1. Introduction

To procure a fastener for a commercial aircraft is not the same as buying a bolt for an automobile. The fastener must come from an approved source, manufactured under a certified process, tested to documented standards, accompanied by a conformance certificate, and traceable back through every production step. If the supplier changes the heat treatment furnace without notification, the qualification may be voided. If a distributor handles the part, chain-of-custody records become a regulatory matter. If the fastener crosses a border on the way to the manufacturer, export control law may intervene.

This is not bureaucratic excess. It is the rational response to an industry where component failure at 35,000 feet can be catastrophic, where military systems depend on part integrity for mission success, and where a single quality escape can trigger recalls affecting thousands of aircraft worldwide.

Aerospace procurement is therefore best understood not as a purchasing function, but as a compliance function with commercial dimensions. Price matters, lead time matters — but they are always secondary to qualification, traceability, and regulatory conformance.

2. The Regulatory Environment: A Layered Architecture

Aerospace procurement operates within a layered framework of standards, certifications, and legal obligations that interact and reinforce each other. No single standard governs the entire space; rather, procurement professionals must navigate multiple overlapping requirements simultaneously.

2.1 AS9100: The Quality Management Foundation

The foundational quality management standard for the aerospace, space, and defense (AS&D) industries is AS9100 — currently in its Revision D release (AS9100D), published in 2016 to align with ISO 9001:2015. Developed and maintained by the International Aerospace Quality Group (IAQG), the standard applies across the full supply chain: aircraft manufacturers, parts suppliers, MRO providers, software developers, and testing laboratories.

AS9100 extends well beyond the general-purpose quality management framework of ISO 9001, adding requirements that specifically address the aerospace context: product safety protocols, counterfeit parts prevention, configuration management, risk-based thinking, and rigorous supplier oversight. These additions reflect hard lessons from decades of aerospace incidents in which generic quality systems proved insufficient for safety-critical production.

Certification to AS9100 is not legally mandated, but it has become a de facto market entry requirement. Major primes — Boeing, Airbus, Lockheed Martin, Northrop Grumman, and Rolls-Royce — require AS9100 certification as a baseline qualification for supplier approval and contract awards. A supplier without a valid certificate has no realistic path to participation in the mainstream aerospace supply chain. Certified companies are listed in the OASIS database (Online Aerospace Supplier Information System), the IAQG's global registry, which procurement teams at major manufacturers and government agencies use to verify and source qualified suppliers.

Surveillance audits are conducted annually; full recertification occurs on a three-year cycle. Losing certification mid-contract is not merely an administrative inconvenience — it can trigger supply chain disruption, contract termination, and the lengthy requalification process all over again.

2.2 NADCAP: Accreditation for Special Processes

For a critical subset of manufacturing operations, AS9100 certification alone is insufficient. Aerospace relies heavily on "special processes" — manufacturing and testing methods whose quality cannot be fully verified by inspecting the finished product without destructive testing. Heat treating, welding, non-destructive testing (NDT), chemical processing, coatings, and composite manufacturing all fall into this category. A part may look perfectly acceptable and still carry invisible structural weaknesses introduced by a flawed heat treatment cycle.

Before 1990, each major aerospace OEM audited its suppliers' special processes independently. A supplier serving Boeing, Rolls-Royce, and Airbus might undergo three or four separate audits for the same process, each tailored to different OEM requirements — redundant, expensive, and inconsistent. The National Aerospace and Defense Contractors Accreditation Program (NADCAP) was founded in 1990 to eliminate this duplication by establishing a single, industry-managed accreditation standard accepted across the sector.

Administered by the Performance Review Institute (PRI), NADCAP brings together technical experts from prime contractors, government representatives, and suppliers to define and govern audit criteria for each special process category. Auditors average more than 30 years of industry experience with deep technical expertise in their specific commodity — they are not generalist quality assessors but subject matter specialists who evaluate the process itself, not just the output.

Major aerospace manufacturers including Boeing, Airbus, Honeywell, and Rolls-Royce require NADCAP accreditation as a mandatory baseline for suppliers performing special processes. High-performing suppliers are rewarded with extended audit intervals (18 or 24 months instead of the standard 12), creating a measurable incentive for sustained excellence beyond minimum compliance.

2.3 The Regulatory Overlay: FAR, DFARS, and ITAR

For defense procurement specifically, the compliance environment expands dramatically to encompass U.S. government acquisition law. The Federal Acquisition Regulation (FAR) and its defense-specific supplement, the Defense Federal Acquisition Regulation Supplement (DFARS), govern the terms under which the U.S. Department of Defense and its prime contractors purchase goods and services. DFARS clauses flow down through the supply chain — a Tier 1 supplier receiving a defense contract must pass specific DFARS requirements to its Tier 2 and Tier 3 suppliers.

More consequentially, the International Traffic in Arms Regulations (ITAR), administered by the U.S. State Department, regulate the export, re-export, and transfer of defense articles, defense services, and related technical data. Any organization that manufactures, exports, or brokers items on the U.S. Munitions List must register with the State Department and comply with ITAR's licensing and recordkeeping requirements. The Export Administration Regulations (EAR), administered by the Department of Commerce, extend similar controls to dual-use items with both civilian and military applications.

