AS9120 Certified Distributors: A Buyer’s Checklist for Authentic Components

Why a Single Counterfeit Lot Can Ground a Program

Supply chain turbulence over the last eighteen months rewrote the rules for electronic component procurement. Buffer stocks evaporated, legacy approvals stretched, and opportunistic counterfeiters moved into gaps that previously belonged to authorized channels. For aerospace, defense, and medical buyers, the margin for error shrank to zero: a single lot of misrepresented FETs or recycled FPGAs can stall flight qualification, trigger a line stoppage, or — worst — erode trust with your own end customer. AS9120 certification has moved from a nice‑to‑have to a core operating requirement precisely because it addresses the two weaknesses counterfeits exploit: porous documentation and untested trust in suppliers.

Today, distributors that take authentication seriously run dedicated labs, not just paperwork. Secure Components, for example, operates in‑house electrical testing and counterfeit detection as part of their AS9120‑governed quality system. Accumet Specialty Metals, an AS9120B distributor of aerospace alloys, demonstrates that the standard isn’t limited to silicon — raw materials and specialty metals fall under the same traceability umbrella. These organizations treat a purchase order as an auditable chain, not a transaction. The forces that make that chain essential aren’t abstract; they show up in every RFQ that crosses your desk.

Table 1 — Forces driving AS9120 adoption in electronics procurement

Driver	Mechanism	Procurement Impact
Sophisticated counterfeiting techniques	Black‑topping, lead‑frame resurfacing, and electrically plausible clones that bypass basic visual inspection.	Visual and X‑ray checks alone are no longer sufficient; buyers need distributors with documented authentication protocols and electrical verification.
Aerospace & defense regulatory tightening	Prime contractors and OEMs flow down AS/EN/JISQ 9100‑series requirements, making certified stockists a prerequisite for approved vendor lists.	Using a non‑certified source can disqualify a bid or trigger contract non‑compliance — RFQs must ask for current certificates.
Post‑pandemic gray‑market proliferation	Brokers without traceability step in when authorized lines dry up, mixing suspect material with legitimate surplus.	Makes full back‑to‑OEM traceability and lot‑level documentation a hard requirement on every PO.
Increasing life‑cycle pressure on long‑program parts	Defense programs spanning 20+ years rely on parts the OEM obsoleted a decade ago; unsanctioned “refurbished” units flood the channels.	Buyers must verify that the distributor’s counterfeit risk assessment process covers the specific MPN and commodity class, not just a generic policy.
Supplier‑audit fatigue from OEMs	End users conduct hundreds of audits; they lean on standards like AS9120 to delegate trust.	A recognized, up‑to‑date AS9120 certificate shortens the qualification cycle and can move a supplier to the front of the RFQ queue.

These drivers converge on one practical decision: before you cut a PO, you need hard evidence that the distributor operates a closed‑loop quality system built for stockists. That’s exactly what AS9120 delivers, and why its position in your vetting process matters.

Where AS9120 Fits in the Chain of Trust: Traceability, Documentation, and Counterfeit Defense

Engineers sometimes mistake AS9120 for a component test standard. It isn’t. AS9120 is the SAE‑published Quality Management Systems standard for stockist/distributors — the aerospace‑specific fork of ISO 9001 that adds supply chain control, counterfeit risk assessment, and traceability requirements unique to pass‑through entities. A distributor that holds this certification has demonstrated that its ordering, receiving, storage, handling, and delivery processes are not just documented but audited and continuously improved.

Amtivo and the Performance Review Institute both underscore that the standard wraps those functions into one system — from supplier qualification to final packaging. The result is a recorded, repeatable path that proves a component is what its label says. The following table translates the standard’s core process areas into evidence you can request during a supplier qualification.

Table 2 — Mandatory AS9120 process areas and the corresponding buyer evidence

AS9120 Process Area	What the Distributor Must Do	Evidence to Request
Supplier selection & evaluation (Clause 7.4)	Assess and approve every source based on risk, including testing capability and traceability record.	Approved supplier list; latest audit reports for the OEM/OCM of the specific MPN.
Traceability & product identification	Maintain unbroken records from OEM or authorized source to end customer; lot‑level documentation for each shipment.	Traceability certificate that maps heat/lot codes to packing slip and OEM CoC; a real‑time trace walk‑through for a high‑risk part.
Counterfeit part prevention	Operate a documented counterfeit risk assessment process, including inspection criteria and quarantine procedures.	Counterfeit prevention plan; recent quarantine log or alert summary; evidence of in‑house or contracted electrical test capability.
Preservation of product	ESD, moisture, and shelf‑life controls appropriate to the commodity (e.g., MSL‑sensitive packages).	Storage audit report; photographs of the floor; packaging samples with humidity indicator cards intact.
Control of nonconforming outputs	Segregate, investigate, and formally disposition suspect material — not simply return it to stock.	Nonconformance log; an example of a corrective action request and its root‑cause analysis.
Configuration management & record retention	Control revisions of specifications, datasheets, and order documents; retain records for the required period (typically 10+ years for aerospace).	Evidence that the distributor can retrieve full records for a purchase order from five years ago within a defined time window.

