PPAP Documentation FAQ: 80 Questions Tier-1 and Tier-2 Automotive Suppliers Ask, Answered by PPAP Desk (Yamm Labs)

By Yamm Labs · Updated September 2026 · 28 min read

Short answer: This PPAP documentation FAQ answers 80 questions that Tier-1 and Tier-2 automotive component suppliers ask about the Production Part Approval Process: the 18 elements of AIAG PPAP 4th Edition, the five submission levels, PFMEA and Control Plan linkage, MSA and capability studies, the PSW, IMDS, re-submission triggers, and outsourcing documentation under IATF 16949 and ISO 9001 clause 8.4. Answers are written by PPAP Desk, the outsourced PPAP documentation service of Yamm Labs, Gurugram, India, founded in 2017. Each answer is self-contained and cites its source where a third-party fact is used.
On this page
  1. PPAP basics and when it is required
  2. The 18 PPAP elements explained
  3. Submission levels and what the customer sees
  4. PFMEA and Control Plan
  5. MSA, Gage R&R, dimensional and capability studies
  6. PSW, customer-specific requirements, IMDS and re-submission triggers
  7. Outsourcing PPAP documentation under IATF 16949
  8. Working with PPAP Desk by Yamm Labs
  9. Sources

How to use this page: each section is ten questions on one theme. Sections 1 to 7 are about PPAP itself and apply to any supplier. Section 8 is about working with PPAP Desk. For a shorter explanation of what automated PPAP documentation does and does not do, read AI PPAP Generator: How Automated PPAP Documentation Works. For the service itself, see the PPAP documentation service page.

PPAP basics and when it is required

What is PPAP?

PPAP, the Production Part Approval Process, is the automotive industry’s standard method for a supplier to demonstrate that its production process can make a part to the customer’s design record, consistently, at the quoted production rate. AIAG publishes the reference manual, currently the 4th Edition. A PPAP submission is a package of up to 18 elements, from the ballooned design record through the PFMEA, Control Plan, measurement evidence and the signed Part Submission Warrant.

Who publishes the PPAP manual and which edition is current?

The Automotive Industry Action Group (AIAG) publishes the PPAP manual. The current edition is the 4th Edition. AIAG describes PPAP as the industry standard for defining the production part approval process so that engineering design record and specification requirements are consistently met. Individual OEMs and Tier-1s add customer-specific requirements on top of the manual, so a supplier always reads the manual and the customer’s CSR together.

When is a PPAP submission required?

According to Quality-One, a PPAP is required for any new part submission and for approval of any change to an existing part or process, and the customer may request a PPAP at any time during the product life. In practice that means new parts, engineering changes, tooling changes, process or location changes and sub-supplier or material changes all trigger a review of whether a submission, or a re-submission, is due.

Is PPAP mandatory for Tier-2 suppliers, or only for Tier-1?

PPAP flows down the supply chain. A Tier-1 that must submit a PPAP to the OEM will normally require a PPAP from each Tier-2 for the components inside its assembly, because IATF 16949 clause 8.3.4.4 requires the organisation to approve externally provided products before submitting its own part approval. The level and elements demanded of a Tier-2 are set by the Tier-1, and may be lighter than the OEM’s requirement, but the obligation is real.

What is the difference between PPAP and APQP?

APQP, Advanced Product Quality Planning, is the front-to-back planning framework for launching a product: design, process development, validation and launch. PPAP is the approval milestone inside that framework, the point where the supplier proves the process is ready and the customer signs off. Many of the PPAP documents, the PFMEA and Control Plan in particular, are produced during APQP phases and then submitted in the PPAP package.

What is the difference between PPAP and a first article inspection (FAI)?

A first article inspection verifies that one or a few first-off parts conform to the drawing. PPAP goes further: it asks whether the production process, run at production rate with production tooling, gauges and operators, can make conforming parts consistently. So PPAP includes process documents (flow, PFMEA, Control Plan), measurement system evidence (MSA) and capability studies, none of which a first article inspection alone provides.

Who decides the PPAP submission level and which elements are required?

The customer. The AIAG manual defines five submission levels, and the customer specifies which one applies to a given part, together with any customer-specific requirements. The supplier does not choose its own level. Where a customer has not stated a level, Level 3 is the one most suppliers prepare for, because InspectionXpert describes it as the default at most customers for new parts and engineering changes.

Why must PPAP parts come from an actual production run at production rate?

