Capabilities
Industries
Quality & Engineering
Resources
About
Close
Learning Center

Aerospace Precision Machining: AS9100, ITAR, FAIR, and DFARS Requirements Explained

September 1, 2026

Aerospace Precision MachiningAS9100 CertificationDFARS ComplianceITAR AerospaceFirst Article Inspection
Aerospace Precision Machining: AS9100, ITAR, FAIR, and DFARS Requirements Explained
Manufactured with Speed and Precision

The manufacturing capabilities you need and the engineering support you want, all from a single partner.

Submit a Design

Key Points

  • AS9100 certification is the baseline quality standard for aerospace machining suppliers. It establishes documented process controls, corrective action systems, and configuration management requirements that ISO 9001 alone does not cover.
  • First Article Inspection (FAIR) per AS9102 is documented proof that a supplier's process can reliably produce a conforming part before production quantities begin.
  • ITAR registration controls who can touch your technical data, not just who can ship hardware, making it non-negotiable for any supplier handling defense-related aerospace drawings.
  • DFARS 252.225-7009 specialty metals compliance must be sorted before the RFQ, not after the purchase order, because material sourcing affects lead time and cost in ways that can't be fixed mid-program.
  • Material traceability lets you track every finished part back to its mill certification, making it easier to identify and contain nonconforming material before it reaches flight hardware.

Aerospace precision machining isn't just tight tolerances on metal. Every machined component on a flight vehicle or in a critical defense system carries a documentation trail, a certification pedigree, and a material lineage your supplier must prove on demand. If they can't, your program carries the risk.

The certifications, inspection requirements, regulatory compliance, and material traceability standards that separate a qualified aerospace machining shop from one that isn't.

New call-to-action

Why Standard Machining Credentials Fall Short in Aerospace

Most machine shops can hold tight tolerances. Fewer can prove, with documented evidence, that their quality system, material chain, and process controls meet aerospace requirements.

Aerospace requires documentation rigor, configuration management, and corrective action formality that general commercial machining doesn't demand. A shop that produces excellent parts but can't show you a first article inspection report, a material cert chain, or a current AS9100 certificate isn't a qualified aerospace supplier, regardless of how good their equipment is.

When qualifying a machining partner for flight-critical work, evaluate along four axes: quality system certification, export control compliance, material traceability, and first article inspection capability. Each closes a distinct category of program risk.

Essential Background Reading:

AS9100: The Quality System Baseline

AS9100 is the international quality management standard specific to aviation, space, and defense. It extends ISO 9001 with requirements that address aerospace production: risk management, configuration management, key characteristics, and requirements flow-down through the supply chain.

A shop holding current AS9100 certification has demonstrated, through third-party audit, that their quality system meets these requirements. That's meaningfully different from a shop that has ISO 9001 and claims to operate to similar principles. The aerospace-specific clauses exist because aerospace failures have documented causes, and AS9100 is designed to close those gaps.

When evaluating a supplier, ask for their current certificate with scope and expiration date. Confirm the scope covers the processes you're sourcing, not just a subset of their operations.

Key items to verify from an AS9100 certificate:

  • Certification scope: Confirm it explicitly covers CNC machining, not just quality management generally.
  • Certificate expiration: Current certification requires ongoing surveillance audits; an expired certificate means the system hasn't been recently verified.
  • Registrar accreditation: The issuing registrar should be accredited through an IAQG-recognized body.
  • Corrective action history: A qualified supplier should be able to speak to their corrective action request (CAR) process and closure rates.

AS9100 vs. ISO 9001: Understanding the Difference

ISO 9001 establishes a general quality management framework applicable across industries. AS9100 builds on that foundation with aerospace-specific requirements that ISO 9001 doesn't address. The additions include formal risk management requirements, configuration management controls, first article inspection requirements, and mandatory flow-down of customer and regulatory requirements to sub-tier suppliers.

A supplier with ISO 9001 certification is not an equivalent substitute for one with AS9100 certification on an aerospace parts manufacturing program. The differences are structural, not cosmetic.

ITAR Registration and What It Controls

The International Traffic in Arms Regulations (ITAR) control the export of defense articles and defense services, including technical data. For aerospace precision machining, the relevant question isn't just whether your supplier can ship parts internationally. It's whether they can handle your drawings at all if those drawings describe a defense article.

