hello@sterling-grc.com +1 201 263 4443 New York ISO & GRC consulting in 60+ countries
SterlingInternational Consulting Talk to a consultantTalk to us

IATF 16949 · Automotive quality management systems

IATF 16949 certification consulting for automotive parts your customers can put straight on the line.

Get IATF 16949 certified by an IATF-recognised certification body, first time, on the timeline your customer set. Sterling's expert and experienced consultants build the automotive quality management system with your plant team, prepare the evidence and stay with you through the stage 1 readiness assessment, the stage 2 audit and the surveillance audits after it, in 60+ countries. We ensure successful certification for our clients.

  • One all-inclusive proposal, one proposal: consulting, Effivity software, Sterling Academy access and internal auditor training, as applicable to your standard
  • A team of expert and experienced automotive quality consultants, advising on management systems across sectors and countries since 2003
  • The Sterling Promise: 100% on-time completion, 100% success, 8,100+ client engagements. Sterling does not certify; an IATF-recognised certification body audits and decides

8,100+ client engagements in 60+ countries.

IATF 16949 client experience
  • Allianz
  • Emirates Flight Catering
  • Etihad Rail
  • Haier
  • Whirlpool
  • Emerson
  • Olam
  • Piramal Pharma Solutions

What it is

What is IATF 16949 and what is it used for?

IATF 16949 is the quality management system standard of the global automotive industry. It is written and owned by the International Automotive Task Force, the vehicle manufacturers and national automotive trade associations of France, Germany, Italy, the UK and the US that also run the certification scheme behind it. It sets out what a supplier's quality system must do to prevent defects and reduce variation and waste, and it replaced the technical specification ISO/TS 16949 in 2016.

It is not a stand-alone standard. IATF 16949 is applied as a supplement to ISO 9001:2015 and in conjunction with it: ISO 9001 supplies the base requirements, IATF 16949 adds the automotive requirements clause by clause, and your customers' specific requirements sit on top. A certificate is evidence of all three working together at a manufacturing site, which is why OEMs and Tier 1 buyers ask for it before nominating a supplier.

For your plant the useful question is practical: can the operation launch a new part with an approved PPAP, hold the process within the control plan on every shift, answer a complaint with containment and a root cause inside the days the customer allows, and prove it in records? A well-implemented system does that in daily work; a badly implemented one produces a binder.

Current edition. IATF 16949:2016, first edition, published by the IATF on 1 October 2016 and read with the IATF's sanctioned interpretations and FAQs (latest November 2025 and June 2026). Certification is granted under the IATF Rules for achieving and maintaining IATF Recognition, 6th Edition, effective 1 January 2025. No IATF 16949 transition is running, but two things are moving: ISO 9001:2026 was published on 16 September 2026 with a three-year transition for ISO 9001 certificates to 30 September 2029, and the IATF, which started the revision of IATF 16949 in October 2024, confirmed in July 2026 that the second edition is planned for mid-2027, dates indicative, with the end of its transition aligned to the end of the ISO 9001 transition. Until then IATF 16949:2016 remains the edition you implement and are certified to; how your certification body reads ISO 9001:2026 alongside it is confirmed with the body. IATF 16949 second edition: what the IATF has published so far

Who it is for

Who needs IATF 16949 certification?

IATF 16949 certification is site-specific. It is available to sites where automotive products are manufactured: production parts and materials made to an automotive customer's specification, service, aftermarket and remanufactured parts, and accessory parts, with or without embedded software. Design centres, head offices, warehouses and distribution centres are audited as support functions of the manufacturing site they serve and are not certified on their own; an organisation that only designs or trades does not qualify. Organisations come to Sterling for IATF 16949 from four starting points:

  • An OEM or Tier 1 has made it a condition of the award. A request for quotation, a supplier manual or a sourcing decision names IATF 16949, usually with a date; clarify which sites, products and customer-specific requirements are in play before the programme is planned, so the certificate answers the buyer's question.
  • You supply the industry on ISO 9001 and want the next tier of work. Certified suppliers must develop their own sub-tier suppliers along a progression that ends in IATF 16949 certification. A site with ISO 9001 has the base; what is missing is the automotive layer: control plans, PFMEA, MSA, SPC, PPAP and the customer portals.
  • You are entering automotive from another sector, or a new segment of it. EV components and charging systems, which the IATF has confirmed are eligible as accessory parts, attract suppliers whose quality systems were built for other customers; the scheme's expectations on launch, traceability and problem-solving are stricter than anything they have met.
  • You hold a certificate and it is fragile. A major nonconformity at the last surveillance, an IATF OEM scorecard below target that adds audit time, CSRs nobody tracks, or a transfer to another certification body. The system needs rebuilding around the way the plant runs.