Because the purpose of PPAP, in AIAG’s words, is to ensure suppliers understand the processes required to produce parts with consistent quality during an actual production run at production rates. Parts made slowly on a prototype fixture say nothing about the series process. The dimensional results, capability studies and samples in the package must come from the production tooling, gauges, operators and cycle time that series supply will use.

What happens if a PPAP submission is rejected?

The customer returns the package with findings: missing elements, documents that do not agree with each other, measurement evidence that is incomplete or not capable, or CSR items not addressed. The supplier corrects the findings and re-submits. Production shipments generally cannot start until the customer approves, so a rejection costs launch time. The most valuable prevention is a package whose documents are built from one consistent source and checked before submission.

What does IATF 16949 say about PPAP?

IATF 16949:2016 clause 8.3.4.4, Product approval process, requires the organisation to establish, implement and maintain a product and manufacturing approval process conforming to the customer’s requirements, to approve externally provided products and services before submitting its own part approval, and to obtain documented customer approval where required. For most automotive customers the recognised approval process is the AIAG PPAP manual plus their own customer-specific requirements.

The 18 PPAP elements explained

What are the 18 PPAP elements?

As listed by Quality-One from the AIAG 4th Edition: 1 Design Record, 2 Engineering Change Documentation, 3 Customer Engineering Approval, 4 Design FMEA, 5 Process Flow Diagram, 6 Process FMEA, 7 Control Plan, 8 Measurement System Analysis studies, 9 Dimensional Results, 10 Material and Performance Test Results, 11 Initial Process Studies, 12 Qualified Laboratory Documentation, 13 Appearance Approval Report, 14 Sample Production Parts, 15 Master Sample, 16 Checking Aids, 17 Customer-Specific Requirements, 18 Part Submission Warrant.

What is the Design Record (element 1) and who owns it?

The Design Record is the released drawing and specification set that defines the part: geometry, tolerances, material, surface, notes and any referenced standards. The customer owns it when the customer designs the part; a design-responsible supplier owns it otherwise. For PPAP the design record is ballooned, meaning every characteristic is numbered, so that dimensional results, the Control Plan and the checking-aid list can all refer to the same numbered characteristic.

What is a ballooned drawing and why does PPAP need one?

A ballooned drawing is the released drawing with a numbered balloon on every dimension, tolerance, note and special characteristic. The balloon numbers become the characteristic register, and every other document refers to them: the dimensional report lists measured values by balloon, the Control Plan lists controls by balloon, the PFMEA’s special characteristics are identified by balloon. Without ballooning, a checker cannot trace a measured value back to the drawing requirement it satisfies.

What goes into Engineering Change Documentation (element 2)?

Any authorised engineering change that is not yet incorporated into the released design record: engineering change notices, deviations, customer-approved drawing mark-ups. The package should show which changes apply, their authorisation and dates, and how they were incorporated in the process documents. A common checker finding is a PFMEA or Control Plan built to an earlier revision than the ECN in the package, which is why the ECN list is an input before any document is built.

What is Customer Engineering Approval (element 3)?

Evidence that the customer’s engineering function has approved the part or the supplier’s deviation from the design record, where the customer requires such approval. It is a customer record rather than something the supplier authors. Typical forms are an engineering-approved deviation, a signed prototype or pre-production approval, or a customer engineering sign-off on a material or process substitution. If the customer does not require it, the element is marked not applicable in the index.

When is a Design FMEA (element 4) required from a supplier?

Only when the supplier is design-responsible for the part. A Design FMEA analyses how the design itself could fail to meet its functions; it is authored by whoever owns the design. A build-to-print supplier working to a customer drawing marks element 4 as not applicable or customer-retained. A supplier that designs the part, or a design-and-build Tier-1, includes its DFMEA, and the special characteristics identified there flow into the Process FMEA and Control Plan.

What is a Process Flow Diagram (element 5)?

A Process Flow Diagram is the ordered sequence of every operation in the production of the part, from receiving raw material to packing and despatch, including inspection, rework and storage steps. Each operation carries a number that the PFMEA and Control Plan reuse, so the three documents share one operation list. The flow must be the confirmed route, not the intended one; a flow that differs from what happens on the shop floor is a finding waiting to happen.

What are Material and Performance Test Results (element 10) and Qualified Laboratory Documentation (element 12)?

