Vendors

Procurement Quality Assurance Requirements

SCOPE
This document defines Quality Requirements applicable to purchase orders. The requirements stated below are in addition to those
described on the purchase order.


1 GENERAL REQUIREMENTS

1.1 SPECIFICATIONS
All materials and processes supplied under the purchase order shall conform to the latest specification revision level, unless,
otherwise specified by Shim It’s purchase order. Shim It Manufacturing Corp.. will provide the latest specification for all
requirements at the supplier’s request.

1.2 COMPETENCY
Only competent personnel who have been trained to the supplier’s internal requirements and those requirements of Shim It Manufacturing Corp. may
perform work for any purchase order issued. All personnel who perform work for Shim It Manufacturing Corp. purchase
orders must have valid qualification records on file for the work being performed.

1.3 REQUIREMENTS
Products and services will not be delivered to Shim It Manufacturing Corp. unless they comply with all applicable purchase order
requirements and specifications.

1.4 NOTIFICATION
The supplier is responsible for communicating to Shim It Manufacturing   the following:
– Changes to a supplier process which could have an unintended impact on product and service conformity.
– Changes to the supplier’s quality management system, including changes in management, changes to certification status
or scope, and changes of location.
– Confirmed or suspected non-conformances related to product and service provision to Shim It found prior to or
after delivery.
– Intended changes to purchase order requirements including due date, specifications, and alternative recommendations to
superseded or suspended requirements.
Any of the indicated changes above that directly affect the conformance of products and services to Shim It or the
requirements of the purchase order must be approved in writing prior to implementation.

1.6 DOCUMENT SECURITY
Supplier shall safeguard the security and confidentiality of all documents and/or data forwarded, subject to Shim It’s
inspection if required, from the point of receipt through discard, shredding, destruction, etc.

1.7 SUB-TIER UTILIZATION
Any sub-tier suppliers utilized must be approved for use by the supplier. Customer designated sources must be prioritized for use if
indicated by Shim It Manufacturing Corporation, its Customer, or End User.


2. QUALITY REQUIREMENTS

2.1 GENERAL REQUIREMENTS
The suppliers Quality Management System must meet the requirements of ISO9001, AS9100.

2.2 CALIBRATION SERVICES
Any Calibration activities must meet requirements of ISO 17025 and Standards traceable to N.I.S.T.

2.3 SPECIAL PROCESSING
Special Process Suppliers shall maintain Nadcap certification for the process(es) offered.

2.4 APPROVAL STATUS
Product and service provision will only be issued to those suppliers that have been approved by Shim It. Approval status is
based on variable factors including on-time delivery, product and service conformity, and quality control. All suppliers must maintain
these areas of performance with Shim It at all times. If a supplier cannot provide adequate proof of these requirements by
Shim It, they will be removed from the Approved list of suppliers until corrections have been made which will support their
re-approval.

2.5 PROCESS APPROVAL
The supplier shall maintain a process for the provision of products and services to Shim It which can reliably produce the
conforming outputs. Supplier is responsible for validation of its processes and ensuring that the parts meet all product and service
requirements issued. First Article Inspection Reports in any format may be requested on the purchase order as evidence of
conformance. If a statistical technique or sampling plan is utilized for the product approval, the technique must be based on a valid
industry statistical approach.

2.6 AWARENESS
All personnel performing work under the control of the supplier shall be made aware of their contribution to product and service
conformity, product safety, and the importance of ethical behavior.

2.7 LOT CONTROL
All parts or materials shall be fabricated from the same manufacturing lot, unless, otherwise approved by Shim It Manufacturing Corporation.

2.8 RECORDS
Unless otherwise shown on purchase order, supplier shall retain and maintain records on purchased product for 10 years. Manned flight program records
shall be retained for 20 years (program will be noted on purchase order if required). Records shall be made available upon request
within 48 hours. Record disposition and disposal shall be carried out in a manner that eliminates the possibility of fraud or stolen
intellectual property.

2.9 RIGHT OF ACCESS
Shim It, its customers and regulatory agencies (under the permission of Shim It) may, at any point under this
purchase order, choose to perform inspection or auditing activities on the supplier’s premises. Notice of visitation will be given at
least three days prior to the visit. Shim It reserves the right to review any information or process which pertains to or directly
affects the conformity of products or services provided to Shim It including those of its supplier’s sub-tier suppliers.

2.10 DPD/MBD
Receiving, validation and security protocols for digital product definition and model-based definition data sets forwarded by our
company must conform to Boeing, Spirit Aerosystems, Goodrich Aerospace, Vought, and Northrop Grumman DPD/MBD
requirements as applicable.

2.11 CERTIFICATION OF CONFORMANCE
Certification of Conformance is required for each shipment of processed parts, chemicals, material and/or finished goods.
Certification of Conformance shall include a statement of conformity to the latest revision level of specifications and also include
name, title, signature, and acceptance stamp of company representative.