The intended benefit is control of your manufacturing processes and evidence of it your customers accept; results depend on ownership on the shop floor, not on the certificate alone.

Business benefits

How IATF 16949 supports launch performance and customer confidence

An automotive quality system should help you win programmes and launch them without drama. We start where a late PPAP, an escape, a missed special characteristic or a repeat complaint costs the plant money and standing, and build the system around those points.

  • Launches that landAPQP with a control plan, a PFMEA and a PPAP submission the customer approves first time, instead of a launch rescued by containment.
  • Fewer escapes and less scrapError-proofing, verified set-ups, standardised work and statistical control on the characteristics that matter, so variation is caught at the process, not at the customer.
  • A stronger scorecardDelivery, PPM and complaint response managed as the customer measures them, so a surveillance audit is not extended by a target you are missing.
  • Faster, cleaner problem-solvingOne method for containment, root cause and corrective action that customers recognise, with lessons learned fed back into the FMEAs and the control plans.
  • Suppliers you can rely onSub-tier suppliers selected, monitored and developed by risk, with the pass-through characteristics controlled where they are made.
  • A system that scales to new programmesEvery new part, customer and site starts from the same process approach, core tools and records, with justified local differences preserved.

Choose a few measures that reflect these priorities, such as first-time PPAP approval, customer PPM, premium freight and the rate at which corrective actions close. A larger document library is not a business result.

Requirements

What are the main IATF 16949 requirements?

IATF 16949 follows the clause structure of ISO 9001:2015, clauses 4 to 10, and adds automotive requirements as numbered supplements inside each clause; Annex A defines the control plan. The table maps the main additions in plain language, with the supplemental clauses most often examined at audit; your implementation is checked against the full text of both documents, your customers' specific requirements and the current sanctioned interpretations, clause by clause, during the programme.

ClauseWhat it adds to ISO 9001What it looks like in practice
4 Context of the organisationBring the customer-specific requirements into the system, ensure conformance of every product and process, outsourced ones and replacement parts included, to customer, statutory and regulatory requirements (4.4.1.1), and control product safety (4.4.1.2)A CSR register mapped to processes, a legal review for the countries of manufacture and destination, and product-safety characteristics with approvals and trained people
5 LeadershipTake responsibility for the plant's conduct, measure process effectiveness and efficiency (5.1.1.2), name process owners and assign responsibility by role for product requirements and corrective actionsA corporate responsibility policy, process owners who own their measures, and management that reviews efficiency, not only conformity
6 PlanningRisk analysis that includes lessons learned from recalls, field returns, complaints and cyber-attack threats (6.1.2.1), preventive action, and tested contingency plans covering key equipment, utilities, labour, suppliers and cyber-attacks (6.1.2.3)A risk register the FMEAs draw on, contingency plans with a test record, and objectives that carry the customer targets
7 SupportPlant, facility and equipment planning with cyber protection (7.1.3.1); measurement system analysis (7.1.5.1.1) and laboratory requirements (7.1.5.3.2); competence in the core tools and internal auditor competency (7.2.3); QMS documentation that references the customer requirements (7.5.1.1)MSA studies for the gauges in the control plan, accredited calibration certificates, a competence matrix with on-the-job training, and record retention that meets your customers' rules
8 OperationManufacturing feasibility; design and development of products and processes, including embedded software (8.3.2.3), special characteristics (8.3.3.3) and design outputs such as FMEA and GD&T (8.3.5.1); supplier statutory conformity (8.4.2.2), supplier QMS development (8.4.2.3) and monitoring (8.4.2.4); the control plan, verification of job set-ups (8.5.1.3), total productive maintenance (8.5.1.5), temporary process-control changes (8.5.6.1.1), layout inspection (8.6.2), concessions (8.7.1.1) and nonconforming product disposition (8.7.1.7)APQP files, PPAP submissions, control plans with the PFMEA and work instructions behind them, first-off and last-off checks, a maintenance plan, a bypass list, traceability and rework records the customer can follow
9 Performance evaluationCapability monitoring of manufacturing processes, customer satisfaction on the customer's measures, three internal audit types: the QMS audit (9.2.2.2), the manufacturing process audit on all shifts (9.2.2.3) and the product audit (9.2.2.4), and management review inputs that include cost of poor quality, warranty and field failures (9.3.2.1)Capability studies, SPC charts, the scorecard reviewed monthly, an audit programme by process, shift and product across the cycle, and a management review that acts on the numbers
10 ImprovementA documented problem-solving process (10.2.3), error-proofing, warranty management, and analysis of field failures and customer complaints feeding back into the FMEAs8D or the customer's format, poka-yoke verified at set-up, warranty parts analysed, and lessons learned visible in the next launch
Annex A Control planThe phases of the control plan (A.1), from prototype to production, and the elements it must contain (A.2)One control plan per part family or process, linked to the PFMEA, revised when the process, the gauge or the reaction plan changes