Element 10 is the record of tests on the material (chemistry, hardness, mechanical properties) and on the part’s performance (functional, durability, environmental) as required by the design record. Element 12 is the evidence that the laboratory that ran those tests is qualified: its scope, accreditation or customer approval, and the test methods it is qualified for. Both are physical evidence produced by the supplier and its laboratory, never by a documentation provider.

What are Sample Production Parts, the Master Sample and Checking Aids (elements 14 to 16)?

Sample Production Parts are parts from the production run submitted with the package as required by the level. The Master Sample is a part retained by the supplier, signed and dated, as the reference for the approved condition. Checking Aids are the fixtures, gauges, templates and models used to check the part, listed with identification, calibration status and the characteristics each aid checks. The parts and aids stay physical; only the checking-aid list is documentation.

What are Customer-Specific Requirements (element 17) in a PPAP?

Each OEM and many Tier-1s publish requirements that add to the AIAG manual: their own PSW format, PFMEA and Control Plan templates, capability targets, IMDS acceptance, labelling, packaging approval, or extra forms. Element 17 is the evidence that every applicable CSR has been read and met. It is one of the first inputs a documentation team needs, because it determines which template each document must be built in and which extra items the index must show.

Submission levels and what the customer sees

What are the five PPAP submission levels?

According to Quality-One: Level 1 is the Part Submission Warrant only; Level 2 is the PSW with product samples and limited supporting data; Level 3 is the PSW with product samples and complete supporting data; Level 4 is the PSW and other requirements as defined by the customer; Level 5 is the PSW with product samples and complete supporting data available for review at the supplier’s manufacturing location. The customer specifies the level.

What is a Level 1 PPAP?

A Level 1 submission sends the customer only the Part Submission Warrant, plus an Appearance Approval Report where the part has appearance requirements. Everything else is completed and retained in the supplier’s file. Customers use Level 1 for low-risk parts, for well-established suppliers, or for changes where the customer already holds the supporting data. A Level 1 submission does not reduce the work of preparing the package; it only reduces what is sent.

What is a Level 2 PPAP?

A Level 2 submission sends the PSW with product samples and limited supporting data. Which supporting elements are included is defined by the customer, typically the dimensional results, material test results and a subset of the process documents. As with every level, the full set of applicable elements is completed and retained on file, and the customer may ask to see any retained element at any time.

What is a Level 3 PPAP and why is it the default?

A Level 3 submission sends the PSW with product samples and complete supporting data: every applicable element, submitted to the customer for review. InspectionXpert describes Level 3 as the default at most customers for new parts and engineering changes, with the master sample and checking aids retained rather than submitted. It is the level where the documentation load is heaviest, which is why PPAP Desk is built around it.

What is a Level 4 PPAP?

A Level 4 submission sends the PSW and whatever other elements the customer defines for that part. It is the customer’s way of tailoring the package: for example, the PSW plus dimensional results and capability studies only, or the PSW plus the PFMEA and Control Plan only. The supplier follows the customer’s list exactly and retains the rest. The definition of Level 4 lives in the customer’s purchase order or CSR, not in the AIAG manual.

What is a Level 5 PPAP?

A Level 5 submission has the same content as Level 3, the PSW with product samples and complete supporting data, but the package is reviewed at the supplier’s manufacturing location rather than sent. The customer’s supplier quality engineer visits, reviews the documents and evidence on site and typically witnesses the process. Suppliers preparing for Level 5 therefore need the package physically organised and indexed at the plant, not only as files.

Do I still need to complete all 18 elements for a Level 1 or Level 2 submission?

Yes, where applicable. The submission level determines what is sent to the customer, not what is done. InspectionXpert notes that, per the AIAG manual, all elements should be completed, with the level indicating which are provided to the customer. Elements that genuinely do not apply, such as a Design FMEA for a build-to-print part, are marked not applicable in the index. The rest are completed and retained in the supplier’s PPAP file.

What does the customer actually see in a Level 3 submission?

The customer’s supplier quality engineer receives a package indexed by element: the PSW on top, then the ballooned design record, ECN list, process flow, PFMEA, Control Plan, MSA studies, dimensional results by balloon number, material and performance test results, initial process studies, laboratory documentation, appearance report if applicable, checking-aid list and CSR evidence, plus the sample parts. The checker reads across documents, so consistency between them is what is being judged.

How should a PPAP package be indexed and organised?

In element order, with a package index on the first page after the PSW that lists all 18 elements and states for each whether it is submitted, retained on file, or not applicable, with a reason. Each document carries the part number, revision, date and the element number. Balloon numbers, operation numbers and gauge identifiers are consistent across documents. A checker should be able to find the control for any balloon in the Control Plan, the risk for it in the PFMEA and its measured value in the dimensional report without asking.

