Does ISO 9001 mean my 3D printed parts will be accurate?

No. ISO 9001 certifies that a shop has a documented quality management system and follows it — that work instructions exist, that measuring equipment is calibrated on a schedule, that nonconformities get recorded and corrected. It says nothing about what tolerance the shop can hold on your geometry. A certified shop with a documented process can be consistently mediocre and still pass its audit. Accuracy is a part-level question, answered by a first-article inspection report against your drawing, not by a certificate hanging in reception.

How do I check that a certificate is real?

Ask for a PDF of the certificate itself, not a logo on a website. Read three things on it: the registrar that issued it, the accreditation mark, and the scope statement with the site address. Then confirm the registrar is accredited by a recognised body — ANAB in the US, UKAS in the UK — and look the company up in that registrar's public directory. For AS9100, certified suppliers are recorded in the IAQG OASIS database. Check the expiry date too; certificates run on a three-year cycle with annual surveillance audits, and lapsed ones stay on websites for years.

Is ITAR a certification?

No, and treating it as one is the most common mistake in this area. ITAR compliance is not audited or awarded by anybody. A company that manufactures or exports defense articles on the US Munitions List registers with the State Department's Directorate of Defense Trade Controls, pays an annual registration fee, and is then responsible for its own compliance program — access controls, US-person restrictions on who touches the data, technical data handling. There is no ITAR certificate to verify. What you can ask for is the registration confirmation, a written compliance program, and how they segregate controlled technical data.

Do I need a certified provider for a prototype?

Almost never. For form-and-fit prototypes, jigs, fixtures, display models and internal test parts, a certification requirement adds cost and lead time and buys you nothing you will use. What matters on those jobs is turnaround, communication and whether the shop tells you when your design will not print well. Certification becomes worth paying for at the point a part enters a regulated product, a qualified assembly, or a supply chain where your own customer flows the requirement down to you in writing. If nobody has asked you for it, you do not need it.

What should I ask for instead when no certification applies?

Ask for the evidence, not the badge. A certificate of conformance for the build, material lot traceability with the supplier's data sheet and batch number, a first-article dimensional report on the features you care about, and a written statement of which machine and parameter set the job ran on. Those four artefacts give you most of what a quality system would have produced, on a job-by-job basis, from a shop that has never been audited. Agree them before the purchase order, because they are cheap to produce during the build and expensive to reconstruct afterwards.

Are there certifications specific to additive manufacturing?

Yes, and they are newer than most buyers realise. The ISO/ASTM 52900 family covers additive manufacturing directly: 52901 sets out what a purchase order for an AM part should specify, 52920 defines requirements for qualifying an industrial AM production site, and 52930 covers installation, operation and performance qualification of the machines themselves. A provider working to 52920 has had its additive process audited as an additive process, rather than inheriting a generic quality system written for machining. Ask whether their ISO 9001 or AS9100 scope explicitly names additive manufacturing.

3D Printing Service Certifications: ISO 9001 to ITAR

Somebody in procurement has asked whether your 3D printing supplier is certified, and the honest answer is that 3D printing service certifications are widely misunderstood on both sides of the purchase order. Buyers ask for ISO 9001 when they mean "will this part be right." Shops advertise standards they are compliant with rather than certified to. And the one requirement people treat as a certification — ITAR — is not one at all. This guide sorts out which certificates exist, what each one actually promises, how to verify a claim in about five minutes, and when the correct answer is that your job does not need any of them. When you are ready to source, browse the 3D printing provider directory.

What a Certificate Actually Certifies

Every quality standard in this article certifies a system, not a part. An ISO 9001 audit asks whether the shop has documented procedures, whether it follows them, whether its calipers and CMM are calibrated on a schedule, whether nonconformities are recorded and closed out, and whether management reviews the results. An auditor from the registrar samples the evidence for that on a three-year cycle, with a surveillance audit each year in between.

