Morsa publishes this guide. Morsa is software with an AI agent that works in your ERP, email and Teams; it chases expiring supplier certificates and scores delivery from your PO history, and a quality manager approves every status change. The AVL rows are fictional. The tiers, intervals and score bands are our recommendations, not requirements of either standard.
Quick answer
What the auditor checks: ISO 9001 8.4.1 wants criteria to evaluate, select, monitor and re-evaluate suppliers, with records [1]. It never says “approved supplier list”; an AVL is the usual evidence. AS9100D 8.4.1.1 adds a register of status and scope [2].
Review intervals (ours): tier 1 every 12 months, tier 2 every 24, tier 3 every 36, plus triggers.
Score bands (ours): 80 or more approved, 65 to 79 conditional, under 65 disapproved for new work.
ISO 9001:2026 was published on 16 September 2026 with a three-year transition, so audits to the 2015 edition and AS9100D carry on meanwhile [3].
The template: a filled-in 20-row approved supplier list
Set up a spreadsheet with these nine columns: ID, Supplier, Scope of approval, Status, Tier, Basis, Certificate (expiry), Last / next review, Score. The 20 filled-in rows below show what goes in each.
Tiers: 1 = special processes, safety-critical or sole-source parts. 2 = parts made to your print. 3 = catalog items and packaging.
Statuses: Approved (buy within scope). Conditional (extra controls until a set date). Disapproved (no new POs). Pending (qualifying). Inactive (no PO in 24 months). Customer-directed (the customer chose it; you still monitor it).
S-101
Supplier: Bar stock center
Scope of approval: Aluminum and steel bar, plate
Status: Approved
Tier: 2
Basis: History, ISO 9001
Certificate (expiry): ISO 9001 (2027-03-31)
Last / next review: 2025-01 / 2027-01
Score: 92
S-102
Supplier: Anodizer
Scope of approval: Anodize, MIL-PRF-8625 Type II and III
Status: Approved
Tier: 1
Basis: Nadcap, on-site audit
Certificate (expiry): Nadcap CP (2027-06-30)
Last / next review: 2025-12 / 2026-12
Score: 88
S-103
Supplier: Heat treater
Scope of approval: Aluminum heat treat
Status: Conditional to 2027-02-08
Tier: 1
Basis: Nadcap; 2 late lots in Q3
Certificate (expiry): Nadcap HT (2027-04-30)
Last / next review: 2026-10 / 2027-02
Score: 71
S-104
Supplier: CNC shop A
Scope of approval: Details to print, 3-axis only
Status: Approved
Tier: 2
Basis: AS9100, FAI
Certificate (expiry): AS9100D (2028-01-15)
Last / next review: 2025-05 / 2027-05
Score: 90
S-105
Supplier: CNC shop B
Scope of approval: 5-axis details
Status: Pending
Tier: 2
Basis: Audit 2026-11-20
Certificate (expiry): AS9100D (2027-09-30)
Last / next review: n/a
Score: n/a
S-106
Supplier: Fastener distributor
Scope of approval: Catalog fasteners, lot traced
Status: Approved
Tier: 3
Basis: AS9120
Certificate (expiry): AS9120B (2027-08-31)
Last / next review: 2025-11 / 2028-11
Score: 95
S-107
Supplier: Sheet metal shop
Scope of approval: Formed, welded brackets
Status: Disapproved 2026-09-14
Tier: 2
Basis: Failed audit: calibration
Certificate (expiry): ISO 9001 (2027-02-28)
Last / next review: On request
Score: 54
S-108
Supplier: Calibration lab
Scope of approval: Gauge and CMM calibration
Status: Approved
Tier: 2
Basis: ISO/IEC 17025 scope
Certificate (expiry): ISO/IEC 17025 (2027-10-31)
Last / next review: 2025-10 / 2027-10
Score: 97
S-109
Supplier: Plating shop
Scope of approval: Electroless nickel, AMS 2404
Status: Approved
Tier: 1
Basis: Nadcap
Certificate (expiry): Nadcap CP (2026-12-31)
Last / next review: 2026-01 / renewal 2026-12
Score: 85
S-110
Supplier: NDT lab
Scope of approval: Fluorescent penetrant
Status: Approved
Tier: 1
Basis: Nadcap, customer-approved
Certificate (expiry): Nadcap NDT (2027-05-31)
Last / next review: 2026-05 / 2027-05
Score: 93
S-111
Supplier: Packaging
Scope of approval: Boxes, foam inserts
Status: Approved
Tier: 3
Basis: Sample
Certificate (expiry): None required
Last / next review: 2026-01 / 2029-01
Score: 89
S-112
Supplier: Foundry
Scope of approval: Sand castings
Status: Approved, customer-directed
Tier: 1
Basis: Named on drawing