What does useful IATF 16949 evidence look like?

A process map with owners, the CSR register, APQP and PPAP files, control plans linked to PFMEAs and work instructions, MSA studies, calibration certificates, the audit programme with its shift coverage, 8D reports with verified effectiveness and the scorecards with actions. We help identify the records your processes and customers require, without creating documents to fill folders; they live in Effivity from the first workshop so the auditor sees a system that runs.

IATF 16949 requirements explained, clause by clause

Certification process

How do you get IATF 16949 certified?

First implement a working automotive quality system on the ISO 9001 base. Then a certification body recognised by the IATF audits it under the Rules 6th Edition. Sterling provides consulting and preparation; the certification decision belongs to the certification body, and the IATF oversight offices that contract, witness and monitor those bodies are what make the certificate worth having.

  1. 01
    Confirm eligibility and define the scope.Manufacturing sites, extended sites, support functions, products and customers in scope, and the customer-specific requirements that apply; the certificate is issued per manufacturing site.
  2. 02
    Gap analysis: review the current system against IATF 16949, ISO 9001 and the CSRs.The gap analysis identifies what is missing, from core tools to contingency plans, preserves effective practice and agrees actions, owners and dates.
  3. 03
    Implement and collect meaningful evidence.Process approach, control plans, PFMEAs, MSA, SPC, supplier controls and problem-solving put into use on every shift, the people trained, and the records kept.
  4. 04
    Audit, review and address the findings.The three internal audit types and the management review evaluate implementation and performance; findings are raised by us first and closed with evidence, so the certification body finds a system with a track record.
  5. 05
    Complete the certification audit.The certification body's stage 1 readiness assessment, on site, then the stage 2 audit at least twenty calendar days later with manufacturing running; respond to any findings within the Rules' timelines and await the decision and the entry in the IATF database.
  6. 06
    Maintain the certificate.Surveillance audits at twelve-month intervals, recertification in the third year, and the discipline in between: scorecards, internal audits, management review and improvement.

Check the credibility of the route before the price. Only certification bodies under contract with an IATF oversight office may issue IATF 16949 certificates, and every valid certificate can be checked in the IATF database; anything else is not IATF 16949, whatever the logo. How to choose a credible IATF 16949 provider · The certification buyer's checklist

Cost

How much does IATF 16949 certification cost?

There is no useful universal price for IATF 16949 implementation. A single-site supplier certified to ISO 9001 needs a different scope from a multi-plant group new to automotive. What we can promise is a proposal in which every component is visible and nothing is added later.

