Defence & Military (EN)
What certifications does a CNC machine shop need for defense work?
There is no universal list — the contract defines it. ISO 9001 is the near-universal baseline. EN 9100 applies to aerospace and defense programmes, AQAP requirements are imposed contractually in NATO procurement, DIN 2303 covers welding on military products, and ISO/IEC 27001 covers information security. Security clearance and export control are government procedures, not certificates.
The contract decides, not a wish list
In defense work a certificate is not an end in itself. It is shorthand for the question every buyer asks: can this shop deliver reproducibly and prove afterwards how it did so? Which proof is demanded is written in the tender or the frame agreement — not in a general industry rule.
Before investing in an audit it therefore pays to look at the target customers. State procurement bodies argue through AQAP requirements, aerospace and defense system houses through EN 9100, and civil industrial customers are often satisfied with ISO 9001 plus a documented process.
A second point is easily missed: your own certificate is worth little if the supply chain does not follow. Anyone buying in material, heat treatment or coating must pass the required evidence down to those partners and monitor that it arrives.
The main standards at a glance
| Standard | Scope | Typically demanded by |
|---|---|---|
| ISO 9001 | Quality management, sector-neutral | practically every customer, as the baseline |
| EN 9100 (AS9100, JIS Q 9100) | Aviation, space and defense; contains the full text of ISO 9001 | aerospace and defense OEMs and system houses |
| AQAP 2110 | NATO quality assurance requirements for design, development and production | state procurement bodies in NATO contracts |
| DIN 2303 | Welding, brazing and thermal spraying by manufacturing and maintenance companies working on military products | customers buying welded assemblies for defense applications in Germany |
| Nadcap | Accreditation of special processes such as heat treatment, surface treatment and non-destructive testing | aerospace primes, passed down to process suppliers |
| ISO/IEC 27001 | Information security management | programmes with sensitive data and system access |
Requirements that cannot be bought as a certificate
Three demands appear regularly and are not obtained through an audit:
- Security clearance: facility and personnel clearances are granted by national authorities, normally only once a customer or contracting authority sponsors the company for a contract involving classified information.
- Export control: what is expected are internal procedures, a named responsible person and correct classification of the goods. Licences are issued by the national licensing authority, and classification questions belong with specialist legal advice.
- NCAGE code: the NATO identifier lists a company in procurement databases. It is a registration, not a proof of quality.
Pursuing every credential at once burns resources. The workable approach is to build them step by step along concrete enquiries, and to ask the customer early which evidence the contract will actually require. As of July 2026 this remains contract-driven rather than centrally prescribed.
Key points
- There is no legal list of certificates — the contract defines the required proof.
- ISO 9001 is the base layer, EN 9100 and AQAP 2110 the sector-specific additions.
- DIN 2303 concerns shops welding or brazing on military products.
- Clearance, export control and NCAGE are procedures, not certificates.
Related questions
Is ISO 9001 enough to start as a defense subcontractor?
For many parts without a safety or security function it is. ISO 9001 evidences a working quality management system and is accepted by nearly every buyer as a minimum. EN 9100 or AQAP requirements come on top once the programme or the item calls for them.
What is the difference between EN 9100 and AS9100?
They are the regional publications of the same standard, harmonised through the international aerospace quality group. AS9100 is issued in the Americas, EN 9100 in Europe and JIS Q 9100 in Japan. The current content — AS9100 Revision D from 2016, published in Europe as EN 9100:2018 — added product safety, counterfeit part prevention and stronger risk and configuration management.
Can a supplier be certified to AQAP like it is to ISO 9001?
AQAP publications are contractual quality assurance requirements that a customer imposes in the contract, and compliance is verified by the state quality assurance body. Certification bodies do offer AQAP audits, but the decisive document is the contract clause, not a wall certificate.
More questions
Related services
Discuss your part with us
Have a drawing or a 3D model and need a reliable assessment of feasibility, material and lead time? Send us your documents and we will come back to you with a concrete answer.