Vendors

1.1 SPECIFICATIONS
All materials and processes supplied under the purchase order shall conform to the latest specification revision level, unless,
otherwise specified by Shim It’s purchase order. Shim It Manufacturing Corp.. will provide the latest specification for all
requirements at the supplier’s request.

1.2 COMPETENCY
Only competent personnel who have been trained to the supplier’s internal requirements and those requirements of Shim It Manufacturing Corp. may
perform work for any purchase order issued. All personnel who perform work for Shim It Manufacturing Corp. purchase
orders must have valid qualification records on file for the work being performed.

1.3 REQUIREMENTS
Products and services will not be delivered to Shim It Manufacturing Corp. unless they comply with all applicable purchase order
requirements and specifications.

1.4 NOTIFICATION
The supplier is responsible for communicating to Shim It Manufacturing   the following:
– Changes to a supplier process which could have an unintended impact on product and service conformity.
– Changes to the supplier’s quality management system, including changes in management, changes to certification status
or scope, and changes of location.
– Confirmed or suspected non-conformances related to product and service provision to Shim It found prior to or
after delivery.
– Intended changes to purchase order requirements including due date, specifications, and alternative recommendations to
superseded or suspended requirements.
Any of the indicated changes above that directly affect the conformance of products and services to Shim It or the
requirements of the purchase order must be approved in writing prior to implementation.

1.6 DOCUMENT SECURITY
Supplier shall safeguard the security and confidentiality of all documents and/or data forwarded, subject to Shim It’s
inspection if required, from the point of receipt through discard, shredding, destruction, etc.

1.7 SUB-TIER UTILIZATION
Any sub-tier suppliers utilized must be approved for use by the supplier. Customer designated sources must be prioritized for use if
indicated by Shim It Manufacturing Corporation, its Customer, or End User.

2.1 GENERAL REQUIREMENTS
The suppliers Quality Management System must meet the requirements of ISO9001, AS9100.

2.2 CALIBRATION SERVICES
Any Calibration activities must meet requirements of ISO 17025 and Standards traceable to N.I.S.T.

2.3 SPECIAL PROCESSING
Special Process Suppliers shall maintain Nadcap certification for the process(es) offered.

2.4 APPROVAL STATUS
Product and service provision will only be issued to those suppliers that have been approved by Shim It. Approval status is
based on variable factors including on-time delivery, product and service conformity, and quality control. All suppliers must maintain
these areas of performance with Shim It at all times. If a supplier cannot provide adequate proof of these requirements by
Shim It, they will be removed from the Approved list of suppliers until corrections have been made which will support their
re-approval.

2.5 PROCESS APPROVAL
The supplier shall maintain a process for the provision of products and services to Shim It which can reliably produce the
conforming outputs. Supplier is responsible for validation of its processes and ensuring that the parts meet all product and service
requirements issued. First Article Inspection Reports in any format may be requested on the purchase order as evidence of
conformance. If a statistical technique or sampling plan is utilized for the product approval, the technique must be based on a valid
industry statistical approach.

2.6 AWARENESS
All personnel performing work under the control of the supplier shall be made aware of their contribution to product and service
conformity, product safety, and the importance of ethical behavior.

2.7 LOT CONTROL
All parts or materials shall be fabricated from the same manufacturing lot, unless, otherwise approved by Shim It Manufacturing Corporation.

2.8 RECORDS
Unless otherwise shown on purchase order, supplier shall retain and maintain records on purchased product for 10 years. Manned flight program records
shall be retained for 20 years (program will be noted on purchase order if required). Records shall be made available upon request
within 48 hours. Record disposition and disposal shall be carried out in a manner that eliminates the possibility of fraud or stolen
intellectual property.

2.9 RIGHT OF ACCESS
Shim It, its customers and regulatory agencies (under the permission of Shim It) may, at any point under this
purchase order, choose to perform inspection or auditing activities on the supplier’s premises. Notice of visitation will be given at
least three days prior to the visit. Shim It reserves the right to review any information or process which pertains to or directly
affects the conformity of products or services provided to Shim It including those of its supplier’s sub-tier suppliers.

2.10 DPD/MBD
Receiving, validation and security protocols for digital product definition and model-based definition data sets forwarded by our
company must conform to Boeing, Spirit Aerosystems, Goodrich Aerospace, Vought, and Northrop Grumman DPD/MBD
requirements as applicable.

