chain qualification directly but may require AS9120 in its own supplier control clause.	Repair stations often become unwitting conduits for counterfeit material if their supply base lacks AS9120.
ISO 9001 only	Leaves gaps in counterfeit prevention, aerospace traceability, and shelf-life control; forces OEMs to perform deep desktop audits for every transaction.	Real-world example: QMS Learning notes that when Boeing required AS9100 of its suppliers, the urgency for aerospace-specific certification drove rapid adoption; the same dynamic now applies to AS9120 for distribution [QMS Learning].
Multiple certifications (AS9120 + AS6081)	Adds known-good testing protocols to the quality management backbone, covering electrical verification and decapsulation for high‑risk components.	See FAQ for distribution between AS9120 and AS6081.

American Global’s overview of the AS series emphasizes that these are internationally recognized Quality Management System standards specifically designed for the aerospace industry [American Global]. The takeaway for a BOM owner is straightforward: if the component is not being built to your own drawing and you’re relying on a third party’s supply chain, the minimum bar is AS9120. Accepting anything less turns your incoming inspection desk into the de facto quality gate—an expensive, slow, and risk-laden proposition.

How to Audit a Distributor's AS9120 Certificate Without the 200‑Page Manual

Most procurement engineers don’t have time to read the full standard for every supplier qualification. Fortunately, verifying an AS9120 certificate and the underlying system doesn’t require a lead-auditor credential. It requires a focused checklist that targets the clauses where non-compliance most often surfaces and that forces the distributor to prove—not just claim—conformance.

Start with the certificate itself. AS9120 certificates are issued by accredited certification bodies (e.g., NQA, NSF) and must be verifiable in the IAQG OASIS (Online Aerospace Supplier Information System) database. Get the certificate number or the distributor’s OIN and perform the lookup yourself. A hand‑carried PDF delivered via email is not enough; certificates can be photoshopped or expired. Confirm that the scope statement explicitly includes the commodity codes and activities relevant to your needs—phrases like “distribution of electronic components for aerospace applications” signal that the auditor assessed the correct processes. Vague scope statements (e.g., “supply of parts”) are a red flag.

Next, request three documents that the distributor must maintain under AS9120 and that directly affect your BOM integrity:

• Counterfeit-part prevention procedure (Clause 7.1.5). Ask for the documented process for supplier risk assessment, incoming verification, quarantine of suspect parts, and escalation. The procedure should reference training records and specific inspection criteria, not just a policy statement.
• Shelf‑life management procedure (Clause 8.5.4, Protection). This must describe how shelf‑life is assigned, how expiration is flagged in the ERP, and the process for customer notification and acceptance when material is to be shipped beyond its rated life. Absence of a documented flow is a major non-conformance.
• Traceability and record retention policy. Verify that the distributor can produce a complete chain of custody from OCM to delivery for any given lot, and that records are retained for a period matching your program’s duration (typically 10 years plus the current year).

The table below provides a quick-look guide to the most effective verification actions, when to apply them, and the trade-offs each entails.

Action	When to Use	Trade-off
Validate certificate in OASIS	Before adding any new distributor to an approved vendor list.	Zero cost; requires the distributor’s OIN or certificate number. A delay in getting this information is itself a red flag.
Request the quality manual or specific procedures	During initial qualification and whenever a certificate renewal date is within 90 days.	Some distributors will resist sending full manuals; ask for the indexed clauses relevant to counterfeit, shelf-life, and traceability. If they still resist, flag as high risk.
Perform a virtual or on-site audit of the receiving/inspection area	For high‑volume or long‑term agreements; especially after a merger or address change.	Travel and scheduling costs; but reveals whether documented procedures are actually followed (e.g., whether suspect parts are physically segregated).
Request a sample traceability exercise for a past order	Annually for strategic suppliers; immediately if a part from that distributor is suspected of being counterfeit.	Time-intensive for the distributor legally, but AS9120 explicitly requires the QMS to support such retrievals. Inability to produce records signals systemic failure.
Cross-check shelf-life data with original manufacturer documentation	For any order containing date‑coded, life‑limited material.	Requires OCM spec sheets; if the distributor’s shelf-life date conflicts with the manufacturer’s stated life, demand the documented extension basis per AS9120.

These actions operationalize guidance from certification bodies like NQA, which stresses that certification is a system, not a static document, and from NSF, which emphasizes the additional criteria tailored to aerospace distributors [NSF]. The ISO 9001Group’s implementation insights underline that a genuine AS9120 system is built from the ground up; a distributor that cobbles together a manual for the audit alone will falter when you ask targeted procedural questions [ISO 9001Group]. ISO-Docs’ breakdown of clause specifics can help you phrase requests in language auditors use, which signals you’re operating from a position of technical knowledge, not faith [ISO-Docs].