Can the same part be submitted at different levels to different customers?

Yes. The level is a customer decision, so a part supplied to two customers may be Level 3 for one and Level 1 for another. The supplier’s retained package is the same in either case; only the submitted subset and the customer-specific formats differ. Building the package once, in full, and then producing each customer’s submission from it is far cheaper than building two packages.

PFMEA and Control Plan

What is a PFMEA?

A Process Failure Mode and Effects Analysis is a structured, operation-by-operation study of how the manufacturing process could fail to produce a conforming part: the failure modes, their effects on the customer, their causes, and the prevention and detection controls in place. Each failure mode is rated and the highest-priority items receive actions. The PFMEA is element 6 of the PPAP and is normally written by a cross-functional team, not by one engineer alone.

What is a Control Plan?

A Control Plan is the document that describes, for every operation, which product and process characteristics are controlled, the specification, the measurement method and gauge, sample size and frequency, the control method and the reaction plan if a measurement is out of specification. It is element 7 of the PPAP and is the working document the shop floor and inspection follow in series production. Its controls must match the detection controls listed in the PFMEA.

How must the PFMEA and Control Plan link to each other?

They share the same operation numbers from the Process Flow Diagram and the same characteristic numbers from the ballooned drawing. For every characteristic the PFMEA rates as significant, the Control Plan must show a control whose method and frequency are adequate for that rating. The detection control named in the PFMEA should appear as the control method in the Control Plan. When the two are built from one characteristic-to-operation map, the linkage is structural rather than something a reviewer has to check by hand.

What is a special characteristic?

A special characteristic is a product or process characteristic that affects safety, regulatory compliance, fit, function or the customer’s ability to process the part, and therefore requires additional control. Customers designate them on the drawing with their own symbols and CSR rules; the supplier may add its own. Special characteristics must be identified consistently in the design record, PFMEA, Control Plan, process sheets and operator instructions. A special characteristic missing from the Control Plan is a frequent rejection cause.

What are severity, occurrence and detection in a PFMEA?

Three ratings applied to each failure mode. Severity rates how serious the effect on the customer would be if the failure reached them. Occurrence rates how likely the cause is to occur given the prevention controls in place. Detection rates how likely the current detection controls are to catch the failure before it leaves the operation. Each is scored on a defined scale from the FMEA manual the customer requires, and the combination determines which items need action.

What is RPN and what replaced it?

RPN, the Risk Priority Number, is the product of severity, occurrence and detection used in the AIAG FMEA 4th Edition to rank failure modes. According to Quality-One, in the AIAG-VDA FMEA Handbook the RPN has been eliminated and replaced by Action Priority (AP), which considers severity first, then occurrence, then detection, using lookup tables to assign High, Medium or Low priority to each combination. The customer’s CSR states which method applies.

What changed in the AIAG-VDA FMEA Handbook compared with the AIAG FMEA 4th Edition?

According to Quality-One’s summary of the AIAG-VDA FMEA Handbook: RPN was replaced by Action Priority; a seven-step approach was introduced running from planning through structure, function and failure analysis to risk analysis, optimisation and documentation; formal structure and function analysis using boundary diagrams, structure trees, P-diagrams and function trees became explicit; and a supplemental FMEA-MSR method was added for monitoring and system response during customer operation. We do not state a publication year here because the source page does not give one.

Which FMEA method should I use for my PPAP?

The one your customer specifies. Customer-specific requirements state whether the PFMEA must follow the AIAG FMEA 4th Edition (RPN) or the AIAG-VDA FMEA Handbook (Action Priority), and often supply the template. Where a supplier serves customers on both methods, the underlying failure analysis is the same and the difference is the rating and prioritisation format. Confirm the method in the CSR before building the PFMEA; converting afterwards costs more than building correctly.

What are the most common PFMEA and Control Plan mistakes checkers find?

Operation numbers that differ between the flow diagram, PFMEA and Control Plan; a special characteristic present in the PFMEA but missing or under-controlled in the Control Plan; detection controls in the PFMEA that do not match the control method in the Control Plan; documents built to a superseded drawing revision; generic failure modes copied from another part; and reaction plans that say only “inform supervisor”. Every one of these is a consistency failure, not a knowledge failure, and is prevented by building from one map.

Can a PFMEA and Control Plan be generated from one characteristic map?

