PCBA Supplier Qualification
Quality & Inspection Standards
PRODUCTS CENTER
Get Custom Quote
PRODUCTS CENTER
PCBA Supplier Qualification Under GJB9001C — Implementation Guide for PCB Manufacturers
PCBA supplier qualification is a mandatory requirement under GJB9001C for any organization that outsources printed circuit board assembly. Clause 8.4.1 requires organizations to establish and implement criteria for the evaluation, selection, performance monitoring, and re-evaluation of external providers.When a PCBA supplier provides processes, products, or services that form part of the organization's own products, the organization must ensure that the external provider meets specified requirements.
For organizations that design PCBs but outsource assembly, PCBA supplier qualification is the critical gatekeeper that determines whether the assembled boards will meet performance, reliability, and program requirements. A single nonconforming PCBA supplier can compromise an entire program — causing delivery delays, cost overruns, and field failures. This guide provides a complete implementation roadmap covering the standard requirements, PCBA supplier classification, the qualification process, PCBA-specific audit criteria, and audit preparation.
Target Audience: Quality Managers, Procurement Managers, Supply Chain Managers, Program Managers, Design Engineers, and all personnel responsible for PCBA supplier qualification and management in military and aerospace programs.
Engineering Summary
- GJB9001C Clause 8.4.1 requires organizations to establish and implement criteria for evaluation, selection, performance monitoring, and re-evaluation of external providers.
- PCBA suppliers must be classified based on the criticality of the products they provide — assembly subcontractors for military programs are typically Class A (Critical) suppliers.
- Organizations shall compile an Approved Supplier List based on evaluation results, which serves as the basis for selecting external providers and for procurement.
- When selecting external providers outside the Approved Supplier List, approval procedures must be followed.
- Organizations shall require external providers to implement appropriate controls over their direct and sub-tier external providers.
- Key PCBA supplier audit areas: quality management system, SMT/THT capability, process control, material control, ESD control, counterfeit prevention, traceability, test/inspection capability, and change management.
- Risk assessment is mandatory when selecting and evaluating PCBA suppliers — organizations must effectively identify and control risks.
1. What Auditors Check — A Quick Overview
| Audit Focus | What External Auditors Verify | Expected Evidence |
|---|---|---|
| Supplier Evaluation Criteria | Are PCBA supplier evaluation criteria established and documented? | Evaluation procedure, PCBA supplier-specific criteria |
| Supplier Qualification | Are PCBA suppliers fully qualified before production release? | Qualification records, survey results, audit reports, FAI reports |
| Supplier Classification | Are PCBA suppliers properly classified based on criticality? | Classification criteria, tier assignments |
| Approved Supplier List | Are PCBA suppliers on the AVL with defined scope of supply? | AVL with PCBA supplier entries, scope definition |
| Performance Monitoring | Is PCBA supplier performance monitored and re-evaluated? | Performance data, quality records, re-evaluation results |
| Risk Assessment | Are risks identified and controlled in PCBA supplier selection? | Risk assessment records, risk mitigation plans |
| Customer Involvement | Were customers invited to participate in PCBA supplier evaluation? | Invitation records, customer participation documentation |
| Sub-tier Control | Are PCBA suppliers controlling their direct and sub-tier suppliers? | Sub-tier control records, flow-down requirements |
KEY INSIGHT:
PCBA supplier qualification is frequently audited because assembly quality directly affects product functionality and reliability. Auditors will verify that PCBA suppliers are properly evaluated, classified, approved, monitored, and re-evaluated — and that all assembly processes meet military and IPC requirements.
2. Standard Requirements for PCBA Supplier Qualification
2.1 GJB9001C Clause 8.4.1 — General Requirements
GJB9001C-2017 Clause 8.4.1 establishes the foundational requirement for PCBA supplier qualification:
"The organization shall ensure that externally provided processes, products, and services conform to requirements. The organization shall determine the controls to be applied to externally provided processes, products, and services when external providers' products and services will form part of the organization's own products and services."