Cost componentWhat affects it
Consulting and implementationCurrent maturity against ISO 9001 and the core tools, the number of processes, shifts, sites and support functions, deliverables and how much of the work your team takes on (Design™ or Drive™)
Independent certificationThe IATF-recognised certification body's audit days, set by the Rules from your headcount and site structure, plus travel and surveillance; additional audit time applies where an IATF OEM quality or delivery target is not being met
Internal resourcesProcess-owner and supervisor time, engineering time for FMEAs, control plans and MSA studies, training, corrective work and any gauge or equipment investment the gap analysis exposes
Software and learningIncluded in a Sterling engagement: Effivity for the system and Sterling Academy access for your people, with users, courses and access period confirmed in the proposal
Continued supportInternal audits, scorecard reviews, system upkeep, refresher learning and the second-edition transition under Sustain™

What moves the price

  • Number of manufacturing sites, extended sites and support locations, and whether a corporate scheme applies
  • Headcount, the number of manufacturing processes and shifts
  • Whether ISO 9001 is already certified, and how much of the core tools work exists
  • Design responsibility, embedded software and the number of customers with CSRs
  • The customer deadline, and how much of the work your team can carry

What a Sterling proposal always shows

  • Deliverables, responsibilities, assumptions and exclusions, in writing
  • Certification-body fees identified separately, so the full programme cost is comparable
  • Effivity, training and Academy access itemised at no additional cost
  • Payment milestones tied to deliverables, not to the calendar
  • One all-inclusive proposal. No surprises, ever

Timeline

How long does IATF 16949 certification take?

The realistic timeline depends on your starting point, the availability of your people, the changes the gap analysis exposes and the certification body's schedule. It is measured in months, not weeks, typically nine to eighteen: the system has to run long enough to produce the performance data, internal audits and management review the certification body's readiness assessment looks for. A site already certified to ISO 9001 with core tools in use sits at the short end of that range; we build the plan around that evidence.

PhaseWhat determines the pace
Scope and gap analysisAccess to people, sites, process information, customer requirements and existing records
Build and implementationThe extent of process change on the shop floor, the core tools work per part family, approval times, training and internal capacity
Evidence and reviewProcesses operating long enough to show capability and performance, followed by the internal audit programme and the management review
Certification auditThe certification body's availability, the on-site stage 1 readiness assessment, the minimum twenty calendar days before stage 2, and the time to close any findings within the Rules' timelines

If you have a customer nomination date, share it at the start. We will tell you what is achievable and where early decisions are needed. A certificate date promised before anyone has walked your shop floor is not a project plan; it is a sales tactic.

Challenges

Common IATF 16949 implementation challenges

Most IATF 16949 programmes stall for the same five reasons. Each has a practical answer.

The core tools are known by name, not used in practice.

FMEAs written once for the PPAP and never updated, control plans that do not match the work instructions, gauges without an MSA study. We work part family by part family with your engineers until the PFMEA, the control plan and the shop-floor documents tell one story and are kept as a set.

Customer-specific requirements are scattered across portals and e-mails.

Each customer's requirements are captured in one register, mapped to the processes and records they affect, reviewed when the customer revises them and audited internally, so nothing surfaces for the first time at stage 2.

Your team has limited implementation capacity.

Agree a support model with clear tasks for Sterling and for your team. Design™ gives you the structure and coaching to implement yourselves; Drive™ has Sterling carry the agreed consulting and documentation work with your process owners.

Several plants, several ways of working.

Identify the common processes worth standardising, document the justified local differences and agree the certification structure, site by site or as a corporate scheme, with the certification body early. One Effivity workspace gives leadership one view across plants.

A scorecard, a complaint or a major finding is already on the table.

Contain first, then use the problem-solving method the standard expects to reach root cause and systemic corrective action within the days the customer and the Rules allow, and feed the lesson into the FMEAs, control plans and risk analysis so the issue does not return.

Your engagement

What your IATF 16949 engagement includes

Your agreed scope brings together everything a functioning automotive quality system and a prepared plant need. Most firms sell one piece and leave you to assemble the rest; a Sterling engagement is the whole journey, from one team, under one all-inclusive proposal.

  • Scope, gap analysis and implementation plan

    Against IATF 16949, ISO 9001 and your customers' specific requirements, with responsibilities, dates and decision owners agreed before work starts.

  • Process development, core tools and documentation

    The process approach, APQP, control plans, PFMEA, MSA, SPC and PPAP discipline built with your engineers and operators on Sterling's own template sets.

  • Effivity ISO & GRC software

    Your automotive QMS runs in Effivity from day one, included with the engagement at no additional cost.

