Certified Sheet Metal Fabrication Factory China: How to Verify One
This page is for engineers and sourcing teams who need to check whether a certified sheet metal fabrication factory in China can actually hold the callouts on their drawings. It covers the certification stack, what third-party auditors look at, which part profiles fit each process, and the questions that separate a live quality system from a framed certificate.
What a certificate actually covers
A certificate names a management system, not a part. The gap between the two is where most sourcing problems start, so the sections below look at the documents, the floor practice behind them, and the part families where that practice gets tested.
Reading the certification stack in order of what it protects
Most RFQ replies from a certified sheet metal fabrication factory in China list four or five standards. They are not interchangeable, and they do not cover the same risk. ISO 9001:2015 is the baseline: documented process control, corrective action, calibration, traceability of inspection records. It says the shop can repeat a process. It does not say the process is capable of your tolerance.
The second layer is industry-specific. IATF 16949:2016 adds APQP, PPAP, MSA and control plans, which matters when a bracket or busbar goes into a vehicle program and your customer expects a submission package. ISO 13485:2016 governs medical device work: design transfer, sterilization-relevant cleanliness, and a complaint path that survives an FDA audit. Shops that carry both run two quality systems in parallel, not one relabeled binder.
The third layer is often ignored during sourcing. ISO 27001:2022 covers information security, which is what protects your CAD, your BOM and your revision history. A shop with no enforceable access control can still hold ISO 9001 and leak your drawings through a shared drive. Ask which standard maps to which risk before you weight the certificates equally.
- 1ISO 9001:2015Process control and record keeping. Minimum bar for any supplier.
- 2IATF 16949:2016Automotive submission discipline: APQP, PPAP, MSA, control plans.
- 3ISO 13485:2016Medical device quality system, including traceability and complaint handling.
- 4ISO 27001:2022Information security controls over drawings, models and revision data.
What third-party auditors check on the floor
A certificate is issued against a snapshot. The useful question is what an auditor sampled, and whether that sampling still describes the shop today. Certification bodies look for calibration records tied to an accredited reference, operator training records matched to the work instructions on the machine, and nonconformance reports that close with a root cause rather than a rework note.
One detail separates a system that runs from one that is maintained for visits: the calibration status of the coordinate measuring machine and whether its thermal compensation is active. A CMM sitting in an uncontrolled bay drifts with the shop temperature. If the reported measurement does not account for that, the ±0.005 mm on the inspection report is a number without a basis.
Material traceability is the other common soft spot. The audit trail should run from the mill certificate or heat lot through cutting, forming and finishing to the shipped part, with the lot number on the traveler. Ask to see one closed traveler for a part similar to yours. If the shop can only produce a stack of mill certs with no link to a specific order, traceability exists on paper only.
Matching the part to the process before you match the certificate
Sheet metal fabrication covers a wide band of work, and the right process depends on thickness, geometry and quantity. Laser cutting plus press brake forming suits enclosures, brackets and chassis panels from 0.5 mm to 6 mm, with bend radii that follow the tooling. Deep drawn or stamped parts belong to a different tooling investment and only pay off above a few thousand pieces.
When a part needs tight hole-to-hole position, machined bosses, or a sealed face, the blank is often cut and formed first and then finished on a CNC mill. That hybrid route is common for power-electronics housings, robot joint covers and medical instrument frames. It is also where tolerances get confused: a formed panel may hold ±0.2 mm across a bend, while a milled feature on the same part holds ±0.005 mm. Both numbers can appear on one drawing.
For parts above roughly 1,000 mm in one dimension, check the machine travel before you assume a single setup. A 4,000 mm bed changes which operations can happen without re-fixturing, and every re-fixture adds stack-up. On small, high-count brackets, the opposite is true: fixture repeatability and inspection throughput matter more than bed size.
- 1Fits sheet metalEnclosures, brackets, panels, 0.5–6 mm, low to high volume.
- 2Fits hybrid cut-form-millHousings with machined bosses or sealed faces and tight hole position.
- 3Fits stamping insteadSimple geometry above a few thousand pieces where tooling amortizes.