Certificate (expiry): AS9100D (2027-12-31)
Last / next review: 2026-06 / 2027-06
Score: 80
S-113
Supplier: Resin distributor
Scope of approval: Resins, COA each lot
Status: Approved
Tier: 2
Basis: History, ISO 9001
Certificate (expiry): ISO 9001 (2028-04-30)
Last / next review: 2025-04 / 2027-04
Score: 91
S-114
Supplier: Electronics distributor
Scope of approval: Authorized-channel parts only
Status: Approved
Tier: 2
Basis: AS9120, franchise letters
Certificate (expiry): AS9120B (2027-07-31)
Last / next review: 2025-07 / 2027-07
Score: 94
S-115
Supplier: Grinding shop
Scope of approval: Centerless grinding
Status: Conditional to 2026-12-15
Tier: 2
Basis: 100% inspection after a reject
Certificate (expiry): ISO 9001 (2027-01-31)
Last / next review: 2026-09 / 2026-12
Score: 68
S-116
Supplier: Harness shop
Scope of approval: IPC/WHMA-A-620 Class 3
Status: Approved
Tier: 1
Basis: On-site audit, FAI
Certificate (expiry): AS9100D (2028-02-29)
Last / next review: 2026-02 / 2027-02
Score: 87
S-117
Supplier: Paint shop
Scope of approval: Primer, topcoat
Status: Inactive since 2026-10 (last PO 2024-10)
Tier: 2
Basis: Requalify first
Certificate (expiry): ISO 9001 (expired 2026-06-30)
Last / next review: Before use
Score: n/a
S-118
Supplier: Gasket maker
Scope of approval: Die-cut gaskets
Status: Approved
Tier: 3
Basis: History
Certificate (expiry): ISO 9001 (2027-11-30)
Last / next review: 2026-11 / 2029-11
Score: 90
S-119
Supplier: Steel service center
Scope of approval: Cut plate with MTRs
Status: Approved
Tier: 2
Basis: History, ISO 9001
Certificate (expiry): ISO 9001 (2028-06-30)
Last / next review: 2025-06 / 2027-06
Score: 83
S-120
Supplier: Laser marking
Scope of approval: Marking, MIL-STD-130
Status: Approved
Tier: 3
Basis: Sample
Certificate (expiry): None required
Last / next review: 2026-03 / 2029-03
Score: 96
Next review = last review plus 12, 24 or 36 months by tier, or sooner when a conditional end date or certificate expiry comes first. “History” means approved on 12 months of delivery and quality records. Nadcap CP is chemical processing, HT heat treating. Don’t list suppliers of office supplies, utilities or anything that never ends up in or on your product. Scope matters as much as status: S-104 may do 3-axis work only.
Getting current suppliers onto the list in six weeks
You do not have to requalify every current supplier: regular suppliers can be approved on past performance, with the evidence on file [4].
Week | Do this |
|---|---|
1 | Export every supplier with a PO in 24 months; drop those whose goods never reach the product; assign tiers. |
2 | Pull 12 months of on-time delivery and lot acceptance from the ERP; collect current certificates. |
3 | Score each on the form below. 80 or more and no escape to your customer: approve on history, file the score sheet as the record, quality manager signs. |
4 | 65 to 79: conditional with an end date. Under 65, or tier 1 with no checked accreditation: questionnaire or audit before the next PO. |
5 | Add flow-down terms (below) to your PO; set the ERP to block POs to disapproved suppliers if it can. |
6 | Mock audit: pull the record, certificate and score behind five random rows. |
What the standards require, and what goes on the PO
AS9100D 8.4.1.1 in plain words [2]:
a. Define who decides approval status, and how a status changes what purchasing may do.
b. Keep a register of status and scope: this table.
c. Review supplier performance periodically, including product conformity and on-time delivery.
d. Act on suppliers that miss requirements: conditional status with an end date.
AS9100D also holds you responsible for suppliers your customer names (S-112) [2].
Flow-down (ISO 9001 8.4.3). You must tell each supplier your requirements for what it supplies; how you approve its product, methods and release; any qualifications its people need; how you will monitor it; and any checks you or your customer will make at its site [1]. Put these on the PO or in your purchase terms. AS9100D adds that the supplier must pass the applicable requirements, including your customer’s, down to its own suppliers [2].