ITAR and EAR apply not only to U.S. companies but to any organization worldwide whose products or supply chains involve U.S.-origin components, technology, or software. Non-compliance carries severe consequences: fines of up to $1 million per violation, criminal penalties, denial of export privileges, and suspension from government contracting. Even transferring ITAR-controlled technical data to a non-U.S. national employee within the same facility — a "deemed export" — can trigger violations if not properly licensed or exempted.

For procurement teams, ITAR and EAR impose obligations at every stage: supplier qualification must screen for prohibited parties and destinations; purchase orders must carry appropriate flow-down clauses; export documents must reference license numbers and include destination control statements; and every change to part classification, license management, or end-user profiles must be captured in auditable records with timestamp and rationale.

3. Qualification: The Slow Door into the Supply Chain

Perhaps the most distinctive feature of aerospace procurement — and the one most disorienting to professionals from other industries — is the length and rigidity of the supplier qualification process.

3.1 The Approved Vendor List

Entry into aerospace procurement begins with placement on an Approved Vendor List (AVL), sometimes called an Approved Supplier List (ASL). The AVL is the authoritative registry of suppliers from whom a prime contractor or Tier 1 supplier is permitted to procure. Purchasing outside the AVL is generally not permitted without explicit authorization, regardless of price or availability.

Gaining a position on the AVL requires a structured qualification process that typically includes: documentary review of certifications (AS9100, NADCAP as applicable, ITAR registration), financial assessment, facility audit, capability demonstration, First Article Inspection (FAI), process capability studies, and approval by engineering and quality teams — not only procurement. High-risk suppliers — those providing flight-critical or safety-critical components — face the most extensive evaluation, including facility visits by the customer's quality engineers and qualification testing under simulated service conditions.

This process takes months, sometimes years. It is not uncommon for a new supplier to spend 12 to 24 months working through qualification activities before receiving a first purchase order. The investment required — in documentation, testing, tooling, and personnel time — is substantial, which serves as a natural barrier to entry that keeps the AVL stable and the supply chain predictable.

Once on the AVL, suppliers are continuously monitored through performance scorecards tracking on-time delivery, defect rates, corrective action responsiveness, and compliance status. Non-compliance can lead to Supplier Corrective Action Requests (SCARs), probation, or removal — a setback that requires re-qualification from the beginning.

3.2 First Article Inspection and PPAP in Aerospace

Before a new part enters production, aerospace customers typically require a First Article Inspection (FAI) process governed by AS9102. The FAI verifies that the production process, tooling, documentation, and measurement systems are capable of consistently producing parts that meet design requirements. Unlike a single prototype test, the FAI is a systematic review of the entire production system and its records.

For suppliers serving multiple OEMs simultaneously, each customer may impose different FAI requirements, PPAP submission levels, or documentation formats — mirroring the challenge described in automotive procurement but with longer cycle times and higher documentation burdens.

3.3 Change Control: Where Speed Goes to Die

Aerospace procurement is characterized by extraordinary resistance to change — not from inertia, but from deliberate design. Once a supplier, material, process, or design configuration is qualified, any change that could affect fit, form, or function must be formally approved before implementation. This is configuration management, and it is enforced rigorously throughout the supply chain.

A supplier that changes its machining subcontractor, heat treatment source, or raw material specification without customer approval may invalidate the entire qualification. Even changes that seem cosmetic — a new lubricant in a process, a different calibration laboratory — can trigger a formal change notification process, requiring engineering review and potentially requalification. This is not procedural pedantry. In aerospace, process consistency is a proxy for product consistency, and disruptions in process have caused structural failures that would have been invisible in any final inspection.

The consequence for procurement is that the traditional levers of agility — supplier switching, spot buying, opportunistic sourcing — are largely unavailable. Sourcing strategy must be built around long-term relationships with qualified suppliers, dual-qualification of alternative sources planned years in advance, and careful management of supplier financial health to prevent the loss of a sole-approved source.

4. Traceability: From Raw Material to Retirement

If compliance is the architectural principle of aerospace procurement, traceability is its foundation. Every component in an aircraft or defense system must be traceable through its entire life history: from the heat or lot number of the raw material, through every manufacturing step and special process, through inspection records and conformance certificates, to the aircraft and position in which it is installed, and throughout its service life until removal or retirement.

4.1 The Certificate of Conformance

The Certificate of Conformance (CoC) — sometimes called a Certificate of Compliance — is the document that formally attests that a delivered part or material meets the specified requirements. In aerospace, the CoC is not a courtesy document; it is a contractual and regulatory requirement. Suppliers must maintain full heat and lot traceability, provide conforming material certificates with each shipment, and segregate non-conforming material with documented disposition.

For defense applications with military specifications such as MIL-PRF-38534, traceability requirements extend even deeper. Serial numbers, part numbers, and date codes must be present on every product. Traceability must be maintained all the way back to original materials — to the wafer number in the case of a semiconductor or the lot number for a packaged part. This requires strict controls on materials procurement, kitting, and record retention throughout the manufacturing process.

