Back to Frameworks

NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production

International (NATO; applied by member and partner nations under STANAG 4107)
vEdition D Version 1 (June 2016)
7 domains
33 controls

NATO's contractual quality assurance requirements for suppliers doing design, development and production for NATO nations and agencies: ISO 9001:2015 plus the NATO additions: GQAR access and support at supplier and sub-tier sites, a GQA management representative, ISO 31000 risk management from contract review, ISO 10012 measurement, a contract Quality Plan with a compliance matrix, configuration management to ACMP 2100, flow-down with the GQA clause, counterfeit materiel prevention, traceability for critical items, shelf-life control, Certificates of Conformity, GQAR authority over concessions, annual audits of contract-critical processes and defined root cause analysis. Built from the complete Edition D Version 1 text.

Verified

NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production is a compliance framework from International (NATO; applied by member and partner nations under STANAG 4107) with 7 domains and 33 controls that map to 62 other frameworks. The largest domains are 5.4 Operation – NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production (18 controls), 5.3 Support – NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production (5 controls), 5.5 Performance evaluation – NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production (4 controls). Every control below carries what it requires and what an assessor expects to see.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Framework summaries on this platform are interpretations grounded in the published source, for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (7)

5.1 Leadership – NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production

1 controls
Controls in the 5.1 Leadership – NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production domain of NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production: 1 controls
CodeTitle
nato-aqap-2110-quality-assurance-requirements-for-design-development-and-production::5.1.15.1.1 Appoint a management representative for GQA reporting directly to top management

5.2 Planning – NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production

1 controls
Controls in the 5.2 Planning – NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production domain of NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production: 1 controls
CodeTitle
nato-aqap-2110-quality-assurance-requirements-for-design-development-and-production::5.2.15.2.1 Manage risk from contract review onward to ISO 31000 and share the risk plan

5.3 Support – NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production

5 controls
Controls in the 5.3 Support – NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production domain of NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production: 5 controls
CodeTitle
nato-aqap-2110-quality-assurance-requirements-for-design-development-and-production::5.3.15.3.1 Provide a segregation area for nonconforming product
nato-aqap-2110-quality-assurance-requirements-for-design-development-and-production::5.3.25.3.2 Run the contract's measurement and calibration system to ISO 10012 and report calibration failures
nato-aqap-2110-quality-assurance-requirements-for-design-development-and-production::5.3.35.3.3 Maintain a process for training needs and competence of everyone affecting product quality
nato-aqap-2110-quality-assurance-requirements-for-design-development-and-production::5.3.45.3.4 Make contract staff and External Providers aware of the quality plan arrangements
nato-aqap-2110-quality-assurance-requirements-for-design-development-and-production::5.3.55.3.5 Give the GQAR access to contract documented information in an agreed format