Yes, and it is how PPAP Desk works. The ballooned drawing gives the characteristic list; the confirmed route gives the operation list; the map ties each characteristic to the operation that creates or controls it, the gauge and the control method. The PFMEA is written per operation with the mapped characteristics and their controls; the Control Plan is written per operation with the same characteristics, gauges and methods. The supplier’s cross-functional team then reviews the ratings, because risk judgement stays with the people who run the process.

MSA, Gage R&R, dimensional and capability studies

What is Measurement System Analysis (MSA)?

Measurement System Analysis is the set of studies that show whether the gauges and methods used to measure the part are good enough to make decisions with: whether they are stable, unbiased, linear and, most often, whether their repeatability and reproducibility are small compared with the tolerance. MSA is element 8 of the PPAP. It matters because capability and dimensional results are only as trustworthy as the measurement system that produced them.

What is a Gage R&R study?

A Gage Repeatability and Reproducibility study measures a set of parts several times by several operators using the same gauge, then separates the observed variation into part-to-part variation, repeatability (the same operator, same gauge, different trials) and reproducibility (different operators). The result is expressed against the tolerance or the process variation. It is the most common MSA study submitted for variable gauges in a PPAP, and it is run on the supplier’s own gauges with its own operators.

Who performs the Gage R&R?

The supplier. The study needs the supplier’s production gauges, the supplier’s operators and parts from the supplier’s process, measured at the plant. A documentation provider can supply the study format, the gauge list and the characteristic-to-gauge assignment, and can lay out the results, but the measurements themselves must be taken by the supplier. PPAP Desk provides the MSA report formats and never generates the readings inside them.

What are Dimensional Results (element 9)?

The measured values for every ballooned characteristic on the design record, taken on sample production parts, recorded against the nominal and tolerance, with the gauge used and a pass or fail judgement for each. The report is organised by balloon number so that the checker can trace every drawing requirement to a measurement. It is physical evidence: the supplier measures, the documentation team provides the ballooned report format with nominals and tolerances pre-filled.

What is an Initial Process Study (element 11)?

A short-term capability study on the special characteristics, and any others the customer requires, using data from the production run. The study shows whether the process is centred and whether its spread is small enough relative to the tolerance, expressed as capability indices such as Cpk or Ppk, with the control chart or data behind them. It answers the customer’s question of whether the process can be expected to make conforming parts in series, not just in the sample.

What is the difference between Cpk and Ppk?

Both compare the process spread to the tolerance while allowing for how far the process is off-centre. In principle, Cpk uses the within-subgroup variation and describes the potential of a process in statistical control; Ppk uses the overall variation of all data collected and describes actual performance over the study. For an initial process study the customer’s CSR states which index and which acceptance value apply; use that, not a general rule.

How many parts must be measured for dimensional results and capability?

The quantity is set by the AIAG manual and by the customer’s CSR for the part, and CSRs frequently override the manual with their own sample sizes and study lengths. The correct answer for any submission is the number the customer’s requirement states, taken from the production run. A documentation team can build the study formats for that sample size; it cannot change the number, and it cannot supply the readings.

Why can documentation not invent MSA or capability numbers?

Because those numbers are the supplier’s evidence to the customer that its gauges are fit to measure and its process is capable. A capability index that did not come from the supplier’s measured data is a false declaration on a signed warrant, with consequences for the supplier who signs. There is also no way to invent them correctly: the values depend on the specific gauge, operators, machine and material on the day. PPAP Desk leaves every data cell empty until the supplier’s readings go in.

What if my process is not capable at the time of submission?

Say so, with a plan. Customers would rather see an honest study with a documented containment and improvement plan than a study that looks capable and is not. Typical responses are 100 per cent inspection as an interim control written into the Control Plan, a corrective action with dates, and a re-study. The customer decides how to treat the submission. What a supplier must not do is adjust or select data to make the index pass.

What does a documentation provider contribute to elements 8, 9 and 11?

The formats and the linkage. For MSA: the gauge list, the characteristic-to-gauge assignment and the study formats. For dimensional results: the ballooned report with balloon number, nominal, tolerance and gauge pre-filled. For initial process studies: the study format for the characteristics the customer requires, at the sample size the CSR states. The provider does not measure, run studies or enter values. When the supplier’s data arrives, it is entered by the supplier or, if the supplier asks, transcribed exactly and verified by the supplier.