From FAA AC 00-56 to Clause 7.1.5: How AS9120 Catches Traceability Gaps That Regulators Will Find

Aerospace regulatory requirements don’t name AS9120 directly, but they create a compliance framework that makes the standard the most effective tool for distributors. FAA Advisory Circular AC 00-56B, which addresses continued airworthiness of type-certificated products, places the onus on design approval holders to ensure that parts installed meet their type design. EASA Part 21 imposes similar obligations. When a distributor ships a part that turns out to be unapproved or fraudulent, the investigation will trace back through the supply chain, and the OEM’s supplier control evidence will be scrutinized. A distributor that lacks a systematic traceability and counterfeit prevention program—hallmarks of AS9120—becomes the weak link that exposes the entire certification basis.

The SAE AS9120 standard specifies requirements for the design, development, production, and inspection of an aerospace product to meet customer or regulatory requirements [SAE]. Within that framework, the clauses that map most directly to regulatory audit findings are Clause 7.1.5 (counterfeit parts prevention), Clause 8.3 (design and development—often triggered when a distributor creates an assembly or kit), and Clause 8.5.4 (preservation, including shelf-life). These clauses provide the documented evidence that a distributor’s supply chain is under control, exactly the kind of proof a regulator expects when reviewing whether an OEM’s supplier control process is adequate.

American Global’s treatment of the AS series as internationally recognized QMS standards underscores why regulators increasingly accept AS9120 certification as an objective indicator of compliance with the spirit of FAA and EASA expectations [American Global]. During a typical FAA audit of a repair station or PAH, the auditor will sample supplier files. If your “approved” distributor can’t produce traceability records or a counterfeit containment procedure, that becomes a finding against your own quality system. Conversely, when you can show that your distributor holds a current, accredited AS9120 certificate and you’ve verified it in OASIS, the audit trail closes quickly. The standard doesn’t replace regulatory oversight, but it creates a defensible, structured QMS that meets the regulatory demand for supply chain accountability.

AS9120 Questions Procurement Teams Actually Pose (Not Just What’s on the IAQG FAQ)

Q: Does AS9120 certification guarantee that parts are 100% counterfeit-free?
No. AS9120 mandates a robust counterfeit prevention process, including supplier assessment, incoming verification, and suspect-part containment, but it cannot eliminate all risk. It shifts the distributor’s QMS from reactive to proactive, so the buyer gets documented evidence of risk controls instead of empty assurances. For parts requiring electrical verification or decapsulation, specify AS6081 compliance in addition.

Q: What documentation must an AS9120 distributor provide with each shipment of mil‑spec components?
At minimum, a certificate of conformance (C of C) tied to the original manufacturer, traceability to lot/date codes, and evidence that shelf‑life and ESD controls were applied. For high‑reliability parts, expect copies of original manufacturer certifications and, when required, test reports. AS9120 forces these records to be retrievable for the product’s defined retention period.

Q: How does AS9120 handle components with expired shelf life—can they still be sold?
The standard requires a documented shelf‑life management procedure. Expired material can be shipped only if the customer explicitly accepts a documented extension that follows a valid test or evaluation (such as solderability retesting). Distributors must clearly communicate shelf‑life status before delivery.

Q: If a distributor re‑certifies under a new name after an acquisition, does our AS9120 qualification still hold?
Not automatically. The certificate is tied to the legal entity, scope, and address. Buyers should verify the new certificate in the IAQG OASIS database, check that the scope remains unchanged, and perform a delta‑audit on any changes to personnel or site that could affect the QMS.

Q: How can I independently verify that a distributor’s AS9120 certificate is current and authentic?
Look up the certificate in the IAQG OASIS online database using the distributor’s OIN or certificate number. Confirm that the scope includes the commodity codes and activities you need (e.g., “stockist and distributor of electronic components”), and note the expiry and any sanctions. A hand‑carried PDF is not enough.

Q: What is the difference between AS9120 and AS6081 for a distributor that also offers testing?
AS9120 covers the quality management system for procurement, storage, and supply of parts. AS6081 is a separate standard for procedures to detect and avoid counterfeit parts through test and inspection. A distributor can hold both, but AS9120 alone does not imply AS6081‑level testing. For parts requiring electrical verification or decapsulation, specify AS6081 compliance in your sourcing requirements.

References & Further Reading

1. NQA – AS9120 Certification for Aerospace Distributors
2. NSF – AS9120 Quality Management Systems for Aerospace Stockists
3. SAE International – AS9120 Standard
4. ISO 9001Group – AS9120 Implementation for Aviation, Space, and Defense
5. NQA – Aerospace Quality Management Certification Suite (AS9100/AS9110/AS9120)
6. QMS Learning – AS9100 vs AS9120: Real Audit Insights
7. American Global – AS Series Aerospace Quality Management Overview
8. ISO-Docs – AS9120 Clause Requirements and Breakdown

Specifying AS9120 in your supplier quality requirements is the first step. The next is to put that certification to work on a real BOM. When you’re ready to qualify distributors against the standard or need cross‑referenced pricing from certified sources, upload your bill of materials to IC‑Online. The platform supports mixed BOMs with flexible MOQs and connects you to suppliers whose quality credentials can be audited against the checklist you’ve just built. No inventory claims, no fabricated lead times—just a structured RFQ process that treats traceability as a baseline, not a negotiation point.