- 4Check travel firstParts near or above 1,000 mm may need a 4,000 mm bed or split design.
Certification, protected risk and the evidence to request
Use this as a request list during supplier qualification, not as a ranking.
| Standard | Risk it addresses | Evidence to request |
|---|---|---|
| ISO 9001:2015 | Process control and record keeping | Current certificate, scope, last audit date |
| IATF 16949:2016 | Automotive submission discipline | PPAP sample, control plan, MSA study |
| ISO 13485:2016 | Medical device quality system | Device history record example, complaint log |
| ISO 27001:2022 | Drawing and data confidentiality | Access control policy, NDA process |
| Calibration records | Measurement validity | CMM cert, thermal compensation status |
| Material traceability | Alloy and heat lot identity | Closed traveler linked to a mill cert |
Six questions worth asking before the first PO
Certificates are public. Capability is not. The questions below take a few minutes on a call and usually reveal more than a document review, because they force the supplier to describe a specific event rather than a policy.
Start with inspection. Ask how many parts in the last order of a similar profile were measured, and which features. A shop that says 100% inspection before shipment should be able to name the report format and the sampling plan. Then ask what happens when a first article fails: who signs the deviation, and does the customer see it before or after shipment.
Finish with capacity and scheduling. Ask how many jobs are in the queue at the promised ship window, and what share of last year's orders shipped late. A supplier that tracks that number will answer quickly. A supplier that cannot is guessing, and so are you.
- 1Inspection scopeWhich features are measured, on how many parts, in what report format.
- 2First-article pathWho signs a deviation, and when the customer is notified.
- 3Calibration basisReference standard used and whether thermal compensation is active.
- 4Queue depthJobs already scheduled against your requested ship window.
Common questions from sourcing engineers
Is ISO 9001 enough for a sheet metal supplier?
For simple brackets and non-safety parts, it is usually the minimum acceptable bar. It confirms documented process control and calibration.
For automotive, medical or energy work it is not sufficient on its own. Those programs expect IATF 16949:2016 or ISO 13485:2016 in addition, because the submission and traceability requirements go well beyond ISO 9001.
How do I confirm a certificate is still valid?
Ask for the certificate number, the issuing body and the expiry date, then check the issuing body's public register. Also ask for the scope statement, which lists the processes and sites covered.
A certificate that names only a trading office and not the production site is a common finding. The scope should match the plant that will make your parts.
What tolerance should I expect on formed sheet metal?
Formed dimensions typically follow bend allowance and tooling, so hole-to-bend and bend-to-bend tolerances are looser than machined features. Tight tolerances on a formed panel usually come from a secondary machining operation.
Machined features on the same part can hold ±0.005 mm when the setup and inspection support it. Put the tight callouts only on the features that need them, or you pay for the whole part at the tighter class.
How do I protect my drawings and design data?
Ask whether the supplier holds ISO 27001:2022 or an equivalent information security control, and how access to customer files is limited internally. A signed NDA is necessary but not sufficient on its own.
Request that uploads go through a controlled channel and that revision files are purged after the project closes. Ask who inside the shop can open your files.
What quantity makes sheet metal fabrication economical?
Laser cutting and press brake forming have low tooling cost, so prototypes and small batches are practical without a large upfront investment. One-off parts are common.
At high volumes a dedicated stamping die can lower unit cost, but only when the geometry is simple and the annual volume justifies the tooling. Between those two points, the cut-and-form route usually wins.
Can one factory handle forming, machining and finishing?
Some can, and it reduces handling and re-fixturing risk because the part stays under one quality system. It also means one traveler covers the whole build.
If the shop outsources finishing, ask which supplier and what controls apply. Outsourced anodizing or plating is a common source of cosmetic rejects and delayed shipments.
Send your drawing and get a manufacturability read
We review your files, flag features that will not hold as drawn, and return a quotation with a free DFM analysis within 12 hours. Uploads stay confidential and an NDA is available on request.
12-hour quoteFree DFM analysis100% inspection before shipmentNDA on request