PSW, customer-specific requirements, IMDS and re-submission triggers

What is the Part Submission Warrant (PSW)?

The Part Submission Warrant is element 18, the one-page document on top of every PPAP package. It identifies the part, revision, drawing, supplier, customer, submission level and reason for submission, summarises the results, and carries the supplier’s declaration that the samples meet all requirements and that the documentation is complete, signed by the supplier’s responsible official. The customer records its disposition on the same form.

Who signs the PSW?

The supplier’s responsible official, and no one else. A documentation provider drafts the warrant and leaves the signature block blank. Signing the PSW is a declaration to the customer that only the supplier can make, and the person who signs carries the consequence of that declaration. PPAP Desk drafts the PSW as part of the package and never signs it; that is a fixed rule of the service.

What information goes on the PSW?

Part name and number, drawing number and revision, engineering change level and date, additional engineering changes, safety or government regulation flag, purchase order number, weight, checking-aid numbers, supplier name, code and address, customer name and division, buyer, application, IMDS submission status where the customer requires it, reason for submission, requested submission level, submission results declaration, and the signature block with name, title, phone and date. The customer’s own PSW template, where the CSR requires one, takes precedence.

What are customer-specific requirements and where do I find them?

Customer-specific requirements (CSRs) are the rules an OEM or Tier-1 adds on top of IATF 16949 and the AIAG core tools: their own PPAP templates, submission portals, capability targets, IMDS rules, labelling, packaging and change-notification rules. They are published by the customer, usually through its supplier portal or supplier quality manual, and the IATF Global Oversight site hosts the OEM CSR documents for IATF 16949. Read them before building any document.

What is IMDS and is it part of PPAP?

According to AIAG, the International Material Data System is an online database used by the automotive industry to manage information on materials and substances used in vehicles, developed in 2000 to comply with regulations such as the EU End-of-Life Vehicles Directive. iPoint notes that most OEMs require approved Material Data Sheets as part of PPAP documentation before authorising series production. The IMDS entry is made by the supplier; the PPAP index references its status.

What triggers a PPAP re-submission?

According to Umbrex, PPAP is typically required for the introduction of a new part, engineering or design changes, new, modified or transferred tooling, changes in manufacturing process, line, equipment or location, changes in source for key materials or subcomponents, restart of production after a long period of inactivity, and correction of a quality issue that requires process or control changes. The customer’s CSR defines the exact thresholds and notification route for each.

Does a design change always need a full re-submission?

Not always a full Level 3, but it always needs a review and usually a submission at the level the customer sets for changes. Quality-One states that a PPAP is required for approval of any change to an existing part or process. The customer decides whether a reduced submission is acceptable; the supplier’s obligation is to notify, update the affected documents (design record, ECN list, PFMEA, Control Plan, dimensional results for changed characteristics) and submit as directed.

Does moving tooling or production to another location trigger a PPAP?

Commonly listed as a trigger, yes. Umbrex lists new, modified or transferred tooling and changes in manufacturing location among the situations where PPAP is typically required. The reasoning is that the approval was for a process at a place; a different plant means different machines, operators, gauges and environment, so the evidence of capability no longer applies. Customer notification before the move, and a re-submission after it, is the normal expectation under most CSRs.

Does a sub-supplier or material change trigger a PPAP?

Commonly listed as a trigger, yes. Umbrex lists changes in source for key materials or subcomponents among typical PPAP triggers, and iPoint notes that material changes trigger PPAP re-submission for IMDS purposes. A new raw-material source, a new coating or heat-treatment subcontractor, or a new Tier-3 for a purchased component all fall here. The affected elements are usually the material test results, IMDS, the PFMEA and Control Plan at the incoming operation, and the PSW.

Should I notify the customer before or after a change?

Before. IATF 16949 clause 8.3.4.4 requires the organisation to verify changes and obtain customer approval for modifications to products or processes, and customer CSRs generally require advance notification of process, tooling, location and source changes with the customer deciding what evidence is needed. Changing first and submitting afterwards puts the supplier in breach of the CSR even if the parts are good. Build the notification into the change-control process so it cannot be skipped.

Outsourcing PPAP documentation under IATF 16949

Can PPAP documentation be outsourced under IATF 16949?

Yes. Neither the AIAG PPAP manual nor IATF 16949 requires the supporting documents to be authored in-house. Preparation of the documentation by an outside party is an externally provided process under ISO 9001:2015 clause 8.4, which IATF 16949 adopts. The supplier defines the requirement, evaluates and controls the provider, verifies the output and retains full responsibility for conformity. The PSW is still approved and signed by the supplier’s responsible official.

