# Verify a China CNC Supplier's AS9100 Certificate > A China CNC supplier sent you an AS9100 certificate. Use this 3-step process to confirm it is real, current, and fully in scope before you sign the PO. https://www.sinbo-machining.com/wiki/quality/verify-as9100-certificate-real/ --- ## On This Page - Why You Cannot Trust an AS9100 Certificate Scan at Face Value - Step 1 — Verify the Certificate in the OASIS Database - Step 2 — Verify the Certification Body Is IAQG-Recognized - Step 3 — Verify the Scope Covers What You Need - Four Common Fraud Patterns (and How Each One Fails) - The Verification Email Template (Send This Before the PO) - AS9100 Certificate Expiration and Surveillance Cycle - Prevention Checklist — Supplier Qualification Before Every PO - Standards & Sources - Need an AS9100-Compliant CNC Supplier You Can Verify? # How to Verify a China CNC Supplier’s AS9100 Certificate Is Real A China CNC factory sends you a scanned AS9100D certificate. It looks official — letterhead, logo, signature, certification mark. But is it real? Is it current? Does the scope actually cover the process you need? This page gives you a repeatable 3-step verification workflow that eliminates forged, expired, and out-of-scope certificates before they cost you a rejected shipment or an OEM audit finding. ## Why You Cannot Trust an AS9100 Certificate Scan at Face Value AS9100 (currently Revision D, published 2016; Revision E expected 2026) is the aerospace quality management system standard based on ISO 9001 with additional aviation-specific requirements. It is the single most common QMS gate for aerospace supply chains — Boeing, Airbus, GE Aviation, Rolls-Royce, and their Tier 1 suppliers all require it. But unlike ISO 9001, which has hundreds of certification bodies, AS9100 certification is tightly controlled: only IAQG-recognized certification bodies can issue valid certificates, and every certified organization must be listed in the OASIS database (Online Aerospace Supplier Information System) managed by IAQG. The problem: enforcement is decentralized. A supplier can Photoshop a certificate, use an expired certificate from a previous audit, or hold a certificate from a non-IAQG-recognized body that is essentially worthless. The consequences of accepting a fake or invalid certificate include: rejected lots, OEM audit findings, potential FAA/EASA regulatory action, and in the worst case, a field safety incident traced back to an unqualified supplier. Draft note (pending Sinbo review) The fraud patterns and verification steps in this page are synthesized from public forum discussions (Practical Machinist, r/Aerospace, Elsmar Cove), IAQG published guidance, and standard aerospace supplier qualification practice. Sinbo engineers should supplement with real qualification audit data before this page goes to production translation. ## Step 1 — Verify the Certificate in the OASIS Database The OASIS database is the single source of truth for AS9100 certification status. Every valid AS9100 certificate — without exception — must be registered in OASIS. If the supplier is not in OASIS, the certificate is either fake, pending registration, or issued by a non-recognized body. How to check: 1- Go to the IAQG OASIS portal (oasis.intl-aesq.org). Registration is free. 1- Search by the supplier’s exact legal entity name (not the trade name) or by their certificate number. 1- Verify: (a) the company name matches exactly, (b) the certification status shows “Certified” (not “Suspended” or “Withdrawn”), (c) the standard is AS9100 Rev D (or current revision), (d) the certification body is listed as an IAQG-recognized body. | OASIS Status | Meaning | Action | Certified | Active, valid certificate | Proceed to Step 2 (scope check) | Suspended | Temporary hold — usually for unresolved nonconformity | Do not accept. Supplier must resolve suspension before you can qualify them. | Withdrawn | Certificate revoked or not renewed | Do not accept. Supplier must re-certify from scratch. | Not found | No record in OASIS | Certificate is either fake, from a non-IAQG body, or pending initial registration. Do not accept until resolved. Critical detail. IAQG policy states: “If any organization that has achieved aerospace certification refuses to be entered into the OASIS system, or refuses to designate an OASIS administrator, IAQG will require the certification body to withdraw the certificate.” A supplier not in OASIS is a red flag — full stop. ## Step 2 — Verify the Certification Body Is IAQG-Recognized Not all certification bodies are equal. AS9100 certificates can only be issued by certification bodies accredited under the IAQG International Controlled Other Party (ICOP) scheme, per SAE AS9104/1. A certificate from a non-recognized body — even if the supplier is genuinely audited — is not accepted by Boeing, Airbus, or any major OEM. How to verify the certification body: 1- In the OASIS record, check the “Certification Body” field. It must be one of the IAQG-recognized bodies. 1- Cross-check against the IAQG ICOP list of recognized certification bodies. Major recognized bodies include: NSF-ISR, BSI, SGS, Bureau Veritas, DNV, Intertek, SAIGLOBAL (now SAI Global), NQA, TÜV SÜD, TÜV Rheinland, and a small number of regional bodies. 