5.4 Operation – NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production

18 controls
Controls in the 5.4 Operation – NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production domain of NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production: 18 controls
CodeTitle
nato-aqap-2110-quality-assurance-requirements-for-design-development-and-production::5.4.15.4.1 Define acceptance evidence and keep product and process approval records, including for External Providers
nato-aqap-2110-quality-assurance-requirements-for-design-development-and-production::5.4.1.15.4.1.1 Submit an acceptable contract Quality Plan with a requirement and solution compliance matrix before work starts
nato-aqap-2110-quality-assurance-requirements-for-design-development-and-production::5.4.1.2.15.4.1.2.1 Manage configuration to ACMP 2100 across planning, identification, change control, status accounting and audit
nato-aqap-2110-quality-assurance-requirements-for-design-development-and-production::5.4.1.2.25.4.1.2.2 Prepare a Configuration Management Plan for the contract
nato-aqap-2110-quality-assurance-requirements-for-design-development-and-production::5.4.105.4.10 Control shelf life and declare remaining life before delivery
nato-aqap-2110-quality-assurance-requirements-for-design-development-and-production::5.4.115.4.11 Release only acceptable product with a Certificate of Conformity and give 10 working days notice of Acquirer inspections
nato-aqap-2110-quality-assurance-requirements-for-design-development-and-production::5.4.125.4.12 Control, report and obtain authority for nonconforming product and concessions
nato-aqap-2110-quality-assurance-requirements-for-design-development-and-production::5.4.25.4.2 Hold the post-award GQA meeting, keep lines to the GQAR and report organisational changes
nato-aqap-2110-quality-assurance-requirements-for-design-development-and-production::5.4.35.4.3 Identify product requirements tied to critical characteristics
nato-aqap-2110-quality-assurance-requirements-for-design-development-and-production::5.4.45.4.4 Determine verification and validation methods and show conformity at stages up to the final product
nato-aqap-2110-quality-assurance-requirements-for-design-development-and-production::5.4.55.4.5 Control dependability issues and documents when the contract requires it
nato-aqap-2110-quality-assurance-requirements-for-design-development-and-production::5.4.65.4.6 Keep and share verification records of purchased product
nato-aqap-2110-quality-assurance-requirements-for-design-development-and-production::5.4.6.15.4.6.1 Know the supply chain for critical items and flow down contract requirements with the GQA clause
nato-aqap-2110-quality-assurance-requirements-for-design-development-and-production::5.4.6.25.4.6.2 Ensure External Provider processes are implemented and prevent counterfeit materiel
nato-aqap-2110-quality-assurance-requirements-for-design-development-and-production::5.4.6.35.4.6.3 Share sub-contracts and notify the GQAR of risky sub-contracts and rejected supplied product
nato-aqap-2110-quality-assurance-requirements-for-design-development-and-production::5.4.75.4.7 Maintain production instructions and workmanship criteria
nato-aqap-2110-quality-assurance-requirements-for-design-development-and-production::5.4.85.4.8 Maintain traceability wherever failure could cause loss of equipment, performance or life
nato-aqap-2110-quality-assurance-requirements-for-design-development-and-production::5.4.95.4.9 Report lost, damaged or unsuitable Acquirer-supplied property at once

5.5 Performance evaluation – NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production

4 controls
Controls in the 5.5 Performance evaluation – NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production domain of NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production: 4 controls
CodeTitle
nato-aqap-2110-quality-assurance-requirements-for-design-development-and-production::5.5.15.5.1 Record GQAR-reported deficiencies as customer complaints and answer with root cause and corrective action
nato-aqap-2110-quality-assurance-requirements-for-design-development-and-production::5.5.25.5.2 Audit all contract-critical processes annually, including NATO supplements, and report findings
nato-aqap-2110-quality-assurance-requirements-for-design-development-and-production::5.5.3.15.5.3.1 Make contract-related management review inputs available to the GQAR
nato-aqap-2110-quality-assurance-requirements-for-design-development-and-production::5.5.3.25.5.3.2 Share contract-related review outputs and notify actions affecting contract compliance

5.6 Improvement – NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production

1 controls
Controls in the 5.6 Improvement – NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production domain of NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production: 1 controls
CodeTitle
nato-aqap-2110-quality-assurance-requirements-for-design-development-and-production::5.6.15.6.1 Define the root cause analysis process, tools and techniques for nonconformities

Chapter 4: General QMS requirements (ISO 9001:2015 applied) – NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production

3 controls
Controls in the Chapter 4: General QMS requirements (ISO 9001:2015 applied) – NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production domain of NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production: 3 controls
CodeTitle
nato-aqap-2110-quality-assurance-requirements-for-design-development-and-production::4.14.1 QMS meeting this publication, including ISO 9001:2015 as needed for the contract
nato-aqap-2110-quality-assurance-requirements-for-design-development-and-production::4.24.2 QMS evidence available to the GQAR, and corrective proposals if the QMS is rejected
nato-aqap-2110-quality-assurance-requirements-for-design-development-and-production::4.34.3 Give the GQAR access, information, facilities and assistance at Supplier and External Provider sites

