PPAP Documentation for Indian Auto-Component Suppliers Exporting to the United States: Customer-Specific Requirements and Who Prepares What (2026)

By Yamm Labs · Updated September 2026 · 9 min read

A forging supplier in Faridabad wins its first order from a Tier-1 with plants in Ohio and Tennessee. The purchase order arrives with three attachments: the drawing, the Tier-1’s supplier quality manual, and a line that reads “PPAP Level 3 per AIAG and our customer-specific requirements, uploaded to the portal before first shipment.” The forms are the same as a domestic PPAP. The checklist behind them, the portal, the traceability questions and the time zone are not.

What does a US OEM or Tier-1 expect in a Level 3 PPAP package?

The starting point is the AIAG PPAP manual, which the industry uses to define how a supplier demonstrates that its production process can make parts to the design record at the quoted rate. The manual sets out five submission levels. Level 3 is the default unless the customer specifies otherwise, and it means the warrant is submitted with product samples and complete supporting data, rather than the warrant alone.

What changes in the United States is the layer on top. Every large OEM adds its own customer-specific requirements, usually shortened to CSRs, to the base standard. IATF Global Oversight, whose rules bind the certification bodies that audit to IATF 16949, publishes the current CSR documents for Ford, General Motors, Stellantis, BMW Group, Mercedes-Benz, Volkswagen and others. The Tier-1 sitting between you and the OEM usually adds its own supplier quality manual on top, with its own portal and labelling instructions. The package is therefore three documents deep, and a pack built only to the manual will be sent back.

The table lists the bodies whose rules shape the pack, what each governs, and the documentation decision each forces.

Which customer-specific requirements change the pack the most?

The three American OEMs whose CSRs an Indian exporter is most likely to meet, directly or through a Tier-1, are Ford, General Motors and Stellantis. As of September 2026 the IATF Global Oversight page lists a Ford CSR effective 15 June 2026, a General Motors CSR effective 30 October 2025 and a Stellantis CSR dated June 2025 with a summary dated July 2026. A pack drafted from a CSR downloaded two years ago is drafted to the wrong checklist, so the desk’s first job on any US order is to download the current CSR and the Tier-1 manual and mark the differences.

The differences fall into a few recurring groups. Some CSRs ask for additional elements or their own form versions. Some specify the portal through which the warrant and the documents are uploaded and the file formats the portal accepts. A CSR or Tier-1 manual can make the supplier responsible for approving its own sub-tier suppliers’ parts, which means an Indian Tier-2 exporting to a US Tier-1 may also have to hold approvals for its Indian forging, plating or heat-treatment vendors. Some also set record-retention rules, which the plant should check against its own practice. All of it has to be read before drafting, not discovered at the portal.

VDA is the second format an exporter should expect. German-owned OEMs run large plants in the United States; BMW Group’s Spartanburg plant in South Carolina assembles the X3, X5, X6, X7 and XM. A Tier-1 supplying such a plant may specify VDA-style sampling in place of, or alongside, AIAG PPAP. The forms and sampling logic differ, so ask which format the drawing’s owner wants, in writing, before the pilot starts. The PPAP documentation FAQ covers the AIAG and VDA question in more detail.

What do US federal rules add that Indian customers rarely ask for?

Two federal rules sit behind the customer’s checklist. The first is NHTSA’s early-warning reporting rule, made under the TREAD Act. It requires motor vehicle manufacturers and equipment manufacturers above certain production thresholds to report production data, claims alleging death or injury, property-damage claims, consumer complaints, warranty claims and field reports to the regulator, organised by vehicle system or component.

Your customer carries that duty, and when a field report lands on your component it has to trace it to a lot, a date and a heat. That is why a US customer will want traceability to reach its Tier-2 and Tier-3 suppliers, and why the process flow, control plan and part label in a US pack should carry lot number, date code and heat or batch number as controlled characteristics, not as afterthoughts.

The second is trade, not quality. Since 2025 the United States has applied a Section 232 tariff of 25 percent to covered automobile parts, with the proclamation naming engines and engine parts, transmissions and powertrain parts, and electrical components among the categories, and with the duty on parts taking effect from May 2025. Parts qualifying under USMCA are treated separately; US Customs and Border Protection lets importers self-certify qualifying parts used for production or repair in the United States.

The PPAP pack does not decide the tariff, but the importer of record will ask the supplier for the tariff classification, the country-of-origin statement and a bill of material that supports both. Keep those three items in the same folder as the warrant. The auto-component boom article explains why the paperwork lead time, not the machining lead time, is what slows Indian exporters down.

Build the pack to the customer’s checklist, not to the manual; the manual is the floor, the CSR is the test.

Who prepares the PPAP documentation: the desk, the plant and the customer

Split the work by who holds the information. Documents that can be authored from the drawing, the route and the customer’s requirements can be prepared by an outsourced desk. Evidence that only exists after parts are made stays in the plant. Approval stays with the customer. This is how Yamm Labs’ PPAP Desk works on any order.

• The desk prepares the documentation core. From the drawing and the process data, the desk builds the ballooned print with a characteristic register, the process flow diagram, the PFMEA, the control plan, the process sheets, the MSA formats and the capability study templates, then drafts the warrant. On a US order it works to the current CSR and any Tier-1 requirements the plant supplies as inputs.
• The plant keeps the evidence. The trial run, the physical measurements, the capability studies, the Gage R&R trials, the laboratory testing, the samples, the master sample and the IMDS entry are done in the plant, because they cannot be done anywhere else. The desk formats the results; it does not produce them.
• The plant’s qualified checker verifies every document. Nothing goes to a portal until a person in the plant who understands the part has read each page against the drawing and the customer’s checklist.
• The responsible official signs the PSW. The Part Submission Warrant is the supplier’s warranty to the customer. A consultant, a desk or an agency cannot sign it. The plant uploads the signed warrant and the pack from its own portal account.
• The customer approves or rejects. Full approval, interim approval or rejection is the customer’s decision under its own CSR.