1- In China specifically, the recognized bodies operating include: NSF-ISR (Shanghai office), BSI, SGS, Bureau Veritas, and — since 2025 — CEPREI (赛宝认证中心) which received ANAB accreditation for AS9100. Common fraud pattern. Some Chinese suppliers hold certificates from bodies like “China Quality Certification Center (CQC)” or generic ISO registrars that issue “AS9100” certificates without ICOP recognition. These certificates look official but are not accepted by any major aerospace OEM. Always cross-check the CB name against the IAQG ICOP list. ## Step 3 — Verify the Scope Covers What You Need A valid AS9100 certificate does not mean the supplier can do everything. Every certificate includes a scope statement that defines exactly what processes, products, and locations are covered. If your order requires a process outside the scope, the certificate does not protect you. What to check on the scope statement: - Process coverage: Does the scope include the specific process you need? Common limitations: “CNC machining only” (no heat treatment, no NDT, no surface treatment). If you need special processes, the supplier must either have them in scope or subcontract to Nadcap-accredited processors. - Product coverage: Does the scope cover the product type? Some certificates are limited to “precision shafts” or “sheet metal assemblies.” - Location coverage: Is the manufacturing location the same as the certified address? If the supplier has multiple factories, each location needs its own certification or a documented multi-site arrangement. - Material coverage: Some scopes specify material families (e.g., “aluminum and titanium alloys”). If you need Inconel or stainless, verify the scope covers it. How to get the scope. The scope statement is printed on the certificate itself (usually a paragraph below the standard designation). In OASIS, you can view the scope if the supplier’s OASIS administrator grants you access. Alternatively, ask the supplier directly: “Please provide your AS9100 certificate including the scope statement, and confirm your OASIS administrator has granted us view access.” ## Four Common Fraud Patterns (and How Each One Fails) | Fraud Type | What It Looks Like | How to Catch It | Consequence if Missed | Photoshopped certificate | Altered dates, company name, or scope on a real certificate template | OASIS search: name, scope, and dates won’t match | Unqualified supplier in aerospace supply chain; potential FAA action | Expired certificate | Real certificate, but surveillance audit was missed or certification lapsed | OASIS status shows “Suspended” or “Withdrawn”; check expiration date on cert | Supplier is operating without a valid QMS; OEM audit finding | Scope mismatch | Certificate is real and current, but scope says “machining of aluminum parts” while you need Inconel heat treatment | Read the scope statement on the certificate; cross-check with your RFQ requirements | Special process done outside accreditation; lot rejection | Non-recognized certification body | Certificate looks official, issued by a body not on the IAQG ICOP list | Cross-check CB name against IAQG ICOP recognized bodies list in OASIS | Certificate is worthless for aerospace supply; OEM will reject it ## The Verification Email Template (Send This Before the PO) Use this template when qualifying a new China CNC supplier. It covers all three verification steps in one communication: Subject: AS9100 Certificate Verification — Required for Supplier QualificationDear [Supplier Quality Contact],As part of our supplier qualification process, we require verification of your AS9100 certification. Please provide the following:1. A copy of your current AS9100 Rev D certificate, including the full scope statement.2. Your OASIS registration confirmation (company name as registered, certificate number, and certification body name).3. Confirmation that your OASIS administrator has granted our organization view access to your audit records (our OASIS user ID: [your ID]).4. If any special processes (heat treatment, NDT, surface treatment, welding) are performed, please provide the Nadcap accreditation certificates with current scope and expiration dates.5. If any manufacturing is performed at locations other than the certified address, please provide the multi-site certification details.Please note: purchase orders cannot be issued until this verification is complete.Best regards,[Your Name / Quality Engineering] ## AS9100 Certificate Expiration and Surveillance Cycle AS9100 certification follows a 3-year cycle with annual surveillance audits: | Year | Audit Type | What Happens | Year 0 | Initial certification audit (Stage 1 + Stage 2) | Full QMS audit. If passed, certificate issued for 3 years. | Year 1 | Surveillance audit 1 | Partial audit — focuses on key processes, corrective actions, and continuous improvement. | Year 2 | Surveillance audit 2 | Partial audit — different sample of processes. If major nonconformity found, certificate may be suspended. | Year 3 | Recertification audit | Full QMS audit again. Certificate renewed for another 3-year cycle. Key point for buyers: Between surveillance audits, a supplier’s QMS can degrade. The certificate date alone does not guarantee current compliance. This is why OASIS status checks should be done before every new order, not just at initial qualification. If OASIS shows “Suspended,” the supplier failed a surveillance audit and has not yet resolved the nonconformity. ## Prevention Checklist — Supplier Qualification Before Every PO | # | Check | Why | 1 | Search OASIS for supplier’s exact legal name | Confirms certificate is registered and active | 2 | Verify OASIS status = “Certified” | Rules out suspended or withdrawn certificates | 3 | Cross-check certification body against IAQG ICOP list | Rules out non-recognized bodies | 4 | Read the scope statement on the certificate | Confirms process, product, material, and location coverage | 5 | Check certificate expiration date and last surveillance audit date | Rules out