PPAP for South African OEMs and Tier-1s: What Indian Auto-Component Exporters Prepare, and Who Signs (2026)

By Yamm Labs · Updated September 2026 · 11 min read

A machining supplier in Manesar gets a request for quotation from a Tier-1 in Gauteng. The drawing is for a bracket on an SUV line. The purchase terms say “PPAP Level 3 per our supplier quality manual; VDA or AIAG format as agreed.” The forms look like the ones the plant already fills for Indian customers. The format question, the German or American lineage of the end customer, the compulsory-specification question and the working hours on the other side are all new, and each one decides how the pack is built.

What does an OEM or Tier-1 in South Africa expect in a Level 3 PPAP package?

The base is the AIAG PPAP manual. It defines how a supplier proves that its production process makes parts to the design record at the quoted rate, lists the elements of a submission and sets out the submission levels. Level 3 is the default when the customer does not name another level, and it means the Part Submission Warrant goes in with product samples and the complete supporting data, not the warrant alone.

What makes South Africa different is who sits at the end of the chain. The vehicle plants cluster in three regions. In Gauteng, BMW Group Plant Rosslyn builds the fourth-generation X3 as a plug-in hybrid, and Ford’s Silverton plant builds the Ranger, the Everest and the Volkswagen Amarok. In the Eastern Cape, Volkswagen builds the Polo and Polo Vivo at Kariega, Mercedes-Benz builds the C-Class at East London, and Isuzu and BAIC assemble vehicles near Gqeberha. In KwaZulu-Natal, Toyota’s Prospecton plant near Durban builds the Corolla Cross, Hilux, Fortuner and HiAce. That mix means an Indian exporter can meet German, American, Japanese and Chinese quality systems in the same country, sometimes through the same Tier-1.

The practical result is a pack three documents deep: the AIAG manual, the OEM’s customer-specific requirements, and the Tier-1’s own supplier quality manual with its portal and labelling rules. The table lists the bodies whose rules shape the pack, what each governs, and the documentation decision each one forces.

Which customer-specific requirements change the pack for South African plants?

IATF Global Oversight, whose rules bind the certification bodies that audit to IATF 16949, publishes customer-specific requirement documents for ten OEMs. Four of them build vehicles in South Africa. As of September 2026 the page lists the BMW Group CSR dated April 2021, the Ford CSR dated June 2026, the Mercedes-Benz Group CSR dated February 2022 and the Volkswagen AG CSR dated March 2022. Check the IATF Global Oversight CSR page on the day you start drafting, because a pack built to an old CSR is built to the wrong checklist.

Toyota, Isuzu and BAIC do not appear on that list. Their requirements reach a supplier through the customer’s own documents, so the desk works from whatever the Tier-1 hands over. Ask for those documents with the drawing, not after the first draft.

The differences between CSRs fall into recurring groups. Some ask for extra elements or their own form versions. Some name the portal the warrant goes through and the file formats it accepts. Some make the supplier responsible for approving its own sub-tier suppliers, which means an Indian Tier-2 shipping to a Gauteng Tier-1 may also need approvals on file for its own forging, plating or heat-treatment vendors. Some set record-retention rules the plant must match. All of it has to be read before the first form is drafted, not discovered at the portal.

The German lineage adds the format question. BMW, Mercedes-Benz and Volkswagen all run South African plants, and a Tier-1 supplying them may ask for VDA-style sampling in place of, or alongside, AIAG PPAP. The FMEA follows the same logic: the AIAG-VDA handbook replaced the risk priority number with Action Priority, and a customer that asks for it will not accept an RPN-ranked PFMEA. The PPAP documentation FAQ covers the AIAG and VDA differences in more detail.

The manual is the floor; the customer’s checklist is the test.

Does the NRCS approve a PPAP for a South African customer?

No. PPAP approval is a commercial decision between the supplier and its customer, made under the customer’s own requirements. The National Regulator for Compulsory Specifications is a different kind of body. It was set up under the National Regulator for Compulsory Specifications Act of 2008 to administer and maintain compulsory specifications in the interests of public safety, health and environmental protection. Vehicles and some safety-related components can fall under compulsory specifications, and whether a given part is one of them is not something a supplier should assume either way.

The design decision this forces is about timing. Whether a given part falls under a compulsory specification is a question for the customer and the importer, and it belongs in writing before the pack is drafted. If the answer is yes, the test evidence and the approval path shape the control plan and the laboratory plan, so they cannot be bolted on after the warrant is signed. If the answer is no, the email saying so goes into the pack folder. The Act itself is on the South African government’s legislation page.

A related point for buyers who search on the financial side: the Financial Sector Conduct Authority, the South African Reserve Bank and its Prudential Authority regulate banks, insurers and financial conduct. They do not approve automotive parts, and a PPAP pack never goes to them.

Who prepares what: the desk, the plant and the South African customer

Split the work by who holds the information. Documents that can be authored from the drawing, the route and the customer’s requirements can be prepared by an outsourced desk. Evidence that only exists after parts are made stays in the plant. Approval stays with the customer. This is how Yamm Labs’ PPAP Desk works on any order, whichever country the part ships to.

