Supplier Qualification Process

Validating a new manufacturing supplier is not a paperwork exercise; it is a risk-reduction workflow that protects schedule, performance, cost, and compliance. In defense and aerospace, a single weak link can create nonconformances that trigger line stops, MRB backlogs, rework loops, or worse—field failures and audit findings. A robust supplier qualification process aligns engineering requirements, procurement controls, and quality system evidence before you commit a program to a new source.

This step-by-step guide is written for engineers, buyers, and program leads qualifying suppliers for advanced manufacturing—including additive manufacturing (AM) such as powder bed fusion (PBF) (DMLS/SLM), PM-HIP (powder metallurgy + Hot Isostatic Pressing (HIP)), precision CNC machining (including 5-axis machining), and regulated special processes. The goal is simple: establish objective evidence that the supplier can repeatedly produce conforming hardware with traceability and compliant documentation under your flowdowns (e.g., ITAR, DFARS, AS9100, NADCAP, NDE controls).

Use the framework below as a repeatable playbook. Tailor the depth based on criticality (flight hardware vs. tooling), maturity (proven supplier vs. startup), and the manufacturing route (AM-only vs. AM + HIP + machining + NDE).

Initial screening

The initial screening phase filters out suppliers that cannot meet baseline regulatory, business, and technical constraints. Done well, it prevents wasted RFQ cycles and avoids onboarding suppliers that will fail at audit or first article.

1) Define the qualification scope and risk level. Before you contact suppliers, document what “qualified” means for the specific commodity and part family. Capture: the process chain (e.g., PBF build → stress relief → HIP → heat treat → CNC machining → NDE → final inspection), the material system (e.g., Ti-6Al-4V, Inconel 718, 17-4PH), the critical characteristics, and the end-use environment. Identify whether the part is safety critical, pressure-retaining, fatigue-critical, or export-controlled. This determines how deep your screening and audits must go.

2) Check compliance gates early (ITAR/DFARS/export). If the program is ITAR-controlled, validate that the supplier can handle controlled technical data and has appropriate access controls (controlled work areas, visitor control, network restrictions, and training). For DFARS requirements, confirm their ability to provide compliant material documentation and to support flowdowns such as specialty metals clauses when applicable. If the supplier uses sub-tier processors (heat treat, NDE, plating), confirm they can flow down and verify compliance at that level too.

3) Confirm basic quality system maturity. For aerospace/defense work, an AS9100-certified QMS is often the minimum expectation. If a supplier is not AS9100, determine whether ISO 9001 plus additional controls is acceptable for your risk level. Also confirm they have a structured nonconformance system, corrective action (root cause) capability, calibration control, internal audit practices, and document control. Ask for a recent quality manual and an org chart showing independence of quality.

4) Perform an “RFQ-readiness” document review. Request a concise supplier packet: capabilities statement, equipment list, certifications, sample certificate of conformance (CoC), sample inspection report, example traceability record, and a list of approved sub-tier suppliers. You are looking for evidence they understand manufacturing documentation expectations (rev control, lot/heat traceability, objective evidence, and record retention).

5) Screen for capacity and program fit. Many supplier failures are not technical—they are scheduling and prioritization issues. Ask directly: What is their current load? Do they run multiple shifts? What is their typical lead time by process step? How do they prioritize expedite requests? For AM suppliers, also ask about machine uptime, build queue management, and powder availability. For machining suppliers, ask about spindle hours, fixturing resources, and programming capacity.

Practical output of initial screening: a short list of candidates with clear scope alignment, compliance readiness, and enough system maturity to justify a deeper capability review and audit.

Capability review

A capability review confirms the supplier can physically manufacture and verify the part to your specification—across the entire process chain. The key is to review capabilities the way the part will actually be made, not as a generic “we can do it” discussion.

1) Map the full manufacturing route. Require the supplier to propose a step-by-step router that includes each operation, inspection point, and document output. For an AM + HIP component, for example, a realistic route might be: (a) powder receiving and acceptance, (b) PBF build with parameter set and orientation rationale, (c) depowder and powder recovery controls, (d) stress relief heat treatment, (e) support removal, (f) HIP cycle, (g) solution/age heat treat (if applicable), (h) rough machining, (i) NDE (e.g., FPI/UT/CT scanning as required), (j) finish machining, (k) CMM inspection, (l) final cleaning and packaging, (m) certification pack assembly. If the supplier cannot clearly articulate the route, you have a risk of undocumented steps and uncontrolled variation.