The organization shall:
- Establish and implement criteria for the evaluation, selection, performance monitoring, and re-evaluation of PCBA suppliers, based on the external provider's ability to provide processes, products, and services in accordance with requirements
- Retain documented information of these activities and any necessary actions arising from evaluations
- Compile an Approved Supplier List based on evaluation results, which serves as the basis for selecting external providers and for procurement
- When selecting external providers outside the Approved Supplier List, follow approval procedures
2.2 Clause 8.4.2 — Control Types and Extent
Clause 8.4.2 requires organizations to ensure that externally provided processes, products, and services do not adversely affect the organization's ability to consistently deliver conforming products and services. For PCBA suppliers, this means:
- Ensuring that externally provided processes remain within the control of the organization's quality management system
- Defining the controls to be applied to PCBA suppliers and their outputs
- Considering the potential impact of PCBA quality on the organization's ability to meet customer and regulatory requirements
- Determining necessary verification activities to ensure PCBA meet requirements
- Defining verification requirements, methods, and acceptance criteria, and implementing verification with retained records
2.3 Clause 8.4.3 — Information for External Providers
Clause 8.4.3 requires organizations to communicate to PCBA suppliers the following requirements:
- The processes, products, and services to be provided — PCBA specifications, SMT/THT requirements, test requirements
- Approval requirements for: products and services; methods, processes, and equipment
- Capability requirements, including required personnel qualifications
- Verification or validation activities that the organization or its customers intend to perform at the supplier's site
- Requirement for PCBA suppliers to report technical quality issues and resolution results
- Requirement for PCBA suppliers to notify the organization of technical state changes, production line or process changes, or equipment changes
- Requirements for control of documented information that suppliers produce and maintain
2.4 IPC Standards and Military Requirements
PCBA suppliers must demonstrate compliance with applicable military and industry standards:
- IPC-A-610: Acceptability of Electronic Assemblies — the industry standard for workmanship of electronic assemblies
- IPC-J-STD-001: Requirements for Soldered Electrical and Electronic Assemblies — the standard for soldering processes
- GJB9001C: Military quality management system requirement for organizations supplying to military programs
- GJB 908: First Article Inspection — the standard for verifying that the first production article meets requirements
- AS5553/AS6174: Counterfeit prevention standards for electronic components
For military programs, PCBA suppliers must hold GJB9001C certification or equivalent military quality system certification, with the certification scope covering the specific assembly processes being outsourced.
3. PCBA Supplier Classification — Determining Control Levels
PCBA suppliers should be classified based on the criticality of the products they provide. Organizations may implement graded classification management of suppliers based on evaluation results.Classification determines the type and extent of control applied to each supplier.
3.1 Supplier Classification Criteria
Classification criteria shall include:
- Product criticality: Does the PCBA affect product form, fit, function, reliability, or safety?
- Assembly complexity: Does the PCBA require advanced technologies (BGA/CSP, micro-BGA, fine-pitch components)?
- Past experience: Historical performance and reliability of the PCBA supplier
- Quality system certification: Does the supplier hold GJB9001C or equivalent military certification?
- Technical capability: Can the supplier consistently meet PCBA specifications and workmanship standards?
3.2 Classification Tiers for PCBA Suppliers
| Tier | Description | Control Level | PCBA Supplier Examples |
|---|---|---|---|
| Class A (Critical) | Suppliers providing assemblies that directly affect product performance, reliability, or safety | Full qualification audit, on-site assessment, ongoing monitoring, FAI per GJB 908, customer involvement, GJB9001C required | Military PCBA with BGA/CSP, high-reliability assemblies, IPC Class 3 workmanship |
| Class B (Significant) | Suppliers providing assemblies that affect product quality but not critical characteristics | Qualification survey, periodic performance review, sample inspection, ISO9001 acceptable | Standard SMT assemblies (non-critical applications), IPC Class 2 workmanship |
| Class C (Standard) | Suppliers providing standard assemblies with minimal impact on product quality | Basic qualification, incoming inspection, periodic re-evaluation | Simple through-hole assemblies, prototyping services, non-critical assemblies |
4. PCBA Supplier Qualification Process — The Seven Steps
The PCBA supplier qualification process follows a structured approach from identification through ongoing monitoring.
