Compliance / Assurance Standard

IATF 16949 — Automotive Quality Management System Standard

IATF 16949 framework badge
Summarize with
ClaudeChatGPTPerplexityGoogle AI Mode
In this article
At a Glance
IATF 16949:2016
  • Classification
    Category
    Compliance / Assurance Standard
    Domain
    Quality & Safety
    Framework Family
    ISO Industry Standards
  • Regulatory Context
    Type
    Standard
    Legal Instrument
    Standard
    Sector
    Transportation Sector
    Industry
    Automotive
  • Region / Publisher
    Region
    Global
    Region Detail
    International
    Publisher
    International Automotive Task Force (IATF)
  • Versioning
    Version
    IATF 16949:2016, 1st edition (1 October 2016)
    Effective Date
    October 1, 2016 (ISO/TS 16949:2009 certificates not valid after September 14, 2018)
    Issue Date
    October 1, 2016
  • Adoption
    Adoption Model
    Certification
    Implementation Complexity
    High
  • Official Reference
License Information

License included / downloadable: No

IATF 16949:2016 is a paid document sold through the IATF member associations and their distributors (AIAG, ANFIA, IATF France, SMMT, VDA QMC and others), and ISO 9001:2015 is bought separately from ISO. The IATF publishes its Sanctioned Interpretations and FAQs free of charge. The standard text is not included with the platform.

Framework text is licensed by its publisher and is included only where stated above.

Official Resources
IATF publications: IATF 16949:2016, Rules and Auditor Guide
The IATF's table of current editions and where to buy them from member associations.
IATF recognized certification bodies under contract
The IATF's list of certification bodies authorized to conduct IATF 16949:2016 certification.
IATF 16949:2016 frequently asked questions
The IATF's FAQs that explain existing IATF 16949:2016 requirements, clause by clause.
About IATF 16949:2016
The IATF's overview of how IATF 16949:2016 replaced ISO/TS 16949:2009.
Key takeaways
  • IATF 16949:2016 is the automotive quality management system standard, read together with ISO 9001:2015.
  • Its first edition appeared October 1, 2016 and replaced ISO/TS 16949:2009, whose certificates stopped being valid after September 14, 2018.
  • Only IATF-recognized certification bodies can certify to it, under the Rules for Achieving IATF Recognition, 6th Edition.
  • An IATF communiqué of July 2026 plans a second edition for mid-2027; until then the 2016 edition plus Sanctioned Interpretations and FAQs apply.
  • SmartSuite holds the customer-specific requirements, supplier risk analysis, audit cycle, and contingency tests with owners and evidence for each clause.

Overview

IATF 16949:2016 is the automotive quality management system standard published by the International Automotive Task Force (IATF). Its first edition appeared on 1 October 2016, it cancels and replaces ISO/TS 16949:2009, and it adds automotive requirements to ISO 9001:2015 for organizations that make automotive production and service parts. Certificates to ISO/TS 16949:2009 stopped being valid after 14 September 2018.

The IATF is a group of vehicle manufacturers, including BMW Group, Ford, General Motors, Mercedes-Benz Group, Renault Group, Stellantis, Volkswagen and Volvo Group, with their national industry associations AIAG, ANFIA, FIEV, SMMT and VDA. IATF 16949 is published as a separate manual that is read together with ISO 9001:2015, because the IATF and ISO could not agree a license for one integrated document (FAQ 1). Only IATF-recognized certification bodies can certify to it, under the Rules for Achieving IATF Recognition, 6th Edition, dated 1 January 2025.

The standard is open for revision. An IATF stakeholder communiqué of July 2026 sets out five priorities for a second edition and plans publication for mid-2027, with indicative dates. Until then the 2016 edition, together with the IATF Sanctioned Interpretations and FAQs, is the basis for certification.

Why does it matter?

Customers and certification bodies judge a site against the 2016 edition plus the IATF's interpretations, and many of its clauses point back to what the customer specifies. The standard turns automotive customer expectations into auditable requirements for product safety, regulatory evidence, supplier control and continuity.

Key benefits include:

  • Customer requirements are listed

Clause 7.5.1.1 puts the customer-specific requirements that apply into the quality management system documentation, and the IATF's vehicle manufacturer members publish their own requirements for use with the standard.