  • Training for everyone

    Internal auditor training for your audit team, as applicable to your standard, and preferential Sterling Academy access, including complimentary awareness training for your people as part of the engagement.

  • Internal audits and management review

    System, manufacturing process and product audits conducted or facilitated as agreed, with findings closed with evidence before the certification body arrives.

  • Certification readiness and support

    Preparation for the stage 1 readiness assessment and the stage 2 audit, help with any findings within the Rules' timelines, and support until the certificate is issued.

Certification decisions remain with the independent certification body.

How we deliver

How Sterling supports your IATF 16949 implementation

Every IATF 16949 engagement runs on Sterling OS™, our delivery operating system: five phases with named deliverables, decision owners and evidence at each stage. Choose the level of support that matches your capacity; the method, the software and the accountability stay the same.

  1. 01
    Design™Guided implementation: your team implements with Sterling's structure, templates, workshops and coaching.
  2. 02
    Drive™Fully managed consulting: Sterling consultants take on the agreed consulting and documentation work with your process owners and engineers.
  3. 03
    Sustain™Post-certification operation: surveillance readiness, internal audits, scorecard reviews, refreshers and new-hire training, year after year.
  4. 04
    Automate™The automotive QMS running in Effivity: documents, CSRs, risks, FMEAs, control plans, audits, complaints, supplier ratings, KPIs and management review in one workspace.
  5. 05
    Revise™The move to the second edition of IATF 16949 when it is published, ISO 9001:2026, revised CSRs and changes in scope, sites or products.

At the start we agree the named lead, the weekly working session, the deliverables and the decision owners. During delivery, progress is reviewed against those commitments so gaps are visible early, not at the stage 1 readiness assessment.

How Sterling OS™ works

IATF 16949 implementation

IATF 16949 requirements

Get the document

We e-mail the document as a PDF link. Tell us who you are and where to send it.

A quick security check confirms the request comes from a person.

By requesting the document you agree to our privacy notice. Sterling uses these details to send it and to respond to your request. We never sell your data.

Effivity · IATF 16949 QMS software, included in every engagement

How Effivity helps you fulfil, automate and simplify the requirements of IATF 16949:2016.

Every Sterling IATF 16949 engagement includes Effivity, the ISO and GRC automation platform built by the Sterling group and used in 50+ countries, whose QMS module covers ISO 9001 and IATF 16949. Your consultant configures the workspace within the agreed scope, so the process map, CSRs, control plans, FMEAs, MSA and calibration records, supplier ratings, complaints, 8D reports, internal audits, scorecards and management review live in one place, the system runs on every shift and the certification auditor reviews a live system rather than a binder. Sterling consulting clients get their Effivity subscription included with the engagement, at no additional cost.

Effivity: Context of the Organisation dashboard with issues, interested parties and scope
Effivity · Context of the Organisation dashboard
Context

Scope, CSRs and interested parties

The certificate scope by site and product, the CSR register mapped to processes and records, the legal obligations of the countries you make for, and the product-safety characteristics, reviewed on a schedule, not rewritten before each audit.

Leadership

Policy, process owners and objectives

The quality and corporate responsibility policies, the process owners with their effectiveness and efficiency measures, and objectives that carry the customer targets, reported from the system, not a spreadsheet.

Planning

Risk analysis and contingency plans

A risk register that draws on field returns, complaints and lessons learned, with owners and actions; contingency plans with their test records; preventive actions tracked to closure and brought to management review.

Support

Competence, MSA, calibration and documents

A competence matrix with on-the-job training, gauge records with MSA studies and calibration certificates, and documents with versions, approvals and the retention periods customers require.

Operation

APQP, control plans, suppliers and production

Launch files, PFMEAs and control plans linked to work instructions, PPAP status by part and customer, supplier development, set-up verification, maintenance, traceability, concessions and nonconforming product, each recorded as work is done.

Performance evaluation

Scorecards, three audit types and review

Manufacturing process, product and system audits scheduled by process, shift and risk; scorecards and internal KPIs on live dashboards; a management review that records its inputs, decisions and actions.

Improvement

Complaints, 8D and lessons learned

Complaints, field failures and internal nonconformities raised, contained, investigated and closed with root cause and the evidence that the action worked, with lessons learned pushed back to the FMEAs and control plans.