| Step | Activity | PCBA Supplier Example |
|---|---|---|
| 1 | Identify Need — Determine the need for a new PCBA supplier or new capability. Define assembly requirements, technology needs, and program requirements. | Identify need for a BGA/CSP assembly supplier for a military avionics program. Define requirements: GJB9001C, IPC-A-610 Class 3, X-ray inspection, functional testing, BGA rework capability. |
| 2 | Define Evaluation Criteria — Establish criteria for evaluating potential PCBA suppliers based on their ability to meet requirements. Consider quality system, technical capability, production capacity, quality history, delivery performance, and technical support. | Define criteria: GJB9001C certification; SMT capability (0201, BGA, CSP, micro-BGA); X-ray and AOI inspection; production capacity; quality history (DPPM, yield); delivery performance; technical support capability. |
| 3 | Conduct Risk Assessment — Identify and control risks in PCBA supplier selection. Assess single-source dependency, technology maturity, supply chain risks, counterfeit risk, and geopolitical factors. | Assess risks: single-source dependency for BGA assembly capability; supply chain risks for critical components; counterfeit risk for high-value components; technology maturity of fine-pitch assembly processes. |
| 4 | Evaluate Supplier — Conduct supplier evaluation including quality system assessment, capability review, site audit, and product qualification. Invite customer participation for suppliers of interest. | Conduct supplier quality survey; review GJB9001C certification; perform on-site audit of assembly facility; review equipment capability (SMT lines, reflow, X-ray, AOI); request sample assemblies for qualification testing. |
| 5 | Approve and Add to AVL — Based on positive evaluation results, approve the supplier and add to the Approved Supplier List. Define the scope of supply and classification. | Approve PCBA supplier; add to AVL with scope: "PCBA assembly — SMT, through-hole, BGA/CSP, IPC-A-610 Class 3, functional testing"; classify as Class A (Critical). |
| 6 | Monitor Performance — Monitor PCBA supplier performance continuously. Track quality (yield, DPPM, FAI results, customer returns), delivery performance, and technical support. Maintain performance records. | Track PCBA quality: yield per assembly, DPPM, FAI results, customer returns; track on-time delivery performance; maintain supplier scorecard; conduct periodic supplier reviews. |
| 7 | Re-evaluate and Update AVL — Conduct periodic re-evaluation based on performance data. Update AVL status: maintain, upgrade, downgrade, or remove. Promptly revise AVL to reflect current status. | Annual re-evaluation of PCBA supplier; update AVL with current performance rating; if quality issues are identified, place on probation or remove from AVL. |
CRITICAL RULE:
PCBA suppliers must be fully qualified before production release. This includes on-site audit, capability verification, and First Article Inspection (FAI) per GJB 908 on the first production assembly. Organizations shall retain documented information of these activities.