  • Product safety has its own clause

Clause 4.4.1.2 covers product and manufacturing process characteristics that affect the safety performance of the final assembly, including those a customer defines.

  • Regulatory evidence reaches suppliers

Clauses 8.4.2.2 and 8.6.5 require the organization to confirm that purchased products meet the statutory and regulatory requirements of the countries involved, and to check traceability on the supplier's records.

  • Continuity plans must be tested

Clause 6.1.2.3 requires contingency plans for essential manufacturing and infrastructure equipment, and the IATF explains in FAQ 29 what a cyber-attack means for contingency plan testing.

  • Every manufacturing process gets audited

Clause 9.2.2.3 sets a three-year cycle in which all manufacturing processes are audited, with higher frequency for riskier processes (FAQ 28).

How does it work?

IATF 16949:2016 follows the clause structure of ISO 9001:2015 and adds automotive clauses under it, for example 4.4.1.2 product safety, 6.1.2.3 contingency plans, 7.1.5.1.1 measurement system analysis, 8.3.2.3 products with embedded software, 8.5.1.5 total productive maintenance, 8.7.1.7 nonconforming product disposition and 9.2.2 internal audits. Section 3 holds automotive terms such as periodic overhaul.

The IATF keeps the standard consistent through Sanctioned Interpretations and Frequently Asked Questions. Sanctioned Interpretations 27 to 30 were issued in November 2025, and the IATF 16949 FAQs run to number 31, with FAQ 31 revised in June 2026. The IATF describes an FAQ as an explanation of an existing requirement.

A site is certified by an IATF-recognized certification body, whose auditors follow the IATF Auditor Guide, 5th Edition, January 2025, and whose work the IATF Oversight Offices witness. Clients can check a certificate on the IATF Certificate Validity Check page.

Key Elements

  • Product safety and regulatory conformity (4.4.1.2, 8.4.2.2, 8.6.5)

The organization identifies safety characteristics and controls, asks the customer for the countries of destination, gets evidence from suppliers that their products meet the applicable rules and checks lot or batch traceability against that evidence before release.

  • Customer-specific requirements (7.5.1.1)

The quality management system documentation lists the customers whose requirements apply. The organization does not have to convert them into the IATF clause format.

  • Measurement systems and laboratories (7.1.5.1.1, 7.1.5.3.2)

Measurement system analysis can use a representative instrument for a gauge family. Calibration certificates from an external laboratory must carry the mark of a national accreditation body for ISO/IEC 17025.

  • Embedded software and supplier risk (8.3.2.3, 8.4.2.4.1)

Software gets the same rigor as hardware, and the IATF points to Automotive SPICE and CMMI for assessing capability. Second-party audits depend on a documented supplier risk analysis.

  • Production, maintenance and nonconformance (8.5.1.5, 8.5.6.1.1, 8.6.2, 8.7.1.7)

Equipment maintenance follows the Total Productive Maintenance clause, alternative process controls are reviewed after use, layout inspection means measuring all dimensions on the design record, and nonconforming product is rendered unusable before disposal.

  • Contingency plans and audits (6.1.2.3, 9.2.2.3, 9.2.2.4)

Contingency plans are risk-based, reviewed and tested. Manufacturing process audits cover every process within three years, and product audit frequency follows risk and complexity.

What does it cover?

IATF 16949:2016 applies to organizations that manufacture automotive production and service parts, as supplemental requirements to ISO 9001:2015 (clause 1.1). Certification is optional for an organization that makes only automotive aftermarket replacement parts, unless an automotive customer requires it (FAQ 30). An organization is product design responsible unless it receives a fully defined engineering specification from its customer (FAQ 25).

What are its objectives?

The IATF states four purposes for its work.

Develop consensus on fundamental quality system requirements, mainly for direct suppliers of production materials, product or service parts and finishing services.

Develop policies and procedures for a common third-party certification scheme that is consistent worldwide.

Provide training that supports IATF 16949 and the certification scheme.

Establish formal liaisons with appropriate bodies; the IATF keeps liaison status with ISO to stay aligned with ISO 9001.

