IATF 16949 records a component supplier must keep

An auditor samples. They pick a part number, then follow it from the customer drawing to the shipping label. Every step needs a record that matches the plan.

The standard separates documented information you maintain, such as procedures and control plans, from records you retain, such as inspection results and audit findings. Know which is which. Your quality manual should list the retention period for each record type, and customer-specific requirements can lengthen it.

Keep the list short enough to search. A record nobody can retrieve within minutes counts as missing on audit day.

The control plan is the spine. It names each characteristic, the method, the sample size, the frequency and the reaction plan. Operators then record readings on check sheets, and those sheets are the evidence that the plan was followed.

Keep first-off and last-off approvals for each run, setup verification sheets and tooling records. For critical characteristics, keep the process capability data. Link every lot to a traceability record so a customer complaint can be traced to raw material heat numbers and machine.

Changes need a trail as well. A new fixture, a revised drawing or a different material source should leave a signed change record and, where the customer asks, a fresh submission.

Every gauge named in a control plan needs a calibration record. The record shows the gauge number, the last and next due dates, the result found and the reference standard used. An overdue gauge puts every part it checked in doubt.

Measurement system analysis sits alongside. Gauge R&R studies, bias and linearity checks show whether the gauge can tell good parts from bad ones. Repeat them when a gauge is repaired or the tolerance changes.

Suppose a micrometer is found out of tolerance. The auditor then wants to see what you did next. Which lots did it touch? Who ordered re-inspection? That decision is a record too.

A customer complaint or an internal failure should open a corrective action with containment, root cause, action and a verification date. Eight-discipline reports are the usual format. Closing a report without a check weeks later is a common finding.

Internal audits need a plan, auditor competence records, findings and follow-up. Layered process audits at the line add another set of dated checks. Management review minutes tie these together.

Approved supplier records matter too. Keep the evaluation, the approval status, the certificate copies, the incoming inspection results and any scorecards for each outside processor, such as a heat treater or plating shop.

Paper binders fail in the same way each time. A page is signed but not filed, a due date passes unseen, or two versions of a plan sit on two desks. Software removes those gaps by treating each record as a dated entry tied to a part, a gauge, a supplier or a person.

Look for reminders on calibration and audit due dates, a link from each corrective action to the lot and customer complaint, and a single place for control plan revisions. Role-based sign-off shows who approved what and when.

Pick one record type this week and trace it end to end. Calibration is a good start: list every gauge, its due date and where its last certificate sits.