None of these pieces of evidence is theoretical. Buyers who routinely upload mixed bills of materials to an RFQ platform quickly learn that a certificate number without a scope statement and a traceability demo is a red flag. The most effective vetting happens when you treat the standard as a checklist of verifiable behaviors, not as a logo on a website.

AS9120 vs. AS6081: Which Standard Protects Your Bill of Materials?

If AS9120 is the armor around the distributor’s process, AS6081 is the scalpels and microscopes used on the parts themselves. AS6081 governs inspection and test of components that have already been procured, often by independent distributors who do not have full OEM traceability for every lot. It covers decapsulation, die verification, x‑ray, and electrical testing — the destructive and non‑destructive techniques that can catch a well‑made counterfeit that passed a visual exam.

Rand Technology points out that AS9120 improves the fidelity of lead‑time, alternates, and lifecycle information you receive, while AS6081 acts as a second line of defense when a part’s provenance is uncertain. A distributor directory like KokoQuest illustrates the full spectrum: some distributors hold only AS9120, some operate an in‑house AS6081 lab as well, and some leverage ISO 17025‑accredited test houses for those verifications. The table below decouples the standards so you know which one to invoke at each stage of sourcing.

Table 3 — AS9120 vs. AS6081: selection logic for procurement teams

Metric	AS9120 (Stockist QMS)	AS6081 (Component Inspection)	Selection Criteria
Primary focus	Supply‑chain controls, from purchasing to delivery	Physical and electrical verification of individual components	Require AS9120 for any distributor holding inventory; add AS6081 when traceability is incomplete or the MPN is a known counterfeiting target.
Scope	Organization‑wide quality management for stockists	Lot‑specific testing protocols for electronic components	AS9120 secures the repeating process; AS6081 secures a specific buy when you can’t rely on full OEM pedigree.
Key processes covered	Supplier qualification, traceability, preservation, nonconformance, risk management	External visual, X‑ray, decapsulation, electrical characterization, marking permanency	Ask for an AS9120 certificate before qualification; negotiate AS6081 test reports for high‑risk lots as a condition of acceptance.
Typical audit cadence	Annual surveillance audits by an IAF‑accredited body; full recertification every 3 years	No organization‑level audit for AS6081 per se; labs are accredited to ISO 17025 for the test methods used	Verify the certification body’s IAF signatory status for AS9120; for AS6081, ask for the test lab’s scope of accreditation and recent proficiency test results.
When to mandate	Every aerospace/defense procurement; strongly recommended for medical and high‑reliability industrial	When procuring from non‑authorized sources, obsolete parts, or during allocation‑sensitive market conditions where unauthorized intermediaries thrive	Build AS9120 into your approved vendor baseline; invoke AS6081 as a risk‑buy supplement, not a replacement for a robust QMS.

The two standards are complementary, not interchangeable. A distributor claiming “AS9120 compliant” without a valid certificate lacks the independent oversight that makes the standard meaningful — a point we’ll address in the FAQ. But even a certified AS9120 distributor can unknowingly receive a cleverly disguised counterfeit if the OEM supply chain upstream is compromised. That’s why progressive buyers ask for both the QMS shield and, on targeted part numbers, the AS6081 sword.

The AS9120 Buyer’s Checklist: 5 Vetting Steps Before You Cut a PO

Paper certificates can create a false sense of security. I’ve seen buyers accept a PDF of an ISO‑style certificate without reading the scope statement, only to discover later that the distributor’s certification covered “fasteners” — not the FPGA they bought. Rand Technology’s quick‑vet checklist and the in‑house practices at Secure Components show that effective qualification is active, not passive. Use these five steps to turn a certificate into a lifeline:

