What Is the Certificate?
IATF 16949 defines quality management system requirements for automotive production and related service parts. It is applied together with ISO 9001 — it is not a standalone standard but a sector-specific complement on top of ISO 9001. It carries an emphasis on defect prevention, reducing variation, and eliminating waste in the supply chain. The current version is IATF 16949:2016.
Who Needs It?
- Suppliers manufacturing parts for an OEM, directly or from a lower tier
- Manufacturers of automotive service and spare parts
- Providers of special processes such as heat treatment, coating and welding
- Manufacturers aiming to get onto an OEM's supplier list
Is It Mandatory?
Not legally mandatory; effectively mandatory contractually. Automotive manufacturers require an IATF 16949 certificate from their series-production suppliers; getting onto the supplier list without it is not possible in most cases. Certification is carried out under IATF's own rules (Rules for achieving and maintaining IATF recognition), and the scheme's rules are far stricter than ISO 9001's.
Scope of the Standard
- All ISO 9001 requirements form the basis
- Management of product safety and safety-related characteristics
- Risk analysis and contingency plans (including production-interruption scenarios)
- Advanced product quality planning (APQP) and the control plan
- The production part approval process (PPAP)
- Failure mode and effects analysis (FMEA)
- Measurement systems analysis (MSA) and statistical process control (SPC)
- Total productive maintenance (TPM) and machine capability
- Supplier selection, development and monitoring
- The embedded auditor, layered process audits and product audits
- Warranty management and analysis of field failures
- Customer-specific requirements (CSR) — each OEM's own additional requirements
Certification Process
- 1ApplicationThe organisation's field of activity, headcount, number of sites and scope boundaries are determined. The number of audit days is calculated from this information.
- 2Document Review (Stage 1)The management system documentation, scope definition, risk assessment and internal-audit/management-review records are examined; readiness for the on-site audit is assessed.
- 3Certification Audit (Stage 2)It is verified on site that the system is implemented and effective. Findings are classified as major/minor nonconformity or observation.
- 4Closing NonconformitiesThe organisation submits a root-cause analysis and corrective action plan. The certificate is not issued until major nonconformities are closed.
- 5Issuing the CertificateThe certificate is issued after review by an independent decision-maker. The audit team cannot make the certification decision.
- 6Surveillance AuditsA surveillance audit is carried out at least once a year during the certificate's validity. The first surveillance cannot exceed 12 months from the last day of Stage 2.
- 7RecertificationAt the end of three years, the entire system is re-audited; it must be completed before the certificate expires.
Period of Validity
Management system certificates are valid for three years. At least one surveillance audit is carried out per year during this period; the certificate is suspended if surveillance is not carried out. A recertification audit is completed at the end of the third year.
Required Documents
- Trade registry record and operating licence
- The organisation's organisation chart and headcount
- The list of sites/branches within scope
- The management system manual or process documentation
- Internal audit and management review records
- Legal permits, licences and operating documents, if any
Certification Cost
There is no fixed list price; the cost is calculated based on the following variables and provided in writing in the quote.
- The headcount within scope (directly determines the number of audit days)
- The number of sites and branches; whether multi-site sampling applies
- The activity's risk level and process complexity
- The number of standards to be certified — an integrated audit reduces the number of days
- The three-year cycle: certification + two surveillance audits
Accreditation
Management system certification is carried out within the scope of ISO/IEC 17021-1. The certification body is accredited by an accreditation body party to the IAF multilateral recognition agreement (IAF MLA); This agreement establishes a chain of international recognition that ensures that a document issued in one country is accepted in other countries. EUROLAB has internationally recognized accreditation from IAF member accreditation bodies within the scope of ISO/IEC 17021-1.
The scope under which this scheme can be offered varies according to your product and activity; it is confirmed in writing at the quote stage.
Scope and authorisationsRelated Certifications
Frequently Asked Questions
Can I get an IATF 16949 certificate without ISO 9001?
The standard is written to be applied together with ISO 9001; an IATF audit also covers ISO 9001 requirements. A separate ISO 9001 certificate is not mandatory, but meeting ISO 9001's requirements is.
What are customer-specific requirements (CSR), and are they checked in the audit?
They are each OEM's own requirements added on top of IATF 16949, and they are within the audit's scope. Whichever OEM you manufacture for, you are expected to have reflected its CSR document in your system.
Can I choose the certification body freely?
Only certification bodies recognised by the IATF can carry out an IATF 16949 audit. Audit planning, auditor assignment and certificate registration also run through the IATF database; the process is subject to far stricter rules than ISO 9001.