2) Validate equipment and process envelopes against part requirements. For PBF (DMLS/SLM), validate machine model(s), build volume, laser configuration, inert gas system, oxygen monitoring, and powder handling equipment. Confirm they can meet layer thickness, surface finish expectations (or can post-process), and support removal without damaging critical features. For PM-HIP, validate canister preparation (if applicable), powder blending controls, HIP vessel size, maximum temperature/pressure, and their ability to meet densification requirements for the alloy system. For 5-axis CNC machining, confirm travel limits, spindle power, tool measurement systems, probing, and the ability to hold tolerances on thin walls or complex geometries.

3) Review metrology and inspection capability realistically. “We have a CMM” is not enough. Confirm measurement volume, probing strategies, software, and operator competency. Ask how they verify internal features for AM parts—this is where CT scanning may be required. If the drawing calls out GD&T, confirm their inspection reports can report those characteristics. For NDE, verify method, procedure control, and personnel qualification (e.g., NAS410/ASNT-based programs) consistent with your requirements. If they outsource NDE, treat the sub-tier as part of the qualification scope.

4) Evaluate material control and traceability. In regulated manufacturing, traceability is non-negotiable. Confirm their ability to maintain lot/heat traceability from incoming material (powder, billet, bar) through WIP and finished goods. For AM powder, ask about powder reuse policy, virgin-to-reuse blending rules, powder lot segregation, storage conditions, and contamination prevention. For PM-HIP, verify powder chemistry control, oxygen/nitrogen limits, and whether they can provide material test reports and linkage to each build or HIP lot. The goal is to ensure that every finished part can be tied back to a specific material lot, process record, and inspection record.

5) Confirm special process control (NADCAP and equivalents). If the supplier performs special processes (heat treat, NDE, chemical processing), determine whether NADCAP accreditation is required by your customer or prime contract. Even when NADCAP is not mandated, you still need evidence of controlled procedures, calibrated equipment, furnace uniformity surveys, thermocouple controls, and documented acceptance criteria. Ask for sample charts/records (redacted if needed) to verify the records look like production-grade evidence.

6) Review engineering support and DFM capability. Especially for AM and complex machining, technical engagement matters. Ask how they handle DFM feedback (support strategy, build orientation tradeoffs, distortion management, machining datum strategy). A capable supplier will propose datum schemes that support stable inspection and downstream assembly. They should also be able to discuss how HIP affects dimensional change and how they compensate through machining stock and process planning.

Practical output of capability review: a documented manufacturing and inspection plan (often appended to the PO or kept as a controlled supplier plan) that matches your drawing/spec requirements and identifies any gaps before audit and first articles.

Quality audit

The quality audit verifies that the supplier’s systems can produce consistent outcomes, not just a one-time “good part.” The most effective audits connect system requirements (AS9100, customer flowdowns) to the exact process chain for your part family.

1) Prepare an audit plan tied to the part family. Use a checklist that covers document control, training, calibration, purchasing/sub-tier control, manufacturing planning, inspection records, nonconformance, corrective action, and product safety/counterfeit prevention where applicable. Then add process-specific modules for AM, HIP/PM-HIP, CNC machining, and NDE. Share the plan in advance so the supplier can stage objective evidence and the right personnel.

2) Audit contract review and flowdown control. Many supplier escapes begin at contract review. Verify they have a controlled process to review POs, drawings, specifications, and flowdowns before accepting work. Confirm they can identify key characteristics, special process requirements, and inspection notes. For ITAR programs, verify how they control controlled technical data and who is authorized to access it.

3) Audit traveler/router control and in-process verification. Confirm that each job has a controlled router with operation sign-offs, hold points, and inspection requirements. Look for evidence of in-process checks that prevent “inspect quality into the part at the end.” For AM builds, verify build travelers capture machine ID, parameter set, build file identification, powder lot, environmental controls, and post-processing steps. For HIP, verify cycle records are tied to lot IDs and acceptance criteria.

