AS9100, EN9100 and JISQ9100 — the Americas, European and Asian versions of the same aerospace standard — are being folded into one name, IA9100, and revised at the same time to follow the ISO 9001 update they're built on. Here's what's changing, what it means for a small supplier, and what's worth doing now.
If you read nothing else on this page, read this. Most of a good aerospace quality system is untouched.
The right side is most of the work, and none of it is in play. That's the whole argument for building now rather than waiting for a document nobody has read yet.
The IAQG is revising the aerospace quality series and renaming it at the same time. AS9100 becomes IA9100 — "IA" for International Aerospace. The whole family moves with it: AS9110 (maintenance, repair, overhaul) becomes IA9110 and AS9120 (distributors) becomes IA9120.
The rename does more than change a number. AS9100, EN9100, and JISQ9100 were the Americas, Europe, and Asia designations for what was already meant to be one standard. IA9100 collapses them into a single name.
Timing, stated honestly: published sources don't agree, and the solid part of this line is short.
Anybody selling you a date right now isn't reading a published document.
One thing that isn't in dispute: the IAQG has signaled that IA9100 will move to frequent, smaller updates rather than one large revision every decade. That's the change with the longest tail, and almost nobody is planning for it. More on that below.
IA9100 inherits everything changing in ISO 9001:2026 — risks and opportunities separated, quality culture and ethical behavior made explicit, strategic direction emphasized, climate carried forward in organizational context, Annex A rewritten. That's covered here. On top of that, the aerospace layer adds the following.
Open any one to see what it means for a small supplier. The order is roughly how much work each one is likely to be for a shop that's already certified.
Information security moves into the standard itself — risk assessment, secure access control, incident response. This is the single biggest genuinely new addition.
Why it lands hardest: it's the one most small shops have nothing written for. If your entire answer today is "we have antivirus," that's the gap. It's also the only theme here that asks you to document something you may not currently do at all, rather than write down something you already do.
Sub-tier visibility, traceability, and counterfeit-part controls all tighten. You become responsible for knowing where material came from before it reached the supplier you actually buy from.
Remote and digital auditing of suppliers is expected to be explicitly allowed, which cuts both ways — it's cheaper for you, and it makes your customer's audit of you easier to schedule.
Process capability studies, statistical process control, measurement system analysis, and design of experiments are all emphasized more heavily.
The practical effect: "we inspect every one" stops being an adequate answer to a capability question. Sorting good parts from bad isn't the same as demonstrating a process that makes good parts, and the revision draws that line harder.
Safety-critical item management and hazard reporting — including anonymous reporting routes — move toward the center of the standard rather than sitting in a clause off to the side.
If you make anything flight-critical, expect the auditor to ask how somebody on your floor raises a concern without putting their name on it.
Leadership commitment, human factors analysis, and ethical conduct become things an auditor asks about directly, not things inferred from your records.
Most shops with a decent culture already pass this in substance and fail it on evidence. The work is showing it, not building it.
Environmental management and life-cycle considerations are expected to be integrated rather than kept in a separate ISO 14001 world.
For most small suppliers this is a documentation exercise, not an operational one — but it has to be addressed rather than ignored. Listed last here because it's usually the least work.
If IA9100 really does move to frequent, smaller updates, then a quality system with clause numbers written into the body of every procedure becomes a maintenance problem that never ends. Every small revision turns into a document-control project.
There's a straightforward way to avoid that, and it costs nothing to adopt now: keep clause references in one mapping table, and out of your procedure text.
The standard shifts a clause number. Now you revise, re-approve, re-issue and re-train on every document that quotes it. Forty documents, one renumbering.
| Document | Satisfies |
|---|---|
| SOP-07 Receiving Inspection | 8.4.2 · 8.4.3 |
| SOP-12 Calibration | 7.1.5.2 · 7.5.3 |
| SOP-19 Corrective Action | 10.2 |
| SOP-23 Config Management | 8.1.2 |
The standard shifts a clause number. You edit one cell in one table. Every procedure stays at its current revision, because none of them said anything that stopped being true.
Your SOPs describe how the work is done. The crosswalk says which clause each one satisfies. Those are two different jobs, and mixing them is what turns a small revision into a document-control project.
The table is easy to draw. Filling it in honestly is the hard part — somebody has to read the standard against how your shop actually works and decide which clause each procedure genuinely satisfies, not which one it sounds like it should. A crosswalk that maps to a system you don't really have is worse than none at all, because it passes your own review and fails somebody else's.
That reading is auditor work, and it's most of what I'm doing during a readiness assessment. Adopt the structure now regardless — it costs nothing, and it'll save you the next revision whether or not you ever hire anybody.
Revisions of this kind come with a transition window during which existing certificates stay valid and you move over at a surveillance or recertification audit. The IAQG hasn't announced the IA9100 window yet. ISO 9001's window is confirmed at three years, to September 30, 2029; the aerospace window is widely expected to be shorter, precisely because of the move to more frequent updates.
AS9104/1 — the standard governing the certification bodies themselves — is being updated as IA9104/1. It's expected to have auditors verifying on-time delivery, customer satisfaction and quality metrics during the audit itself. That's a shift in what shows up on the agenda.
If on-time delivery lives in your head, or in a spreadsheet somebody rebuilds every quarter, that's a finding waiting for a date. A running record you can print is the entire fix, and it costs nothing but the habit.
If a prime or a Tier 1 has just started asking and you're building from scratch, you're in better shape than a shop that certified in 2018 and now has to change. You get to build against current thinking once instead of building twice.
Build on the parts that aren't changing — documented process, records and traceability, nonconformance and corrective action, configuration management, first article inspection, special process control, internal audit, management review. That's most of the work, and none of it is in play. Treat the new themes as additions to a foundation, not as a different foundation.
And be clear-eyed about which half usually fails. AS9100 contains all of ISO 9001 plus roughly a hundred aerospace-specific requirements. Small suppliers rarely fail the ISO half. They fail on configuration control, counterfeit prevention, first article inspection, and special process qualification — the additions nobody warned them about.
If you're certified: get your transition deadline and your transition audit date in writing, and ask what IA9104/1 will change about how they audit you.
Of everything coming, this is the addition most small suppliers have nothing written for. Documenting who has access to what, and what you do when something goes wrong, costs nothing and will be required.
Don't buy an IA9100 transition package before the standard publishes. Anyone selling a definitive gap analysis against an unpublished document is selling a guess.
A half-day walkthrough and a written report shows you where you stand against the standard in effect today, structured so it re-maps cleanly when IA9100 publishes. $750, and the report is yours either way.
I hold the AS9100D Lead Auditor Probitas certification, issued by SAI Global — so you see what your registrar will see, before they arrive. More on AS9100 readiness →
The rename, the series scope (IA9100 / IA9110 / IA9120) and the draft themes are summarized from industry reporting published during the revision cycle. Publication timing is disputed between sources — estimates range from a final draft in late 2026 to release in mid-2027 — and no transition period has been announced by the IAQG. Verified September 30, 2026. IA9100 had not published as of that date. Nothing here should be treated as final standard text. This page will be updated on publication.