Guide · ~14 min read · Automotive

IATF 16949 work instructions, in plain English.

IATF 16949 is ISO 9001 with sharp teeth. Tier-2 and tier-3 automotive suppliers carry the same clauses an OEM does. Controlled documents, traceable units, attributed dispositions. But a fraction of the staff. This guide explains the four clauses that drive most audit findings on SMB automotive lines, and what a digital-first answer looks like. Without committing to a $400k MES rollout.

IATF 16949 vs. ISO 9001

What's actually different

IATF 16949 inherits every ISO 9001 clause verbatim and then layers automotive-specific requirements on top. The headline additions: error-proofing (poka-yoke), full per-unit traceability including manufacturing dates and shifts, control plans linked to work instructions, mandatory FMEA review on changes, and supplier development to flow these expectations down your own sub-tier. Where ISO 9001 says "controlled documents", IATF says "controlled documents that match the current control plan, in use on the floor, with the specific revision recorded on every unit's build record". The bar is the same idea, set considerably higher.

  • IATF 16949 = ISO 9001 + ~150 automotive-specific shall statements
  • Per-unit (not per-batch) traceability is non-negotiable
  • Work instructions must match the active control plan revision
  • Error-proofing controls (scan validation, torque verification) expected
  • PPAP / PSW records reference the WI revision in use
Clause 7.5.3.2 · Retention of documented information

Records that survive a 15-year recall window

IATF retention requirements are longer than most SMB suppliers realise. Production part approval records, tooling records, and product / service requirement reviews must be kept for the life of the part plus one year. Often 15+ years for active platforms. Work-instruction revision history, build records per unit, and non-conformance dispositions fall into the same long tail. Paper-binder systems theoretically work but practically degrade, one warehouse flood, one office move, one filing-cabinet retirement, and the proof is gone.

  • PPAP / PSW records: life of part + 1 year (15+ years typical)
  • Build records per unit: same retention as the part itself
  • Work-instruction revision history: every revision since program launch
  • Tooling records, control plan revisions, FMEA history
  • Database-backed records survive office moves, floods, and staff turnover
  • Every revision is recoverable on demand, not "we have it in a binder somewhere"
Per-unit traceability

Vehicle ← caliper ← rotor ← lot. Every unit

IATF clause 8.5.2.1 demands traceability that holds up to a recall. The OEM calls Friday afternoon and asks "which units got rotors from lot R-26049-2?". And your answer needs to be a list, not "we'll get back to you Monday". Per-unit traceability means every shipped serial carries the full upstream tree (sub-assemblies and their lots, parent serials, the operator at each station, the WI revision in effect that day). Most SMB suppliers fake this with spreadsheets that fall apart at the first sub-assembly merge. The whole genealogy needs to fall out of the build flow, not get reconstructed later.

  • Full upstream tree per shipped unit. Sub-asms, parent serials, components
  • Lot-level traceability on every consumable
  • Operator + station + timestamp at every consumption point
  • WI revision in effect at each step recorded with the build
  • Reverse lookup: given a component lot, find every unit it went into
  • OEM recall questions answered in clicks, not days
Build genealogy · BC-260517-0023
  • Brake corner assembly · BC-260517-0023
    Sam T. · STN-08 · May 17, 2026 · 16:42
    PASS
    • Caliper sub-asm · CA-26051-0019
      Maya R. · STN-04 · 14:22 · v4 WI
      • Rotor · R-260517-091 · lot R-26049-2
      • Pads (set) · P-260517-204 · lot P-26049-7
      • Fasteners (4) · lot F-26044-12
    • Mount hardware · lot M-26044-8
      Consumed at STN-08 · 16:35
Error-proofing (poka-yoke)

Scan validation that actually catches the wrong rotor

IATF 16949 clause 10.2.4 expects error-proofing controls "where appropriate". And on every critical characteristic, an OEM auditor will tell you it's appropriate. The classic SMB implementation is a sign at the station that says "RIGHT-HAND ONLY" with no enforcement. The IATF-grade implementation is a scan-required gate at the build step: operator must scan the expected part number, kiosk validates, mismatch halts the build and logs the attempt. Ignite Lean ships this as a per-task toggle in the engineering workbench. No separate poka-yoke system, no extra hardware beyond a $40 USB barcode reader.

  • Per-task scan-required toggle in the engineering workbench
  • Wrong-part scan halts the build and logs the attempt
  • No dedicated poka-yoke hardware. Runs on the same tablet
  • Tablet camera works as a barcode reader (USB / BT scanner also fine)
  • Closes IATF 10.2.4 error-proofing requirement on critical chars
  • Attempted mismatches feed clause 10.2 corrective action data
Change management

Why your last engineering change drifted

Engineering changes a torque value Tuesday morning. By Friday, 40% of operators have heard about it (toolbox talk), 30% have seen the updated binder, 30% are still building to the old spec. Come the next audit, the auditor samples 20 units and finds mixed records. That's a non-conformance, sometimes a major. IATF clause 6.3 expects change management that prevents this scenario by architecture. Database-backed WIs close the gap: engineering publishes, the next badge-in at the station renders the new version, the build record captures the revision in use. No more "did everyone get the new spec?"

  • WI revision changes propagate to the floor on next badge-in
  • Build record captures the WI revision the operator actually used
  • Change history per WI shows who changed what and when
  • No physical document distribution = no distribution gap
  • Closes IATF clause 6.3 change-management findings structurally
IATF audit prep

Day-of-audit walk-down in 30 minutes

IATF audits typically run 3–5 days for an SMB supplier, with one auditor + one or two technical experts. Day one is the document review. Control plans, FMEAs, work instructions, training records. Day two is the floor walk. The walk is where most non-conformances come from, because that's where the paper-vs-reality gap shows up. With Ignite Lean, the floor walk becomes the auditor watching operators build to the current revision, scan-validated, with the build record updating in real time on the supervisor's screen. Exactly the system you documented in the day-one paperwork.

  • Day-one document review: WI revision history + control plan link visible
  • Day-two floor walk: operators building to the current revision, live
  • Sample any serial: full build record, every step, every component
  • Sample any WI: every revision since program launch, with editors named
  • Sample any NC: photo, supervisor, disposition, reason. All attributed
  • Pre-walk in 30 min: filter build history by date, click 10 serials, done
Get started

Ready to run your line on Ignite Lean?

Free during early access — 1 manager seat included, unlimited operators.

Get early access