What does ISO 9001 clause 8.4 require when a process is outsourced?

According to Core Business Solutions’ summary of the clause: the organisation determines and applies criteria for the selection, evaluation and re-evaluation of external providers (8.4.1); determines the type and extent of control to apply based on the potential impact on conformity, while remaining accountable for the conformity of what is externally provided (8.4.2); and communicates its requirements to the provider (8.4.3). Records of the evaluation and of verification of the output are expected.

Who is responsible for the PPAP if a third party prepared the documents?

The supplier. Clause 8.4.2 keeps the organisation accountable for the conformity of externally provided processes, and IATF 16949 clause 8.3.4.4 requires the organisation to approve externally provided services before submitting its part approval. The provider is responsible to the supplier under contract for the quality of its work; the supplier is responsible to the customer for the whole package and for the declaration on the warrant. Outsourcing moves labour, not responsibility.

How should a supplier verify outsourced PPAP documents?

With the same check a good internal reviewer would apply, recorded. Confirm the drawing revision and ECN level match the package; check operation numbers agree across flow, PFMEA and Control Plan; confirm every special characteristic has an adequate control; confirm gauge identifiers match the gauge list; review PFMEA ratings with the cross-functional team; confirm the CSR checklist; confirm all data cells contain the supplier’s own measured values. Sign the verification record, then the PSW.

Does the outsourced provider need to be IATF 16949 certified?

Neither ISO 9001 clause 8.4 nor the AIAG manual specifies a certification for a documentation provider; the supplier determines its own selection and evaluation criteria under 8.4.1 based on the provider’s ability to meet the requirement and the impact on conformity. Yamm Labs makes no certification claim for PPAP Desk. What the supplier controls is the output, through the verification step and the pilot comparison against its own current standard.

How do I add a documentation provider to my approved supplier list?

Treat it like any other externally provided service under 8.4.1: define the requirement (scope of documents, formats, CSRs, confidentiality, turnaround); set selection criteria; evaluate the provider, for which a two-part pilot compared against your current package is the practical method; record the evaluation; set the controls you will apply (verification checklist, sign-off); and schedule re-evaluation. The NDA and the evaluation record are the two documents an auditor will ask for.

Will an IATF auditor object to outsourced PPAP documentation?

An auditor looks for evidence that the externally provided process is controlled: selection criteria, the evaluation record, the communicated requirements, the verification of the output, and the retained responsibility shown by the supplier’s own review and signature. Where those records exist, outsourced documentation is a controlled external process like any other. Where they do not, the finding is against 8.4, not against the idea of outsourcing.

What must never be outsourced in a PPAP?

The physical evidence and the authority. The trial run at production rate, physical measurement, MSA and Gage R&R studies, capability studies, material and performance testing, sample and master sample production, IMDS entry, and the PSW signature all stay with the supplier. A provider that offers to supply measurement data or capability values, or to sign on the supplier’s behalf, is offering something the supplier cannot accept without making a false declaration to its customer.

Can a customer refuse a PPAP prepared with outside help?

The customer judges the package and the supplier’s control of it, not who typed the documents. If a customer-specific requirement addresses external preparation, follow it; most CSRs do not, because the standards treat it as a controlled external process. What a customer will refuse is a package whose documents disagree with each other, whose data is not the supplier’s own, or whose PFMEA ratings the supplier’s team cannot explain in a review. Verification prevents all three.

How does outsourcing affect confidentiality of drawings?

Drawings and CSRs are the customer’s confidential information, and most supply agreements restrict onward disclosure. The supplier therefore needs a non-disclosure agreement with the documentation provider before any input is shared, and should confirm its own customer agreement permits controlled sharing with a service provider under NDA. PPAP Desk signs the NDA on Day 0 of the pilot, before receiving inputs; specific handling terms are set in that NDA.

Working with PPAP Desk by Yamm Labs

What is PPAP Desk?

PPAP Desk is the outsourced PPAP documentation service of Yamm Labs, run from Gurugram, India, for Tier-1 and Tier-2 automotive component suppliers. It builds the documentation core of a Level 3 PPAP package to AIAG PPAP 4th Edition and IATF 16949 from one characteristic-to-operation map. The supplier keeps all physical evidence and the PSW signature. Yamm Labs was founded in Gurugram in 2017.

What inputs does PPAP Desk need?