Annex A · Control plan

Control plans as living documents

Prototype, pre-launch and production control plans with their characteristics, methods, sample sizes and reaction plans, revised when the process, gauge or customer requirement changes, and always the version the shop floor uses.

What this means at the audit

The certification auditor asks for the CSR register, the audit programme, the last management review, the open 8D reports, the MSA and capability studies and the supplier ratings. In Effivity each of those is a screen, with dates, owners and evidence attached, not a folder assembled the week before stage 1. After certification, Sustain™ runs in the same workspace, so the surveillance audit a year later finds a system that never stopped.

In your engagement

  • Subscription included with the engagement, at no additional cost
  • Configured by your Sterling consultant within the agreed scope
  • Your control plans, FMEAs and registers migrated, not retyped
  • Admin and user training for your team
  • Modules for EMS, OHSMS, ISMS, EnMS and more when you integrate other standards

IATF 16949 client experience

Client letters on file, available on request.

Client feedback wall: letters on file

Signed client letters for IATF 16949 are available on request. The client feedback wall lists every letter by standard.

Where IATF 16949 usually sits

How an integrated automotive programme is run.

All case studies
  1. 01

    Automotive: IATF 16949 defect prevention that satisfied major automakers

    An automotive parts supplier needed to satisfy the demanding quality requirements of major vehicle manufacturers. Its IATF 16949 system put defect prevention first, supported by firm quality controls and rigorous inspection, and product failures fell markedly. Certification showed the automakers its commitment to automotive quality and helped the company extend its global reach; its director of operations said IATF 16949 had moved the company's business up a level.

    Read the case study

Sterling Academy · IATF 16949 e-learning

Train every employee on IATF 16949, not just the quality department.

Sterling Academy delivers e-learning for the whole workforce and for the people who run the system: video lessons with practice checkpoints, a final exam and a numbered Certificate of Completion for each learner, verifiable online. Sterling consulting clients benefit from preferential course access and special pricing through their Sterling consultant, including complimentary awareness training for their people as part of the engagement.

  • IATF 16949 awareness for every operator, inspector and engineer, with the competence evidence the standard requires
  • Practitioner courses for process owners, the quality lead and the management representative
  • Internal auditor training for the people who will audit the system, as applicable to your standard, as part of the engagement
  • Learner progress by department and shift, and a training status report for the auditor
  • New hires and temporary staff trained as they arrive, so evidence is current at every surveillance audit
  • A Sterling consultant reachable when a learner needs one

Sterling Academy courses for an IATF 16949 programme

The courses your people take, and who takes them.

Full Academy catalogue
E-learning course · every employee

IATF 16949 Awareness

What the automotive standard requires of the plant and of each person in it, why customer requirements, product safety and the control plan matter on every shift. The competence evidence for the whole workforce.

Final exam · numbered Certificate of Completion, verifiable online

View the course
E-learning course · document owners and process owners

Documented Information Management

Creating, controlling and using documented information the way an automotive system needs it: controlled control plans and engineering specifications, records retained for the period the customer sets, evidence that stays audit-ready.

Final exam · numbered Certificate of Completion, verifiable online

View the course
E-learning course · quality lead, supervisors, auditors

Nonconformity Management

Containing, investigating and closing nonconformities and customer complaints with the problem-solving discipline the standard expects, root cause and systemic corrective action, and the evidence that a fix worked.

Final exam · numbered Certificate of Completion, verifiable online

View the course
E-learning course · management and process owners

Risk Management

Identifying, evaluating and treating risks in the automotive quality system, from the risk analysis that feeds the FMEAs to the contingency plans, with the register, ownership and review the standard expects.

Final exam · numbered Certificate of Completion, verifiable online

View the course
In the engagement · your audit team

Internal auditor training

Delivered by your Sterling consultant for the people who will audit the system, its manufacturing processes and its products, with exercises on your own control plans.

As applicable to your standard · Certificate of Competence

Also in the catalogue

Integrating other standards?

Awareness courses for ISO 9001, ISO 14001, ISO 45001, ISO/IEC 27001, ISO 13485 and more, so an integrated system trains one workforce on one platform.

See all courses

Sterling consulting clients arrange access through their consultant. Sterling Academy certificates are training certificates; certification of your management system remains with the IATF-recognised certification body.

