Traceability in CNC machining is the record that lets you answer one question under pressure: which parts are affected? A supplier who cannot answer it quarantines a production month. A supplier who can quarantines a heat number.
This guide covers what traceability actually consists of in CNC machining, what each quality standard requires, why a CMM report is worthless without a calibration chain, when serial-level records are justified, and when they are not.
Key takeaways
- Traceability has three layers: material (heat or lot), process (machine, program version, operator, tooling) and inspection (measured values plus the calibration behind them). A gap in any one breaks the chain.
- ISO 9001:2015 requires unique identification where traceability is a requirement (clause 8.5.2) and measurement traceability where valid results are essential (clause 7.1.5.2).
- A CMM report is only evidence if the CMM is calibrated through a documented unbroken chain to a reference, which is what NIST measurement traceability describes.
- Every MW+ order ships with a certificate of conformance, a CMM inspection report and material certificates. FAI per AS9102 and PPAP Level 3 are supplied on request, quoted per programme.
- ISO 13485 requires records to be retained for at least the lifetime of the device as defined by the manufacturer, and not less than two years from product release.
- Serial-level traceability is justified when a single part can be recalled independently. Where parts are consumed in an assembly and replaced as a set, lot-level records do the same job for less.
- What is traceability in CNC machining?
- The three layers of a traceable record
- What does each quality standard actually require?
- Why a CMM report needs a calibration chain
- Which documents make up a traceable order?
- Lot-level or serial-level: which do you need?
- What traceability buys you when something goes wrong
- When serial-level traceability is not worth it
- What MW+ supplies
- Frequently asked questions
What is traceability in CNC machining?
Traceability in CNC machining is a documented chain that links a finished part back to the material it was cut from, the process that cut it, and the measurements that accepted it. It is not a serial number on a bag. A part is traceable only when a heat number, a machining record and a calibrated inspection result can all be retrieved from the same identifier.
The practical test is a question, not a certificate. Give a supplier one part identifier and ask which heat it came from, which machine and program made it, and what the CMM measured on it. If any answer needs a manual search through paper files, the chain exists on paper but not in practice.
The three layers of a traceable record
A traceable CNC record has three layers, and a gap in any one breaks the chain. Material traceability without process traceability tells you what the metal was but not which machine cut it. Process traceability without inspection traceability tells you how the part was made but not whether it was correct.
| Layer | What is recorded | Where the record comes from | The question it answers |
|---|---|---|---|
| Material traceability | Supplier, heat or lot number, mill certificate reference, incoming inspection result | The mill certificate, cross-checked at goods-in | Is this the grade, temper and heat the drawing called for? |
| Process traceability | Machine identity, NC program version, operator, cutting tool and setup, date and time | The job traveler and the machine controller | Which machine and which program produced this part? |
| Inspection traceability | Measured values per characteristic, the gauge used, and its calibration certificate | The CMM report, keyed to the drawing balloon numbers | What was actually measured, with what, and when was it last calibrated? |
The layer most often missing is the third, and specifically the calibration reference inside it. A shop can produce a clean CMM report from a machine whose last calibration nobody can locate, and the report proves nothing. The MW+ inspection routine is on the CNC machining quality control page, and the machines behind it on the multi-axis machining page.
What does each quality standard actually require?
Quality standards do not all require the same depth of traceability. ISO 9001:2015 requires unique identification only where traceability is itself a requirement. Aerospace and medical schemes go further, and automotive requirements are driven largely by customer-specific rules layered on the standard. Read the table before assuming a certificate covers what you need.
| Standard | What it governs | Traceability requirement in practice | What to ask the supplier for |
|---|---|---|---|
| ISO 9001:2015 | General quality management system | Clause 8.5.2 requires identification of outputs and unique identification where traceability is required; clause 7.1.5.2 requires measurement traceability where valid results are essential | The documented scope of traceability, and the site named on the certificate |
| AS9100D | Aerospace quality management system | Adds aerospace requirements on top of ISO 9001, typically including material and process route records and identification of all product made from the same batch | A sample job traveler and the batch identification method |
| AS9102 | First article inspection reporting | Form 1 part number accountability, Form 2 product accountability covering raw material, special processes and functional testing, Form 3 characteristic accountability | A completed FAI package from a comparable part |
| ISO 13485 | Medical device quality management system | Records retained for at least the lifetime of the device as defined by the manufacturer, and not less than two years from product release | The retention period the supplier has defined, in writing |
| IATF 16949 | Automotive quality management system | Traceability sufficient to bound a recall, with retention and scope driven by customer-specific requirements | The control plan reference and the PPAP submission level |
| NIST measurement traceability | The calibration chain behind every measurement | Each result related to a reference through a documented unbroken chain of calibrations, each contributing to measurement uncertainty | Calibration certificates for the CMM and gauges, with dates and the laboratory |
One reading habit saves trouble: certificates certify a site and a scope, not a company. A certificate held by a trading entity, or naming a different address from the one machining your parts, gives you nothing at the machine that cut them.