None of that inspects your part. A certified shop can produce a part that is out of tolerance, and as long as it detects, documents and dispositions the nonconformity, its certificate is not at risk. This is not a criticism of the standard — a shop that reliably catches its own errors is genuinely more valuable than one that does not — but it changes what you should expect. Certification tells you the shop is repeatable and traceable. Whether it can hold ±0.1 mm on a thin-walled housing is a separate question, answered by a first article and the reasoning in tolerances and accuracy in 3D printing.

The Certifications That Come Up, and Who Needs Them

Standard	What it is	You need it when
ISO 9001:2015	The general quality management system standard	Your own customer or QMS requires certified suppliers; the default baseline for production work
AS9100 Rev D	ISO 9001 plus aerospace requirements — configuration control, counterfeit parts, first-article inspection	The part flies, or sits in an aerospace supply chain that flows the requirement down
ISO 13485:2016	QMS for medical device manufacture	The part is or becomes part of a medical device, including contract manufacture of components
IATF 16949	Automotive QMS, built on ISO 9001	Production parts for an OEM or tier supplier; rarely required for automotive prototypes
Nadcap	Accreditation of special processes — heat treatment, NDT, welding, and increasingly additive	A prime contractor names it; almost always a flow-down, never a buyer's own idea
ISO/ASTM 52920	Qualification requirements for industrial additive manufacturing sites	You want the additive process itself audited, not a generic system that happens to cover it
ISO 27001	Information security management	Your files are the sensitive asset — unreleased product geometry, defense drawings, client data
ITAR registration	Registration with the US State Department (DDTC), not a certification	The part or its technical data is on the US Munitions List
FDA establishment registration	Listing with FDA as a device establishment	The provider manufactures a finished device or is named in your submission
CMMC	DoD cybersecurity maturity levels, phasing into contracts	You are subcontracting DoD work that involves controlled unclassified information

Two rows on that table are commonly misread. Nadcap is an accreditation of a process, not of a company — a shop can be Nadcap accredited for heat treating and not for anything else, so the accreditation is only meaningful against a specific process on your router. And ISO/ASTM 52920 is the one written for this industry: where ISO 9001 was authored for manufacturing in general, 52920 sets requirements for qualifying an additive production site, alongside 52901 for what a purchase order for an AM part should contain and 52930 for machine qualification. A provider who can talk about those has thought about additive as its own discipline. Very few can, today.

"Certified To" Is Not "Compliant With"

This is the single most useful distinction on the page, and it takes ten seconds to check.

Certified to ISO 9001 means an accredited third-party registrar audited the company and issued a certificate with a number, a scope and an expiry date. Compliant with ISO 9001 — also written as "conforms to," "operates to," "built around," or "follows ISO 9001 principles" — means the company says so. It may be entirely true. It has not been audited by anyone, and if your own quality system requires certified suppliers, it does not satisfy that requirement.

The same weasel gap exists for AS9100 and ISO 13485. When a supplier's website uses the softer wording, that is usually deliberate and not dishonest — they are describing real internal discipline without claiming a certificate they do not hold. Ask directly which one they mean. A straight answer is itself a useful signal, and it is one of the qualifying questions in how to choose a 3D printing service.

How to Verify a Certificate in Five Minutes

Ask for the certificate PDF, not a logo. A genuine certificate names the registrar, carries an accreditation mark, and states a certificate number.
Read the scope statement. It describes what the certification covers — "design and manufacture of additive manufactured polymer components" is very different from "distribution and assembly." If additive is not named, ask whether it is in scope.
Check the site address. Certification attaches to sites. A certificate held by a parent company or a different facility does not cover the shop that will actually run your build, which matters whenever work is subcontracted out of house.
Confirm the registrar is accredited, by ANAB in the US or UKAS in the UK, and look the company up in that registrar's public client directory. For AS9100, certified suppliers are recorded in the IAQG OASIS database, which your customer's quality team can search.
Check the dates. Three-year cycle, annual surveillance audits. Expired certificates stay on websites for a remarkably long time.

