Buyer's Guide: Qualifying Metal AM Suppliers for ISO 9001

Verify metal AM supplier qualification by checking ISO 9001 scope, material traceability, and process controls. This guide provides specific criteria to audit vendors.
- Confirm the ISO 9001 certificate covers the specific metal AM processes and alloys used.
- Verify material traceability from mill certificates to final part heat treatment.
- Audit process controls to ensure parameters match the certified qualification files.
- Check post-build inspection records for non-destructive testing and dimensional verification.
- Require clear corrective action protocols for handling out-of-specification builds.
Does the ISO 9001 scope match the requested part?
The first step in metal AM supplier qualification is checking the certificate itself. A valid ISO 9001 certificate indicates a quality management system exists, but the scope section defines what is covered. Some vendors hold certification for powder bed fusion only. Others cover wire arc or electron beam processes. If your part requires laser powder bed fusion of maraging steel, the scope must explicitly include that process.
Review the certificate scope text carefully. It should list the specific materials, if any, or the general process types. If the scope is vague or does not mention your specific alloy family, the certification may not support your quality requirements. Ask for the scope document as a PDF or print copy. Do not rely on a website badge.
Many industrial buyers assume that any ISO 9001 stamp means the same level of control. This is incorrect. The standard sets minimum requirements for documentation and process control. It does not define technical tolerances. Your specific engineering requirements must be verified through the supplier’s internal quality plan.
When a manufacturer states they are “ISO 9001 certified,” they are referring to the management system, not the technical capability. A shop might be certified for managing the paperwork of their facility while lacking the specific engineering controls needed for a high-stress titanium bracket. The scope clause is the legal boundary of their certification. If the scope lists “Additive Manufacturing Services,” you need to verify if that includes your specific alloy. If it lists “Additive Manufacturing, Selective Laser Melting, Al 6061,” you have a stronger baseline.
Check the issue date and expiration date on the certificate. An ISO 9001 certificate is valid for three years, but the underlying system must be audited annually. A certificate issued in 2023 might be expired by 2026 if the supplier did not renew it. Always request a copy of the current certificate and the audit report from the last surveillance audit. The audit report often contains observations or non-conformances that the certificate itself does not show. This gives you insight into the supplier’s current quality posture.
How do you verify material traceability?
Material traceability links the physical powder or feedstock to the final part. For metal additive manufacturing, this link is critical. If a part fails, you need to trace it back to the specific powder lot or bar billet.
Request the mill certificates for the raw material. These documents come from the metal producer and list chemical composition, heat number, and mechanical test results. The supplier should be able to provide these documents for the exact lot used in your build.
Check their powder storage and handling procedures. Powder is hygroscopic and can absorb moisture. Moisture changes the melting behavior and can cause porosity. A qualified supplier controls humidity and has a protocol for sieving or conditioning powder before use.
Review their chain of custody records. From the powder supplier to the machine, to the part, to the final customer, each handoff should be documented. This prevents cross-contamination between different alloys. If you are building a mix of aluminum and titanium parts, the supplier must prove there is no cross-contamination risk.
Traceability is more than just keeping a receipt. It is a digital thread that connects the chemical composition of the powder to the final part number. In a high-reliability environment, such as aerospace or medical, this thread must be unbreakable. If a powder lot is recalled by the producer, the supplier must be able to identify every part built with that lot within hours, not days.
Ask for a sample traceability report for a recent build. It should include the powder lot number, the machine ID, the build date, the operator ID, and the final part serial number. If the supplier cannot provide this quickly, their traceability system is likely manual and prone to error.
Powder handling is a critical control point. If a supplier mixes powders in a shared hopper without cleaning, or if they do not sieve the powder to remove agglomerates, the traceability is compromised. Moisture control is also key. A supplier that stores powder in a dry room or uses a powder conditioning system is demonstrating a higher level of control than one that leaves powder in the open or in a standard cabinet.
What process controls should you audit?
Process controls define how the machine builds the part. For metal AM, this includes laser power, scan speed, layer thickness, and powder bed depth. A qualified supplier uses these parameters based on qualification files.