2.12 SOURCE INSPECTION
If Government Source Inspection is required supplier shall notify their Government Representative to plan for the appropriate
inspection point prior to shipment.
If Shim It Source Inspection is required supplier shall send 72 hour written notice to Shim It. Supplier shall
provide documentation, facilities and support personnel. Product shall not be released for shipment until inspection is complete.

2.13 MERCURY FREE
All purchased products must be mercury free. Seller shall certify that the product supplied is free of mercury contamination.

2.14 MATERIAL SAFETY DATA SHEET
MSDS is required for all metallics and chemicals.

2.15 FLOW-DOWN REQUIREMENTS
Supplier is responsible to flow down all applicable quality requirements to sub-tier suppliers, including key characteristics where required.
Any changes in the supplier’s approvals, excessive fallout 10% (Shim It supplied materials), unforeseen delays, and
anomalies found in their process that directly affect product supplied to Shim It, shall be immediately reported to
Shim It. Process and/or materials shall be supplied by Shim It’s customer and end user approved sources.



3. REGULATORY REQUIREMENTS

3.1 DDTC REGISTRATION
All manufacturers, exporters, and brokers of defense articles related technical data and defense services as defined on the United
States Munitions List (Part 121 of the ITAR) (PDF, 7MB) are required to register with the Directorate of Defense Trade Controls
(DDTC). Registration is primarily a means to provide the U.S. Government with necessary information on who is involved in certain
manufacturing, exporting and brokering activities. Registration does not confer any export rights or privileges, but is a precondition
for the issuance of any license or other approval for export.

3.2 FOREIGN OBJECT DEBRIS/DAMAGE (FOD)

AS9100 requires an organization to have provisions for the prevention, detection, and removal of foreign objects.
Supplier shall maintain good housekeeping and where applicable a Foreign Object Debris/Damage (FOD) prevention program, to preclude introduction of foreign objects into any deliverable item. Supplier shall employ appropriate housekeeping practices to assure timely removal of residue/debris generated during manufacturing, process, operations, or tasks. Supplier shall determine if sensitive areas that have a high probability for introduction of foreign objects should have special emphasis controls in place for the manufacturing environment. Suppliers’ FOD provisions shall meet the requirements of NAS412, AS9146, and D6-85622 as applicable.

3.3 COUNTERFEIT PREVENTION

Supplier shall prevent and mitigate the use of counterfeit parts. Supplier shall comply with the requirements of AS5553 for electronic components and AS6174 for non-electronic product as applicable.

3.4 CONFLICT MINERALS
As required by contract and subcontract flow-downs, Shim It Manufacturing Corporation, is required to comply with, as well as flow-down to its suppliers, the requirements for Conflict Minerals reporting.

For the latest CMRT Industry Standard Template follow this link:

http://www.assentcompliance.com/cmrt-4-20/?utm_source=bing&utm_medium=cpc&utm_term=CMRT&utm_campaign=cm

3.5 INDUSTRY FLOWDOWNS
Vendors are required to comply and flow down the following requirements as applicable.
The full text of each clause may be accessed electronically at http://farsite.hill.af.mil/vffar1.htm or https://www.acq.osd.mil/dpap/

FAR 52.204-21
Basic Safeguarding of Covered Contractor Information Systems

DFARS 252.204-7008
Compliance with Safeguarding Covered Defense Information Controls
DFARS 252.204-7009
Limitations on the Use or Disclosure of Third-Party Contractor Reported Cyber Incident Information

DFARS 252.204-7012
Safeguarding Covered Defense Information and Cyber Incident Reporting
(Reports must be made to: http://dibnet.dod.mil/ within 72 hours. To report to this site you will need to obtain a Medium Level Assurance Certificate)

NIST SP 800-171
Protecting Unclassified Information in Nonfederal Information Systems and Organizations

FAR 52.222-50
Combating Trafficking in Persons

FAR 52.222-56
Certification Regarding Trafficking in Persons

3.6 GIDEP Alerts

The supplier must be a member of GIDEP, if eligible, and take appropriate corrective and preventive actions on all suspect or defective material or suspect counterfeit or counterfeit parts reported by GIDEP alerts. Access to GIDEPs can be viewed at www.gidep.org/gidep.htm.

It is acceptable for the supplier’s Corporate office or another Division to provide a service in reviewing GIDEPs provided there is evidence of communication between entities.

The supplier must ensure that all occurrences where it has:

1) Acquired suspect or defective material or suspect counterfeit or counterfeit parts are reported to GIDEP.
2) Provided suspect or defective material or suspect counterfeit or counterfeit parts are immediately reported to the buyer.

Note: The supplier must respond to any suspect or defective material or suspect counterfeit or counterfeit part inquiries made by the buyer regarding the authenticity of products provided by the supplier.