Why a CMM report needs a calibration chain
Measurement traceability is the property of a measurement result whereby the result can be related to a reference through a documented unbroken chain of calibrations, each contributing to the measurement uncertainty. Without that chain, a CMM report is a number of unknown origin. NIST publishes the calibration services that anchor the chain for many measurement quantities.
What to check on an inspection report
Four items make an inspection report auditable: the drawing revision measured against, balloon numbers matching that drawing, the identity of the measuring equipment, and the calibration certificate reference with its date. A report with measured values but no equipment identity cannot be defended in an audit or used to argue a disputed dimension.
Temperature belongs on the record
For tight-tolerance work the measurement temperature belongs on the report alongside the values. Aluminum 6061-T6 has a nominal coefficient of thermal expansion near 23.6 µm/m·°C, so a 100mm dimension moves roughly 23.6µm across a 10°C swing, which is wider than a ±0.005mm tolerance band. Two honest reports can disagree simply because one part was measured warm.
Which documents make up a traceable order?
A traceable CNC order is made up of three documents supplied as standard and two supplied on request. The standard set is a certificate of conformance, a CMM inspection report and material certificates traceable to the heat or lot. The on-request set is a First Article Inspection to AS9102 and a PPAP Level 3 package. MW+ supplies the first three on every order and quotes the last two per programme.
| Document | What it proves | Reference | When MW+ supplies it |
|---|---|---|---|
| Certificate of conformance | This lot matches this purchase order and this drawing revision | Drawing revision level | Every order |
| CMM inspection report | These characteristics were measured, with these values, on identified equipment | Balloon-numbered drawing per ISO 1101 callouts | Every order |
| Material certificate | The metal is the specified grade, temper and heat | ASTM or equivalent grade specification | Every order |
| First Article Inspection report | The qualified process produced a correct first part, with raw material and special processes accounted for | AS9102 forms 1 to 3 | On request, quoted per programme |
| PPAP Level 3 package | The process was reviewed and approved before volume release | IATF 16949 and customer-specific requirements | On request, quoted per programme |
| Calibration certificates | The measuring equipment itself can be trusted, and when it was last verified | NIST measurement traceability | On request and at audit |
Decide which of these you need at contract stage. A First Article Inspection records the first part off a qualified process; it cannot be produced retrospectively for a batch that has already shipped.
Lot-level or serial-level: which do you need?
Lot-level traceability ties a group of parts made from one material batch and one production run to a single record. Serial-level traceability gives each individual part its own identifier, so it stays traceable after it has been mixed with other units. Serial-level records are justified when a single part can be recalled independently of the rest of its batch; otherwise lot-level does the same job for less.
| Situation | Right level | Why |
|---|---|---|
| Implantable or life-supporting medical component | Serial | The device must be traceable to an individual patient record under ISO 13485 |
| Flight-critical aerospace part with a service life limit | Serial | Life tracking is per part, not per batch, and retirement decisions are individual |
| Safety-related automotive component | Serial where recall scope justifies it | Serial records bound a recall to affected units instead of whole production periods |
| Industrial component replaced as a set at service | Lot | Nothing is recalled individually, so a serial identifier adds cost without adding reach |
| General mechanical parts, brackets and housings | Lot | Material and process records bound any containment adequately |
| Small parts where marking would damage function | Lot, with packaging-level identification | Marking a small precision feature can compromise the part it is meant to protect |
What traceability buys you when something goes wrong
Traceability does not prevent a nonconformance; it changes the size of the response. The question after a field failure is always the same: which other parts share the cause? The answer is bounded by the finest identifier your records support, and everything outside that boundary is quarantined on suspicion.
| Traceability level | What you can isolate | What must be quarantined on suspicion | How the investigation runs |
|---|---|---|---|
| None beyond a delivery note | The shipment that failed | Every shipment since the last known-good one | Manual document search, supplier and customer both guessing |
| Lot-level, paper records | The production lot | Adjacent lots sharing the same material or setup | Files are retrievable but slowly, and gaps appear at handoffs |
| Lot-level, digital records | The lot, plus every lot sharing that heat number | Only lots the records genuinely link | A query rather than a search; the material chain is followed directly |
| Serial-level, digital records | Individual parts, and the machine, program and operator behind each | Little beyond the identified parts | Cause is isolated to a machine, tool change or program revision |
Read that table as a containment-scope ladder. Each step down narrows what has to be pulled off a line, and narrowing scope is what protects a customer schedule. Whether the step is worth its cost depends on the consequence of the failure, which is the next section. For parts moving from CNC prototyping into volume, set the level at validation.