Ask for their process qualification files. These documents show how they tested a specific alloy on a specific machine. They include the window of parameters that produced acceptable parts. If they are using parameters outside their qualified window, they are running a risk.
Check their machine calibration records. Lasers drift over time. Sensors change. A qualified supplier performs regular calibration and records the results. If the laser power output is 10 percent lower than expected, the parts may not meet density or mechanical specs.
Review their build logs. Every build should have a digital log of the machine settings. This log should be immutable. If a setting is changed during a build, it should be flagged. This creates a digital twin of the manufacturing process.
Process control is the bridge between the material and the final part geometry. The same alloy can produce a brittle part or a ductile one depending on the thermal input. A supplier who uses generic parameters found on the internet or from a different machine model is not providing a controlled process.
Request the process qualification report for the specific alloy and machine model. This document should include test coupons, density measurements, and mechanical test results. It should also define the parameter window, such as laser power between 150 and 200 watts and scan speed between 1000 and 1500 mm/s. If the supplier is operating outside this window, they must have a documented justification and requalification plan.
Machine calibration is often overlooked. Lasers lose power over time. A machine that was calibrated in January might have a 5 percent power drop by October. A qualified supplier performs regular power checks and adjusts their process parameters accordingly. This is a sign of a mature quality system.
Build logs are essential for troubleshooting. If a part fails, the log tells you exactly what settings were used. It also shows if any parameters were changed during the build. A qualified supplier ensures that these logs are secure and cannot be altered after the build is complete.
How are post-build inspections handled?
Post-build inspection is where defects are found. For metal AM, this includes dimensional checking, non-destructive testing, and material verification. The supplier should have a defined inspection plan for each part.
Dimensional inspection usually uses a CMM or a high-resolution scanner. The report should show the actual measurements compared to the drawing tolerances. Do not just accept a pass or fail statement. Ask for the raw data or a detailed report.
Non-destructive testing is critical for internal defects. Common methods include X-ray or gamma ray CT scanning. These images reveal porosity, lack of fusion, and cracks. The supplier should interpret these images and provide a report. If they just scan the part and send the raw files, you are doing their job.
Material verification involves testing the final part. For critical parts, this may include tensile testing on coupons cut from the same build. The results should meet the specified mechanical properties. If the part is for a pressure vessel, the requirements are much stricter.
Inspection is not just about finding defects. It is about verifying that the part meets the design intent. A part might be within dimensional tolerance but still fail due to internal porosity. A qualified supplier has a defined acceptance criterion for each inspection method.
Ask for the inspection plan. It should list which parts require CT scanning, which require X-ray, and which require only dimensional checking. It should also define the acceptance criteria. For example, a part might be acceptable if porosity is less than 2 percent and no cracks are present.
CT scanning is the gold standard for internal inspection. It provides a 3D view of the internal structure. A qualified supplier does not just take a scan. They analyze the scan and provide a report that identifies any defects. They should also provide a 3D model of the part with defects highlighted.
Dimensional inspection is straightforward but critical. A CMM report should show the measured values, the drawing tolerances, and the status. It should not just say “Pass.” It should show the data. If the supplier cannot provide the raw data, they are not giving you the full picture.
What is the supply chain due diligence process?
Supply chain due diligence looks beyond the supplier to the vendors they use. The powder supplier, the machine manufacturer, and the testing lab all affect the final part quality.
Ask who provides the powder. Is it a major producer or a smaller mill? Ask if they have a long-term supply agreement. If the powder supplier changes, the process may need requalification.
Check if the supplier uses third-party testing labs. If so, are those labs accredited? Look for ISO 17025 accreditation. This means the lab’s testing methods are recognized internationally.
Review their corrective action process. If a defect is found, how do they handle it? A qualified supplier has a root cause analysis process. They do not just scrap the part. They find out why it happened and fix the system.