ITAR registration is required for any supplier who manufactures, exports, or furnishes services related to items on the U.S. Munitions List (USML). Receiving a technical data package for an ITAR-controlled part is itself a controlled act.

Ask specifically how they segregate controlled technical data and what their ITAR compliance procedures look like in practice, not just whether they have a registration on file. Foreign nationals at a supplier facility generally cannot access ITAR-controlled drawings without a license or exemption. A shop that hasn't addressed this creates real compliance exposure.

ITAR and CMMC: Parallel Obligations That Don't Overlap

ITAR governs who can access defense technical data. The Cybersecurity Maturity Model Certification (CMMC) framework governs how that data is protected in digital systems. They address different threat vectors and neither substitutes for the other.

For programs involving Controlled Unclassified Information (CUI) beyond ITAR, CMMC Level 2 certification. Validated through third-party C3PAO assessment, requiring all 110 NIST SP 800-171 security controls. Is now a contract requirement for many defense programs. Contract requirements began appearing in Q3 2025. A single non-compliant supplier in your chain can disqualify your entire contract bid. Understanding cybersecurity obligations for aerospace and defense suppliers is now as important as understanding your machining qualifications.

A supplier with ITAR registration but no CMMC certification may still be disqualified from programs that require CUI handling under the updated DoD framework.

Related Content:

Essential Background Reading:

First Article Inspection: Proving the Process Before Production Starts

First Article Inspection (FAIR), governed by AS9102, is the documented verification that a production process can produce a conforming part. It's not a sample inspection of a production run. It's a structured review conducted before production quantities begin, covering every characteristic on the design record.

A complete FAIR package typically includes:

  • Design documentation review: Confirmation that the drawing revision used matches the production configuration.
  • Product accountability: Balloon drawing with every characteristic identified and numbered.
  • Characteristic accountability: Each design characteristic documented with its measurement method and actual measured value.
  • Material and process certification: Mill certs, heat treat records, plating certs, and special process approvals tied to the first article lot.
  • Functional test results: Where required by the design record, functional verification results.

Ask to see a sample FAIR package from a comparable part. The documentation discipline in a FAIR is the same discipline that will show up, or fail to show up. When a nonconformance occurs in production. This connects directly to how inspection and metrology protect your assembly at every stage of the program.

Related Content:

Material Traceability and DFARS Specialty Metals

Material traceability in aerospace machining means you can trace every piece of material in a finished part back to its original mill cert. That chain, from purchase order to raw stock to finished part, with heat number, lot number, and cert documentation at each step. Is what lets you isolate a problem if a material nonconformance surfaces later.

A supplier who buys stock from a distributor without capturing the mill cert, or who mixes material from multiple heats without tracking which went into which part, cannot support a traceability audit. For flight hardware, that's a disqualifying gap. Material choice also directly drives achievable tolerances, tool life, and lead time, so traceability and material selection are decisions that compound each other early in the program.

DFARS 252.225-7009: The Specialty Metals Requirement

For defense programs, material traceability intersects with a specific regulatory requirement: DFARS 252.225-7009, which restricts acquisition of specialty metals not melted in the United States, its outlying areas, or a qualifying country. Covered materials include specific stainless and high-strength steels, titanium alloys, certain superalloys, and zirconium alloys.

For titanium specifically, the requirement goes to melt origin: the original ingot must be melted in a compliant country even if downstream rolling happens elsewhere. A mill cert documenting country of manufacture without documenting melt country isn't sufficient for titanium on a DFARS-covered contract.

The clause flows down through subcontract tiers, which means your machining supplier needs mill test reports documenting melt origin for every specialty-metal heat before the material is cut. Flag this requirement at RFQ, not after the quote comes back. Compliant material can carry different availability and lead times than standard stock, and discovering the requirement at purchase order is how programs get delayed.