4) Audit calibration and measurement system discipline. Validate that measurement devices used for acceptance are calibrated and within due dates. Confirm they control software versions for CMM programs and maintain inspection data integrity. If you rely on CT scanning or specialized gaging, ensure the method is validated for the defect types and sizes relevant to your acceptance criteria.

5) Audit nonconformance and corrective action effectiveness. Review a few closed corrective actions. You are looking for disciplined root-cause analysis (not “operator error”), containment actions, and systemic fixes. For AM suppliers, common systemic issues include powder cross-contamination, parameter drift, insufficient build file control, and inconsistent support removal practices. For machining suppliers, common issues include tool wear monitoring, fixture repeatability, and datum misinterpretation.

6) Audit sub-tier supplier management. If the supplier outsources heat treat, NDE, coating, or CT scanning, verify they qualify and monitor those processors. Confirm they review sub-tier certs and that traceability is maintained through the outsource loop. A strong prime-tier supplier treats sub-tier outputs as part of their controlled process, not as “black box” services.

Practical output of quality audit: an audit report with objective evidence, defined findings (if any), corrective action requests with due dates, and a clear qualification status (approved, conditionally approved, or not approved) by process scope.

First articles

First articles are where capability and quality systems meet reality. For aerospace hardware, the standard expectation is a structured First Article Inspection (FAI) aligned with AS9102 principles, even when not explicitly required by contract. The goal is to prove the supplier can build to the current revision and can provide a complete certification pack.

1) Lock the configuration. Before cutting metal (or starting a build), confirm you have the correct drawing revision, specifications, approved deviations, and any controlled process plans. Make sure key characteristics are identified, including those that are difficult to measure. If you are qualifying AM parts, freeze the build parameter set and define what changes require notification and re-approval (e.g., machine change, parameter change, powder reuse policy change).

2) Run the part through the full production-intent route. Avoid “golden path” prototypes that skip steps. If production will include HIP, it must be included in the first article build. If production will require CT scanning for internal features, do it in first article. If final hardware will be 5-axis machined after AM, use production-intent fixtures, datums, and toolpaths. Qualification is only meaningful when it matches the real process chain.

3) Validate material pedigree and traceability end-to-end. Ensure the certification pack includes material test reports, powder/billet heat/lot identification, and traceability linkage to each part serial/lot. For AM, confirm powder lot and reuse history is documented. For PM-HIP, confirm powder chemistry, canister details (if used), HIP cycle charts, and any post-HIP heat treatment records are included. The traceability package should allow you to reconstruct the build and post-processing history without “tribal knowledge.”

4) Verify dimensional and functional requirements with appropriate inspection methods. Use CMM inspection for GD&T features where applicable, and confirm measurement plans reflect the drawing datum structure. For internal channels, lattice structures, or hidden cavities common in AM, define acceptance using CT scanning or alternative validated methods. Don’t accept ambiguous “looks good” judgments—require objective measurements and documented acceptance criteria.

5) Confirm defect control and NDE acceptance. If the part requires NDE, verify procedures, acceptance criteria, and personnel qualification. For AM parts, consider whether surface-connected porosity, lack-of-fusion indications, or internal defects are relevant to fatigue life. Ensure the supplier’s NDE method (UT, radiography, CT, FPI) is actually capable of detecting the defect modes of concern at the required threshold.

6) Review the certification pack like an auditor would. A procurement-ready supplier delivers a clean, complete pack: CoC, FAI forms or equivalent, material certs, process certs (heat treat/HIP/NDE/coating), calibration references for key inspection tools (as required), and evidence of compliance to PO/drawing/spec revisions. Missing or mismatched paperwork is a leading indicator of future escapes.

7) Close the loop with a documented acceptance decision. After first article review, document whether the supplier is fully approved for the defined scope, approved with limitations (e.g., only certain alloys or only certain machine IDs), or requires corrective action and a re-run. Make the scope explicit so engineering and procurement don’t assume “qualified for everything.”

Practical output of first articles: a signed-off FAI/first article package, a locked process definition (what is controlled), and a clear supplier approval scope by process, material, and part family.

Ongoing scorecards

Qualification is not permanent. Once a supplier enters production, ongoing scorecards keep performance visible and provide early warning before issues become program impacts. The best scorecards combine quality, delivery, responsiveness, and technical performance—not just on-time delivery.

