How EN 9100 certification is obtained

What EN 9100 is

The EN 9100 standard is the international quality-management standard for the aerospace, defence and aviation sector. It is the sector-specific version of ISO 9001, extended with requirements specific to the sector: part traceability, configuration management, document retention, change management and supplier control.

In Europe it is known as EN 9100, in the United States as AS9100, and in Asia as JISQ 9100. The three are functionally equivalent and internationally recognised. The version in force in 2026 is EN 9100:2018.

Why it matters for your supply chain

EN 9100 certification is an approval requirement to supply as a Tier 1, 2 or 3 supplier to aerospace manufacturers (Airbus, Boeing, Lockheed, Embraer, Bombardier, etc.). Without it, a supplier cannot be registered on OASIS, the database where OEMs verify their suppliers.

For companies like AMBAR ITC, certified to EN 9100, this means our clients can audit our capability through documentation, with no need for physical visits or redundant due diligence.

What you need before applying for EN 9100

Before it can apply for EN 9100, an organisation must have a mature, operational quality-management system in place.

• Quality management system (QMS) implemented in accordance with ISO 9001 (it may or may not be separately certified, but the QMS must exist and operate).
• Documented production processes with traceability of every step.
• A track record of at least 12 months of operation under the QMS.
• A quality manual containing all the procedures required by the standard.
• An organisational structure with defined quality responsibilities.

The certification process

The typical phases an organisation follows from the decision to certify through to renewing the certificate three years later.

1. Application and proposal

Contact an authorised certification body (in Spain: AENOR, Bureau Veritas, SGS, TÜV, among others). The body issues a quotation based on the scope, sector and size of the organisation.

2. Pre-audit (optional)

Many companies opt for a pre-audit that detects non-conformities before the official audit. It reduces the risk of having to repeat the full audit.

3. Initial certification audit — Stage 1

Documentation and implementation review. The certification body sends auditors who review the quality manual and procedures and interview staff. It detects major documentary non-conformities before moving to the next stage.

4. Initial certification audit — Stage 2

Full on-site audit of the QMS in operation. The auditors review records, observe processes, validate traceability on real orders and interview operators. It detects implementation non-conformities.

5. Resolution of non-conformities

Any non-conformity identified must be resolved through a verifiable corrective action plan before the certificate is issued.

6. Certificate issuance and OASIS registration

The certificate is issued once all non-conformities are closed. At the same time, the body registers the organisation on OASIS, the international IAQG database accessible to clients and regulators.

7. Annual surveillance audits

The certification is valid for 3 years, with surveillance audits every 12 months to verify that the QMS remains operational and continues to improve.

8. Three-yearly recertification

After 3 years, a full recertification audit is carried out to extend validity for a further 3 years.

The ICOP scheme

ICOP (Industry Controlled Other Party) is the most demanding certification model in the aerospace sector. Under ICOP, EN 9100 certifications are managed collectively by the industry itself through the IAQG (International Aerospace Quality Group), rather than by the independent certification bodies that operate in other sectors.

This means that certification bodies authorised for EN 9100 must themselves be audited and authorised by the IAQG, and operate under common worldwide rules. This is what guarantees that an EN 9100 issued in Spain, Germany or Brazil has exactly the same value.

OASIS — the IAQG database

OASIS (Online Aerospace Supplier Information System) is the international database in which all certified aerospace suppliers are registered.

OASIS holds the information for each certified supplier:

• Company identification details.
• Specific scope of the certification.
• Validity and audit dates.
• Summary audit results.

Your end client (Airbus, for example) can consult OASIS to verify the certification of any supplier in its supply chain without asking you for documentation. It is the sector's standard due-diligence tool.

Typical timescales for the process

The full process, from the decision to certify through to holding the certificate, usually takes between 9 and 18 months depending on the starting point.

• If the organisation already has ISO 9001 certified and a mature QMS: 6–9 months.
• If the organisation has an uncertified QMS: 9–12 months.
• If the organisation implements the QMS from scratch: 12–18 months.

AMBAR ITC obtained its EN 9100 certification in June 2019 (OP-0004/2019), building on a quality culture already consolidated through decades of work with the sector. The most recent renewal extends validity until June 2028.