Material CategoryDFARS CoverageKey Documentation Requirement
Stainless steel (certain grades)YesMill cert with melt country of origin
High-strength steelYesMill cert with melt country of origin
Titanium alloysYesMill cert with melt country; melt origin must be compliant even if rolling occurs elsewhere
Superalloys (certain)YesMill cert with melt country of origin
Zirconium alloysYesMill cert with melt country of origin
Aluminum alloysGenerally NoStandard mill cert and traceability
Standard carbon steelGenerally NoStandard mill cert and traceability

Timing Is the Practical Failure Mode

Material compliance is a design-phase input, not a procurement afterthought. Specialty metals sourcing affects lead time and cost from the moment a program is priced. A machining supplier who discovers the DFARS requirement after quoting from standard stock will either requote, losing time, or source non-compliantly, creating program risk. Neither outcome is acceptable. Surface the requirement at RFQ, every time. This is exactly the kind of design consideration that determines cost and quality before a drawing ever leaves engineering.

Special Processes and Nadcap

Many aerospace machined parts require special processes beyond machining: heat treatment, chemical conversion coating, hard anodize, chemical milling, and non-destructive testing (NDT). The National Aerospace and Defense Contractors Accreditation Program (Nadcap) is the industry mechanism for verifying that special process suppliers meet the required standards.

Nadcap accreditation isn't required in every case, but prime contractors frequently require it for specific process categories. If your part requires heat treatment or NDT and your supplier performs those operations in-house, their Nadcap accreditation for those specific processes is a legitimate qualification question. If they outsource, you need to know whether their subcontractors are Nadcap-accredited and how requirements flow down.

A vertically integrated machining partner who controls more of this supply chain internally reduces hand-offs where requirements can get lost. Fewer vendors means fewer points of failure in the compliance chain. Understanding how contract manufacturing company structure determines lead times, quality, and risk helps clarify why integration matters here.

Next Steps:

Tolerances in Aerospace Precision Machining

Standard CNC machining tolerance at a capable shop runs ±0.25 mm (±0.010"). Aerospace applications frequently require tighter, and achieving tighter tolerances requires engineering investment in fixturing, tooling strategy, environmental control, and inspection.

Modus Advanced's machining capability spans ±0.025 mm to ±0.127 mm (±0.001" to ±0.005") for aerospace applications. Tighter tolerances are achievable, but they carry real trade-offs: longer lead times, higher costs, and additional process development. A good machining partner will flag over-toleranced features during design for manufacturability (DFM) review, not just machine to whatever the print says. For a full breakdown of when and why you need to go tighter, see our guide to high precision machining when standard tolerances aren't enough.

See It In Action:

Questions to Ask Before You Award the Work

Qualifying an aerospace machining supplier is a structured process. These questions give you a direct line into the compliance and capability gaps that matter:

  • Current AS9100 certificate: Scope, expiration, registrar, and can they send it today?
  • ITAR registration: Current DDTC registration and how they handle foreign national access to controlled data.
  • CMMC status: Level 2 certification through a C3PAO, if your program involves CUI.
  • FAIR experience: Have they executed AS9102-compliant FAIRs? Can they show you a sample package?
  • Material traceability process: How do they capture and maintain mill certs, heat numbers, and lot traceability from receiving through shipment?
  • DFARS specialty metals: Can they source and document melt-origin compliance for titanium, stainless, and superalloys on a DFARS-covered program?
  • Special process management: Which processes are in-house, which are outsourced, and what's the Nadcap status of each?

Choosing the right partner requires more than this checklist. For a deeper framework, see our guide to contract manufacturing partner selection without costly mistakes and the seven markers that separate a great precision machining company from an exceptional one.

Next Steps:

Built for the Mission

Aerospace machining compliance isn't bureaucratic overhead. Every requirement in this stack exists because something failed without it. AS9100 exists because inadequate quality systems produce nonconforming parts that reach flight hardware. ITAR exists because adversaries want your designs. FAIR exists because a process that works once in the shop isn't guaranteed to work in production. DFARS specialty metals compliance exists because supply chain integrity is a national security issue.

The machining partner worth working with understands this. They don't treat compliance as a box to check. They treat it as the foundation their quality system is built on.

A pilot's life depends on the guidance system working. A service member's mission depends on the electronics surviving the environment they were designed for. When you're selecting an aerospace precision machining partner, you're selecting a partner who must prove, on paper and in practice, that their process deserves to be part of that chain. Let's solve this together.