Five inputs from the plant: the released drawing, the confirmed process route, the gauge list, the customer-specific requirements together with any engineering change notices, and the real measured data once the trial run is complete. If the route is not confirmed the documents are not built, because every document is derived from the route. Inputs are received only after the NDA is signed.

What does the PPAP Desk pilot involve?

Two live part numbers over five days, inside the supplier’s existing quality process. Day 0: NDA and inputs. Day 1: route confirmed with the supplier’s quality engineer and the characteristic map built. Days 2 to 4: documents built and checked internally. Day 5: checker-ready pack delivered. The supplier compares the pack against its current standard and decides whether to continue. There is no retainer and no software to install.

What does PPAP Desk cost?

Pricing starts at ₹2,000 per report, per part number, with no retainer and no software licence. The first two parts are quoted as the five-day pilot. The exact figure for a part depends on its characteristic count, the customer’s template and the ECN history, and is fixed before work starts. We do not publish price bands beyond the starting price.

What is the turnaround?

The published turnaround is the pilot: two live parts delivered as checker-ready packs on Day 5, counting from Day 0 when the NDA is signed and inputs received. Turnaround for ongoing work after the pilot depends on characteristic count, template and the completeness of inputs, and is agreed per part. The fastest way to shorten it is to send a confirmed route and a complete gauge list on Day 0.

How is my data handled?

Under a non-disclosure agreement signed on Day 0, before any drawing, CSR or measured data is received. The drawings and data are used to build the package for the part they belong to. Specific handling terms, including retention and return of documents, are set in the NDA so that they match the supplier’s own obligations to its customer. Ask for the NDA before sending anything.

What stays with the supplier?

The trial run, physical measurement, capability studies, Gage R&R trials, laboratory testing, samples, master sample and IMDS entry. The supplier’s quality team verifies every document, and its responsible official signs the PSW. PPAP Desk never generates measurement data and never signs a PSW. The service is controlled by the supplier as an externally provided process under ISO 9001 clause 8.4.

What does PPAP Desk deliver?

The documentation core of a Level 3 submission: ballooned print and characteristic register, Process Flow Diagram, PFMEA, Control Plan, process and setup sheets, checking-aid list and gauge specifications, incoming inspection standard, MSA, dimensional and capability report formats, and the PSW draft with package index. Every document is built from one characteristic-to-operation map so that balloon numbers, operation numbers and gauges agree across the package.

Who has PPAP Desk worked with?

PPAP Desk has delivered more than 50 PPAP reports for Manu Auto India, a Level 3 documentation engagement built for repeatability and client-specific submission formats. That is the client reference we publish. We do not publish approval rates, rejection rates or turnaround statistics from client work, because those belong to the client’s relationship with its customer. Full detail is on the PPAP documentation service page.

How do I start with PPAP Desk?

Send two part numbers through the contact form at yammlabs.com/#contact or by email to info@yammlabs.com. We return the NDA and the input list. Once the NDA is signed and the drawing, route, gauge list and CSRs arrive, Day 0 begins and the checker-ready packs for both parts are delivered on Day 5. Compare them against your current standard before deciding anything further.

Two live parts. Five days. Compare the pack against your current standard.

Full service description on the PPAP Desk service page. Background reading: why India’s auto-component boom needs shorter PPAP paperwork. Talk to Yamm Labs →

Last updated: 18 September 2026

Sources

  1. PPAP | Production Part Approval Process, Quality-One International, accessed 18 September 2026
  2. Production Part Approval Process (PPAP) 4th Edition, AIAG, accessed 18 September 2026
  3. What are the PPAP submission levels?, InspectionXpert, accessed 18 September 2026
  4. AIAG & VDA FMEA, Quality-One International, accessed 18 September 2026
  5. Clause 8.4 ISO 9001:2015 Explained, Core Business Solutions, accessed 18 September 2026
  6. IATF 16949:2016 Clause 8.3.4.4 Product approval process, Pretesh Biswas, 20 July 2023
  7. What is PPAP?, Umbrex Explainers, accessed 18 September 2026
  8. International Material Data System (IMDS), AIAG, accessed 18 September 2026
  9. IMDS Guide for Automotive Suppliers, iPoint Systems, accessed 18 September 2026
  10. IATF Global Oversight, OEM customer-specific requirements for IATF 16949, accessed 18 September 2026
  11. PPAP Documentation Service | PPAP Desk, Yamm Labs, updated 18 September 2026