Framework in Context

ISO/TS 16949 began in 1999 and had second and third editions in 2002 and 2009. IATF 16949:2016 replaced ISO/TS 16949:2009 and includes a number of consolidated customer-specific requirements. In March 2026 the IATF formed IATF AISBL, a Brussels-registered non-profit, with no effect on existing certificates. The IATF Auditor Guide, 5th Edition (January 2025), and the Rules for Achieving IATF Recognition complete the scheme around the standard.

Common Framework Mappings

IATF 16949 is often mapped to other quality, safety, and process-focused frameworks to simplify automotive compliance, improve risk management, and ensure alignment with sector-wide standards and regulations.

Mapped frameworks include:

Advanced Product Quality Planning (APQP)

Automotive SPICE (ASPICE)

ISO 14001 — Environmental Management Systems

ISO 26262 — Functional Safety for Road Vehicles

ISO 45001 — Occupational Health and Safety Management Systems

ISO 9001:2026

Production Part Approval Process (PPAP)

VDA 6.3

SMARTSUITE

How SmartSuite Supports IATF 16949

SmartSuite provides the system for managing controls, evidence, mappings, assessments, and reporting.

Use Compliance Management, Internal Audit Management and Third Party Risk Management to hold the customer-specific requirements, supplier risk analysis, audit cycle and contingency tests that IATF 16949:2016 asks a site to show, with owners and evidence for each clause.

Customer-Specific Requirements Register

List each customer whose requirements apply (clause 7.5.1.1) and link each requirement to the control and owner that meets it.

Product Safety and Regulatory Evidence

Record safety characteristics, the countries of destination from the customer and supplier conformity evidence (4.4.1.2, 8.4.2.2, 8.6.5).

Supplier Risk and Second-Party Audit Plan

Score suppliers on certification status, commodity complexity, launches and quality issues, and schedule second-party audits from the result (8.4.2.4.1).

Process and Product Audit Schedule

Plan manufacturing process audits so every process and shift is covered in the three-year cycle, plus product audits by risk (9.2.2.3, 9.2.2.4).

Contingency Plan Testing

Keep the risk analysis, alternative supply measures and test records for contingency plans, including cyber-attack scenarios (6.1.2.3).

Nonconformance and Alternative Control Records

Track nonconforming product disposition and rendering-unusable evidence (8.7.1.7) and reviews of alternative process controls (8.5.6.1.1) in linked workflows.

Related frameworks

ISO 9001:2026

ISO 9001:2026 sets requirements for a quality management system and adds quality culture and ethical behavior. ISO published it on September 16, 2026, replacing the 2015 edition.

ISO 13485:2016

ISO 13485:2016 specifies quality management system requirements for organizations in the medical device life-cycle and is the basis of the FDA's QMSR and the EU harmonized standard.

FAQ

Frequently Asked Questions For IATF 16949 (Automotive Quality Management System)

It cancels and replaces ISO/TS 16949:2009. The IATF's transition strategy says certificates to ISO/TS 16949:2009 were no longer valid after 14 September 2018, and that after 1 October 2017 audits were conducted only to IATF 16949.

The IATF and ISO could not agree a licensing arrangement to publish one integrated document, so the IATF published a two-manual format (FAQ 1). IATF 16949:2016 supplements ISO 9001:2015 with automotive requirements, and the IATF keeps liaison status with ISO to stay aligned.

Only IATF-recognized certification bodies are authorized to conduct IATF 16949:2016 certification activity. They work under the Rules for Achieving IATF Recognition, 6th Edition, dated 1 January 2025, and the IATF publishes the list of certification bodies under contract.

Certification is optional for an organization that makes only automotive aftermarket replacement parts and no production or service parts, unless an automotive customer requires it (FAQ 30). To be certified, the organization must meet all the requirements of the standard.

Yes. IATF Stakeholder Communiqué SC-2026-005 (July 2026) names five priorities: simplification and clarity, software quality assurance, Tier N supply chain management, launch management and customer-specific requirements. Publication is planned for mid-2027, the dates are indicative, and the end of transition will align with the end of the ISO 9001 transition.

Put this framework to work in SmartSuite

Manage controls, risks, evidence, and audits in one platform designed for modern governance, risk, and compliance.