Why Sterling

Want successful IATF 16949 certification? Come to Sterling.

Certifying one plant or aligning sites across countries, Sterling helps you establish one automotive quality approach with clear local ownership. We work through differences in CSRs, product families, shift patterns and regulations, so the system supports growth without losing sight of how each site makes parts.

Management systems in 60+ countries since 2003

Quality systems implemented for manufacturers, contractors, service firms and public bodies across every region we serve, with one engagement team accountable wherever your plants are.

All-inclusive proposal

Consulting, Effivity, training and Academy access in one proposal, with certification-body fees identified separately. No surprises, ever.

A system your shop floor can use

Less documentation and maximum effectiveness: control plans, work instructions, training and software connected to what operators do on every shift, so your people adopt the system rather than tolerate it.

Expert and experienced consultants

Consultants who have advised on quality management systems across sectors and countries since 2003, and who build your automotive QMS properly the first time, so the audit confirms what already works.

The Sterling Promise

What our IATF 16949 certification success guarantee means

100%on-time completion · success · 8,100+ client engagements

We stay with you until your agreed IATF 16949 certification outcome is achieved, supporting implementation, preparation and the resolution of audit findings within the timelines the Rules allow. Clear explanations, practical delivery on the shop floor, included software and employee learning turn the investment into lasting capability, not a certificate in the lobby.

The engagement identifies the standard, scope, outcome and responsibilities. Your organisation supplies accurate information and puts the agreed controls into use. The IATF-recognised certification body assesses conformity and retains its certification decision. Our commitment concerns the agreed certification support, not a promise of every future nomination or zero complaints.

After certification

What happens after IATF 16949 certification?

Your automotive QMS should keep working as customers, programmes and suppliers change. Monitoring continues, complaints are solved to root cause and improvements are checked for effect. The certification body returns for surveillance audits at twelve-month intervals and for recertification in the third year, and a missed IATF OEM quality or delivery target adds audit time at the next visit, so performance between audits matters as much as the audits themselves.

As your business wins new programmes, the system should evolve with them. Under Sterling OS™ Sustain™ we review scorecards, recurring complaints and process performance with you alongside the planned internal audits, management review and surveillance preparation, so the system stays alive between audits rather than being revived the week before one.

FAQs

Frequently asked questions about IATF 16949

Can we get IATF 16949 certified without ISO 9001?

No. IATF 16949 is not a stand-alone standard; it is implemented as a supplement to ISO 9001:2015 and in conjunction with it, and the audit covers the ISO 9001 requirements, the IATF 16949 supplements and your customers' specific requirements together. You do not need a separate ISO 9001 certificate first, but you do need the whole ISO 9001 system in place.

Is our company eligible for IATF 16949 certification?

Certification is available to sites that manufacture automotive production, service, replacement or accessory parts for automotive customers, including aftermarket and remanufactured parts; the IATF has confirmed that EV charging systems and their components are eligible as accessory parts. Design centres, head offices and distribution centres are audited as support functions of a manufacturing site and cannot be certified on their own; if you only design, trade or distribute, the answer is normally ISO 9001.

Does Sterling issue the IATF 16949 certificate?

No. Sterling provides consulting and hands-on support. Only a certification body under contract with an IATF oversight office may audit and certify to IATF 16949; it makes the decision, and the certificate is recorded in the IATF database, where your customers can verify it.

What are the core tools, and do we have to use the AIAG manuals?

The core tools are APQP with the control plan, PPAP, FMEA, MSA and SPC. IATF 16949 requires the methods; which reference manual applies is set by your customers' specific requirements, which is why many suppliers work to the AIAG manuals, the joint AIAG and VDA FMEA Handbook and, for German OEMs, the VDA volumes. We coach your engineers in the manuals your customers name.

What are customer-specific requirements and where do we find them?

CSRs are the additional requirements each automotive customer adds to IATF 16949 for its suppliers. The IATF's OEM members publish theirs on the IATF website; other OEMs and Tier 1 customers issue supplier manuals and portal requirements of their own. Every direct customer's requirements have to be identified, documented in the system and audited.

What happens if the auditor raises a nonconformity?