Frequently Asked Questions: Aerospace Precision Machining

What certifications does an aerospace machining supplier need?

At minimum, an aerospace machining supplier should hold current AS9100 certification for their quality management system and ITAR registration if the work involves defense-related technical data. For programs that handle Controlled Unclassified Information (CUI) under DoD contracts, CMMC Level 2 certification is also required. Depending on the part, Nadcap accreditation for special processes such as heat treatment or non-destructive testing may be required by the prime contractor.

What is the difference between AS9100 and ISO 9001 for machining?

ISO 9001 is a general quality management standard applicable across industries. AS9100 extends ISO 9001 with aerospace-specific requirements: formal risk management, configuration management, key characteristic identification, and mandatory supplier flow-down. A supplier with ISO 9001 certification is not a substitute for one with AS9100 certification on an aerospace program.

What is a First Article Inspection (FAI) and when is it required?

A First Article Inspection (FAI), governed by the AS9102 standard, is a documented verification that a production process can consistently produce a part that conforms to the design record. It is conducted before production quantities begin, not as a sample check of an ongoing run. An FAI covers every characteristic on the drawing and includes material certs, process records, and measured values for each feature. AS9100-certified suppliers are required to perform FAIs; when one is required is typically specified by the customer's purchase order or quality clauses.

How does ITAR affect aerospace CNC machining?

The International Traffic in Arms Regulations (ITAR) control access to defense articles and technical data, including engineering drawings. A machining supplier who receives a technical data package for an ITAR-controlled part must be registered with the U.S. State Department's Directorate of Defense Trade Controls (DDTC). Foreign nationals at the facility generally cannot access controlled drawings without a license or exemption. ITAR governs data access and handling, not just physical shipment of hardware.

What is DFARS specialty metals compliance and who does it apply to?

DFARS 252.225-7009 restricts the use of specialty metals not melted in the United States, its outlying areas, or a qualifying country on DoD contracts. It covers specific stainless and high-strength steels, titanium alloys, certain superalloys, and zirconium alloys. The clause flows down through all subcontract tiers, meaning a machining supplier must obtain mill test reports documenting melt origin for every covered material heat. For titanium, the melt origin requirement applies to the original ingot even if downstream processing occurs elsewhere.

What tolerances can aerospace CNC machining hold?

Standard CNC machining tolerance at a capable shop is ±0.25 mm (±0.010"). Aerospace applications typically require tighter. Modus Advanced's aerospace machining capability spans ±0.025 mm to ±0.127 mm (±0.001" to ±0.005"). Achieving the tighter end of that range requires engineering investment in fixturing, tooling, and inspection, and carries corresponding lead time and cost implications.

How do I verify material traceability from a machining supplier?

Material traceability in aerospace machining requires a documented chain from the original mill certificate through each production operation to the finished part. Ask the supplier how they capture heat number and lot number at receiving, how that information travels through production, and how it's recorded on the final certification package. A supplier who can't walk you through that chain clearly cannot support a traceability audit if a nonconformance surfaces after delivery.

What is Nadcap and when does my machined part require it?

Nadcap is the National Aerospace and Defense Contractors Accreditation Program, which provides third-party accreditation for special process suppliers in aerospace and defense. Common Nadcap-accredited processes include heat treatment, chemical processing, non-destructive testing, and welding. Whether your machined part requires Nadcap-accredited processes depends on the prime contractor's quality clauses and the part's design requirements. If your supplier performs these processes in-house without Nadcap accreditation, and your prime requires it, that's a qualification gap.

Does my machining supplier need CMMC certification?

If your program involves Controlled Unclassified Information (CUI) under a DoD contract, yes. The CMMC (Cybersecurity Maturity Model Certification) program's final rule became effective December 16, 2024, and contract requirements began appearing in Q3 2025. CMMC Level 2, validated through a third-party C3PAO assessment, requires implementation of all 110 NIST SP 800-171 security controls. A single non-compliant supplier in your supply chain can disqualify your entire contract bid.

See It In Action:

New call-to-action

Aerospace Precision MachiningAS9100 CertificationDFARS ComplianceITAR AerospaceFirst Article Inspection

Related Posts