The Production Part Approval Process (PPAP) was engineered to answer a critical question: Can this supplier consistently produce parts that meet all engineering requirements, at the required volume, using the actual production process? It was designed to prove readiness and prevent defective components from entering the supply chain. Instead, it frequently functions as a heavy binder of inherited documents.
Originating in the automotive industry and formalised by the Automotive Industry Action Group (AIAG), PPAP is a core requirement of the IATF 16949 standard. The framework defines eighteen specific elements, ranging from Design FMEAs to Initial Process Capability Studies. Together, these elements form a comprehensive chain of evidence. When assembled with integrity, they prove a manufacturing process is fully controlled.
When executed poorly, PPAP creates a dangerous illusion of quality. Having audited and transitioned ISO 9001 and IATF 16949 systems across automotive and aerospace plants, I have seen how these elements degrade into compliance checklists. Suppliers submit binders, customers approve them, and both parties ignore the reality on the shop floor until a major failure forces an investigation.
The Mechanics of the Eighteen Elements
The eighteen PPAP elements are not arbitrary administrative hurdles. Each element closes a specific gap in the chain of evidence between a validated design and a capable production process. Design records prove the part is fully defined. Process FMEAs demonstrate that the team has analysed potential failure modes. Control plans prove there is an active strategy to prevent those failures.
Measurement System Analysis (MSA) proves the gauges can distinguish between good and bad parts. Initial Process Capability Studies prove the process can repeatedly hit the target. The Part Submission Warrant (PSW) ties this evidence together with a legally binding signature. The system is logically sound, but only if the data actually reflects the reality of the manufacturing environment.
The breakdown occurs because the form replaces the function. Quality engineers, stretched across multiple new product launches, do the math on survival. A thorough PPAP that genuinely validates a process takes weeks of rigorous testing and analysis. A submission that clones existing documents and fills in the gaps takes days. When speed is rewarded over certainty, competence is sacrificed for compliance.
The Intended PPAP Validation Sequence
- 01Process DefinitionFlow diagrams and engineering records define exactly how the part must be manufactured.
- 02Risk AnalysisDFMEA and PFMEA identify potential failure modes before tooling is finalized.
- 03Control StrategyThe Control Plan translates the risk analysis into specific measurement frequencies and reaction rules.
- 04System VerificationMSA studies confirm the measurement system can reliably detect variation and defects.
- 05Capability ProofInitial process studies (Cpk) prove the validated process can hold tolerances over time.
The Substitution Problem in Practice
Consider what happens in a facility that has executed hundreds of these submissions. The dimensional layout is performed by the most experienced inspector on the day shift, using the newest gauge. None of this represents what will happen during serial production on the night shift, when a junior operator runs the part on a worn CMM. The data looks perfect because the conditions are entirely artificial.
The capability study is calculated from a special PPAP run. This run is set up with extra time, senior supervision, and carefully selected material. The process that produced the sample parts bears zero resemblance to the process that will run at maximum cycle time next month. The resulting Cpk indices are mathematically accurate but practically meaningless.
This is not deliberate fraud; it is operational drift. The process FMEA is copied from a previous part with the number changed. The control plan is cloned because the process is supposedly identical. The MSA is performed on identical parts, artificially inflating the repeatability score. Each shortcut is individually defensible, but cumulatively they destroy the integrity of the submission.
The customer receives a comprehensive-looking package and approves it because they lack the bandwidth to audit every claim. They are trusting the supplier's signature. The supplier's signature is trusting documents generated by inertia. The approval becomes the objective, and a checklist completed is a checklist forgotten.
How Core Quality Tools Degrade
Process FMEAs are intended to be living documents. In practice, they are written retroactively to satisfy the submission requirement. The engineering team does not ask what could go wrong; they ask what they need to write to get approved. The result is a document listing obvious failure modes with carefully calculated Risk Priority Numbers set just low enough to avoid triggering additional controls.
Process Flow Diagrams frequently show the idealised engineering path, not the reality of the shop floor. Rework loops that exist but are not documented, informal sorting operations, and steps that bypass inspection when the line is backed up are completely unrepresented. The diagram is a work of fiction that the control plan inherits.
When the PFMEA is a fiction, the control plan becomes one too. Characteristics that should be monitored continuously are downgraded to periodic checks. Statistical Process Control (SPC) is abandoned. Reaction plans stating what to do when a characteristic goes out of control are simply listed as notify supervisor. This language translates to zero actionable preventive action on the floor.
Compliance Versus Validation
Compliance-driven PPAP
- Special PPAP run with senior staff and ideal conditions
- FMEA written retroactively to match the frozen design
- Gauge R&R performed on nearly identical sample parts
- Reaction plans default to 'notify supervisor'
Validation-driven PPAP
- Standard production run at normal cycle times
- FMEA findings directly modify the process design
- Gauge R&R uses parts spanning the full tolerance range
- Reaction plans specify exact containment and adjustment steps
The Financial Impact of False Confidence
The most insidious cost of PPAP theatre is the false confidence it creates. When a customer approves a submission, they plan their assembly schedules around the assumption that the supplier has demonstrated true serial production capability. They commit to downstream clients and allocate engineering resources elsewhere because the supplier is officially approved.
When parts inevitably begin failing in production, the investigation starts from a false premise. The PPAP documents are pulled and reviewed, and they are found to be technically complete. All eighteen elements are present. All signatures are valid. All indices meet acceptance criteria. Yet the parts are failing because the data was generated under false pretences.
The gap between the documents and reality is where the most expensive problems live.
By the time this gap is discovered through field failures or line-down events, the cost has multiplied. A design flaw caught during an honest PPAP study costs weeks of engineering time. The same flaw caught after six months of serial production costs months of stopped shipments, massive inventory scrap, and severe reputational damage. The price of theatre is always paid eventually.
Executing a Genuine Production Validation
A supplier that uses PPAP with integrity treats it as a production validation event. The PPAP run must be a normal production run. It uses the actual operators who will run the job, the standard materials, the equipment at its normal cycle time, and the inspection methods that will be used going forward. If the process cannot produce capable parts under these conditions, approval must stop.
The MSA study must use parts that represent the full range of expected variation, including parts near the upper and lower specification limits. If the gauge cannot adequately distinguish between parts in this critical range, that is a finding that must be addressed before capability can be meaningfully calculated. A favourable percentage on a report does not excuse a blind measurement system.
The capability study requires a sample size large enough to be statistically significant, and the data must be analysed for stability before Cpk is calculated. A process that is out of control has no meaningful capability index, regardless of what the mathematical formula produces. The customer must receive a submission that reflects operational reality, not laboratory aspiration.
The Leadership Decision
Ultimately, the integrity of a PPAP submission reflects the values of the leadership team. A director who demands to know the truth about whether the plant can make the part consistently will get honest validations. A director who demands the submission be filed by Friday will receive paperwork. Quality managers are caught in the middle, and the ones who refuse to misrepresent process data are often labelled difficult.
I have built greenfield QA and QC departments for plants with over 900 employees. The teams that successfully transitioned from compliance to competence were those empowered to stop the line. They treated the eighteen elements as tools to fix the process, not as a hurdle to clear before shipping. The choice is between paying for process problems now, when they are cheap, or paying later, when they are embedded in active production.
Start by reviewing your last three PPAP submissions for honesty, not completeness. Were the FMEAs conducted before the tooling was cut? Did the capability studies run under normal conditions? Did anything in the submission actually change the manufacturing process, or was the process already locked in? If the answer is that nothing changed, your process is producing cost without generating knowledge.