AS9120 Requirements Explained: Clause‑by‑Clause Overview for Aerospace Distributors

dards of quality, safety, and traceability. For organizations procuring parts, materials, and assemblies for resale in aviation, space, and defense industries, understanding AS9120 requirements has become essential for market access and operational excellence.

AS9120 was developed for pass-through distributors of aerospace items and addresses the chain of custody, traceability, control, and availability of records. AS9120 is a Quality Management System (QMS) standard that incorporates all ISO 9001:2015 requirements and adds additional aerospace-specific requirements tailored specifically for distributors handling aircraft components such as fasteners, electronics, seals, and hardware.

What are AS9120 Requirements?

The current version, AS9120 Rev B (2016), incorporates ISO 9001:2015 quality management system requirements and specifies additional requirements for aerospace industry distributors. Originally published in 2002 based on ISO 9001:2000, the standard evolved to its current form when updated to align with the latest ISO framework. Rather than a fixed numeric count of additional requirements, AS9120 Rev B enhances ISO 9001 with distributor-specific controls related to traceability, evidence of conformity, control of records, supplier oversight, and counterfeit parts prevention.

According to the International Aerospace Quality Group (IAQG), AS9120 standardizes quality management system requirements and can be used at all levels of the supply chain by organizations around the world to improve quality, cost, and delivery performance.

Who Needs AS9120 Certification?

AS9120:2016 is intended for use by organizations that procure parts, materials, and assemblies and resell these products to customers in the aviation, space, and defense industries. This includes organizations that procure products and split them into smaller quantities, including those that coordinate a customer or regulatory-controlled process on the product.

The standard specifically applies to:

• Stockist distributors of aerospace components
• Organizations that warehouse aircraft parts
• Companies that split larger product quantities into smaller batches
• Pass-through distributors without manufacturing capabilities

This standard is not intended for organizations that rework or repair products. Organizations that perform work that affects or could affect product characteristics or conformity should use AS9100 or another general quality management system standard.

Core AS9120 Requirements Areas

Chain of Custody and Traceability

Some of the areas covered in AS9120 include splitting (specific requirements for batch and lot splitting), control of records, traceability (tracking from receipt of product to delivery), and evidence of conformance (distributors must meet document specifications).

Traceability refers to the definition of traceability requirements from receipt to delivery. Organizations must demonstrate complete product traceability from original equipment manufacturers through the distribution chain to end customers, ensuring accountability at every step.

Evidence of Conformance

Certificate of conformity: The document that states that the product meets all requirements. Evidence of Conformance defines the specific documents required as evidence of conformance by distributors. This requirement ensures distributors maintain proper documentation proving products meet specified requirements.

Control of Records

Control of Records covers the definition of record requirements for aerospace product distributors. Organizations must establish robust systems for maintaining, retrieving, and protecting quality records throughout the product lifecycle.

Counterfeit Parts Prevention

Clause 8.1.5 requires that you have a process to prevent the release of unapproved or suspected unapproved parts, while Clause 8.1.2 specifically addresses counterfeit parts prevention through supplier verification, traceability controls, and risk-based mitigation processes. This process must also be appropriate to the risk posed to your organization. Enhanced requirements for the prevention of suspect unapproved and counterfeit parts form a critical component of the AS9120 standard.

AS9120 Standard Structure and Key Clauses

Organizations must demonstrate conformity to all applicable requirements within the 10-clause high-level structure aligned with ISO 9001:2015, which was adopted when AS9120 Rev B was released in 2016.

Risk-Based Thinking Integration

Risk-Based Thinking: The concept of risk has always been implicit in ISO 9001, but AS9120:2016 makes it more explicit and builds it into the whole management system. It ensures that risk is considered from the beginning and throughout, and makes "prevention" part of strategic and operational planning.

Managing risk is a key theme that is built into the whole of the AS9120 QMS, ensuring that risk is considered at every stage of the supply chain to effectively prevent issues arising in the first place.

Organizational Knowledge Management

Organizational Knowledge: Knowledge specific to the organization is gained by experience and conveyed through lessons, identification of experts, and the implementation of succession planning. AS9120:2016 can help you safeguard the organization from loss of knowledge (e.g., through staff turnover; failure to capture and share information) and encourages your organization to acquire (e.g., learning from experience, benchmarking) and share knowledge (e.g., mentoring of newcomers).

Change Management Framework

Concept of Change: Provides a framework that evolves to enable organizations to adapt to their changing environments or circumstances. The benefits of a robust process to control change are that business continuity is maintained and potential consequences of change are appropriately considered.

Design and Development Requirements

Design and Development of Products and Services: AS9120:2016 now includes a requirement that an organization is to establish, implement, and maintain a design and development process that is appropriate to ensure the subsequent provision of products and services. However, an organization can determine that this (and any other requirement) is not applicable if its decision will not fail to achieve conformity of products and services.