1) Define a small set of metrics that match your risk profile. Typical scorecard categories include: (a) quality (PPM, escapes, MRB rate), (b) delivery (on-time delivery, lead time stability), (c) responsiveness (RFQ turnaround, corrective action timeliness), (d) documentation quality (cert pack completeness, revision errors), and (e) technical capability (process stability, Cp/Cpk on key characteristics when available). For AM suppliers, consider tracking build yield and scrap rate by machine and material.

2) Track process changes and control “silent drift.” Require notification for controlled changes: machine relocation, software/firmware updates, parameter changes, powder supplier change, new powder reuse rules, furnace repairs, new CMM software, or sub-tier changes. Many problems start when a supplier “improves” a process without understanding downstream requirements. Establish what needs your approval versus what only requires notification.

3) Hold regular performance reviews tied to corrective actions. A monthly or quarterly review (depending on volume) should address trends, not isolated incidents. If issues repeat, require structured corrective actions with root cause and verification of effectiveness. When the supplier is strategic or high risk, consider joint process capability studies on key characteristics.

4) Verify documentation discipline continuously. Audit a sample of certification packs periodically. Look for consistent traceability, correct spec revisions, complete process certs, and proper sign-offs. Documentation issues are often the earliest indicator of systemic weakness—and are especially important for ITAR/DFARS programs and customer audits.

5) Include sub-tier performance where it matters. If the supplier relies on outsourced NDE, HIP, or coatings, your scorecard should reflect sub-tier performance (late certs, nonconforming processing, missing records). Encourage the supplier to build redundancy and to qualify secondary processors for continuity of supply.

Practical output of ongoing scorecards: a living, data-driven view of supplier health that supports sourcing decisions, dual-source planning, and proactive risk mitigation.

When to re-qualify

Re-qualification is necessary when conditions change enough that prior evidence no longer guarantees conforming output. In regulated manufacturing, re-qualification triggers should be defined in writing and enforced consistently.

1) Re-qualify after significant process or equipment changes. Examples include: new PBF machine model or laser configuration; major firmware/software change impacting build control; change in powder supplier or powder specification; new HIP vessel or HIP cycle changes; change in heat treat furnace or controller; new NDE method or procedure revision; relocation of the facility; or major change in CNC machine, control software, or fixturing approach. For AM, even changes in recoater type, shielding gas system, or oxygen control strategy can be significant depending on the alloy and criticality.

2) Re-qualify after quality escapes or repeated nonconformances. If a supplier has an escape that reaches integration, test, or the customer, treat it as a trigger for deeper review. Re-qualification may range from a focused audit plus targeted first article re-run to a full re-audit and re-FAI depending on severity and root cause.

3) Re-qualify after long gaps in production. If a part family has not been built for an extended period, process knowledge, personnel, and equipment condition may have changed. Define a time-based trigger (commonly 12–24 months, adjusted for risk) and require a “restart” plan: first piece inspection, verification of tool programs, and confirmation that controlled parameters remain unchanged.

4) Re-qualify when specifications, drawings, or acceptance criteria change materially. A new revision may introduce new key characteristics, different tolerances, new NDE requirements, or different material properties. Treat major design changes as new qualification scope, even if the supplier is already approved for the prior configuration.

5) Re-qualify when ownership, key personnel, or sub-tier structure changes. Acquisitions, turnover of quality leadership, or changes in critical sub-tier processors can degrade performance. If the supplier changes their NDE lab, HIP processor, or heat treat house, require evidence the new sub-tier is qualified and that traceability and cert pack structure are maintained.

How to re-qualify efficiently: scale the response to the risk. For low-risk changes, a documented change notification plus a targeted validation build may be enough. For high-risk changes (e.g., new AM parameter set for flight-critical hardware), plan a controlled re-qualification: audit the change, run a first article under the new condition, and update the approved supplier scope and records.

When you treat qualification as a lifecycle process—screening, capability validation, system audit, first article proof, and ongoing monitoring—you reduce the probability of late surprises and create a repeatable sourcing engine. A disciplined supplier qualification process is one of the highest-leverage investments you can make in program execution, especially for advanced workflows like AM + HIP + precision machining under stringent aerospace and defense compliance requirements.