If your company manufactures parts or assemblies for the automotive industry, it is very likely that one of your OEM or tier-1 customers has already asked you when you will have IATF 16949 certification. The pressure comes from the supply chain: major manufacturers (Stellantis, Volkswagen Group, Toyota, Renault…) require this standard from their direct suppliers and increasingly from second- and third-tier suppliers as well.
The question that arrives at the consultancy time and again is the same: «How much is certification going to cost me?». The honest answer is that it depends on several factors that are worth understanding before requesting a quote. This article breaks down the indicative market ranges we work with in 2025–2026, the cost items that are not always mentioned and the levers that allow you to optimise your investment.
What is IATF 16949 and why does it cost more than ISO 9001?
IATF 16949:2016 (International Automotive Task Force) is the quality management system standard specific to the automotive sector. It does not replace ISO 9001: it incorporates it in full and adds more than 300 sector-specific requirements on top, including tools such as APQP, PPAP, FMEA, MSA and SPC and the management of special characteristics. This makes implementation significantly more demanding than a standard ISO 9001 project.
In addition, IATF imposes a more rigorous certification system: only certification bodies expressly accredited by IATF may issue the certificate (not every body accredited by ENAC for ISO 9001 is authorised to certify IATF 16949). The best-known authorised bodies operating in Spain include AENOR, Bureau Veritas, SGS, TÜV Rheinland, Intertek and Lloyd's Register, among others. Each has its own fee schedule for the certification audit.
The two cost items: consultancy and certification
When an industrial SME pursues IATF 16949 certification, it incurs two types of expenditure that are important not to confuse:
- Consultancy cost: what the company pays the firm that accompanies it through the design and implementation of the management system. This item is set by the market (consultancies) and varies considerably depending on the company's profile.
- Certification cost: what the company pays the certification body (AENOR, Bureau Veritas, SGS…) to carry out the audits and issue the certificate. This item is set by the body according to its fee schedule and the complexity of the audited company.
Both are independent. Hiring a good consultancy does not automatically guarantee passing the audit (that decision rests with the body), but it does significantly increase the probability of achieving it at the first attempt.
Indicative price ranges in the Spanish market (2025–2026)
The figures below are market ranges derived from published fee schedules, sector proposals and accumulated experience in automotive projects. They are not Summum's tariffs; each case requires prior analysis before quoting.
| Company profile | Indicative consultancy cost | Indicative certification cost | Approximate total (year 1) |
|---|---|---|---|
| SME 15–30 employees, single site, no prior ISO 9001 | €12,000 – €22,000 | €4,500 – €7,500 | €16,500 – €29,500 |
| SME 30–80 employees, single site, active ISO 9001 | €10,000 – €18,000 | €5,500 – €9,000 | €15,500 – €27,000 |
| Mid-size company 80–200 employees, one or two sites | €18,000 – €40,000 | €8,000 – €15,000 | €26,000 – €55,000 |
| Group with multiple sites (extended-scope certification) | €35,000 – €80,000 | €15,000 – €35,000 | €50,000 – €115,000 |
Source: market analysis based on fee schedules published by certification bodies (AENOR, BV, SGS, TÜV) and sector proposals for the European context. Ranges are VAT-exclusive and do not represent Summum Marketing's prices.
Factors that move the price up or down
Starting point of the management system
This is the highest-impact factor. A company that already has ISO 9001 implemented and audited has a strong foundation: documented processes, non-conformance management, internal audits… The step up to IATF 16949 is still demanding (the sector's core tools must be incorporated), but consultancy effort can be reduced by 25–40% compared with a company starting from scratch.
Real use of quality tools in production
IATF 16949 does not only require that the FMEA or PPAP be documented: it requires these tools to be integrated into the actual workflow. A company that already applies process FMEA, statistical process control (SPC) and control plans consistently will need far less consultancy effort than one that has them «on paper» without evidence of use. The IATF auditor will verify application records, not just procedures.
Complexity of the production process
A machining company with three part families and stable processes is in a very different situation from a supplier of electronic systems or welded assemblies with multiple special characteristics (SC/CC). The greater the product and process complexity, the higher the volume of PPAP required and the longer the certification audit (which increases the body's cost).
Number of employees and shifts
The certification audit fee is largely calculated in audit days, determined by a scale based on the number of employees in the maximum concurrent shift. A company with 40 employees on one shift will be audited in fewer days than one with 150 employees on three shifts, with a corresponding cost saving.
Scope of certification (one or several sites)
If the company has several plants or work centres, the certification scope can be defined to include a single site or multiple sites. Including several sites under one certificate increases the audit cost but may be more efficient in the long run than certifying each site separately.
Choice of certification body
Authorised IATF bodies have different fee schedules. In Spain, the difference between the cheapest and the most expensive for the same company profile can be 30–40% for the initial audit. However, choosing on price alone is not always advisable: some OEM customers prefer a specific body, and the reputation of the certificate with customer auditors can vary. Consulting your customer before selecting a body is a practice that sometimes avoids surprises.