5. PCBA Supplier Qualification Scenarios — Practical Examples
5.1 PCBA Assembly Subcontractor Qualification
| Item | Description |
|---|---|
| Supplier Type | PCBA assembly subcontractor (SMT + through-hole + test) |
| Classification | Class A (Critical) — assembly directly affects product functionality and reliability |
| Capability Requirements | SMT (0201, BGA, CSP, micro-BGA, QFN), through-hole, selective soldering, X-ray inspection, AOI, ICT/functional testing, conformal coating, IPC-A-610 Class 3 workmanship |
| Evaluation Criteria | GJB9001C certification; assembly capability; production capacity (panels per shift, throughput); quality history (DPPM, yield); delivery performance; customer references; technical support; ESD control program |
| Verification Activities | On-site audit of assembly facility; review of process controls (soldering profile, cleaning, inspection); equipment capability assessment; ESD control verification; First Article Inspection (FAI) per GJB 908 on first production batch |
| Documentation | Supplier quality survey, audit report, FAI report, process qualification records, material certifications, AVL entry, documented information of evaluation activities |
5.2 PCBA Supplier Self-Assessment Questionnaire
| Section | Key Assessment Areas |
|---|---|
| Company Profile | Company legal name, location, years in business, number of employees, annual revenue, ownership structure |
| Quality Management | Certifications (GJB9001C, ISO9001, AS9100), quality policy, organizational structure, quality personnel qualifications |
| Technical Capability | SMT capability (component sizes, package types), through-hole capability, BGA/CSP capability, fine-pitch capability, rework capability, X-ray inspection, AOI capability |
| Process Control | Process control documentation, SPC implementation, equipment calibration, soldering profile control, ESD control program, environmental controls (temperature, humidity) |
| Material Control | Component procurement and qualification, incoming inspection, material traceability, shelf-life management, moisture-sensitive device (MSD) control, counterfeit prevention program (AS5553/AS6174) |
| Testing and Inspection | Test capabilities (ICT, functional test, flying probe), inspection capabilities (AOI, X-ray, visual), test equipment calibration, test method validation, inspection records |
| Change Management | Process change control, component substitution approval, PCN procedure, customer notification process, technical state change notification |
| Traceability | Lot-level traceability from component receipt through shipment, serial number tracking (if required), traceability records retention, defective product identification and control |
6. Key Control Points in PCBA Supplier Qualification
6.1 On-Site Supplier Audit
- Conduct on-site audits for all Class A PCBA suppliers before approval
- Audit scope: quality management system, assembly capability, process control, material control, ESD control, test/inspection capability, and change management
- Audit team should include representatives from research and development (R&D), process engineering, and quality
- Use standardized audit checklists and scoring systems
- Document audit findings, nonconformances, and corrective actions
- Follow up on corrective actions before final approval
6.2 First Article Inspection (FAI)
- Conduct FAI per GJB 908 on the first production batch from each new PCBA supplier
- FAI must verify: workmanship per IPC-A-610 Class 3, component placement accuracy, solder joint quality, electrical performance, and functional testing results
- Document FAI results in a formal FAI report
- Obtain customer approval of FAI results (if required)
- For changes affecting form, fit, function, or reliability, conduct delta FAI
6.3 Supplier Performance Monitoring
- Monitor PCBA supplier performance continuously using defined metrics
- Key metrics: quality (yield, DPPM, FAI pass rate, customer returns), delivery (on-time delivery rate), cost (price competitiveness), and service (technical support responsiveness)
- Maintain supplier scorecards and performance records
- Conduct periodic supplier reviews and communicate performance feedback
- Communicate with suppliers identified for improvement and conduct follow-up management
6.4 Change Management
- Require PCBA suppliers to notify the organization of technical state changes, production line or process changes, or equipment changes
- Establish a formal PCN process for PCBA supplier changes
- Evaluate the impact of supplier changes on product quality and reliability
- Require re-qualification or delta FAI for significant changes
- Maintain records of supplier change notifications and actions taken
6.5 Sub-tier Supplier Control
- Require PCBA suppliers to implement appropriate controls over their direct and sub-tier external providers
- Flow down applicable quality requirements to sub-tier suppliers
- Verify that sub-tier suppliers meet required qualifications (component certifications, etc.)
