AS9100 and AS9120 Consultants for Aerospace and Defence Manufacturers and Distributors in UAE, Saudi Arabia & GCC

Reviewed by Nathan ISO Consulting's aerospace quality team, working with component manufacturers, parts distributors and defence suppliers across the UAE, Saudi Arabia and GCC.

Aerospace supply chains do not accept new entrants easily, and the reason is straightforward: a component failure has consequences that no commercial remedy addresses. Prime contractors manage that by pushing verification obligations down through every tier, which is why a company machining brackets in an industrial zone finds itself facing documentation requirements written for an airframe manufacturer.

Nathan ISO Consulting works with aerospace component manufacturers, precision machining and fabrication suppliers, composite and materials producers, parts distributors and stockists, defence equipment suppliers, and companies entering aerospace supply chains from adjacent manufacturing sectors across the UAE, Saudi Arabia and the GCC.

Which Standard Matches Your Position in the Chain

The AS9100 family splits by function, and choosing wrongly means certifying against requirements that do not describe what you do.

AS9100. Design and manufacturing organisations. If you make parts or design them, this is the standard, and it carries the full weight of configuration management, first article inspection and production process verification.

AS9110. Maintenance, repair and overhaul organisations. Covered on our aviation operations page rather than here.

AS9120. Distributors and stockists. Built around traceability, counterfeit prevention, record retention and the integrity of the paper trail attached to a part rather than around production.

A distributor certifying to AS9100 will spend months on design and production clauses that will be excluded, and will still lack the specific controls AS9120 requires around split lots and certificate retention. The reverse error is rarer but equally costly.

Unsure which standard matches your operation? Describe what you actually do with the part and we will confirm.

Counterfeit Parts and Traceability

If aerospace quality has one preoccupation that distinguishes it from other manufacturing sectors, it is proving that a part is what its paperwork claims.

Counterfeit and suspect unapproved parts have entered aerospace supply chains through distributors, brokers and secondary markets often enough that the standards now treat prevention as a specific requirement rather than a general quality concern. For distributors this means controlled sourcing, verified certificates of conformity, physical inspection protocols, segregation of suspect material and defined escalation when a part's provenance cannot be established.

For manufacturers the equivalent concern is material traceability — raw material certificates, heat and lot numbers carried through processing, and the ability to reconstruct what went into a specific delivered item years afterwards.

Export Controls and Defence Work

Companies moving into defence-adjacent work encounter export control regimes that sit entirely outside the quality standards and are frequently underestimated.

ITAR and the EAR are United States regimes administered by the Departments of State and Commerce respectively. They reach non-US companies through the technical data and hardware those companies receive, and obligations typically arrive as flow-down clauses in a contract with a US prime or through licensing conditions attached to specific items. Other jurisdictions operate their own controls, and UAE and Saudi entities may also have national obligations depending on the goods involved.

Two points matter here. First, AS9100 does not address export control; a certified quality system provides no coverage whatsoever on this. Second, export control compliance is a legal matter with criminal exposure attached, and it needs specialist legal counsel rather than a quality consultant. What we can do is help build the quality system processes that a compliance programme depends on — controlled document handling, access restriction, personnel screening records and segregated storage — while your counsel determines what the obligations actually are.

Have export control flow-down clauses in a contract? We will build the supporting quality processes and tell you plainly where you need legal counsel instead.

Standards

What Assessments Find

First article inspection treated as a formality. AS9102 reports completed to satisfy the customer rather than to genuinely verify that the production process produces conforming parts, which defeats the point of the exercise.

Configuration management drift. Drawing revisions superseded without full propagation to work instructions, tooling and inspection criteria, so parts get made to a revision nobody currently references.

Special process control gaps. Heat treatment, plating, welding and non-destructive testing subcontracted to suppliers approved commercially without the process-specific approvals that customers and primes require.

Certificate retention that fails the retention period. Distributors holding conformity certificates in systems that were migrated, archived or purged before the required retention period expired.

Split lot traceability lost. A distributor breaking a lot across multiple customers without maintaining the linkage back to the original certificate and heat number.

Key characteristics not flowed down. Customer-designated key characteristics identified on the drawing but not carried into the control plan, inspection instructions or supplier requirements.

On-time delivery and quality data reported but not managed. Performance metrics submitted to customer portals without internal analysis, so a declining trend is visible to the customer before it is visible internally.

How We Work

Gap assessment across configuration and change management, first article inspection practice, special process control and supplier approval, counterfeit part prevention, material and lot traceability, key characteristic flow-down, risk and project management, and performance measurement against customer expectations.

Documentation covers the quality manual and process procedures, configuration management, first article inspection procedures per AS9102, control plans and production process verification, special process supplier approval, counterfeit prevention and suspect part handling, record retention schedules, and nonconformity and corrective action.

Manufacturers holding AS9100 alongside ISO 14001 and ISO 45001 typically integrate, since the same production leadership carries all three across the same shop floor.

Customer and Prime Audits

Aerospace customers audit their suppliers seriously and frequently, and those audits are usually harder than the certification audit. We prepare organisations through shop floor and stores walkthroughs, configuration and traceability record review, first article inspection file review, special process supplier verification, and corrective action closure checks.

Prime contractor or customer audit scheduled? Request a readiness review before it happens.

Technical Data Protection

Aerospace and defence companies hold controlled technical data, customer drawings and design information under contractual protection obligations, and increasingly under export control conditions as well. Through VAPT Security: technical data and document management security review, network and infrastructure penetration testing, access control and segregation review, and supply chain portal security testing.

Training

Through NIMS: AS9100 awareness and internal auditor training, first article inspection and AS9102 practice, counterfeit part awareness, machine safety and guarding, chemical handling for surface treatment operations, LOTO and permit-to-work, fire safety and first aid.

Who Needs to Be Involved

Quality engineering and production engineering own most of what an aerospace system governs, alongside the quality manager, production manager, procurement lead responsible for special process suppliers, stores and traceability lead, and the contracts function that receives customer flow-down requirements and has to translate them into internal obligations.