Supplier Quality: The Practical Guide for Manufacturing and Aerospace

Supplier quality is the closest thing manufacturing has to insurance. Done well, it stops defects at the source — before they consume incoming inspection, generate NCRs, trigger corrective actions, or escape to a customer. Done poorly, it becomes a paperwork exercise that documents failures after the fact instead of preventing them. This guide is written for the supplier quality engineers, commodity managers, and quality leads who actually run the process.

What supplier quality covers

Supplier quality is a function, not a document. It owns every quality-related interaction between a manufacturer and its external suppliers — from selection through production support through end-of-life. The scope typically includes:

• Supplier selection and qualification
• Production Part Approval Process (PPAP) in automotive, First Article Inspection (FAI) in aerospace, or design history file evidence in medical devices
• Incoming inspection strategy and dock-to-stock qualification
• Issuing and closing Supplier Corrective Action Requests (SCARs)
• Supplier scorecards and performance reviews
• On-site supplier audits
• Supplier development and risk management

The objective across all of these is simple: every defect prevented at the supplier is a defect that does not need a containment, an NCR, or a recall downstream.

The supplier lifecycle

Supplier quality follows a predictable lifecycle. Strong programs assign specific deliverables to each phase rather than treating it as a single ongoing relationship.

1. Selection

Commercial and quality teams jointly evaluate candidate suppliers against capability, capacity, financial stability, and certification (ISO 9001, IATF 16949, AS9100, ISO 13485). The output is a short list, not an approval.

2. Qualification

Supplier completes a self-assessment, the manufacturer performs an on-site audit, and the supplier runs a PPAP or FAI for the specific part. The supplier is added to the Approved Vendor List (AVL) with a defined scope (which parts, which processes, which materials).

3. Ramp

First production lots are subject to 100% incoming inspection. The supplier responds to any nonconformances via SCAR. PPM and on-time delivery are tracked from day one.

4. Steady-state production

Inspection transitions to skip-lot or dock-to-stock as performance is proven. Monthly or quarterly scorecard reviews flag emerging issues. Periodic audits (usually annual) confirm the supplier's quality system has not drifted.

5. Development or exit

Suppliers with chronic issues enter formal development plans or are phased out. Strategic suppliers with a strong track record may earn preferred status, reduced inspection, and longer-term contracts.

Qualification, PPAP and FAI

Qualification is the single most important phase for preventing downstream defects. The deeper the qualification, the fewer the surprises in production.

PPAP (Production Part Approval Process) is the automotive standard, defined by AIAG. It has five submission levels, with Level 3 the typical default. A PPAP package includes design records, PFMEA, control plan, process flow, dimensional and material results, capability studies, gage R&R, sample parts, and a Part Submission Warrant (PSW).

FAI (First Article Inspection) is the aerospace equivalent, defined by AS9102. It focuses on dimensional, material, and special-process verification for the first production-intent article. FAI is required again whenever the design, process, or sub-tier supplier changes.

For both, a strong approval is one where the supplier produces evidence — measured data, signed records, traceable samples — not narrative. The most common failure mode is approving a PPAP or FAI with open issues "to be closed later." They almost never close.

Incoming inspection

Incoming inspection is the last opportunity to catch a supplier-caused defect before it enters production. The inspection strategy should match the supplier's demonstrated performance, not be a blanket policy.

• 100% inspection — new suppliers, new parts, post-SCAR ramp-back, or safety-critical characteristics.
• AQL sampling — proven suppliers on stable parts. ANSI/ASQ Z1.4 is the standard sampling plan; tighten or loosen based on lot history.
• Skip-lot or dock-to-stock — suppliers with sustained zero-defect performance, usually after a minimum of 10-20 consecutive accepted lots.

Every reject at incoming should generate an NCR and trigger a SCAR if the issue is repeatable or significant. Rejects that are silently sorted and the good ones used create a permanent blind spot in the supplier scorecard.

The SCAR process

The Supplier Corrective Action Request is the working tool of supplier quality. It formalizes the expectation that the supplier — not the customer — owns the investigation, the fix, and the proof the fix worked.

A typical SCAR flow:

1. Issue the SCAR with a clear problem statement, evidence (photos, measurements, failed samples), and required response dates.
2. Supplier returns initial response within 24-48 hours: containment scope (lots, locations, quantities) and an initial corrective action.
3. Supplier returns root cause analysis within 14 days, with both occurrence and detection causes.
4. Supplier returns the full corrective action plan within 30 days, mapped to root causes, with owners, dates, and evidence.
5. Customer verifies implementation evidence.
6. Effectiveness check at 60-90 days. SCAR closes only when zero recurrence is demonstrated.

The SCAR is also the input to the supplier's scorecard. Response time, response quality (was the root cause real or just a restated symptom?), and effectiveness (did the defect return?) all feed the supplier's standing. See the SCAR template guide for the structure and the SCAR process guide for the full workflow.

Scorecards and PPM

A scorecard turns supplier performance into a number that procurement, engineering, and quality can all act on. The metrics that matter are usually:

• Defective PPM — defective parts per million received. Calculated lot by lot, rolled monthly.
• On-time delivery — percentage of lines received within the agreed window.
• SCAR response time — average days from issue to acceptance, broken down by stage.
• SCAR response quality — percentage of SCARs accepted on first submission.
• PPAP/FAI first-pass yield — percentage of submissions accepted without rework.
• Audit findings — open findings from the most recent audit, weighted by severity.

A weighted composite gives the supplier a single tier (A/B/C or equivalent) that drives inspection level, business allocation, and development priority. See the supplier scorecard template guide for the structure and weighting most programs use.

Supplier audits

Audits confirm that the supplier's quality system is actually running the way the supplier said it was. Three common types:

• System audit — full QMS review against ISO 9001, IATF 16949, AS9100, or ISO 13485. Usually a 1-3 day visit.
• Process audit — focused on a specific process (e.g. heat treat, anodizing, SMT line) using a layered process audit (LPA) checklist.
• Product audit — full inspection of a finished product against print and specification.

Audits should be planned annually, more often for new suppliers or after a significant escape. Use a structured checklist so results are comparable across suppliers and across years — see the supplier audit checklist guide.

Supplier development

When a supplier is strategically important but underperforming, the answer is rarely "find a new supplier." Switching is expensive, slow, and risky in a qualified supply base. Supplier development is the structured alternative: define the performance gap, agree a joint plan with owners and dates, and review monthly until the gap closes.

Typical interventions include joint root cause analysis on chronic issues, on-site engineering support, training in 5 Whys or 8D, control-plan rebuilds, and capital-equipment recommendations. The most effective programs treat development as a contract, not a request — with measurable exit criteria.

Standards that govern supplier quality

Every major quality standard requires control of externally provided products, processes, and services. The specific clauses:

• ISO 9001:2015 — clause 8.4 Control of externally provided processes, products and services.
• IATF 16949:2016 — clause 8.4 plus extensive supplier-specific requirements (supplier QMS development, second-party audits, sub-tier management).
• AS9100D — clause 8.4 plus enhanced requirements for counterfeit prevention, special process control, and supplier flow-down.
• ISO 13485:2016 — clause 7.4 with explicit risk-based supplier evaluation requirements.
• FDA 21 CFR 820.50 — Purchasing controls for medical device manufacturers.

FAQ

What does supplier quality engineering do?

Supplier quality engineering owns supplier qualification, PPAP or FAI approval, incoming inspection strategy, SCAR issuance and closure, supplier scorecards, audits, and supplier development for chronic or strategic issues. See supplier quality engineering for the role detail.

What is the difference between a SCAR and an NCR?

An NCR (nonconformance report) is the internal record of a defect found at incoming, in process, or in finished goods. A SCAR is the request issued to a supplier requiring containment, root cause, and corrective action for a supplier-caused defect. One supplier-caused NCR typically triggers one SCAR, but multiple NCRs with the same root cause can share one SCAR.

How long should a SCAR take to close?

Initial response and containment within 24-48 hours, root cause within 14 days, full corrective action plan within 30 days, and effectiveness verification at 60-90 days. These align with the automotive 8D timeline and are common across aerospace and medical device programs.

What is PPM in supplier quality?

PPM is defective parts per million — the standard supplier quality defect metric. Calculated as (defective units / total units received) × 1,000,000. Reported monthly and rolled quarterly. Best-in -class suppliers in automotive run below 50 PPM; aerospace targets are often below 10 PPM.

What is the relationship between supplier quality and CAPA?

Supplier-caused issues flow into the same CAPA system as internal nonconformances. The SCAR is the supplier-facing instrument, but the customer's CAPA record holds the full history — source NCR, SCAR, supplier response, customer verification, and effectiveness data — as the auditable trail.