For ITAR there is nothing to verify in this sense, because there is no certificate — a registrant can share its DDTC registration confirmation and describe its compliance program, and that is the whole of the available evidence. Treat any supplier advertising itself as "ITAR certified" as a shop that has not read the regulation, then ask the follow-up questions about who physically has access to your technical data. The commercial half of that conversation is covered in the NDA and IP protection guide.

What Certification Costs You

Certified capacity is not free, and pretending otherwise leads buyers to specify requirements they then complain about paying for.

Price. The audit cycle, the documentation burden and the inspection labour are real overhead, and they are in the quote. For an identical geometry, expect a meaningful premium over a general-purpose shop — the paperwork is often a larger share of the cost than the printing on small quantities.

Lead time. First-article inspection, material certificates and release paperwork add days. A qualified process is also a frozen one: the shop cannot switch machine, material lot or parameter set to fit you in, which is exactly the flexibility that makes an uncertified shop fast.

Minimum viability. Some certified providers will not take one-off work at all, because the fixed cost of the paperwork does not amortise across a single part. If you need one bracket next week, a certified aerospace supplier is the wrong door to knock on even if your part eventually flies.

That trade-off is why most buyers are better served by the routes in low-volume 3D printing services for early work, and by a certified provider only for the parts that genuinely require one.

When You Genuinely Need It

The requirement is almost always external. You need a certified provider when:

Your customer flows it down in writing. Read the purchase order terms; the requirement usually names the standard and the revision.
The part enters a regulated product — a device under 3D printing for medical devices, an aerospace part with a configuration-controlled drawing, a defense component with export-controlled data.
The part is load-bearing in an assembly you must qualify, where you will need traceability back to a material lot and a process record, typically for metal 3D printing.
Your own certification requires it. If you hold ISO 13485, your supplier controls are part of your system, and your auditor will look at how you approved the shop.

Outside those four cases, a certification requirement is usually procurement pattern-matching, and it costs you money and speed for no benefit. Prototypes, jigs, fixtures, tooling aids, architectural models, marketing pieces and internal test parts do not need it.

What to Ask For When You Don't

The useful move is to buy the evidence a quality system would have produced, one job at a time:

A certificate of conformance for the build, signed.
Material traceability — supplier, grade, lot number and the data sheet for the batch actually used.
A first-article dimensional report on the features you care about, with the measurement method stated. Nominate the features yourself; a generalised report measures what is easy.
The machine and parameter set the job ran on, in writing, so a repeat order can be made the same way.
A retention commitment — how long they keep the build file and the record, in case you need to repeat the part in two years.

Agree these before the purchase order. They are nearly free to produce during the build and expensive to reconstruct afterwards, and a shop that produces them cheerfully is running an informal quality system whether or not anyone has audited it.

Getting Quoted Against the Right Requirement

Before you send the RFQ, settle one question: is the certification requirement yours, or did it come from your customer? If it came from your customer, quote the standard and the revision in the RFQ and expect a shorter supplier list and a higher price. If it is yours, ask what you would do with the certificate — if the answer is "file it," ask for the conformance evidence above instead and put the savings into an extra iteration.

Browse 3D printing providers and ask two or three. How a shop answers a question about scope statements and lot traceability tells you more about how it runs than the certificate itself does. For the wider supplier-evaluation picture, the industrial 3D printing services buyer's guide covers capability, capacity and pricing alongside quality.

Related Resources

How to Choose a 3D Printing Service — the full qualifying checklist
Industrial 3D Printing Services Buyer's Guide — capability and capacity, not just quality
3D Printing Services: NDA and IP Protection — the file-security half of supplier vetting
Tolerances and Accuracy in 3D Printing — what to put on the drawing
Metal 3D Printing Services — where traceability requirements bite hardest
Low-Volume 3D Printing Services — the uncertified route for early work
Browse 3D Printing Providers — send the job out

Hero photo: EMMETT GIVEN / NASA / MSFC (public domain).