- Include sub-tier control requirements in supplier contracts and quality agreements
6.6 Risk Management
- Conduct risk assessment for all PCBA suppliers
- Identify and assess risks: single-source dependency, technology maturity, supply chain disruptions, capacity constraints, counterfeit risk, and geopolitical factors
- Develop and implement risk mitigation measures: dual sourcing, capacity commitments, inventory buffers, and supplier diversification
- Monitor and review risks periodically
7. PCBA Supplier Audit Checklist — Key Areas to Verify On-Site
| Audit Area | Verification Points |
|---|---|
| Quality Management System | GJB9001C certification status (verify certification scope covers PCBA); quality manual and procedures; management review records; internal audit records; corrective action system; customer complaint handling |
| Assembly Capability | SMT line capability (component sizes: 0201, 01005; package types: BGA, CSP, QFN, micro-BGA); through-hole capability (wave soldering, selective soldering); rework capability (BGA rework station); equipment list and maintenance records; production capacity (panels per shift) |
| Process Control | Process control documentation; SPC implementation; soldering profile control (reflow, wave); process monitoring and control records; equipment calibration records; environmental controls (temperature, humidity, cleanliness) |
| ESD Control | ESD control program documentation; ESD-protected areas (EPA) verification; grounding systems; ESD monitoring records; personnel ESD training records |
| Material Control | Component procurement and qualification; incoming inspection (IQC); material traceability (lot-level); shelf-life management; MSD control (baking, handling); counterfeit prevention program (AS5553/AS6174) |
| Testing and Inspection | Test capabilities (ICT, functional test, flying probe); inspection capabilities (AOI, X-ray, visual); test equipment calibration; test method validation; inspection records; first article inspection records |
| Change Management | Process change control procedure; component substitution approval procedure; PCN procedure; customer notification process; change records |
| Traceability | Lot-level traceability from component receipt through shipment; serial number tracking (if required); traceability records retention; defective product identification and control |
| Workmanship | IPC-A-610 compliance (Class 2 or 3); soldering quality; component placement accuracy; cleaning and contamination control; conformal coating (if applicable) |
8. Audit Preparation Checklist for PCB Manufacturers
| # | Check Item | Clause | Status | Notes |
|---|---|---|---|---|
| Evaluation Criteria | ||||
| 1 | PCBA supplier evaluation criteria are established and documented | 8.4.1 | ☐ | |
| 2 | Criteria cover PCBA-specific requirements (SMT, through-hole, BGA, test, etc.) | 8.4.1 | ☐ | |
| Supplier Qualification | ||||
| 3 | PCBA suppliers are fully qualified before production release | 8.4.2 | ☐ | |
| 4 | Supplier quality surveys are completed and recorded | 8.4.1 | ☐ | |
| 5 | On-site audits are conducted for Class A PCBA suppliers | 8.4.1 | ☐ | |
| 6 | FAI per GJB 908 is completed and documented | GJB 908 | ☐ | |
| Supplier Classification | ||||
| 7 | PCBA suppliers are classified (Class A/B/C) | 8.4.2 | ☐ | |
| 8 | Classification criteria are documented and applied consistently | 8.4.2 | ☐ | |
| Approved Supplier List | ||||
| 9 | PCBA suppliers are on the AVL with defined scope | 8.4.1 | ☐ | |
| 10 | AVL specifies the assembly types and technologies each supplier is approved to provide | 8.4.1 | ☐ | |
| Performance Monitoring | ||||
| 11 | PCBA supplier performance is monitored and recorded | 8.4.1 | ☐ | |
| 12 | Re-evaluation is conducted periodically | 8.4.1 | ☐ | |
| Risk Management | ||||
| 13 | Risk assessment is conducted for PCBA suppliers | 8.4.1 | ☐ | |
| 14 | Risk mitigation measures are implemented | 8.1 | ☐ | |
| Customer Involvement | ||||
| 15 | Customers are invited to participate in PCBA supplier evaluation | 8.4.1 | ☐ | |
| 16 | Customer involvement is documented | 8.4.1 | ☐ | |
9. Common Audit Findings and How to Avoid Them
| Finding | Why It Happens | How to Avoid |
|---|---|---|
| "No PCBA supplier evaluation criteria" | PCBA-specific criteria not established | Document evaluation criteria for PCBA suppliers — include SMT capability, BGA/CSP capability, workmanship standards, and program requirements |
| "PCBA supplier not fully qualified before production" | Production started before qualification completed | Complete qualification (survey, audit, FAI) before releasing production orders |
| "No FAI conducted for new PCBA supplier" | FAI requirement not recognized or implemented | Conduct FAI per GJB 908 for all new PCBA suppliers; document results |
| "PCBA supplier not on AVL" | Procurement from unapproved suppliers | Ensure all PCBA suppliers are on AVL; follow approval procedures for exceptions |
| "No supplier performance monitoring" | Suppliers not monitored after initial approval | Monitor performance; conduct periodic re-evaluation; update AVL |
| "No risk assessment for PCBA suppliers" | Risks not identified in supplier selection | Conduct risk assessment for all PCBA suppliers; document mitigation |
| "Supplier change not controlled" | Process or component changes without notification | Establish PCN process; require supplier notification of changes; conduct delta FAI |
| "No documented information of evaluation activities" | Records not retained | Retain documented information of all evaluation, selection, monitoring, and re-evaluation activities |
10. Frequently Asked Questions
What is PCBA supplier qualification under GJB9001C?