This is also the answer to a question US buyers ask directly: who wrote your PPAP? The plant owns it, the plant signed it, and a documentation desk drafted the paperwork under the plant’s control, as an external provider the plant evaluates and verifies in the way IATF 16949 expects outsourced work to be handled. The PPAP Desk service page describes it from the desk’s side.

How does a Gurugram desk work with a customer in New York or San Francisco?

Remotely. Yamm Labs works from Gurugram and describes its reach as India and the Gulf, with international clients; it does not maintain offices outside Gurugram, and international work is run remotely with calls and reviews scheduled across time zones. Yamm Labs has no office in the United States. What the desk offers a US-bound Indian supplier is the documentation core, prepared in India inside the supplier’s own quality process, to the US customer’s checklist.

The time difference is the design decision that matters most. A Tier-1 purchasing team on the East Coast sits nine and a half hours behind Gurugram in summer and ten and a half in winter; a battery or EV start-up in the Bay Area sits twelve and a half to thirteen and a half hours behind. The desk therefore runs a two-window rhythm: Indian daytime for drafting and plant review, and a late-evening India window for the customer’s morning questions.

On the five-day pilot the sequence is fixed. Day 0 the NDA is signed and the plant sends the inputs, including the released drawing, the route, the gauge list and the CSR. Day 1 the desk confirms the route. Days 2 to 4 the desk builds and QA-checks the pack. Day 5 the checker-ready pack is delivered to the plant. The plant then does its trial, measurements and signature on its own timeline.

Budget follows the same logic. The PPAP Desk two-part pilot is free, with no retainer and no software setup, which makes the pilot a low-risk test rather than a contract. The only proof the desk cites is its own: more than fifty Level 3 PPAP reports generated for Manu Auto India, an Indian client, under this split of desk, plant and signature. No US client is claimed. How the agency is set up and where it is based is on the About page.

Common mistakes on a first US PPAP

Most rejections on a first US order come from the same handful of errors. None of them needs new equipment to fix; each needs the right document read at the right time.

• Drafting from an old CSR. The pack ends up built to a checklist the customer no longer uses. Download the current CSR and the Tier-1 manual before the first form, and note the date of each.
• Building to the manual alone. The AIAG manual is the floor. The CSR and the Tier-1 manual decide what the portal accepts.
• Assuming AIAG for a German-owned plant. Ask in writing whether the customer wants AIAG PPAP, VDA-style sampling or both.
• Adding traceability at the end. Lot number, date code and heat number belong in the process flow, control plan and label from the first draft.
• Keeping trade papers in another folder. The importer of record will ask for the tariff classification, origin statement and bill of material alongside the warrant.
• Forgetting sub-tier approvals. If the CSR makes you responsible for your own vendors’ parts, the forging, plating or heat-treatment approvals have to be ready too.

A pre-upload checklist for US PPAP documentation

Run this list in the plant, with the checker, before anything goes to the customer’s portal.

1. The current OEM CSR and the Tier-1 supplier quality manual are on file.
2. The submission level is confirmed in writing, with Level 3 as the default if the customer is silent.
3. The format is confirmed: AIAG PPAP, VDA-style sampling or both.
4. The ballooned print and characteristic register match the released drawing revision.
5. The process flow, PFMEA and control plan use the same step numbers and the same characteristics.
6. Lot number, date code and heat or batch number are controlled characteristics and appear on the label.
7. The plant evidence is in: trial run, measurements, capability studies, Gage R&R, laboratory results and the IMDS entry.
8. Sub-tier approvals are held where the CSR or Tier-1 manual asks for them.
9. The tariff classification, country-of-origin statement and bill of material sit in the warrant folder.
10. The checker has read every page against the drawing and the customer’s checklist.
11. The responsible official has signed the warrant, and the plant uploads it from its own portal account.

People also ask

Does a US customer accept a PPAP prepared by an outside desk in India?

Yes, provided the plant owns it. The supplier’s responsible official signs the warrant, the plant’s checker verifies every page and the upload comes from the plant’s own portal account. The desk is an external provider the plant controls and verifies, which is how IATF 16949 expects outsourced work to be handled.

Is Level 3 always required for exports to the United States?

Not always, but it is the default level in the AIAG manual when the customer does not specify another. Level 3 means the warrant is submitted with product samples and complete supporting data. The customer’s CSR or Tier-1 manual can set a different level, so read it before drafting.

What is the difference between AIAG PPAP and VDA for a US customer?

AIAG PPAP is the format Ford, General Motors and Stellantis follow, and the usual one across their US supply chains. VDA-style sampling is what German-owned OEMs, including those with US plants such as BMW in Spartanburg, may specify. The forms and sampling logic differ, so confirm the format in writing at the quoting stage.

Does the Section 232 tariff change what goes into a PPAP?

It does not change the PPAP elements, but it changes what the importer asks for alongside them. Keep the tariff classification, the country-of-origin statement and a supporting bill of material in the same folder as the warrant. The 25 percent duty on covered automobile parts has applied since May 2025, with separate treatment for USMCA-qualifying parts.