Your Compliance Coverage

If you comply with NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production, you already cover:

Maps to 62 other frameworks

41 total controls
ICH Q10 - Pharmaceutical Quality System
6 source controls mapped|4 target controls covered
15%
SQF Code Edition 9 - Safe Quality Food
5 source controls mapped|2 target controls covered
12%
FDA Quality Management System Regulation (QMSR)
5 source controls mapped|3 target controls covered
12%
ICAO Annex 17 - Aviation Security (AVSEC)
5 source controls mapped|2 target controls covered
12%
IATF 16949:2016 - Quality Management System for Automotive Production
5 source controls mapped|3 target controls covered
12%
GLOBALG.A.P. Integrated Farm Assurance (IFA) Standard v6
5 source controls mapped|1 target controls covered
12%
German Supply Chain Due Diligence Act (LkSG)
5 source controls mapped|2 target controls covered
12%
OWASP Top 10:2025
4 source controls mapped|2 target controls covered
10%
API 1164
4 source controls mapped|5 target controls covered
10%
FedRAMP Rev 5
4 source controls mapped|3 target controls covered
10%
IRM/AIRMIC/ALARM A Risk Management Standard (2002)
4 source controls mapped|1 target controls covered
10%
IMO Maritime Cybersecurity Guidelines (MSC-FAL.1/Circ.3/Rev.4)
4 source controls mapped|3 target controls covered
10%
IEEE 1686
4 source controls mapped|4 target controls covered
10%
GAMP 5 - Good Automated Manufacturing Practice
4 source controls mapped|2 target controls covered
10%
7%
Vermont Data Privacy and Online Surveillance Act
3 source controls mapped|1 target controls covered
7%
UK Defence Standard 05-138 - Cyber Security for Defence Suppliers
3 source controls mapped|1 target controls covered
7%
Authorised Economic Operator (AEO) Programmes - Global Standards
3 source controls mapped|2 target controls covered
7%
ISO/IEC 27011:2024
3 source controls mapped|1 target controls covered
7%
ISO/IEC 27010:2015
3 source controls mapped|1 target controls covered
7%
Automotive SPICE (ASPICE) v4.1 - Process Assessment Model
3 source controls mapped|1 target controls covered
7%
French Sapin II Law (Law No. 2016-1691)
3 source controls mapped|1 target controls covered
7%
MTCS (Singapore)
3 source controls mapped|1 target controls covered
7%
Modern Slavery Act 2018 (Australia)
3 source controls mapped|2 target controls covered
7%
HKMA Cyber Resilience Assessment Framework (C-RAF)
3 source controls mapped|2 target controls covered
7%
GS1 Global Standards - Supply Chain Traceability and Data Security
3 source controls mapped|2 target controls covered
7%
Aged Care Quality Standards 2019 (repealed edition)
3 source controls mapped|4 target controls covered
7%
ISO/IEC 27400:2022
2 source controls mapped|2 target controls covered
5%
FISMA
2 source controls mapped|2 target controls covered
5%
Florida Digital Bill of Rights (FDBR)
2 source controls mapped|3 target controls covered
5%
FTC GLBA Safeguards Rule (16 CFR Part 314)
2 source controls mapped|2 target controls covered
5%
ISMAP (Japan)
2 source controls mapped|2 target controls covered
5%
Ghana Cybersecurity Act
2 source controls mapped|1 target controls covered
5%
Monetary Authority of Singapore Technology Risk Management Guidelines
2 source controls mapped|3 target controls covered
5%
HKMA SPM
2 source controls mapped|2 target controls covered
5%
GLBA
2 source controls mapped|1 target controls covered
5%
SWIFT CSCF
2 source controls mapped|2 target controls covered
5%
ITAR - International Traffic in Arms Regulations
2 source controls mapped|1 target controls covered
5%
ICH E6(R3) - Good Clinical Practice
2 source controls mapped|2 target controls covered
5%
ISO/IEC 27014:2020
2 source controls mapped|1 target controls covered
5%
US Gramm-Leach-Bliley Act (GLBA) - Higher Education Safeguards Rule
1 source controls mapped|1 target controls covered
2%
ISO/IEC 27006-1:2024
1 source controls mapped|1 target controls covered
2%
Japan FSA Cybersecurity Guidelines for Financial Institutions
1 source controls mapped|1 target controls covered
2%
ISO 27002:2022
1 source controls mapped|1 target controls covered
2%
OWASP API Security Top 10 - 2023
1 source controls mapped|1 target controls covered
2%
Japan AI Guidelines
1 source controls mapped|1 target controls covered
2%
ITU-T X.805 - Security Architecture for End-to-End Communications
1 source controls mapped|1 target controls covered
2%
India CERT-In Cyber Security Directions 2022
1 source controls mapped|1 target controls covered
2%
IEEE 7000
1 source controls mapped|1 target controls covered
2%
ASIS SPC.1-2009 - Organizational Resilience Standard
1 source controls mapped|3 target controls covered
2%
IEC 62351 - Power Systems Communication Security
1 source controls mapped|2 target controls covered
2%
ISO/IEC 27031:2011
1 source controls mapped|2 target controls covered
2%
ISO/IEC 27007:2020
1 source controls mapped|1 target controls covered
2%
TEFCA - Trusted Exchange Framework and Common Agreement
1 source controls mapped|2 target controls covered
2%
Regulation on the European Health Data Space (EHDS)
1 source controls mapped|3 target controls covered
2%
NAIC Insurance Data Security Model Law (MDL-668)
1 source controls mapped|1 target controls covered
2%
MDS2 (Medical Device)
1 source controls mapped|3 target controls covered
2%
COSO Internal Control - Integrated Framework (2013)
1 source controls mapped|2 target controls covered
2%
IEC 60601-1 - Medical Electrical Equipment Safety
1 source controls mapped|1 target controls covered
2%

