ISO 9001:2015 governs general quality records, while IATF 16949:2016 expands the automotive requirement set and adds at least 18 record categories beyond the ISO baseline [S1][S4][S6].
IATF 16949 certification covers both standards for eligible automotive suppliers, while mixed operations can hold ISO 9001 for the complete business and IATF 16949 for automotive production [S2][S4].
Scope and certification eligibility
ISO 9001:2015 applies to organizations of any size, industry, product, or service, whereas IATF 16949:2016 applies to automotive supply-chain organizations and includes the ISO 9001 requirements [S1][S4]. IATF 16949 is an extension, not an independent substitute for ISO 9001, and cannot be implemented or certified on its own [S2][S4].
Eligibility has three concrete gates: the organization must produce materials incorporated into finished vehicles, hold an active automotive customer agreement, and possess 12 months of documented production data [S4]. Automotive-only production may be assessed directly against IATF 16949, while a mixed operation can use combined ISO 9001 and IATF 16949 certification, with IATF 16949 restricted to automotive operations [S4].
Digital-record control comparison
IATF 16949:2016 extends ISO 9001 by introducing automotive-specific requirements and acts as an extension rather than a standalone certification.
On record depth, IATF 16949:2016 adds at least 18 mandatory record categories to the ISO 9001:2015 baseline [S6]. On integration, ISO 9001 supports controlled documented information, while IATF 16949 requires additional automotive evidence linking processes, suppliers, production, and customer requirements [S1][S4]. On lifecycle scope, ISO 9001 applies generally, while
Traceability and production-history evidence
ISO 9001 certification remains valid evidence of a general QMS, but that certificate does not demonstrate compliance with the added IATF record requirements [S4].
The 12-month production-history requirement is a certification eligibility condition, not merely a document-count rule [S4].
Supplier, CSR, and risk records
Audit trails, retention, and system design
Do not treat a scanned PDF archive as equivalent to a search-and-link QMS dataset. ISO 9001:2015 permits organization-determined documentation, and
Where each standard fits
ISO 9001:2015 is the right baseline for a mixed-industry manufacturer, a service organization, or an automotive supplier without eligible certification scope. It provides the general process-based QMS for customer and stakeholder requirements [S1][S4]. IATF 16949:2016 is the automotive-sector-specific quality management standard that builds on ISO 9001 by introducing automotive-specific requirements.
For an automotive supplier, do not choose between the standards as mutually exclusive systems. Build one controlled digital QMS, map ISO 9001 records into it, then add the IATF-specific traceability, CSR, supplier, product-safety, risk, and production-history records. IATF 16949 cannot be certified alone, while an ISO 9001 certificate by itself does not establish automotive qualification [S2][S4].
Implementation criteria and audit evidence
A practical acceptance test is whether an auditor can trace a customer requirement to the responsible process, its controlled records, approvals, production history, supplier controls, risk inputs, and corrective actions. IATF eligibility requires production materials used in finished vehicles, an active automotive client agreement, and 12 months of documented production data [S4].
The governing editions remain ISO 9001:2015 and IATF 16949:2016 for the requirements described here. Customer-specific waivers can apply to specified elements, but waivers do not remove the need to document the resulting QMS [S7]. Track the next customer requirement audit, CSR change, record-retention rule, and IATF revision communication as control signals; an anticipated alignment with ISO 9001:2026 is a planning consideration, not a replacement for the certification basis [S3].