Quality
PPAP: When Your Organization Stops Assuming Supplier Parts Are Good and
Starts Proving It Before They Reach Your Line — and the Trust You Placed
in Unverified Components Became the Recall That Destroyed Your
Customer’s Confidence
It was a Monday morning in March when the call came in. A tier-one
automotive supplier had just shipped 47,000 door latch assemblies to a
major OEM. By Wednesday, three of those latches had failed during
customer testing — not on a test bench, not in a controlled environment,
but in the hands of actual customers. One failure happened in a parking
lot in suburban Detroit. The door swung open during a left turn at 25
miles per hour. Nobody was hurt. But the OEM’s quality director was on
the phone within the hour, and the conversation was not friendly.
The supplier’s VP of Quality reviewed the failure analysis with
growing unease. The root cause was traced to a material substitution
made by their own sub-supplier — a small stamping house in Ohio that had
quietly switched from the specified high-strength steel grade to a
cheaper alternative. The material certificates looked fine. The
dimensions checked out. But the tensile strength was 18% below
specification, and under the right combination of temperature and load,
the latch release mechanism could deform just enough to disengage.
The sub-supplier had never submitted a PPAP. Nobody had asked them
to.
The OEM demanded an immediate containment, a full lot trace, and a
corrective action plan within 48 hours. The supplier complied. They
pulled 47,000 assemblies from the field, inspected every single one, and
replaced them at a total cost of $2.3 million. The sub-supplier lost
their contract. The tier-one supplier lost their preferred status. And
somewhere in an OEM procurement office, someone added a new line to
their supplier quality manual: “PPAP required for all sub-tier suppliers
— no exceptions.”
This story is not unusual. It happens more often than anyone in the
industry likes to admit. And it illustrates, with painful clarity, why
the Production Part Approval Process exists — and what happens when
organizations treat it as paperwork instead of what it actually is: the
last line of defense between your supply chain and your customer.
What PPAP Actually Is —
and What It Isn’t
PPAP is one of the five core tools in the IATF 16949 quality
management system, alongside APQP, FMEA, MSA, and SPC. It was developed
by the automotive industry, but its principles apply to any
manufacturing environment where component quality directly affects
product safety, reliability, or performance.
At its core, PPAP is a structured method for demonstrating that a
supplier understands the customer’s requirements, has a production
process capable of meeting those requirements consistently, and can
prove it with objective evidence. It’s not a form. It’s not a checklist.
It’s a proof statement.
The AIAG PPAP manual defines 18 elements that may be required,
depending on the submission level (Level 1 through Level 5). These
elements include everything from design records and engineering change
documents to process flow diagrams, process FMEAs, control plans,
measurement system analysis studies, dimensional results, material test
results, and initial process capability studies. Each element serves a
specific purpose. Together, they tell a complete story about whether a
part is ready for production.
But here’s what most organizations get wrong: they treat PPAP as a
submission event rather than a verification process. They gather the
documents, fill in the blanks, and send the package to the customer with
the implicit assumption that approval is a formality. The customer,
overwhelmed by incoming PPAP packages from dozens of suppliers, often
rubber-stamps them without thorough review. Both sides participate in a
mutual performance of diligence that satisfies the audit requirement
without actually verifying anything meaningful.
This is how you end up with a door latch that fails at 25 miles per
hour.
The 18 Elements: A
Brief Tour of Evidence
Let’s walk through what a proper PPAP package actually contains — and
why each piece matters.
Design Records and Engineering Change Documents.
Before you can prove you can make a part, you have to prove you
understand what the part is supposed to be. Design records include
drawings, specifications, CAD models, and any applicable engineering
change notices. This sounds obvious, but you’d be amazed how many PPAP
submissions contain outdated drawings or reference revoked engineering
changes. The design record is the contract between you and your
customer. If you’re building to the wrong revision, nothing else in the
PPAP matters.
Process Flow Diagram. This is a visual map of every
step in your manufacturing process, from raw material receipt through
final packaging and shipment. It should capture every operation, every
inspection point, every decision branch. A good process flow diagram
reads like a story — here’s where the material comes in, here’s where we
form it, here’s where we check it, here’s where it goes next. A bad one
is a box with three arrows that tells the customer nothing about how the
part is actually made.
Process FMEA. The PFMEA takes the process flow
diagram and asks, at every step: what could go wrong? What would the
effect be? What are the current controls? What’s the risk priority? This
is where you demonstrate that you’ve thought about failure modes before
they happen — not after. A PFMEA that lists only obvious failure modes
with low severity ratings is a red flag. A PFMEA that honestly evaluates
risks, including uncomfortable ones, is a sign of a mature quality
system.
Control Plan. The control plan translates the PFMEA
into actionable instructions: what to measure, how to measure it, how
often, with what tool, and what to do if it’s out of specification. The
control plan is the operating system of your production quality. If the
PFMEA is the risk analysis, the control plan is the risk management
strategy.
Measurement System Analysis. Before you can trust
your measurement data, you have to trust your measurement system. MSA
studies — typically GR&R (Gauge Repeatability and Reproducibility) —
prove that the instruments and operators measuring the part can actually
distinguish between good parts and bad ones. An MSA study that shows
your gauge variation is larger than your tolerance range is not a failed
study. It’s a warning that you’ve been making decisions based on
noise.
Dimensional Results. This is the physical evidence:
actual measurements of actual parts taken from a significant production
run, typically a minimum of 300 pieces from one to eight hours of
production. The results are plotted against the specification limits,
and initial process capability indices (Cpk or Ppk) are calculated. A
Cpk of 1.67 or higher is typically required for new parts — meaning your
process is not only capable of meeting the specification, but it has
enough margin that normal variation won’t push parts out of
tolerance.
Material and Performance Test Results. Material
certifications, tensile test results, hardness measurements, coating
thickness, salt spray test results — whatever the specification
requires. These are the objective data points that prove the material
and the finished part meet all engineering requirements.
Sample Production Parts. Physical parts from the
production run, submitted to the customer for their own verification.
This is the ultimate proof: here’s what our process produces. You
measure it. You test it. You decide.
Part Submission Warrant (PSW). The summary document
that ties everything together. The PSW lists every element in the
package, identifies any deviations or observations, and includes a
signed declaration that the parts were produced from a
production-significant run using the same process, tooling, and
materials that will be used for ongoing production.
The Submission
Levels: Tailoring the Evidence
Not every part requires the same level of scrutiny. The AIAG PPAP
manual defines five submission levels:
- Level 1: Part Submission Warrant only — for parts
with low risk and established supply history. - Level 2: PSW with product samples and limited
supporting data. - Level 3: PSW with product samples and complete
supporting data — the default level for most new parts. - Level 4: PSW with complete supporting data but no
samples — typically used when the customer wants to review the data
before requesting physical parts. - Level 5: PSW with product samples and complete
supporting data, reviewed at the supplier’s plant — the most rigorous
level, typically reserved for high-risk or safety-critical
components.
The key insight here is that the customer decides the submission
level, and that decision should be based on risk. A safety-critical
brake component should get Level 5. A non-critical cosmetic trim piece
might get Level 1. But the decision should be intentional, documented,
and defensible. Too many organizations default to Level 3 for everything
— which means they’re either over-investing in low-risk parts or
under-investing in high-risk ones.
Where PPAP Breaks Down
PPAP is a powerful tool, but it’s only as strong as the integrity of
the process behind it. Here are the most common failure modes I’ve seen
in 25 years of practice:
Paperwork without understanding. The supplier
submits a complete PPAP package with all 18 elements, but the PFMEA was
copied from a template, the control plan doesn’t match the actual
production process, and the dimensional results are from a specially
prepared “golden batch” that doesn’t represent normal production. The
PPAP looks perfect. The parts are not.
Approval without review. The customer receives the
PPAP, checks that all boxes are present, and approves it without
actually reading the content. The MSA study shows a gauge that can’t
discriminate between good and bad parts. The Cpk values are calculated
incorrectly. The process flow is missing critical steps. Nobody catches
any of it because nobody looked.
One-time verification instead of ongoing control.
PPAP demonstrates that a process is capable at a point in time. It does
not guarantee that the process will remain capable forever. Tool wear,
material lot variation, operator changes, machine drift — all of these
can degrade a process that was perfect on PPAP day. If the control plan
isn’t followed in production, the PPAP was a snapshot of a moment that
no longer exists.
Sub-tier blind spots. The tier-one supplier submits
a perfect PPAP. Their sub-supplier — the one providing the raw material,
the plating, the heat treatment — submits nothing to anyone. The
tier-one assumes the sub-supplier is qualified. The sub-supplier assumes
the tier-one is checking. Nobody is actually verifying the most critical
inputs. This is exactly what happened with the door latch
assemblies.
Resubmission fatigue. When engineering changes
happen frequently — and in automotive, they happen frequently —
suppliers can develop “PPAP fatigue.” They start treating resubmissions
as administrative burdens rather than genuine re-verification
opportunities. They update the document dates without re-evaluating the
process. They carry forward old data that no longer represents the
current process. The PPAP becomes a fiction that everyone maintains
because the alternative — actually redoing the work — is too expensive
and too slow.
Building a PPAP
Process That Actually Works
The organizations that get PPAP right share several
characteristics:
They treat PPAP as a process, not a document. The
PPAP submission is the output of a systematic process that starts with
APQP, flows through process design and risk analysis, and culminates in
objective evidence. The document is the record. The process is the
quality system.
They invest in the PFMEA and control plan. These two
documents are the intellectual backbone of the PPAP. A PFMEA that
genuinely identifies and evaluates risk, paired with a control plan that
addresses those risks with specific, measurable controls, will produce a
PPAP that’s worth more than any stack of signed warrants.
They verify their measurement systems first. Before
collecting dimensional data, before calculating Cpk, before submitting
anything — they prove their measurement system is capable. This single
step eliminates more false PPAP submissions than any other.
They use production-significant runs. Not a pilot
batch. Not a hand-selected sample. A real production run, on real
tooling, with real operators, at real production rates. If the process
can’t demonstrate capability under these conditions, it’s not ready for
PPAP.
They manage their sub-tier suppliers. This is the
hard one. It requires extending PPAP requirements down the supply chain,
even to suppliers who’ve never heard of AIAG. It means auditing
sub-suppliers, reviewing their processes, and verifying their outputs —
not just trusting their certificates.
They maintain PPAP discipline over time. They don’t
just approve and forget. They monitor process capability, review control
plan adherence, and require PPAP resubmission when significant changes
occur. The PPAP is a living agreement, not a historical artifact.
The
Cost of Getting It Right vs. The Cost of Getting It Wrong
Let me be direct about the economics. A proper PPAP process costs
money. It requires engineering time, measurement equipment, statistical
analysis, and supplier management resources. For a complex component, a
full Level 3 PPAP can cost $15,000 to $50,000 in direct labor and
testing. A Level 5 with on-site review can cost significantly more.
But the cost of getting it wrong is exponentially higher. The door
latch recall I described earlier cost $2.3 million in direct containment
and replacement costs. That doesn’t include the lost future business,
the damage to the supplier’s reputation, the engineering resources
diverted from new programs to support the corrective action, or the
legal exposure from a safety-related failure.
In my experience, the ratio is roughly 1:50. Every dollar invested in
proper PPAP verification saves approximately fifty dollars in downstream
failure costs. That’s not a theoretical number. That’s the aggregate
lesson from dozens of supplier quality crises I’ve been called in to
resolve over the past two and a half decades.
PPAP Beyond Automotive
While PPAP originated in the automotive industry and remains most
deeply embedded there, its principles are increasingly being adopted in
other sectors. Aerospace has its own version (AS9102, First Article
Inspection). Medical device manufacturers use similar concepts under
different names. The semiconductor industry applies comparable rigor to
supplier qualification.
The reason is simple: every industry that relies on complex supply
chains eventually discovers the same truth. You cannot inspect quality
into a product. You have to build it into the process — and you have to
prove, before production begins, that the process is capable of
delivering it consistently.
PPAP is that proof. Not the document. The evidence. The objective,
verifiable, reproducible evidence that your process works, your
measurements are trustworthy, your materials meet specification, and
your people know what they’re doing.
If you can’t demonstrate all of that before you ship your first
production part, you’re not ready. And the customer who accepts your
parts without that demonstration is taking a risk they may not fully
understand — until the door swings open on a left turn at 25 miles per
hour.
The Path Forward
If your organization doesn’t currently require PPAP from your
suppliers — or if you require it but don’t actually review it — start
here:
- Classify your purchased components by risk.
Safety-critical, functional, and cosmetic. Apply PPAP rigor
proportionally. - Require PPAP from your top-risk suppliers first.
Don’t try to boil the ocean. Start with the components that matter
most. - Actually review what they submit. Don’t just check
for completeness. Read the PFMEA. Verify the MSA. Check the Cpk
calculations. Ask questions about anything that doesn’t make sense. - Extend requirements to sub-tiers. At minimum,
require your direct suppliers to flow down PPAP requirements to their
own critical sub-suppliers. - Maintain ongoing surveillance. PPAP is the starting
point, not the finish line. Monitor process capability over time.
Require resubmission when changes occur.
The door latch supplier I described earlier now requires PPAP from
every sub-tier supplier, down to the raw material level. They audit
their sub-suppliers annually. They verify material certificates against
independent test results. It costs them more. It takes more time. But
they haven’t had a field failure since.
That’s what PPAP done right looks like. Not paperwork. Proof.
Peter Stasko is a Quality Architect with 25+ years
of experience transforming organizations across automotive, aerospace,
and pharmaceutical industries. He specializes in building quality
systems that don’t just satisfy auditors — they actually prevent
defects. His approach combines deep technical expertise in IATF 16949
core tools with a practical understanding of how real factories operate,
helping organizations move beyond compliance to genuine capability.