2.11 CERTIFICATION OF CONFORMANCE
Certification of Conformance is required for each shipment of processed parts, chemicals, material and/or finished goods.
Certification of Conformance shall include a statement of conformity to the latest revision level of specifications and also include
name, title, signature, and acceptance stamp of company representative.

2.12 SOURCE INSPECTION
If Government Source Inspection is required supplier shall notify their Government Representative to plan for the appropriate
inspection point prior to shipment.
If Shim It Source Inspection is required supplier shall send 72 hour written notice to Shim It. Supplier shall
provide documentation, facilities and support personnel. Product shall not be released for shipment until inspection is complete.

2.13 MERCURY FREE
All purchased products must be mercury free. Seller shall certify that the product supplied is free of mercury contamination.

2.14 MATERIAL SAFETY DATA SHEET
MSDS is required for all metallics and chemicals.

2.15 FLOW-DOWN REQUIREMENTS
Supplier is responsible to flow down all applicable quality requirements to sub-tier suppliers, including key characteristics where required.
Any changes in the supplier’s approvals, excessive fallout 10% (Shim It supplied materials), unforeseen delays, and
anomalies found in their process that directly affect product supplied to Shim It, shall be immediately reported to
Shim It. Process and/or materials shall be supplied by Shim It’s customer and end user approved sources.

3.1 DDTC REGISTRATION
All manufacturers, exporters, and brokers of defense articles related technical data and defense services as defined on the United
States Munitions List (Part 121 of the ITAR) (PDF, 7MB) are required to register with the Directorate of Defense Trade Controls
(DDTC). Registration is primarily a means to provide the U.S. Government with necessary information on who is involved in certain
manufacturing, exporting and brokering activities. Registration does not confer any export rights or privileges, but is a precondition
for the issuance of any license or other approval for export.

3.2 FOREIGN OBJECT DEBRIS/DAMAGE (FOD)

AS9100 requires an organization to have provisions for the prevention, detection, and removal of foreign objects.
Supplier shall maintain good housekeeping and where applicable a Foreign Object Debris/Damage (FOD) prevention program, to preclude introduction of foreign objects into any deliverable item. Supplier shall employ appropriate housekeeping practices to assure timely removal of residue/debris generated during manufacturing, process, operations, or tasks. Supplier shall determine if sensitive areas that have a high probability for introduction of foreign objects should have special emphasis controls in place for the manufacturing environment. Suppliers’ FOD provisions shall meet the requirements of NAS412, AS9146, and D6-85622 as applicable.

3.3 COUNTERFEIT PREVENTION

Supplier shall prevent and mitigate the use of counterfeit parts. Supplier shall comply with the requirements of AS5553 for electronic components and AS6174 for non-electronic product as applicable.

3.4 CONFLICT MINERALS
As required by contract and subcontract flow-downs, Shim It Manufacturing Corporation, is required to comply with, as well as flow-down to its suppliers, the requirements for Conflict Minerals reporting.

For the latest CMRT Industry Standard Template follow this link:

http://www.assentcompliance.com/cmrt-4-20/?utm_source=bing&utm_medium=cpc&utm_term=CMRT&utm_campaign=cm

3.5 INDUSTRY FLOWDOWNS
Vendors are required to comply and flow down the following requirements as applicable.
The full text of each clause may be accessed electronically at http://farsite.hill.af.mil/vffar1.htm or https://www.acq.osd.mil/dpap/

FAR 52.204-21
Basic Safeguarding of Covered Contractor Information Systems

DFARS 252.204-7008
Compliance with Safeguarding Covered Defense Information Controls
DFARS 252.204-7009
Limitations on the Use or Disclosure of Third-Party Contractor Reported Cyber Incident Information

DFARS 252.204-7012
Safeguarding Covered Defense Information and Cyber Incident Reporting
(Reports must be made to: http://dibnet.dod.mil/ within 72 hours. To report to this site you will need to obtain a Medium Level Assurance Certificate)

NIST SP 800-171
Protecting Unclassified Information in Nonfederal Information Systems and Organizations

FAR 52.222-50
Combating Trafficking in Persons

FAR 52.222-56
Certification Regarding Trafficking in Persons