• The desk prepares the documentation core. From the drawing and the process data, the desk builds the ballooned print with a characteristic register, the process flow diagram, the PFMEA, the control plan, the process and setup sheets, the checking-aid list and gauge specifications, the incoming inspection standard, the MSA, dimensional report and initial process study formats, and the draft warrant with a package index. On a South African order it works to the current CSR and the Tier-1 manual the plant supplies.
• The plant keeps the evidence. The trial run, the physical measurements, the capability studies, the Gage R&R trials, the laboratory testing, the samples, the master sample and the IMDS entry happen in the plant, because they cannot happen anywhere else. The desk formats the results; it never produces them.
• The plant’s checker verifies every document. Nothing goes to a portal until someone in the plant who knows the part has read each page against the drawing and the customer’s checklist.
• The responsible official signs the PSW. The Part Submission Warrant is the supplier’s declaration to the customer. A consultant, a desk or an agency cannot sign it, and the plant uploads it from its own portal account.
• The customer approves or rejects. Full approval, interim approval or rejection is the customer’s decision under its own requirements.

Software can speed up the drafting, but the same line holds. The AI PPAP generator explainer sets out what automation writes and what it must never touch, such as measurement data and the signature.

How does a Gurugram desk work with a buyer in Johannesburg or Cape Town?

Remotely. Yamm Labs works from Gurugram and serves clients in India and the Gulf, with international clients handled remotely through calls and reviews scheduled across time zones. It does not maintain offices outside Gurugram. What it offers a South Africa-bound Indian supplier is the documentation core, prepared in India, inside the supplier’s own quality process, to the South African customer’s checklist.

The time zone is the easiest part of this market. South Africa runs one time zone, two hours ahead of UTC, and India runs five and a half hours ahead of UTC; neither observes daylight saving. A quality engineer in Johannesburg, Cape Town, Gqeberha or Durban is therefore three and a half hours behind Gurugram all year. The desk’s rhythm follows from that: drafting and plant review in the Indian morning, and customer questions in the Indian afternoon, when the South African working day has started. A 12:30 call in Gurugram is a 09:00 call in Johannesburg.

The pilot sequence is fixed. Day 0, the NDA is signed and the plant sends the inputs: the released drawing, the route, the gauge list, the CSR and the Tier-1 manual, plus the customer’s written answer on format and compulsory specifications. Day 1, the desk confirms the route. Days 2 to 4, the desk builds and checks the pack. Day 5, the checker-ready pack goes to the plant, which then runs its trial, measurements and signature on its own timeline.

Budget follows the same logic. The PPAP Desk two-part pilot is free, with no retainer and no software setup, so the pilot is a test rather than a contract. The proof the desk cites is its own: more than fifty Level 3 PPAP reports generated for Manu Auto India, an Indian client, under this split of desk, plant and signature. The PPAP Desk service page describes the scope from the desk’s side.

Six common mistakes on a PPAP for South Africa

Each mistake below comes from a decision this page says to make early. Each one has a simple fix, and none of the fixes needs more than an email and a careful read.

1. Building to the AIAG manual alone. The manual is the floor. The fix is to get the end customer’s CSR and the Tier-1’s supplier quality manual with the drawing and build to their checklist.
2. Drafting to an old CSR. The IATF page carries dates for each OEM’s document. Check it on the day drafting starts, not the day the enquiry arrived.
3. Looking for Toyota, Isuzu or BAIC requirements on the IATF list. They are not there. Ask the Tier-1 for the documents that carry them before the first draft.
4. Sending an RPN-ranked PFMEA to a customer that wants Action Priority. Confirm the FMEA method with the format question, and build the PFMEA to the method the customer names.
5. Guessing about compulsory specifications. Get the customer’s answer on NRCS scope in writing before drafting, and file it in the pack folder whether the answer is yes or no.
6. Forgetting sub-tier approvals. If the CSR makes you responsible for your own suppliers, the approvals for your forging, plating or heat-treatment vendor need to be on file before upload.

Rules on compulsory specifications and customer requirements change over time. Confirm the current text with your compliance team, or with the customer’s supplier quality contact, before you rely on this list for a live South Africa programme.

People also ask

Do South African OEMs use AIAG PPAP or VDA?

Both appear. The AIAG PPAP manual is the common base, and German-owned OEMs with South African plants, such as BMW, Mercedes-Benz and Volkswagen, and their Tier-1s may ask for VDA-style sampling instead of or alongside it. Confirm the format in writing at the quotation stage, because the two packs are not interchangeable.

Can a desk in India prepare a PPAP for a South African Tier-1?

Yes, provided the plant owns it. The desk drafts the documentation core, the plant produces the evidence and verifies every page, and the supplier’s responsible official signs the warrant. The desk is an external provider the plant controls, which is how IATF 16949 expects outsourced work to be handled.

Does the NRCS need to see my PPAP?

No. The PPAP goes to your customer, who approves or rejects it. The NRCS administers compulsory specifications for public safety, health and the environment, so ask your customer whether your part falls under one before you draft the pack.

How far behind India is South Africa for PPAP calls?

Three and a half hours, all year. South Africa uses one time zone at two hours ahead of UTC, India is five and a half hours ahead, and neither country uses daylight saving. An afternoon in Gurugram overlaps the South African working morning.

What should the plant send the desk for a South Africa order?

On Day 0, after the NDA is signed, the plant sends the released drawing, the route, the gauge list, the CSR and the Tier-1 manual. It also sends the customer’s written answer on format and on compulsory specifications. With those inputs the desk confirms the route on Day 1 and returns a checker-ready pack on Day 5.