4. COMMODITY REQUIREMENTS
Requirements listed below are in addition to Procurement Quality Assurance Requirements.

METALLIC SHEETS
Material must be free of dents, creases and defects.
Mill, Chemical and Physical test reports required to the most current revision with delivery. Actual test finding and specification
shall be recorded on report, report shall include: name, title, and signature of company representative.

American made materials required. Certification must state melted/mfr in the USA.

SPECIALTY METALS
Specialty metals, such as Stainless Steel and Titanium, must comply with the requirements of:
DFARS 252.225-7008, DFARS 252.225-7009, and DFARS 252.225-7010.
Qualifying Countries are listed at DFARS 252.225-7012.

Direct link for DFARS
http://www.acq.osd.mil/dpap/dars/dfars/html/current/252225.htm#252.225-7008

Materials must not be affiliated with Western Titanium, Inc. or Mach 2 Metals, Inc.
METALLIC FOIL
Material must be laminating quality, free of oils, dents, waviness, creases and defects. Mill, Chemical and Physical test reports required to the most current revision with delivery. Actual test finding and specification shall be recorded on report, report shall include: name, title, and signature of company representative. Aluminum cores required unless authorized by Shim It's buyer. Core shall be 6” diameter, maximum coil weight of 300 lbs., unless, otherwise stated on purchase order. Stainless Steel must be matte finish.

Titanium materials must not be affiliated with Western Titanium, Inc. or Mach 2 Metals, Inc.

American made materials required. Certification must state melted/mfr in the USA.

CHEMICALS & ADHESIVES
All products shall have a minimum of 80% of the original shelf life and be certified to the date of manufacture.
SDS required with shipment.

PLASTIC, PHENOLIC OR FIBERGLASS
Material must be free of dents, creases and defects. Traceable Certification with test values is required.
American made materials required. Certification must state melted/mfr in the USA.

FINISHED GOODS
Mill, Chemical and Physical test reports required to the most current revision with delivery. Actual test finding and specification
shall be recorded on report, report shall include: name, title, and signature of company representative. Final Inspection report is required. Report shall include but not limited to: part number, revision, date of inspection, drawing number, dimensions actual and required, inspection stamp. AS9102 FAI report as required per purchase order.

American made materials required. Certification must state melted/mfr in the USA.

SPECIAL PROCESSING
Final Inspection report is required. Report shall include but not limited to: part number, revision, date of inspection, drawing
number, and show required dimensions and actual findings on report, inspection stamp.

Certification must state: Shim It’s purchase order number, part number with revision, Shim It’s job number,
quantity processed, process specification with latest revision, conductivity readings (as applicable), paint thickness values (as
applicable). If using average or limits for paints, please specify the “should be” and “actual” values.

Actual findings shall be recorded on the certification for all processing and testing.

 

 5. END USER REQUIREMENTS

A direct link for end user approvals are as follows:

Boeing
http://active.boeing.com/doingbiz/d14426/GetAllProcessors.cfm

Bell Hellicopter
http://www.bellflight.com/suppliers

Bombardier
https://bombardierquality.service-now.com/sp?id=vendors

Lockheed
https://www.lockheedmartin.com/en-us/suppliers/business-area-procurement/aeronautics/quality-requirements/control-specs.html

Northrop Grumman
https://oasis-aspl.myngc.com/

Rolls Royce
https://suppliers.rolls-royce.com/GSPWeb/appmanager/gsp/guest?_nfpb=true&_pageLabel=portal_gsp_portal_page_6&_nfls=false

Vought Aircraft
https://www.triumphsupplysource.com/suppliers/

UTAS (Goodrich)
http://materiel.goodrich.com

Direct link for end user revisions are as follows:

Bombardier
https://www.bombardier.com/en/aviation/suppliers/current-suppliers/engineering.html
Lockheed
https://sqm.lmaeronautics.com
Northrop Grumman
https://oasisext.myngc.com/sympreq/aspl/aspl.asp
Vought Aircraft
http://www.voughtaircraft.com/suppliers/
Bell Helicopter
http://sell2bell.com
UTAS (Goodrich)
https://suppliers.utc.com   Note – Requires access credentials

Customer Specific Terms and Conditions and Quality requirements apply as shown below:

The supplier must assess, apply, and flow down the latest revision of the customer specific requirements listed below, as
applicable, as well as other requirements listed on the purchase order:

Lockheed Martin:
http://www.lockheedmartin.com/us/aeronautics/materialmanagement/scm-terms.html
A83
CorpDocs 3A
LM Aero Supplemental Clauses
Terms and Conditions as applicable per program and site
LM Aero Supplemental Clause Version 7
Appendices as applicable to program
Appendix QJ
Appendix QX

Your assessment must include the requirements of applicable DFAR clauses, verification, and documentation for internal
processes, as well as the flowdown, verification, and documentation of sub-tier processes.

– Procurement Quality Assurance Requirements      Rev. 08-19-20