Skip to main content
GullySystem
A practical guide

IATF 16949 records for suppliers: PPAP, control plans and 8D

Ganesh HSStrategy and Technology, GullySystem
Practical advice · 4 min read

In this guide 6 sections
The short answer

Under IATF 16949, a supplier’s quality records all hang off one part number and revision: the PPAP package, FMEAs, control plan, inspection data, 8D reports and customer scorecards. A custom system links them to that key, so an auditor or a complaint finds the current set in minutes.

One part number and revision anchors everything

Open any customer complaint and the first question is the same. Which part, which revision, which batch? If the answer lives in four folders, the response is slow, and customers read slowness as weak control.

Treat the part number with its drawing revision as the parent record. Everything else is a child. The PPAP, the process flow, the PFMEA, the control plan, the gauge list and the inspection plan each carry that key and their own approval date.

When the customer raises a drawing revision, every child record is flagged as stale until someone reviews it.

  • Drawing and revision with customer approval date
  • Process flow and PFMEA
  • Control plan with characteristics and methods
  • Gauge list and calibration status
  • PPAP submission level and sign-off

What the PPAP package holds

A PPAP package is a bundle of evidence. It usually includes design records, dimensional results, material and performance test results, capability studies, measurement system analysis and the part submission warrant. The customer’s level of submission decides how much of it you send.

The practical problem is staleness. A capability study from the first run says little about parts made two years later. Keep the date, the sample size and the machine on every study. Then the reader can judge.

Store the approved package as a locked set, with the part submission warrant, the dimensional report and the material certificates side by side. Revisions create a new set rather than overwriting the old one.

Control plans and FMEAs must agree

The control plan should follow from the PFMEA. A high-severity failure mode with no matching control is a gap an auditor will find. A control with no failure mode behind it is waste.

Link each characteristic on the control plan to the failure mode it guards, the gauge used, the sample frequency and the reaction plan. When a line operator logs a result outside limits, the system shows the reaction plan on the same screen.

Changes to a tool, a machine or a supplier should trigger a review of both documents, not only the one someone remembered.

  • Characteristic, specification and tolerance
  • Linked failure mode and severity
  • Gauge, method and sample size
  • Reaction plan and responsible role

8D reports and customer scorecards close the loop

An 8D report starts with a complaint number and ends with prevented recurrence. In between sit containment, root cause, corrective action and verification. Every step names a responsible engineer and a due date, and each should point back to the control plan or FMEA line that changed.

Customer scorecards show how you are judged: delivered quality in parts per million, delivery performance, open complaints and special status. Pull those numbers in beside your own, so quality reviews start from one table.

Trending complaints by part, defect type and machine often shows a pattern before the customer notices. A cluster on one die or one fixture points to tooling. Look there first.

What an audit actually tests

Auditors follow a thread. They pick a part, ask for its current control plan, check the gauges named in it, and then ask for the last complaint and its 8D. A system that returns that chain on one screen saves a lot of nervous searching.

Before building anything, pick three live parts and time how long it takes to assemble their records today. That list of delays is the specification. Add one line per retrieval: who looked, where, and what was missing.

Part record completeness sheet

A one-page matrix with one row per live part number and revision. Columns cover PPAP date and level, PFMEA date, control plan date, gauge calibration status, last capability study, open 8D count and scorecard status, each marked current, stale or missing.

Open a blank worksheet to print

Questions owners ask

Does IATF 16949 require specific software?

No. It requires controlled, retrievable records. A system is simply a reliable way to keep documents current, linked and traceable.

How often should a control plan be reviewed?

Whenever a change affects the process or the product, and after any complaint or nonconformity linked to it. Set a calendar review as a backstop.

Can spreadsheets and folders still work?

For a few parts, yes. Trouble starts when revisions multiply and nobody can say which copy is the approved one.

Browse all guidesBack to top ↑
Next step

Have a specific situation to work through?

This article covers the general case. Tell us what you’re actually dealing with and we’ll respond directly.

Share Your Requirements