IATF 16949 guide
IATF 16949 vs ISO 9001, AS9100 and ISO 13485: which quality standard your customers expect
How IATF 16949 builds on ISO 9001, how it compares with the aerospace and medical device standards on eligibility, certification, audit days and timing, which one your organisation needs, and how one plant runs two sector standards in a single system.
Key points
- IATF 16949 is not an alternative to ISO 9001: it is applied as a supplement to ISO 9001:2015, so an automotive plant meets both sets of requirements plus its customers' specific requirements.
- ISO 9001 is open to any organisation; IATF 16949 is only for sites that manufacture automotive products, and a warehouse or head office cannot hold it on its own.
- AS9100 and ISO 13485 are the aerospace and medical device counterparts, each with its own owner, certification rules and register of certified organisations.
- Your customers decide which one you need. A plant serving two sectors usually runs one quality system and holds two certificates.
- All three sector standards have revisions planned or under review, but none of those revisions is a reason to delay a certificate a customer needs now.
IATF 16949 vs ISO 9001: the short answer
If you make parts for a vehicle manufacturer or a Tier 1 supplier, expect to be asked for IATF 16949; ISO 9001 alone rarely wins production business. If you support the chain with logistics, tooling or services, ISO 9001 is the right certificate, because IATF 16949 is not open to you.
The two are not competitors. IATF 16949:2016, published by the International Automotive Task Force on 1 October 2016, sits on top of ISO 9001:2015 and is read together with it. It adds automotive requirements under the ISO 9001 clause headings, and the certification body audits both together. AS9100, owned by the International Aerospace Quality Group, carries the full ISO 9001:2015 text with the aerospace additions written in. ISO 13485:2016 is a stand-alone standard for medical device organisations, built on the older ISO 9001:2008 layout, and holding it does not let you claim conformity to ISO 9001.
What IATF 16949 adds to an ISO 9001 system
An ISO 9001 plant already has the skeleton: processes, objectives, internal audit, management review and corrective action. IATF 16949 adds what it takes to launch and hold an automotive part, in five groups.
- Customer requirements built in. Each OEM and Tier 1 customer's specific requirements become part of your system and your audit, with statutory conformity and product safety controls.
- The core tools in daily use. APQP, control plans, PPAP, FMEA, MSA and SPC drive launch and production, not a training file.
- Shop-floor discipline. Set-up verification, total productive maintenance, control of temporary process changes, layout inspection and customer-authorised concessions.
- Three kinds of internal audit. System, manufacturing process (every shift, over three years) and product audits.
- Harder evidence of improvement. Documented problem solving, error-proofing, warranty analysis, tested contingency plans and review of the cost of poor quality.
For the detail see IATF 16949 requirements explained and The core tools: APQP, PPAP, FMEA, MSA and SPC explained.
The four standards side by side
| Point of comparison | ISO 9001 | IATF 16949 | AS9100 | ISO 13485 |
|---|---|---|---|---|
| Owner and current edition | ISO; ISO 9001:2026, published 16 September 2026 | IATF; IATF 16949:2016, first edition | IAQG; 9100:2016, issued as AS9100 Rev D, EN 9100 and JIS Q 9100 | ISO; ISO 13485:2016, confirmed at its 2025 review |
| Relationship to ISO 9001 | The base standard | Supplement, used with ISO 9001:2015 | Contains the ISO 9001:2015 text plus aerospace additions | Separate standard on the ISO 9001:2008 layout, clauses 4 to 8 |
| Who can be certified | Any organisation, any sector | Sites manufacturing automotive products; support functions only with a manufacturing site | Aviation, space and defence organisations; AS9110 for maintenance, AS9120 for distributors | Organisations across the device life cycle, including suppliers to them |
| Who audits and decides | An accredited certification body | An IATF-recognised certification body under contract with an IATF oversight office | An accredited body in the IAQG scheme, using IAQG-authenticated auditors | An accredited certification body applying IAF MD 9 |
| Where the result is recorded | The body's certificate and register | The IATF database, one certificate per manufacturing site | OASIS, with the 9101 audit report | The body's certificate; audit reports can be released to regulators |
| What drives audit days | Headcount, sites and complexity | The Rules' minimum-day table, plus extra time where OEM scorecard targets are missed | 9104/1 duration, adjusted by site risk from the OCAP data | The audit-time annex of IAF MD 9; sites that design or manufacture are not sampled |
| Typical buyer asking for it | Customers and tenders in every sector | Vehicle manufacturers and Tier 1 suppliers | Aircraft, engine and defence primes and their tier-one suppliers | Device manufacturers and regulators in many markets |
| Audit cycle | Stage 1 and Stage 2, surveillance, recertification every three years | On-site stage 1, stage 2 at least 20 days later, surveillance every 12 months, three-year cycle | Two-stage initial audit, annual surveillance, three-yearly recertification | Stage 1 and Stage 2, surveillance at least once a calendar year, three-year cycle |
| Typical time to first certificate | 3 to 6 months | 9 to 18 months | 6 to 12 months | 6 to 12 months |
The time ranges are Sterling's planning estimates, not scheme rules.
