In European buyers' supplier pre-qualification forms, ISO 9001 is almost always the first line. There is a good reason: the certificate shows that the workshop works with defined processes and has passed an independent audit. Yet everyone has seen defective parts from a certified supplier and flawless parts from an uncertified one. This article aims to put ISO 9001 in its proper place; it is the certificate-focused complement to our articles on quality assurance and the 15-question supplier selection checklist.
What Does ISO 9001 Mean in a CNC Workshop?
ISO 9001:2015 is not a product standard but a quality management system standard. In a certified workshop the following are expected to exist and function:
- Defined processes: a written flow for quotation, order review, purchasing, production, inspection and shipping; the answer to "who inspects what, when and against what".
- Calibration: traceable calibration and records for measuring equipment (callipers, micrometers, CMM, gauges).
- Traceability: a chain of records from the material heat number to the shipped batch.
- Non-conformance and corrective action: how a defective part is identified, segregated, root-caused and prevented from recurring.
- Supplier control: evaluation of material, heat-treatment and coating sub-suppliers.
- Management review and internal audit: the system checking itself.
- Customer complaint management: recording, response time, closure.
The certificate shows that this system exists and is audited, not that every part is within tolerance. Part quality depends on how seriously the system is applied and on technical competence.
How Do You Verify the Certificate?
- Ask for the certificate and check the dates: validity period (3 years), annual surveillance audits carried out.
- Check the certification body: the body must be accredited (TÜRKAK in Turkey, DAkkS in Germany, UKAS in the UK, or an accreditation body that is an IAF MLA member). A "certificate" without accreditation is marketing material.
- Read the scope: the scope statement must include "CNC machining"; a certificate that only says "trading" or "assembly" does not cover manufacturing processes.
- Match the address: the address on the certificate must be the facility where production takes place; a group company's certificate does not cover the subcontracting workshop.
- Verification: most accredited bodies offer online certificate look-up; check with the certificate number.
The Difference Between ISO 9001 and Sector Standards
| Standard | Sector | In addition to ISO 9001 | When is it required at a CNC supplier? |
|---|---|---|---|
| ISO 9001 | General | — | General machinery, industrial equipment: sufficient |
| IATF 16949 | Automotive | PPAP, APQP, FMEA, control plan, Cpk, MSA, special characteristics | Mostly mandatory for OEM/Tier-1 series parts; customer-dependent at Tier-2/3 |
| ISO 13485 | Medical devices | Risk management, design control, full traceability, validation | Generally mandatory for implant and device parts; not for equipment/fixture parts |
| AS9100 / EN 9100 | Aerospace | Configuration management, FAI (AS9102), counterfeit-part prevention, special process approvals | Mandatory for flight-worthy parts |
| ISO 14001 / 45001 | Environment / OH&S | Environmental and occupational safety management | Not related to part quality; may be a corporate supplier criterion |
Practical conclusion: for automotive Tier-2 and general machinery parts, you can work with an ISO 9001-certified supplier by writing the PPAP/FAI requirements into the contract; whether IATF 16949, ISO 13485 or AS9100 is required depends on your customer's supplier policy and must be stated clearly in the RFQ. For automotive expectations see our FAI/ISIR article.
7 Proofs Independent of the Certificate
Certified or not, these are proofs you can ask any CNC supplier for, and they predict quality better than the certificate:
- Sample inspection report: a (anonymised) ballooned drawing and CMM report prepared for another customer. The report format and level of detail say a lot.
- Calibration certificates: current, traceable certificates for the CMM and critical hand tools.
- Material traceability example: how a shipment is linked from the heat number to the 3.1 certificate.
- Non-conformance example: how a past error was handled (8D or similar report). A supplier who admits a mistake and explains the root cause is more trustworthy than one who says "we have never made a mistake".
- Sample part: a part previously produced in a similar tolerance and material; verify with your own measurement.
- Quote quality: a quote that asks about ambiguities in the drawing, offers DFM recommendations and states its assumptions is an indicator of process discipline.
- First article inspection (FAI): the strongest proof independent of the certificate; make the FAI process a condition of the first order.
Can You Work with an Uncertified Supplier?
Some small and medium-sized machining workshops, especially in Turkey, may not have completed the ISO 9001 process even though they are technically very competent. Working with such a supplier is possible; however, the risk must be managed with the seven proofs above, a written quality agreement, FAI and tight incoming inspection on the first batches. If your corporate supplier policy makes the certificate mandatory, ask whether the supplier is in the certification process and what its target date is. Tornelle shares current documents and evidence relating to its quality system on request; the process steps are on our how we work page.
Frequently Asked Questions
Does an ISO 9001 certificate guarantee part quality?
No; it shows that the system exists and is audited. Part quality depends on technical competence, measuring infrastructure and how seriously the system is applied.
How do I tell whether a certificate is fake or unaccredited?
Check the certification body's accreditation mark (TÜRKAK, DAkkS, UKAS, etc.) and IAF membership; verify the certificate number through the body's online look-up.
Is ISO 9001 sufficient for an automotive part?
It depends on your customer. Many Tier-1s require at least ISO 9001 + PPAP from sub-suppliers; some insist on IATF 16949. Clarify your own customer's requirement before the RFQ.
Does the ISO 9001 audit replace my visiting the supplier?
It does not. The certificate confirms the general system; seeing the machine, measuring and process capability for your part on site or via a video audit is the most reliable method.
Conclusion
ISO 9001 is a good initial filter in CNC supplier selection but not the last word: verify the certificate for accreditation and scope, then look at concrete proofs such as inspection reports, traceability, non-conformance management and FAI. Send your technical drawings via our quote form, stating your quality expectations and document requirements; receive a quote together with a quality plan and evidence package.