PCBA supplier qualification is the formal process of evaluating, selecting, approving, monitoring, and re-evaluating suppliers of printed circuit board assembly services to ensure they can consistently provide assemblies that conform to requirements.
What types of PCBA suppliers require qualification?
All PCBA suppliers require qualification: SMT assembly subcontractors, through-hole assembly subcontractors, mixed-technology assembly subcontractors, and any external provider that performs assembly processes that become part of the final product.
How should PCBA suppliers be classified?
PCBA suppliers should be classified based on product criticality: Class A (Critical — affects performance, reliability, or safety), Class B (Significant — affects quality but not critical characteristics), and Class C (Standard — minimal impact on quality).
What is First Article Inspection for PCBA suppliers?
First Article Inspection (FAI) per GJB 908 is a formal verification process conducted on the first production batch from a new PCBA supplier. It verifies that the assembled boards meet all design, workmanship, and performance requirements before production release.
What should be included in a PCBA supplier audit?
A PCBA supplier audit should include: quality management system review, assembly capability assessment, process control verification, ESD control verification, material control review, test and inspection capability verification, change management review, traceability verification, and workmanship assessment.
What documented information must be retained for PCBA suppliers?
Organizations must retain: evaluation criteria, evaluation records, supplier quality surveys, audit reports, FAI reports per GJB 908, Approved Supplier List entries, performance monitoring records, and re-evaluation results.
What is the role of customers in PCBA supplier qualification?
Organizations shall invite customers to participate in the evaluation and selection of external providers of interest to them. This includes sharing risk assessment information and obtaining customer approval for critical PCBA supplier selections when required.
What happens when a PCBA supplier underperforms?
Underperforming PCBA suppliers should be placed on probation with required improvement actions, or removed from the Approved Supplier List. Communication and tracking are required for suppliers identified for improvement.
Related Standards & Topics
PCB and PCBA Manufacturing for Military and Aerospace Programs
UltroNiu Electronics Group provides PCB and PCBA manufacturing services with GJB9001C-compliant supplier qualification and management. Contact our engineering team for program-specific PCBA supplier qualification and supply chain management requirements.
Request Engineering ReviewReferences: GJB9001C-2017 Clauses 8.4, 8.4.1, 8.4.2, 8.4.3, 8.1 (Central Military Commission Equipment Development Department). PCBA supplier qualification requirements sourced from GJB9001C-2017 Clause 8.4.1. Approved Supplier List requirements sourced from GJB9001C-2017 Clause 8.4.1. Risk assessment requirements sourced from GJB9001C-2017 Clauses 8.1 and 8.4.1. First Article Inspection requirements sourced from GJB 908-2010. Workmanship requirements based on IPC-A-610. Technical state change notification requirements sourced from GJB 3206B-2022. Counterfeit prevention guidance sourced from AS5553 and AS6174 standards. PCBA supplier qualification practices based on industry best practices for military and aerospace PCBA manufacturing. Courtesy of UltroNiu Engineering Knowledge Center.
Get Custom Quote
PRODUCTS CENTER
World-class PCB & PCBA manufacturer focused on high-frequency and high-reliability boards for defense, aerospace, automotive and industrial electronics.
You can unsubscribe at any time with a single click.
Copyright © 2025 UltroNiu Electronics Group All Rights reserved.
Sorry, there is currently no content in the current column
You can check other sections
Business License