Which one does your organisation need?
| Your situation | What to aim for | Why |
|---|---|---|
| You make production or service parts for an OEM or Tier 1 | IATF 16949 | Buyers expect it before nominating a supplier |
| You only make aftermarket replacement parts | Ask your customers first | The IATF treats certification as optional here unless a customer requires it |
| You warehouse, sequence or distribute automotive parts | ISO 9001 | The IATF does not count these activities as manufacturing, so there is no IATF certificate to hold |
| A small sub-tier supplier with no automotive customer demand yet | ISO 9001 first, built with the core tools in mind | A certified base that shortens the later step |
| Machining or finishing for both automotive and aerospace | IATF 16949 and AS9100 on one system | Each sector checks its own register |
| Automotive electronics with a medical device line | IATF 16949 and ISO 13485 on one system | Device regulators look for ISO 13485 evidence |
Before deciding, confirm in writing which certificate each customer names, the sites and products it must cover and the date it is needed; see Customer-specific requirements: managing CSRs in your QMS.
Running two sector standards in one plant
Machining, plastics, electronics and finishing plants often serve two sectors. Separate manuals and audit programmes per sector split the shop floor into two ways of working; the better pattern is one process map with sector controls attached where they apply.
- Shared once: document control, competence, calibration, supplier evaluation, corrective action, internal audit and management review.
- Automotive only: PPAP submissions, customer scorecards, the manufacturing process audit on all shifts and the CSR register.
- Aerospace only: first article inspection, configuration management, counterfeit part prevention, key characteristics and foreign object prevention.
- Medical only: the medical device file, complaint handling with regulatory reporting, advisory notices and, where relevant, sterilisation and process validation records.
Each certificate is still audited under its own scheme rules; agree any joint scheduling with the bodies when you request quotes.
How Sterling builds automotive quality systems
One system, the certificates your customers ask for
Sterling's expert and experienced consultants start with a gap analysis against IATF 16949, ISO 9001 and your customers' requirements, and against AS9100 or ISO 13485 where another sector is in scope. We then build one system in Effivity with your plant team, coach the core tools on real part families, run the three audit types and prepare you for the stage 1 readiness assessment and stage 2. Sterling does not certify; an IATF-recognised certification body audits and decides. We ensure successful certification for our clients.
Book a free discovery callRevisions ahead: should you wait?
All four standards are moving, but your customer's deadline does not move with the committees.
- ISO 9001:2026 is published, with a transition running to 30 September 2029.
- IATF 16949: the IATF plans a second edition for mid-2027, dates indicative, with its transition ending when the ISO 9001 transition ends. Until then you implement and are certified to the 2016 edition; how your body treats ISO 9001:2026 alongside it is confirmed with the body.
- AS9100: the IAQG has a full revision of 9100 linked to ISO 9001:2026, slated for the first quarter of 2027. Rev D remains the edition you build to.
- ISO 13485: confirmed in October 2025 with no revision listed, so no transition is running.
A system built well on the current editions moves to the new ones through a planned transition, not a rebuild. For the certification sequence see IATF 16949 certification under the Rules, step by step.
IATF 16949 vs ISO 9001, AS9100 and ISO 13485: questions buyers ask
Is ISO 9001 enough to supply an automotive manufacturer?
For production parts it rarely is. Vehicle manufacturers and Tier 1 buyers generally expect IATF 16949 before they nominate a supplier, and their customer-specific requirements are written to be applied through it. Expectations for new and sub-tier suppliers can differ, so read the supplier manual of each customer before you plan.
Can a distribution centre or head office get IATF 16949 instead of ISO 9001?
No, not on its own. The IATF certifies sites where automotive products are manufactured; warehousing, sequencing and segregation do not count as manufacturing. A head office or design centre can be audited as a support function of a certified manufacturing site, and a stand-alone distributor normally holds ISO 9001.
Does holding AS9100 or ISO 13485 shorten the route to IATF 16949?
It helps, because the system basics already work. The core tools, customer-specific requirements, the manufacturing process audit on every shift and the contingency plans still have to be built and run for long enough to produce evidence.
Do the automotive core tools have an equivalent in aerospace or medical devices?
Partly. The aerospace family includes AS9145 for APQP and PPAP, and AS9102 for first article inspection. ISO 13485 relies on risk management in product development, usually applied through ISO 14971, and on process validation.
Which of the three sector standards takes longest to certify?
In Sterling's planning, IATF 16949 usually takes longest, typically nine to eighteen months, because stage 1 is held on site with a minimum gap before stage 2, and capability data and three audit types need production history. AS9100 and ISO 13485 more often take six to twelve.
More IATF 16949 guides
Every guide in the IATF 16949 series is written for one question and links back to the hub for the whole picture.
- IATF 16949 case study
- IATF 16949 certification under the Rules, step by step
- The core tools: APQP, PPAP, FMEA, MSA and SPC explained
- IATF 16949 certification cost: what moves the price
- Customer-specific requirements: managing CSRs in your QMS
- IATF 16949 documentation: what you need and what you do not
- Effivity for IATF 16949: the guide
- IATF 16949 internal audit: system, process and product audits
- IATF 16949 requirements explained, clause by clause
- IATF 16949 vs ISO 9001, AS9100 and ISO 13485
Keep exploring
Explore more about IATF 16949
Watch a video on how to implement IATF 16949 here.
Watch a video on IATF 16949 requirements here.
IATF 16949 resources
Services for IATF 16949
Industries
Talk to a consultant
Find out which quality certificates your automotive customers need.
Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.
hello@sterling-grc.com+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page
What would you like to achieve?
Choose a starting point. The enquiry form takes about a minute.
Book my free discovery callContinue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice