Let's Build Your Next
Big Thing.
No spam. No pressure. Just a quick discovery call with our experts.
IATF 16949 checklist: automotive manufacturers need controlled, searchable and traceable evidence showing that quality processes were followed and results were reviewed. Important evidence areas include customer requirements, document revisions, production traceability, inspection results, supplier quality, calibration, competence, audits, CAPA and management review.
Important: This practical checklist supports the organization of digital quality evidence. It does not replace a licensed copy of IATF 16949, applicable Sanctioned Interpretations, official FAQs, certification-body guidance, legal obligations or customer-specific requirements.
Updated: August 2026. The IATF has announced that the second edition of IATF 16949 is currently under development, with publication planned for mid-2027. Organizations should continue following the applicable published requirements while monitoring official transition announcements.
An effective IATF 16949 checklist should help an automotive manufacturer answer four practical questions:
The objective is not simply to scan paper records. Digital evidence should be controlled, connected to the relevant product and process, protected from unauthorized changes and available to authorized users when required.
Digital quality evidence can include controlled documents, completed records, system-generated data and customer communications. The appropriate evidence depends on the process, product, customer and applicable requirements.
Controlled documents describe how work should be performed. Examples may include procedures, work instructions, process specifications, drawings, inspection plans, control plans and approved forms.
Each controlled document should have an identifiable owner, revision, approval status, effective date and controlled distribution method. Obsolete versions should be prevented from accidental use while remaining available when historical reference is required.
Quality records show what was actually completed and what result was obtained. Examples include inspection results, calibration records, audit findings, training evaluations, supplier approvals, production releases and corrective-action records.
ERP, MES, QMS, CMMS, laboratory and machine systems can produce evidence such as timestamps, equipment status, material genealogy, electronic approvals, alarm histories and process measurements.
System data becomes more useful when it is connected to a unique order, product, batch, serial number, machine, employee or customer requirement.
Automotive manufacturers may also need customer portals, scorecards, submission approvals, complaint records, engineering changes and other customer-specific evidence. Applicable requirements can vary between OEMs and direct customers.
The official IATF Customer-Specific Requirements page should be reviewed regularly because OEM documents and effective dates can change.
| Evidence Area | Examples of Digital Evidence | Primary Owner |
|---|---|---|
| 1. Document control | Procedures, revisions, approvals and distribution | Quality management |
| 2. Customer requirements | CSR register, specifications and applicability reviews | Quality and sales |
| 3. Contract review | Feasibility reviews, orders and requirement changes | Sales and engineering |
| 4. Project and change management | Project plans, milestones, risks and approvals | Engineering |
| 5. Product and process risk controls | Process flow, FMEA, Control Plan and characteristics | Engineering and quality |
| 6. Supplier quality | Supplier approvals, monitoring and corrective actions | Purchasing and quality |
| 7. Production traceability | Orders, materials, machines, operators and genealogy | Operations |
| 8. Inspection and nonconformance | Results, releases, holds, NCRs and dispositions | Quality |
| 9. Calibration and measurement | Equipment status, certificates and investigations | Quality and maintenance |
| 10. Competence and authorization | Training, evaluations, skills and approvals | Human resources and process owners |
| 11. Audits and CAPA | Findings, containment, root cause and verification | Quality |
| 12. Performance and review | KPIs, complaints, objectives and management actions | Leadership |
The first area in the IATF 16949 checklist is document control. Employees should be able to find the approved version of the information required to perform their work.
For each controlled document, capture:
A shared folder containing similarly named files is not strong document control unless permissions, versions, approvals and obsolete copies are consistently managed.
A single generic automotive checklist cannot cover every customer. Create a controlled register for OEM and direct-customer requirements.
| Register Field | Information to Record |
|---|---|
| Customer | OEM, Tier 1 or other direct customer |
| Source | Official portal, controlled document or contract |
| Revision | Current document version and effective date |
| Applicability | Applicable site, product, process or program |
| Owner | Person responsible for review and deployment |
| Implementation | Linked procedure, control or system workflow |
| Gap or Action | Open action, responsible person and target date |
| Last Review | Date the source and applicability were verified |
Current IATF listings include OEM requirements with different revision and effective dates. Therefore, assign a review frequency and monitor the official source instead of treating downloaded copies as permanently current.
Maintain evidence showing that product, delivery, quality and technical requirements were reviewed before accepting work.
Possible evidence includes:
Changes should be linked to the affected drawings, planning records, quality controls, supplier requirements and production instructions.
New products and manufacturing changes can introduce quality risks. Digital project records should make responsibilities, milestones, approvals and unresolved risks visible.
Organize evidence for:
The project record should show not only that an activity was planned but also its completion, result, approval and any follow-up action.
Process-flow information, risk analysis, control plans, work instructions and inspection requirements should remain aligned.
A useful digital relationship connects:
Customer requirement → Special characteristic → Process step → Process risk → Control method → Inspection result → Reaction or corrective action
When one element changes, the organization should evaluate related documents and controls. A digital workflow can notify owners, request reviews and prevent an updated control plan from becoming disconnected from shop-floor instructions.
Supplier performance can directly affect product conformity and delivery. Maintain supplier evidence according to supplier risk, supplied product and applicable requirements.
Relevant evidence can include:
Supplier records should connect to received batches, inspections, production usage and affected customer orders whenever traceability is required.
Production evidence should demonstrate what was manufactured, under which conditions and with which resources.
Depending on the product and applicable requirements, capture:
A connected Manufacturing Execution System can collect shop-floor evidence and connect it with ERP orders, machines, operators, materials and quality results.
Inspection records should be understandable without relying entirely on an employee’s memory. A complete result typically identifies:
Nonconforming material should remain identifiable and controlled from detection through containment, review, disposition and closure.
A connected Quality Management System can centralize inspections, nonconformance reports, approvals, CAPA and audit evidence.
Measurement evidence should demonstrate that equipment was suitable and within its required status when used.
Maintain information such as:
A CMMS and Maintenance Management System can support equipment schedules, service history and notifications while the QMS controls associated quality investigations and approvals.
Attendance alone does not always demonstrate competence. Training evidence should show what ability was required and how successful completion was evaluated.
Capture:
A live skills matrix can prevent unauthorized task assignment and highlight upcoming training or reassessment needs.
Audit and corrective-action evidence should present a clear path from the identified issue to verified closure.
A complete record may include:
Link recurring issues to previous complaints, supplier problems, scrap, downtime or process deviations. This helps teams identify systemic patterns rather than repeatedly treating individual symptoms.
Leadership records should show that performance information was reviewed and decisions resulted in controlled actions.
Evidence may cover:
Production capacity and delivery risks may also be supported by connected production planning and scheduling software.
A master evidence register provides one controlled view of where records are stored, who owns them and how they are protected.
| Field | Purpose |
|---|---|
| Evidence area | Process or activity supported by the record |
| Record owner | Person responsible for completeness and control |
| System or location | Approved source where the record is maintained |
| Approval | Required reviewer or authorization method |
| Retention basis | Customer, legal, regulatory, contractual or internal basis |
| Review frequency | Frequency for verifying continued suitability |
| Access role | Authorized users and permission level |
| Status | Active, archived, superseded or under review |
Digital files without searchable context can be difficult to retrieve. Use consistent metadata where applicable:
Digitizing quality records is useful only when the organization can trust the records. Apply controls according to risk and applicable requirements.
Give users the access necessary for their responsibilities. Separate permission to view, enter, approve, revise, administer and delete information.
Record significant changes, including the user, timestamp, previous value, new value and reason for the change. Corrections should remain traceable instead of silently replacing the original result.
Prevent unapproved documents from being treated as current. Approval status and effective date should be clearly visible.
Backups should be protected and recovery should be tested. A backup that cannot be restored does not provide reliable continuity.
Where evidence comes from multiple systems, consistent timestamps help establish the correct event sequence.
Evaluate whether configured workflows, calculations, permissions, interfaces and reports perform as intended. Control significant system changes and retain appropriate testing and approval evidence.
Ensure important records remain readable and retrievable for their required retention period, even when software, formats or system versions change.
Use a real product, order, batch or serial number and attempt to retrieve its complete evidence chain.
Measure how long retrieval takes and record missing links, duplicate sources, permission problems and inconsistent identifiers. Set an internal retrieval objective appropriate to operational and customer needs.
A connected manufacturing evidence flow can follow this structure:
Customer requirements → ERP order → Production planning → MES execution → Machine and operator data → QMS inspection and release → Evidence repository → Performance dashboard
The ERP usually manages commercial and inventory information. Planning software sequences work. MES records production execution. QMS controls quality workflows and evidence. CMMS supports equipment and maintenance history.
These systems do not need to be one application. However, they should use common identifiers and controlled integrations so teams can trace evidence across the full manufacturing process.
Explore Tech4LYF’s ERP and Business Software solutions for connected manufacturing workflows.
Start with licensed standards, applicable customer documents, current IATF publications, legal obligations and internal controls. Record the source and revision of each requirement.
List documents and records currently stored in QMS applications, ERP, MES, shared folders, spreadsheets, emails, paper archives and customer portals.
Every important record type should have an owner responsible for its workflow, approval, completeness, access and retention.
Begin with evidence connected to product safety, special characteristics, release, traceability, customer complaints, calibration and nonconformance.
Define who creates, reviews, approves, changes, archives and retrieves each record.
Remove duplicate uncontrolled copies, verify migrated metadata and confirm that important historical records remain readable.
Test the evidence flow on a controlled scope before expanding to the entire site.
Trace a finished order from customer requirement through production and final release. Correct missing links before wider deployment.
Show employees how to find current instructions, enter results, report problems, approve records and protect login credentials.
Maintain an update log for customer requirements, IATF Sanctioned Interpretations, FAQs and transition announcements.
The IATF’s July 2026 update states that the second edition is planned for mid-2027. Its priority topics include simplification, software quality assurance, lower-tier supply-chain management, launch management and customer-specific requirements. Review the official IATF Stakeholder Communiqués for the latest status.
A practical automotive QMS platform should support:
Tech4LYF develops custom Quality Management System software that connects inspections, nonconformance, CAPA, supplier quality, calibration and manufacturing traceability.
An IATF 16949 checklist is a structured tool used to review automotive quality processes and supporting evidence. It should be tailored to the organization’s products, processes, customers, sites and applicable requirements.
No. This is a practical digital evidence guide. It does not replace the licensed IATF 16949 standard, applicable ISO requirements, IATF publications, OEM requirements or guidance from an authorized certification body.
Digital records can support a quality management system when they are controlled, protected, readable, retrievable and acceptable under applicable requirements. ISO 10013:2021 provides guidance for developing and maintaining documented information, including information supported by digital technologies.
Prioritize records connected to product safety, special characteristics, inspections, release, material traceability, calibration, customer complaints, nonconformance and corrective action. The final priority should be based on organizational and customer risk.
There is no safe universal retention period for every automotive quality record. Determine retention using applicable licensed requirements, customer-specific requirements, legal and regulatory obligations, contracts and internal business needs.
Maintain a controlled register containing the customer, official source, revision, effective date, applicability, responsible owner, implementation method and review date. Monitor the official source for changes.
They may support limited processes when properly controlled, but they can create version, permission, traceability and retrieval risks. Evaluate whether the controls are adequate for the importance and complexity of the evidence.
ERP supplies orders, products, suppliers and inventory information. MES records shop-floor execution. The QMS controls inspections, nonconformance, CAPA and release evidence. Shared identifiers connect these records into a traceable manufacturing history.
An effective IATF 16949 checklist should do more than confirm whether documents exist. It should help the organization prove which requirement applied, what action was completed, who approved it, what result was obtained and how the evidence connects to the affected customer and product.
Start with one production line or product family. Build the requirement register, connect the critical records and perform a complete retrieval test. Use the results to improve document control, traceability, inspection, supplier quality and corrective-action workflows.
Need a connected digital quality system? Contact Tech4LYF to discuss custom QMS, MES, ERP and maintenance software for your manufacturing operations.