Key Differences Between AS9120 and AS9100

Understanding the distinctions between AS9120 requirements and AS9100 helps distributors choose the appropriate standard:

Excluded Clauses for Distributors

Clause 8.3.4.1 has not been included for distributors, as this is only applicable for the design of aerospace products.

Clause 8.5.1.2 on validation and control of special processes is not in the AS9120 standard since distributors will not have special processes as product manufacturers do.

Clause 8.5.1.3, also referred to as First Article Inspection (FAI), is not included in the AS9120 standard since production processes do not apply to distributors.

Operational Risk Considerations

Operational risk has not been added to AS9120, even though it was added to AS9100. However, clause 8.1.1 has been included with the heading "(not used)" and no requirements text. This allows the numbering of the clauses to be the same between AS9100 and AS9120.

Benefits of AS9120 Certification

Market Access and Competitive Advantage

Certification lets you access the best practices (which would aid in the reduction of operational risks) in the aerospace industry for ensuring quality and traceability. Certification provides global market access as it is recognized on an international scale.

Some manufacturers and OEMs require their partners to be AS9120B certified, so having this certification can open up new business opportunities by qualifying organizations to participate in these high-standard supply chains.

Quality and Risk Reduction

With established processes for handling quality issues, the certification helps minimize the risk of parts failure that could lead to costly downtime or safety incidents. Certification allows you to identify opportunities for improvement in operations and the reduction of costs.

Customer Confidence

Certification provides third-party proof of your commitment to the delivery of top-quality products. Certification acts as reassurance that organizations are dealing with a reputable distributor who meets globally recognized standards.

Implementation Process

Gap Analysis and Planning

Perform a Gap Analysis to determine what your existing QMS needs. Organizations with ISO 9001 certification often experience significant overlap with AS9120; however, actual readiness depends on traceability maturity, supplier controls, and counterfeit-prevention processes.

Documentation and System Development

Document your system with a Quality Manual and Procedures. Organizations must develop comprehensive documentation that addresses all applicable AS9120 requirements while maintaining flexibility in implementation approach.

However, it's important to note that the standard is not prescriptive. Instead, it allows you the flexibility to decide how you want to show how you have met each requirement and to communicate and manage your policy. For example, rather than creating a quality manual, you could opt for a video library or other media.

Audit and Certification Process

The audit will reveal any areas that don't conform to the requirements of the standard. You'll be given a time period within which to address minor nonconformities and submit to the certification body evidence of the work done to rectify them; however, if any major nonconformities are found, a new audit is usually required.

Continual improvement is at the core of AS9120 certification. To ensure ongoing compliance, AS9120 certification follows a three-year cycle that includes annual surveillance audits during the certificate validity period and a full recertification audit every three years. 

How BPRHub Helps with AS9120 Implementation

BPRHub specializes in comprehensive compliance management for aerospace distributors through our AI QCG platform. Our approach aligns with AS9120 requirements by providing:

• Gap assessments that identify specific areas requiring attention for AS9120 compliance using our built-in compliance mapping tools 
• Documentation management with version control, searchability, and automated workflows tied to AS9120 standards 
• Risk management tools that integrate with organizational knowledge management systems as required by AS9120:2016 
• Supplier quality management features that support counterfeit parts prevention and supply chain traceability requirements. 
• Internal audit workflows and certification preparation processes that maintain ongoing compliance 

BPRHub's platform consolidates 30+ standards management, including AS9120, providing aerospace distributors with centralized compliance that accelerates certification timelines while maintaining operational efficiency. Our AI-powered insights help organizations identify opportunities for improvement in operations and cost reduction, supporting the core goals of AS9120 implementation.

Ready to begin your AS9120 certification journey? Contact BPRHub today.

📍 Book a Demo
📧 hello@bprhub.com

FAQs

What is the difference between AS9120 and ISO 9001?

AS9120 includes all ISO 9001:2015 requirements plus over 100 additional aerospace-specific requirements focusing on traceability, chain of custody, counterfeit parts prevention, and evidence of conformance specifically for distributors.

How long does AS9120 implementation typically take?

Implementation timelines vary widely; many ISO 9001-certified distributors achieve certification within several months to a year, depending on scope, complexity, and supply-chain risk.

Is AS9120 certification mandatory for aerospace distributors?

While not legally required, AS9120 certification has become a practical necessity for aerospace distributors, as many OEMs and customers require suppliers to maintain this certification for qualification and ongoing business relationships.

How does AS9120 address counterfeit parts prevention?

AS9120 requires organizations to establish robust processes for preventing suspect, unapproved, and counterfeit parts from entering the supply chain, including supplier verification, incoming inspection protocols, and traceability documentation throughout the distribution process.

Can organizations exclude certain AS9120 requirements?

Organizations may determine certain requirements are not applicable if exclusion will not fail to achieve product or service conformity, but such determinations must be carefully justified and documented within the quality management system.

What is OASIS, and why is it important for AS9120?

OASIS is the IAQG-managed database used to list certified aerospace suppliers and their certification status. Registration is required as part of the accredited AS9120 certification scheme and enables customer visibility and verification.