4.2 Counterfeit Parts: A Systemic Threat

The counterfeit parts problem is endemic in aerospace and has been addressed with increasing urgency at every level of the regulatory framework. AS9100 Rev D introduced a dedicated requirement under Clause 8.1.4 specifically mandating counterfeit parts prevention processes — a provision that did not exist as an explicit standard in earlier versions.

The threat is real and documented. A 2012 Senate Armed Services Committee report described 1,800 instances of suspected counterfeit parts between 2009 and 2011. In 2023, counterfeit components were discovered in aircraft engines — parts that had entered the supply chain through multiple supplier tiers, affecting major airlines worldwide. The investigation illustrated that these parts can travel deep into the supply chain before detection, precisely because the chain of documentation that should have revealed them was incomplete or falsified.

Procurement teams must source exclusively from original equipment manufacturers, authorized distributors, or approved sources, and implement inspection and testing protocols to verify authenticity before parts reach production. Traceability documentation must track every component back to its origin. Personnel involved in procurement and receiving require specific training to recognize counterfeit indicators: incorrect markings, missing or inconsistent certificates, and anomalous packaging.

NADCAP's OASIS database and the AS9120 standard for distributors provide structural mechanisms for verifying the legitimacy of the distribution chain, but vigilance at the procurement level remains the primary line of defense.

5. What Makes Aerospace Procurement Uniquely Difficult

The cumulative effect of qualification barriers, change control, traceability requirements, and regulatory overlay creates a procurement environment with no close equivalent in other industries. Several characteristics stand out.

Long procurement cycles. Defense and aerospace procurement projects often span years from initial supplier qualification to first delivery, and program lifetimes of 30 years or more create obligations that outlast typical business planning horizons. Legacy-parts support for platforms like the B-52 bomber, still in service decades after its introduction, requires managing part availability and supplier continuity across timeframes that test the limits of conventional supply strategy.

Cost is not the primary driver. Unlike most procurement contexts, price competition is constrained at every turn. The AVL restricts the supplier pool; qualification costs are sunk; and switching suppliers requires requalification that may cost more than years of price negotiation savings. Procurement value in aerospace is created through relationship depth, specification compliance, and supply continuity — not unit price reduction.

Multi-framework compliance simultaneously. A procurement professional serving a defense aerospace prime must simultaneously manage AS9100 certification status, NADCAP accreditation scope, ITAR licensing for controlled components, DFARS clause flow-down in purchase orders, FAI completion, and performance scorecard obligations — each governed by different authorities with different audit cycles.

Zero tolerance for undocumented deviation. In automotive, a supplier deviation might be accepted via a concession process and the parts used. In aerospace, a deviation from a qualified specification typically means the parts are quarantined, the cause is investigated, and production may halt pending resolution. The asymmetry of consequences — a single part failure can be catastrophic — means that the system is designed to favor conservatism over agility at every decision point.

6. The Evolving Landscape

Aerospace procurement is not static. Several forces are reshaping its practice without altering its fundamental compliance logic.

The commercial space sector — SpaceX, Blue Origin, Rocket Lab, and a growing constellation of launch and satellite companies — is creating new procurement contexts that apply aerospace-grade quality standards to faster innovation cycles. These organizations are pressing for more flexible qualification frameworks while remaining bound by the physics and safety imperatives that created those frameworks in the first place.

Digital traceability tools — including blockchain-based part genealogy systems and AI-powered document validation — are beginning to reduce the manual burden of compliance management. Organizations have reported reductions in audit preparation time of up to 80% after implementing unified digital quality management systems. The IATF 16949 revision cycle is paralleled by ongoing updates to AS9100 standards, with a full revision underway by the International 9100 Team that is expected to address emerging risks in software-intensive systems and additive manufacturing.

The growing role of artificial intelligence in flight systems — autonomous operation, software-defined avionics, AI-assisted maintenance — is also creating new procurement categories where traditional hardware qualification frameworks do not map cleanly. Regulators and primes are working to define how software suppliers integrate into the qualification and traceability architecture that governs hardware. The answer will shape aerospace procurement for the next generation of aircraft and defense systems.

7. Conclusion

Aerospace procurement is, above all, a discipline of accountability. Its defining characteristic is not the sophistication of its sourcing strategies or the efficiency of its processes, but its refusal to allow cost, speed, or convenience to override the evidence of compliance. The qualification system, the change control regime, the traceability requirements, and the export control framework all serve the same underlying purpose: to ensure that every component in every aircraft and defense system can be accounted for, that its quality can be demonstrated, and that its failure — if it occurs — can be traced, understood, and prevented.

For procurement professionals entering this space, the adjustment from other industries is significant. The tools are the same — supplier management, contract negotiation, cost analysis — but the priorities are different. Compliance is not a constraint on procurement; it is its primary deliverable. Understanding that inversion is the beginning of effective aerospace sourcing.