Verify the certificate scope covers your commodity class. Pull the PDF and read the scope statement. If it says “metals” and you’re buying multi‑layer ceramic capacitors, it’s insufficient. The scope must explicitly include the product category you’re purchasing — electronic components, semiconductors, connectors, etc. A legitimate certificate will also carry the IAF Mark from an accredited body; you can cross‑check the number in the OASIS database or the registrar’s online portal.
Confirm the issuing certification body is IAF‑accredited. A certificate from an unaccredited source is a self‑printed placard. Look for the accreditation mark — ANAB, UKAS, or an equivalent IAF signatory. If you can’t find it, ask the distributor for the accreditation number and verify it on the accreditation body’s website. This filters out bogus “certifications” in seconds.
Request the most recent audit summary. A current certificate tells you the distributor met the standard at some point. The audit summary — a one‑ or two‑page report that the registrar provides — shows you whether major or minor nonconformances were found and how quickly they were resolved. Distributors committed to transparency will share this readily; those who resist signal that the system may be merely ceremonial.
Walk through a traceability exercise on a real part number. Pick a MPN from your BOM that carries single‑source or life‑cycle risk. Ask the distributor to produce a complete traceability package — OEM CoC, shipping log, in‑house inspection records, and photos of the physical label with lot code — within an agreed turnaround. A fuzzy trail or inability to map labels to documents is a hard stop. This exercise validates that the traceability promise isn’t just a binder on a shelf.
Ask how suspected counterfeits are reported and quarantined. An AS9120 system requires a formal nonconformance and quarantine process. The answer should describe segregation in a locked area, immediate notification to the quality manager, root‑cause investigation, and — critically — reporting to industry watchdogs like ERAI if the part is confirmed counterfeit. Hesitation or vague responses indicate the procedure exists only on paper.

These five steps shift the dynamic from “trust me” to “show me.” When you embed them into your supplier onboarding workflow, the difference between a certified partner and a certificated facade becomes obvious long before a purchase order is issued.

AS9120 Vetting Questions Buyers Actually Ask

Beyond the certificate itself, engineering and procurement teams raise pointed questions that separate ritual compliance from operational rigor. The answers below reflect what I share with teams that are hardening their approved vendor lists right now.

Q: Does an AS9120 certificate guarantee that every part is authentic?
No. The certificate confirms the distributor operates a counterfeit‑prevention management system that has been independently audited. Parts are only trustworthy when that system consistently delivers full, unbroken traceability back to the OEM/OCM and passes ongoing surveillance. Authenticity is a process outcome, not a certificate effect.

Q: How can I quickly check that a distributor’s AS9120 is current and covers the commodity I’m buying?
First, examine the certificate’s scope statement — it must mention your commodity class (e.g., “electronic components” or “semiconductors”). Second, look up the certificate number on the registrar’s online portal or in the OASIS database; registration can lapse without the distributor alerting you. If the scope states “steel” and you’re ordering PCBs, the certificate has no bearing on your purchase.

Q: Do I need an AS9120 distributor for non‑aerospace projects? Is it overkill?
No regulation forces you to use one for industrial or medical builds. However, many industrial and medical procurement teams adopt AS9120 rigor voluntarily because the cost of a counterfeit‑induced field failure — product recall, liability, rework — dwarfs the slight premium a certified distributor may command. In safety‑critical or long‑life applications, the discipline often pays for itself on the first avoided event.

Q: What’s the difference between a distributor claiming ‘AS9120 compliant’ and one that is certified?
‘Compliant’ is a self‑declaration with no independent verification. Only a certificate issued after an audit by an IAF‑accredited certification body satisfies SAE AS9120 requirements. Always demand the full certificate number, the accreditation mark, and the scope statement. If you can’t independently verify it, treat the claim as unsubstantiated.

Q: When should I push for AS6081 testing on top of AS9120 certification?
Invoke AS6081 when the component is a recognized counterfeiting target — think legacy FPGAs, discontinued MIL‑grade op‑amps, or memory ICs with limited authorized channels — or when you’re introducing a second source late in a program’s life cycle. AS6081 adds decapsulation and electrical curve‑trace verification that a pure stockist may not perform in‑house. Having an AS9120 distributor that can facilitate AS6081 testing through an accredited lab gives you the best of both worlds.

Q: How frequently are AS9120 distributors audited?
Certified stockists undergo annual surveillance audits by their certification body, with a full recertification audit every three years. Between audits, the distributor’s internal audit program should be running continuously. If a certificate is more than 12 months past its issue date without a surveillance stamp or registration update, verify its status before proceeding.

These questions come up in every serious sourcing review because they cut to the operational reality behind the certification. Use them as conversation starters when you evaluate a new AS9120 partner — the quality of the answers tells you as much as the certificate itself.

Conclusion and next steps
AS9120 certification is not a rubber stamp; it’s a framework that, when properly verified, dramatically reduces the risk of counterfeit components entering your production stream. The checklist and tables above give you a repeatable method to separate vendors who invest in the entire chain of trust from those who merely decorate their website. In today’s allocation‑sensitive market, where the temptation to chase gray‑market material is high, an AS9120‑verified distributor becomes a strategic asset — someone who can protect your bill of materials even when authorized lines are constrained.

When you’re ready to source your next mixed BOM or need to qualify a new supplier, IC‑Online’s RFQ platform gives you direct access to pre‑vetted distributors that meet the rigorous criteria described here. Upload your bill of materials and receive quotes that include full traceability documentation, flexible MOQs, and allocation‑backed delivery commitments — without the guesswork.