Supplier qualification steps by risk tier
Supplier questionnaire
Tier 1: Yes
Tier 2: Yes
Tier 3: Short form
Certificate check (ISO 9001, AS9100, AS9120, ISO/IEC 17025)
Tier 1: Yes
Tier 2: Yes
Tier 3: Yes, if held
Nadcap check on the eAuditNet online QML [5]
Tier 1: Yes
Tier 2: If used
Tier 3: No
Audit
Tier 1: On site
Tier 2: Remote, or on site if risk is high
Tier 3: No
First article or sample
Tier 1: Full FAI (see first article inspection)
Tier 2: FAI
Tier 3: Sample check
Trial orders
Tier 1: 3 lots at 100% inspection
Tier 2: 1 lot at 100% inspection
Tier 3: Normal receiving
Approval sign-off
Tier 1: Quality manager
Tier 2: Quality manager
Tier 3: Purchasing and quality
Supplier audit checklist
Area | Evidence to ask for |
|---|---|
Quality system | Current certificate whose scope covers your parts |
Document control | Two drawings pulled from the floor: both current |
Flow-down | Their PO to a sub-tier supplier, carrying your requirements |
Calibration | Gauge list; two gauges in use checked for due dates |
Traceability | One lot traced from receipt to shipment |
Nonconforming material | The hold area and the last 3 NCRs |
Corrective action | The last 3, with root cause and closure |
Special processes | Their processors’ accreditation on eAuditNet [5] |
Change notification | Procedure for telling you before a process, location or source change |
Weighted supplier evaluation form
AS9100D asks you to review conformity and on-time delivery [2]. Corrective action, price and paperwork are our suggested extra supplier evaluation criteria. Score each criterion 1 to 5, then points = score ÷ 5 × weight. The supplier scorecard tool builds the delivery and quality numbers from your PO history.
On-time delivery
Weight: 35%
5: 98% or more
4: 95 to 97.9%
3: 90 to 94.9%
2: 85 to 89.9%
1: Under 85%
Example score (1 to 5): 4
Points: 28
Quality (lots accepted)
Weight: 35%
5: 99.5% or more
4: 99 to 99.4%
3: 97 to 98.9%
2: 95 to 96.9%
1: Under 95%
Example score (1 to 5): 4
Points: 28
Corrective action closed in
Weight: 15%
5: 30 days or less
4: 31 to 45 days
3: 46 to 60 days
2: 61 to 90 days
1: Over 90 days
Example score (1 to 5): 3
Points: 9
Price against quote
Weight: 10%
5: At or below
4: Up to 1% over
3: 1.1 to 3% over
2: 3.1 to 5% over
1: Over 5% over
Example score (1 to 5): 4
Points: 8
Shipments with complete certs
Weight: 5%
5: 100%
4: 98 to 99.9%
3: 95 to 97.9%
2: 90 to 94.9%
1: Under 90%
Example score (1 to 5): 2
Points: 2
Total
Weight: 100%
Points: 75
The example supplier scores 75: conditional, with an improvement plan and an end date.
Requalification triggers
Trigger | Action |
|---|---|
Certificate expires or is suspended | Conditional until the renewal is on file |
Score under 65, or under 80 two quarters running | Conditional, corrective action request (an 8D report works), re-score in 90 days |
Escape reaches your customer | Corrective action; audit for tier 1 |
Change of process, location, owner or key sub-tier | Partial FAI; re-audit for tier 1 |
Keeping the list true between audits: certificates and scores
An AVL is right on audit day and drifts after: certificates lapse and scores go stale. Morsa is software with an AI agent that works in your ERP (JobBOSS2, Global Shop, Business Central or whichever you run), email and Teams. On the list above:
Sixty days before S-109’s Nadcap certificate expires, it asks the plating shop for the renewal from the quality inbox, under a reminder rule the quality manager approved once, then proposes the row update from the new certificate.
Monthly, it scores delivery and lot acceptance from PO dates, receipts and rejections.
When a supplier crosses a band, it drafts the status change and corrective action request; the ERP record changes only after the quality manager approves.
To see it on your own supplier list, book a 30-minute walkthrough.
For software that holds the supplier record itself, see supplier management software.
What to do this week
Your situation | Do this |
|---|---|
Audit in six weeks, no list yet | Run the six-week plan; approve on history first |
New supplier to add | Qualification steps for its tier, then add the row |
List exists, audit coming | Pull the evidence behind five rows: the auditor wants each evaluation record, not just the register |
When the list outgrows a spreadsheet, a QMS holds it with supplier audits and corrective actions; see what QMS software costs.
Sources
ISO 9001:2015 clause 8.4 text, as quoted by Auditor Training Online: https://blog.auditortrainingonline.com/blog/iso-9001-8-4 (read 8 November 2026)
AS9100D clauses 8.4.1, 8.4.1.1 and 8.4.3, as reproduced in a supplier’s published AS9100 quality manual (the standard itself is sold by SAE International): https://sites.google.com/view/pspiqms-001/qp-2-0-purchasing/as9100-purchasing (read 8 November 2026)
DNV, The new edition of the quality management system standard ISO 9001 is released (21 September 2026): https://www.dnv.com/news/2026/new-edition-of-the-quality-management-system-standard-iso-9001-released/ (read 8 November 2026)
Advisera Expert Advice Community, ISO 9001 supplier approval requirements (answer by Carlos Pereira da Cruz, 6 February 2020): https://community.advisera.com/topic/iso-9001-supplier-approval-requirements/ (read 8 November 2026)
Lockheed Martin Missiles and Fire Control, Nadcap eAuditNet registration guide: https://www.lockheedmartin.com/content/dam/lockheed-martin/eo/documents/suppliers/mfc/mfc-quality-nadcap-eaudit-net-registration-guide.pdf (read 8 November 2026)