expired certificates | 6 | Verify manufacturing location matches certified address | Rules out unlisted production sites | 7 | For special processes, verify Nadcap accreditation (eAuditNet) | AS9100 alone does not cover special processes | 8 | Request OASIS admin access to audit reports | Shows surveillance history and any open nonconformities ## Standards & Sources Primary standardsAS9100D (2016) Aerospace Quality Management Systems — the current revision. Based on ISO 9001:2015 with aerospace-specific additions including configuration management, key characteristics management, and risk management.SAE AS9104/1 Requirements for Aerospace Quality Management System Certification/Registration Programs — defines the ICOP scheme and certification body recognition requirements.EN 9100:2018 European equivalent of AS9100D, published by AECMA. Databases and toolsIAQG OASIS Online Aerospace Supplier Information System — the authoritative database for all AS9100/AS9110/AS9120 certified organizations.PRI eAuditNet Nadcap accreditation database — verify special process supplier status.IAQG ICOP International Controlled Other Party — the scheme that governs certification body recognition for aerospace QMS. Frequently Asked Questions How do I check if a supplier's AS9100 certificate is real? Search the IAQG OASIS database (oasis.intl-aesq.org) for the supplier’s exact legal name. If the certificate is real, the supplier will appear with a “Certified” status. If they do not appear, or their status shows “Suspended” or “Withdrawn,” the certificate is not valid. OASIS is the single source of truth — every legitimate AS9100 certificate must be registered there. What makes an AS9100 certification body legitimate? The certification body must be accredited under the IAQG ICOP (International Controlled Other Party) scheme, per SAE AS9104/1. Major recognized bodies include NSF-ISR, BSI, SGS, Bureau Veritas, DNV, Intertek, NQA, and TÜV SÜD. In China, CEPREI (赛宝认证中心) received ANAB accreditation in 2025. A certificate from any other body is not accepted by Boeing, Airbus, or major OEMs. Cross-check the CB name in the OASIS record against the ICOP recognized list. Can a supplier with an expired AS9100 certificate still ship aerospace parts? No. An expired certificate means the supplier no longer has a valid aerospace QMS. They cannot legally claim AS9100 compliance, and any parts shipped under an expired certificate will be rejected during OEM incoming inspection or audit. The supplier must complete a recertification audit (full Stage 1 + Stage 2) before they can resume aerospace supply. What is the OASIS database and why does it matter? OASIS (Online Aerospace Supplier Information System) is the IAQG-managed database that stores all AS9100/AS9110/AS9120 certification records, audit results, and supplier information. It matters because it is the only authoritative source for verifying certification status. IAQG policy requires every certified organization to be listed in OASIS; if a supplier refuses OASIS registration, their certification body is required to withdraw the certificate. Buyers can register for free and search any supplier’s status. What should I check on the AS9100 scope statement? Four things: (1) Process coverage — does it include the process you need (e.g., CNC machining, not just assembly)? (2) Product coverage — does it cover the product type? (3) Material coverage — does it include the material families you are ordering? (4) Location coverage — is the manufacturing site the same as the certified address? A scope that says “CNC machining of aluminum components” does not cover Inconel heat treatment. How often should I re-verify a supplier's AS9100 status? Before every new purchase order. AS9100 certification follows a 3-year cycle with annual surveillance audits. Between audits, a supplier can be suspended if they fail a surveillance audit and do not resolve nonconformities in time. Checking OASIS before each PO catches suspensions and withdrawals that you would miss if you only verified at initial qualification. Is ISO 9001 the same as AS9100 for aerospace supply? No. AS9100 includes all of ISO 9001:2015 plus additional aerospace-specific requirements: configuration management (AS9100D §4.11), key characteristics management (AS9103), risk management, counterfeit parts prevention, and special process control. An ISO 9001 certificate alone is not sufficient for aerospace supply. Boeing, Airbus, and all major OEMs explicitly require AS9100 (or EN 9100 / JIS Q 9100). Sources & Standards Referenced 1- AS9100D: Aerospace Quality Management Systems, SAE International (2016) 1- SAE AS9104/1: Requirements for Aerospace QMS Certification/Registration Programs, SAE International 1- EN 9100:2018: Aerospace series — Quality management systems — Requirements, AECMA/UNI 1- IAQG OASIS: Online Aerospace Supplier Information System — official certification database (oasis.intl-aesq.org) 1- IAQG ICOP Scheme: International Controlled Other Party — certification body recognition requirements 1- PRI eAuditNet: Nadcap accreditation database, Performance Review Institute 1- Intertek: AS9100 Series Certification — Aerospace and Defense Industry Standard (2024 overview) 1- Advisra 9100 Academy: What is AS9100? — Aerospace Quality Standards guide (2024 update) ## Need an AS9100-Compliant CNC Supplier You Can Verify? Our AS9100D quality system is registered in OASIS and available for your verification. Scope covers precision CNC machining of aluminum, titanium, stainless steel, and high-temperature alloys for aerospace applications. [Request a Quote ](https://www.sinbo-machining.com/quote/)