Under the Rules 6th Edition a major nonconformity needs your initial response within fifteen calendar days of the closing meeting and a minor within sixty; systemic corrective actions must be implemented and verified as effective within ninety calendar days, with a one-time special audit in the exceptional cases the Rules allow; minors are verified on site at the next regular audit. We help you close findings inside those windows.

How is an IATF 16949 audit different from an ISO 9001 audit?

It runs under the IATF Rules: an on-site stage 1 readiness assessment, a stage 2 audit at least twenty calendar days later, audit days set by the Rules from your headcount and structure, surveillance at twelve-month intervals, and nonconformity timelines counted in days. The auditors are qualified through the IATF's own process.

What does the second edition of IATF 16949 mean for us?

The IATF started the revision in October 2024 and in July 2026 named five priority areas, including software quality assurance, sub-tier supply chain management and launch management, with publication planned for mid-2027 and the end of the transition aligned to the end of the ISO 9001 transition; the dates are indicative. Implement to IATF 16949:2016 now; Sterling's Revise™ service runs the review once the text is published.

What do you need to prepare an IATF 16949 proposal?

The sites and support locations to be covered, approximate headcount and shifts, the products and customers in scope, whether ISO 9001 or IATF 16949 is certified today, the customer request or nomination date, and any open findings. That is enough for a scoped, all-inclusive proposal; there is no need to prepare a quality manual first.

Before the first call

Prepare a useful IATF 16949 readiness brief

You do not need a quality manual before the first discussion. Bring a short account of how the plant works and where the certificate should help. Seven questions are enough:

  1. Which customer has asked for IATF 16949, for which sites and products, and by when? Or, if nobody has asked, which programmes do you want to qualify for?
  2. Which manufacturing processes run at each site, on how many shifts, and which processes or support functions are outsourced?
  3. Are you design responsible for any of the parts, and do any of them carry embedded software?
  4. Which core tools are in use today, and for which part families: control plans, PFMEAs, MSA studies, SPC, PPAP submissions?
  5. What do scorecards, complaints, premium freight, scrap and internal audit findings tell you about the starting point?
  6. Who can make decisions and contribute time to implementation, internal audits and staff learning?
  7. Is there an existing ISO 9001 or IATF 16949 certificate, an audit date or a customer nomination date to plan around?

Use these answers to scope the work and prepare a realistic proposal. They are preparation for a discussion, not a scored assessment or a certification decision.

Don’t be fooled by certification scams

If it takes ten days, it is not IATF 16949 certification.

An IATF 16949 certificate is useful because a buyer can check it: it is issued by a body under contract with an IATF oversight office and appears in the IATF database. The market still offers paper: "IATF 16949 compliant" certificates from bodies the IATF has never recognised, certificates to the superseded ISO/TS 16949, and consultants who promise to manage everything while your operators do nothing. They cost less, until a supplier-quality engineer or a sourcing committee checks.

How to choose a credible IATF 16949 provider

  1. Ask which certification body will audit and certify, and check it on the IATF's list of certification bodies under contract; a body not on that list cannot issue IATF 16949, whatever it holds for other standards.
  2. Ask how the certificate will be verified. A genuine certificate is entered in the IATF database and can be checked through the IATF certificate validity check; a PDF with a logo is not verification.
  3. Ask how the programme will treat your control plans, PFMEAs, MSA studies, PPAPs and CSRs. Documents should reflect your parts and processes, not a template with another supplier's part numbers still in it.
  4. Identify who carries each task, which certification costs are separate, and what support exists when a major nonconformity must be answered in fifteen calendar days.
  5. Ask what your operators, supervisors and engineers will learn and what software the system will run in. No training and no system means nothing survives the consultant leaving, and the surveillance audit will show it.
  6. Walk away from "certified in 7 to 10 days", "we manage everything", "ISO/TS 16949 certification" and one invoice for consulting and certificate. An automotive QMS has to be implemented and run on every shift before it can be audited.
All ten warning signs of shortcut certification

Talk to a consultant

Plan your IATF 16949 certification with confidence.

Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.

hello@sterling-grc.com

+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page

What would you like to achieve?

Choose a starting point. The enquiry form takes about a minute.

Your goal
Book my free discovery call

Continue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice