Skip to content

Practical guide · Quality management

IATF 16949 in plain language: what it adds to ISO 9001 and what an automotive auditor checks

Short answer

IATF 16949 is the quality management standard for the automotive supply chain. It is published by the International Automotive Task Force (IATF), it is built on ISO 9001, and it adds automotive requirements that a supplier must meet to be certified by an IATF recognized certification body.

IATF 16949 asks an automotive supplier to run an ISO 9001 quality system and then go further: prevent defects, cut variation and waste in the supply chain, keep improving, and meet each customer's own added rules. The standard in force is IATF 16949:2016. The IATF has started a second edition and, in a July 2026 notice, planned publication for mid-2027, with dates it calls indicative. A plant that is certified now stays on the 2016 edition until the transition rules for the new one are published, so check with your certification body before you plan around any date.

Last reviewed:

What is IATF 16949 and who needs it?

IATF 16949 is an automotive quality management system standard. It replaced ISO/TS 16949, which the IATF first created in 1999, and the current edition is IATF 16949:2016. The IATF is a group of vehicle makers and their trade associations. It keeps a liaison with ISO so the standard stays aligned with ISO 9001.

The people who need it are suppliers in the automotive chain. A vehicle maker or a tier 1 customer often asks for certification as a condition of supplying parts. The scope covers the manufacturing site and also the support functions that serve it, such as design centres, warehouses, distribution centres and corporate headquarters.

It is not a stand-alone document. It is based on ISO 9001, and an organization has to meet ISO 9001 to be certified to IATF 16949. Many plants add IATF 16949 to an ISO 9001 certificate they already hold. If you do not yet know the base standard, read ISO 9001 in plain language first, because everything on this page sits on top of it.

Which edition applies now, and what is the second edition?

IATF 16949:2016 is the current edition, according to IATF Global Oversight. The IATF announced on 24 October 2024 that it had started the revision of the standard. A stakeholder notice of July 2026 describes the work as Revision 2 and says the aim is a standard that is easier to understand, implement and audit, while avoiding duplication with ISO 9001.

IATF 16949 second edition: the five priority topics and planned timing, from the IATF notice of July 2026
ItemWhat the notice says
Priority 1Simplification, clarity and efficiency, with less variation in how requirements are read
Priority 2Software quality assurance, covering embedded software across its lifecycle
Priority 3Tier N supply chain management, a more consistent risk-based approach to lower-tier suppliers
Priority 4Launch management, a more structured approach to new products, change management and industrialization
Priority 5Customer-specific requirements, better identification and management, and common ones possibly moving into the standard
Planned timingWorking draft and external feedback in 2026, final validation and translation in 2027, publication planned for mid-2027
TransitionThe end of the transition time will be aligned with the end of the ISO 9001 transition

The IATF says these dates are indicative and may be adjusted. The ISO 9001 end date is on the [ISO 9001:2026](/learn/iso-9001-2026) page. Certification bodies work to the IATF Rules for Achieving and Maintaining IATF Recognition, sixth edition, in force since 1 January 2025, so ask your body in writing which edition and which dates apply to your site.

Nothing here changes what you have to do today. If a draft or a consultant's summary of the new edition reaches you, treat it as unconfirmed until it appears on iatfglobaloversight.org.

What IATF 16949 adds to ISO 9001

ISO 9001 sets the frame: context, leadership, planning, support, operation, performance evaluation and improvement. IATF 16949 uses that same frame and asks for more in the places where automotive customers have been hurt before. The standard is paid, so the table gives the areas and not the clause text.

Areas IATF 16949 adds or stresses on top of ISO 9001, and what an auditor looks at
AreaPlain meaningWhat an auditor looks at
Defect preventionStop defects at the cause instead of sorting them out at the end of the line.Process failure analysis, error-proofing, and what happened after the last escape
Variation and wasteReduce spread in the process and loss in the supply chain.Capability studies on important characteristics and how the results were used
Customer-specific requirementsEach customer adds rules of its own that you must meet on top of the standard.A list of every customer's rules, who owns each, and evidence that it is followed
Risk and contingencyPlan for what you do when a supply, a machine or a system fails.A written contingency plan and a record that it was tested
Warranty and field dataLearn from what happens to the product after it ships.Warranty and field failure data in management review and in risk analysis
Supplier controlHold your own suppliers to the same bar.Supplier selection, monitoring and audit records. See supplier quality
Competent auditorsInternal auditors must understand the automotive requirements and the core tools.Auditor qualification records and who audited what

Based on the IATF's description of its standard and on a certification body's comparison with ISO 9001. Contingency planning, risk and warranty are called out as areas of emphasis in the 2016 edition. Read the standard itself, and your customers' rules, before you build procedures from this table.

The core tools: APQP, PPAP, FMEA, MSA and SPC

Auditors expect the automotive core tools to be in use, and IATF auditors must understand them. They are APQP (advanced product quality planning), PPAP (the production part approval process), FMEA, control plans, MSA (measurement system analysis) and SPC (statistical process control). The Automotive Industry Action Group (AIAG) publishes the reference manuals for them. The tools link in a chain, and each feeds the next.

  1. 1

    Plan the launch with APQP

    Phases from concept to production feedback, with a gate at each one. See the APQP guide and the APQP checklist.

  2. 2

    Find the risks with FMEA

    Rate how a failure could happen, how bad it would be and how it would be caught. See FMEA and the PFMEA template.

  3. 3

    Fix the controls in a control plan

    Every characteristic, the method that checks it, the sample and the reaction plan. Use the control plan template.

  4. 4

    Prove the gauges and the process

    Run a gauge R&R study before you trust a measurement, then a capability study on the characteristics that matter.

  5. 5

    Show it to the customer with PPAP

    The submission package that shows the process makes conforming parts. Use the PPAP checklist.

  6. 6

    Keep it in control with SPC

    Watch the important characteristics on charts in production. See the control chart guide.

Customer-specific requirements, the part that trips plants up

IATF 16949:2016 consolidates some earlier customer rules into the standard, and each customer still publishes its own on top. The IATF's own July 2026 notice calls customer-specific requirements one of the most discussed topics in the scheme and a significant challenge for stakeholders. The practical answer is a register: every customer, every rule, one owner each, and a way to show it is met.

Illustrative customer requirements register for a plant with three customers
CustomerRules loggedQualityLaunchLogisticsProduction
Customer A125322
Customer B93321
Customer C72221
Total2810864

Illustrative. Rows: 5 + 3 + 2 + 2 = 12, 3 + 3 + 2 + 1 = 9 and 2 + 2 + 2 + 1 = 7, so 12 + 9 + 7 = 28 rules. Columns: 5 + 3 + 2 = 10, 3 + 3 + 2 = 8, 2 + 2 + 2 = 6 and 2 + 1 + 1 = 4, so 10 + 8 + 6 + 4 = 28. A register like this shows each owner how many rules they carry and lets an auditor pick any rule and ask for the evidence.

Re-read each customer's rules when it issues a new version, and log the date you did. A rule that changed without anyone noticing is a common audit finding.

How to get ready without a binder of procedures

  1. 1

    Be sure of the ISO 9001 base

    Close the gaps against ISO 9001 first, since IATF 16949 depends on it. Run the ISO 9001 internal audit checklist if you have no recent result.

  2. 2

    List your customers and their rules

    Build the register above before anything else. It decides what the rest of the system has to prove.

  3. 3

    Check the core tools on one live part

    Pick a current part and see whether the FMEA, control plan, gauge study and capability study agree with each other and with what the operator does.

  4. 4

    Audit with the IATF checklist

    Use the IATF 16949 internal audit checklist and log every finding as an action. See layered process audits for floor checks between formal audits.

  5. 5

    Agree the rules with a certification body

    Choose an IATF recognized certification body and ask in writing which edition, which Rules and which dates apply.

Common IATF 16949 mistakes

  • Treating the core tools as paperwork for the audit. The FMEA, control plan and work instruction should say the same thing.
  • Running a gauge study once and never again after the gauge is repaired or replaced.
  • Having no list of customer-specific requirements, so each owner finds out about a rule from the customer.
  • A contingency plan nobody has tested. An auditor will ask when it was last used or rehearsed.
  • Closing a customer complaint with retraining alone. See the 8D report template and CAPA for finding the cause.
  • Planning around a rumoured date for the second edition instead of the IATF's own notice.

Go deeper

This page is the short version. These guides cover each part in full.

All our articles on this subject are in the quality management topic.

Free templates and tools

Key terms

Lean glossary

Doing this in LeanSuite

See it on your own lines

Bring the problem you are working on to a 45-minute demo. Or look around with sample data first, or pilot LeanSuite on your own lines for 90 days, with the setup done by our team.

Book a 45-minute demoClick through the interactive demoStart a 90-day pilot

FAQ

Questions about iATF 16949

  1. IATF 16949 is the quality management system standard for the automotive supply chain, published by the International Automotive Task Force. It is built on ISO 9001 and adds automotive requirements such as defect prevention, reduction of variation and waste, and customer-specific requirements.

  2. IATF 16949:2016 is the current edition. The IATF started a second edition in October 2024 and, in a July 2026 notice, planned publication for mid-2027 with dates it calls indicative. The end of the transition is to be aligned with the end of the ISO 9001 transition. Ask your certification body which dates apply to you.

  3. IATF 16949 is based on ISO 9001, and a site has to meet the ISO 9001 requirements to be certified to it. Many plants add IATF 16949 to an ISO 9001 certificate they already hold.

  4. The core tools are APQP, PPAP, FMEA, control plans, measurement system analysis and statistical process control. The AIAG publishes the reference manuals, and IATF auditors are expected to understand them.

  5. They are the extra rules an individual vehicle maker or tier 1 customer adds on top of IATF 16949. A supplier has to meet them and show evidence, so most plants keep a register of every customer's rules with an owner for each.

  6. An IATF recognized certification body audits the site under the IATF Rules for Achieving and Maintaining IATF Recognition, now in the sixth edition. Certification is often a condition of supplying a vehicle maker or a tier 1 customer.

Related guides and tools

More method guides

Or browse the topics, the full library and the lean glossary.

Rather see it on your own problem?

Bring the problem you are stuck on, and we will show you on a call how LeanSuite handles it.

Schedule Demo

Pass it on

We want LeanSuite to be the best place on the internet for lean help. If this was useful, send it to someone on your team or in your network who needs it.