Supply chain control is about ensuring that every input to the process is controlled. The powder is the main input. If the powder is contaminated or has the wrong chemical composition, the part will fail. The machine is the second input. If the machine is not calibrated, the part will fail. The testing lab is the third input. If the lab is not accredited, the data is not reliable.
Ask for the supplier’s approved vendor list. It should include the powder suppliers, the machine manufacturers, and the testing labs. It should also include the audit reports for each of these vendors. A qualified supplier audits their suppliers regularly.
If the supplier changes powder suppliers, they must requalify the process. This is a critical control point. A qualified supplier will not change powder suppliers without a documented requalification plan. They will test the new powder and update their process parameters if necessary.
How do you assess the supplier’s quality culture?
Quality culture is the attitude of the people running the shop. A certified system can exist on paper but fail in practice. Look for evidence of a proactive quality approach.
Visit the facility if possible. Watch how operators handle powder. Do they wear proper PPE? Do they follow the standard operating procedures? Are the machines clean?
Interview the quality manager. Ask them about the last non-conformance they had. How did they handle it? Did they stop the process? Did they notify the customer? Their answer tells you a lot about their commitment.
Check their training records. Operators and engineers need regular training on new processes and safety protocols. A qualified supplier invests in their people.
Quality culture is hard to quantify but easy to observe. It is in the way the operators handle the powder. It is in the way the quality manager responds to a question. It is in the way the engineers document their work.
If the operators are not wearing PPE, the supplier is not taking safety seriously. If the quality manager is defensive, the supplier is not taking quality seriously. If the engineers are not documenting their work, the supplier is not taking traceability seriously.
Criteria for selecting a metal AM supplier
Use this table to evaluate vendors during your qualification process.
| Criterion | What to look for | Why it matters |
|---|---|---|
| ISO 9001 Scope | Explicit mention of metal AM processes and alloys | Ensures the QMS covers your specific requirements |
| Material Traceability | Mill certificates and lot tracking from powder to part | Critical for failure analysis and regulatory compliance |
| Process Qualification | Documents showing tested parameter windows for alloys | Prevents running outside validated limits |
| Inspection Capabilities | CMM access and NDT lab access or accredited partners | Verifies dimensional and internal quality |
| Corrective Actions | Documented root cause analysis and CAPA process | Ensures systemic fixes for recurring defects |
| Supply Chain Controls | Documentation of powder and machine supplier audits | Reduces risk from upstream quality issues |
Decision checklist for buyer approval
Before finalizing a contract with a metal AM supplier, run through this checklist.
- Verify the ISO 9001 certificate is current and in scope.
- Request sample material traceability documents for a recent build.
- Review the process qualification files for your specific alloy.
- Confirm access to NDT results and dimensional inspection reports.
- Review the corrective action procedures for non-conforming parts.
- Audit the supplier’s powder handling and storage facilities.
- Check third-party lab accreditations for any outsourced testing.
- Define the acceptance criteria for the first article inspection.
- Establish the communication protocol for quality deviations.
- Sign the quality agreement and retain copies of all audit records.
Meeting these requirements does not guarantee a perfect part. It guarantees a controlled process. In industrial metal AM, a controlled process is the best defense against failure. Use these criteria to separate serious suppliers from those who are just selling prints.
Frequently asked questions
Can I trust a supplier's website badge for ISO 9001?
No. Website badges are not proof of certification. You must request the actual certificate document to verify the scope and validity dates.
What is the difference between process qualification and material qualification?
Material qualification tests the alloy's properties. Process qualification tests how the machine builds that alloy. You need both for a fully qualified part.
Do I need a third-party lab for NDT?
Not necessarily. The supplier can perform it if they have the equipment and trained staff. However, for critical parts, independent testing adds a layer of objectivity.
How do I handle a supplier who cannot provide mill certificates?
Do not proceed. Without mill certificates, you cannot verify the chemical composition of the powder. This is a major red flag for a qualified supplier.
What if the supplier is ISO 9001 certified but not ISO 13485?
ISO 9001 is the baseline for general industrial parts. If you are making medical devices, you likely need ISO 13485. Check your specific industry requirements.


