IATF 16949 vs ISO 9001 for Auto Parts Suppliers

Short answer: ISO 9001 is the general quality-management-system standard used in every industry. IATF 16949 is the automotive-sector standard written by the International Automotive Task Force (IATF); it is published as a supplement to ISO 9001 and audited together with it, so an IATF 16949 certificate implies the ISO 9001 requirements as well. For a buyer, IATF 16949 is the stronger signal that a factory runs automotive-grade process controls — but its absence does not on its own mean a factory is a trading company, because IATF says certification is optional for organizations that only make aftermarket replacement parts.

Whatever a supplier claims, the certificate only counts once you have checked it with the body that issued it. This guide explains how.

How are IATF 16949 and ISO 9001 related?

According to the IATF, its first automotive standard, ISO/TS 16949, was created in 1999 "with the aim of harmonizing the different assessment and certification systems worldwide in the supply chain for the automotive sector", and was revised in 2002 and 2009. IATF 16949:2016 cancels and replaces ISO/TS 16949:2009. If a supplier shows you an "ISO/TS 16949" certificate today, it is out of date.

IATF 16949 is not a stand-alone document. The IATF's own FAQ explains that the IATF and ISO "were not able to reach a licensing agreement to publish IATF 16949 in an integrated document", so the standard is used in a two-manual format: ISO 9001:2015 plus IATF 16949:2016. The IATF says it keeps liaison status with ISO "ensuring continued alignment with ISO 9001."

In practice:

• ISO 9001 alone shows that a company has a documented quality management system that a certification body has audited. It is a general standard, not an automotive one, and it is not limited to manufacturers — so on its own it says nothing about whether the holder actually makes the part you are buying.
• IATF 16949 adds automotive-specific requirements on top — the IATF FAQ discusses, for example, risk-based supplier management and controls that keep nonconforming product out of "the unofficial aftermarket". It is aimed at organizations that manufacture automotive parts.

Do aftermarket factories need IATF 16949?

Not necessarily. The IATF answers this directly in its FAQ (number 30): an organization that only manufactures aftermarket replacement parts "is eligible for IATF 16949 certification", but certification "is optional for an organization that manufactures only automotive aftermarket replacement parts and does not manufacture automotive production and/or service parts" — unless an automotive customer requires it.

Two practical consequences for buyers sourcing from China:

1. A factory without IATF can still be a real factory. Many factories that only supply the independent aftermarket hold ISO 9001 only. Use other checks — business license scope, address, product range, sample testing — before you decide (see common quality issues in Chinese auto parts and the sample order checklist).
2. An IATF certificate may not cover the product you are buying. The IATF FAQ (number 31, revised June 2026) deals with facilities that make both OE and aftermarket parts: depending on how production is organized, aftermarket parts may have been outside the audit scope, and the IATF requires the relevant aftermarket parts to be included in the IATF 16949 certification scope no later than 1 January 2028. Read the scope statement on the certificate, not just the logo.

Who issues the certificate — and who does not?

Neither ISO nor the IATF writes certificates for individual factories. ISO says plainly: "ISO does not perform certification or issue certificates ... Certification is performed by external certification bodies, thus a company or organization cannot be certified by ISO." A certificate that claims to be issued "by ISO" is a red flag.

For IATF 16949, certification is carried out by certification bodies that hold a contract with the IATF; the IATF publishes the list of certification bodies under contract, and those whose contract has been terminated, on its website.

How do I verify a supplier's certificate?

1. Ask for the full certificate, not a cropped image. You need the certificate number, the certification body, the legal company name, the site address, the scope statement and the expiry date.
2. Match the company name and address to the business license and to the address you were given for the factory. A certificate issued to a different company or a different city does not cover this supplier.
3. For IATF 16949, use the IATF's Certificate Validity Check, linked from the IATF Global Oversight website (iatfglobaloversight.org), and confirm the certification body is on the IATF's list of bodies under contract.
4. For ISO 9001, ISO recommends verifying accredited certificates through the global database IAF CertSearch (iafcertsearch.org) or directly with the certification body. ISO also notes that accreditation is not compulsory, so a certificate from a non-accredited body is not automatically fake — it just cannot be checked the same way.
5. Check the scope against your product. A brake factory's certificate that covers "brake pads" does not cover the control arms it also offers.

How does this relate to PartzealHQ listings?

Supplier pages on PartzealHQ repeat what each company states on its own public marketplace listing. As explained on the methodology page, we have not obtained or checked certificate originals and have not audited any factory. If a listing mentions ISO 9001 or IATF 16949, treat it as a claim to verify with the steps above. You can browse the supplier directory or start from a part category such as brake pads or control arms.

Sources

• IATF Global Oversight, About IATF 16949:2016 — iatfglobaloversight.org, retrieved November 2026.
• IATF, IATF 16949:2016 Frequently Asked Questions, FAQ 1, FAQ 30 and FAQ 31 (FAQ 31 revised June 2026) — PDF.
• ISO, Certification (sections "ISO does not perform certification" and "How to verify an accredited certification") — iso.org, retrieved November 2026.