Coverage is not the same as your position

This page shows what NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production overlaps with in general. Where your organisation actually stands, against the standard you are going for and the certifications you already hold, is a different question. Same graph and the same recorded refutations, scoped to you rather than to a pair.

The Compliance Position Diagnostic, $5,000 fixed, ten business days

What is NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production and who does it apply to?

NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production is a compliance framework from International (NATO; applied by member and partner nations under STANAG 4107) with 7 domains and 33 controls. NATO's contractual quality assurance requirements for suppliers doing design, development and production for NATO nations and agencies: ISO 9001:2015 plus the NATO additions: GQAR access and support at supplier and sub-tier sites, a GQA management representative, ISO 31000 risk management from contract review, ISO 10012 measurement, a contract Quality Plan with a compliance matrix, configuration management to ACMP 2100, flow-down with the GQA clause, counterfeit materiel prevention, traceability for critical items, shelf-life control, Certificates of Conformity, GQAR authority over concessions, annual audits of contract-critical processes and defined root cause analysis. Built from the complete Edition D Version 1 text. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

What does NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production actually require?

NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production has 33 controls organised across 7 domains. The largest domains are 5.4 Operation – NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production (18 controls), 5.3 Support – NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production (5 controls), 5.5 Performance evaluation – NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production (4 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

If I already comply with another framework, how much of NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production do I already cover?

NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production maps to 62 other compliance frameworks. The top mapping partners are ICH Q10 - Pharmaceutical Quality System (15% coverage), SQF Code Edition 9 - Safe Quality Food (12% coverage), FDA Quality Management System Regulation (QMSR) (12% coverage). Use our comparison tool to explore control-level mappings between frameworks.

How do I implement NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production?

Start your NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about NATO AQAP 2110 - Quality Assurance Requirements for Design, Development, and Production requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 33 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 1,121 frameworks.

Get Started Free →

Free forever, no credit card required