Implementation timeline
A fast-track implementation project (6–8 months) for a company that urgently needs the certificate is usually more expensive than a project planned over 12–18 months, because it requires greater concurrent consultancy effort and compresses the internal team's learning curve.
What a well-structured IATF 16949 consultancy project includes
A rigorous accompaniment project towards IATF 16949 certification is not limited to drafting documents. The typical phases are:
- Gap analysis: analysis of the gap between the current system and the standard's requirements, with an estimate of the actual effort involved. This is the basis for accurate budgeting.
- Management system design: adaptation of the document structure (quality manual, procedures, work instructions) to IATF requirements and core tools.
- Internal team training: APQP, FMEA (VDA/AIAG 2019 methodology), MSA, SPC, PPAP. Without genuine team training, the system will not hold up after certification.
- Pilot implementation of tools: preparation of the first PPAPs and FMEAs with the team, application to a real product, correction of deviations.
- Internal certification audit: audit simulation under IATF requirements to identify weak points before the official audit.
- Support during the certification audit: consultant presence during the body's audit to support the team with technical clarifications.
If your company needs guidance on how to structure this process, at Summum Calidad we have been accompanying industrial companies in quality projects since 2007. You can learn about our IATF 16949 consultancy and certification service to get a concrete picture of how we work.
Recurring costs after certification: annual surveillance and renewal
Obtaining the certificate is just the first milestone. IATF 16949 has a three-year cycle with annual audits:
| Year | Audit type | Indicative cost (body) | Support consultancy cost |
|---|---|---|---|
| Year 1 | Initial certification audit (stage 1 + stage 2) | €4,500 – €15,000 | Included in the initial project |
| Year 2 | Surveillance audit | €2,500 – €7,000 | €1,500 – €4,000 (preparation) |
| Year 3 | Surveillance audit | €2,500 – €7,000 | €1,500 – €4,000 (preparation) |
| Year 4 | Renewal (recertification) | €4,000 – €12,000 | €3,000 – €8,000 (review) |
Source: fee schedules published by authorised IATF bodies in Spain for SMEs with 30–100 employees (2025 reference). IATF surveillance audits are annual and mandatory; missing one results in suspension of the certificate.
IATF 16949 vs ISO 9001: is it worth it if my customer does not require it yet?
This is a legitimate question that many component SMEs ask when operating in the aftermarket or at tier-2 level. The answer depends on the commercial strategy:
- If your company wants to grow towards direct OEM or tier-1 customers, IATF 16949 is an entry requirement, not an option.
- If your company supplies exclusively to the independent aftermarket (IAM) or to sectors unrelated to automotive, ISO 9001 may be sufficient and more cost-effective.
- If you are in an intermediate position (part of your business in automotive, part outside), the analysis must consider whether the automotive turnover justifies investment in the more demanding system.
In any case, a good preliminary assessment — free or low-cost — before committing to a certification project is the smartest way to avoid surprises. At Summum Calidad we help companies make that decision with real data, not assumptions. If your company already has ISO 9001, it is also worth reading about the maintenance and update of the ISO 9001 system before making the move to IATF.
Frequently asked questions
Can an SME with 10 employees obtain IATF 16949 certification?
Yes, size is not a regulatory barrier. IATF 16949 does not set a minimum headcount. However, in very small companies the documentation and training burden falls on very few people, which can be an operational challenge. The key is to dimension the system proportionately: a 10-person company does not need the same level of bureaucratic documentation as a 200-person company. An experienced consultant in industrial SMEs knows how to scale the system to the real size of the company without over-engineering it.
What happens if we fail the certification audit?
If the audit raises major non-conformances, the certification body will not issue the certificate until the company closes those non-conformances with evidence of correction and root cause correction. The usual deadline to submit the action plan is 60 to 90 days. In some cases the body carries out a follow-up audit (at an additional cost) to verify closure. Minor non-conformances are closed documentarily without a further on-site audit. Rigorous preparation with a prior internal audit drastically reduces the risk of major non-conformances in the official audit.
Does IATF 16949 also apply to electric vehicle manufacturers?
Yes. IATF 16949:2016 applies to the entire automotive supply chain regardless of propulsion technology. Manufacturers of components for electric vehicles (battery cells, power electronics, electric motors, battery management systems) are equally within the scope of application. Some EV OEMs have added customer-specific requirements (CSRs) on top of the base standard, particularly regarding cell traceability and management of electrical safety special characteristics. The consultant must be familiar with those specific customer CSRs to properly scope the project.
How long does the process take from scratch to obtaining the certificate?
For an SME with no prior ISO 9001, the typical timeline is 12 to 18 months. For a company that already has active ISO 9001 and applies some quality tools in production, the timeline can be compressed to 8–12 months with a committed internal team. The pace is set primarily by the company's capacity to implement the core tools (FMEA, PPAP, SPC) in real production, not just on paper. Accelerating the process below 6 months is possible but requires an intensive internal team commitment that many SMEs cannot sustain without affecting daily operations.