Worked example: how far a containment reaches at each record level
Take an order of 5,000 machined parts cut from bar drawn from two mill heats: heat A supplies 3,200 parts run as four lots of 800, heat B supplies 1,800 parts run as three lots of 600. Months later the mill issues a notice that heat A was out of specification on hardness. What has to be contained depends entirely on which joins your records hold.
| Records you actually hold | Parts inside the boundary | Arithmetic | Share of the order |
|---|---|---|---|
| Delivery notes only | 5,000 | the whole order | 100% |
| Lot numbers, but no link to the heat | 5,000 | no lot can be excluded | 100% |
| Heat-to-lot link, held as an inspection document to ISO 10474 | 3,200 | 3,200 ÷ 5,000 | 64% |
| Heat-to-lot plus lot-to-shipment, two A-lots still in stock | 1,600 in the field | 1,600 ÷ 5,000 | 32% |
| Serial records resolving the fault to one shipment | 400 | 400 ÷ 5,000 | 8% |
Two rows deserve attention. The second is the one that surprises buyers: lot numbers on their own bought nothing, because without the heat link there was no way to say which lots came from heat A. A traceability system is only as good as its weakest join, usually the one between the mill certificate and the machining lot. The distance from the first row to the last is 5,000 parts against 400, a factor of 12.5.
Price that factor against the consequence, not against the certificate on the wall. Recovering 1,600 parts from the field costs freight, rework and a customer conversation; recovering 400 costs a quarter of that. Where parts are inexpensive and the failure mode mild, the lower rows are not worth funding, the subject of the next section. Records of this kind are what a buyer draws on when running a pre-shipment inspection checklist.
When serial-level traceability is not worth it
Serial-level traceability is not worth it when parts are never recalled individually, when marking would damage the feature it protects, when the unit value is far below the cost of the record, when nobody on the buying side will ever query the data, and when the real gap is material certification rather than part identity. In each case the money is better spent strengthening a different link.
| Situation | Better investment | Why |
|---|---|---|
| Parts are replaced as a set at every service interval | Lot-level records with a solid material chain | Containment is bounded by the set, so per-part identity adds nothing |
| Marking would intrude on a functional or sealing surface | Packaging and lot-level identification | A mark that compromises the part defeats the purpose of tracking it |
| Low unit value, high volume, non-critical function | Statistical process control on the critical characteristics | Capability data prevents escapes; serial records only describe them afterwards |
| Nobody in your organization would ever query the records | A clear certificate of conformance and material certificates | Data nobody reads is documentation cost, not risk reduction |
| Material certificates are the actual weak link | Verify heat numbers against the mill, and control substitutions in writing | Serial identity on unverified material traces the wrong thing precisely |
The last row is the one buyers get wrong most often. Precise part identity built on an unverified material certificate produces confident, well-organized records of the wrong metal.
What MW+ supplies
MW+ is a precision CNC machining supplier founded in 2015, operating a 15,000 m² facility in the Guangming of Shenzhen with 60+ machining centres and 120+ engineering and quality professionals, serving customers in 50+ countries across 70+ material grades. MW+ is certified to ISO 9001:2015, AS9100D, ISO 13485 and IATF 16949 at that site, which is the site that machines the parts.
Every MW+ order ships with a certificate of conformance, a CMM inspection report and material certificates. General machining is held to ±0.01mm to ISO 2768-m, precision features to ±0.005mm and critical features to ±0.001mm where geometry and material allow, targeting Cpk ≥1.67 on critical characteristics. FAI to AS9102 and PPAP Level 3 are available on request and quoted per programme.
Quotes are returned within 24 hours, standard prototypes ship in 3–5 business days with a 48-hour express route, and volume production runs in 10–15 business days to 1,000,000+ units with no minimum order quantity. Process and equipment detail sits on the MW+ capabilities page, company background on about us, and the machining routes on CNC machining services and CNC precision parts. To agree a documentation package for a specific programme, use contact us.
Frequently asked questions
What is the difference between lot traceability and serial-level traceability?
Lot traceability ties a group of parts made from one material batch and one production run to a single record, so containment is bounded by the lot. Serial-level traceability gives each part its own identifier, so it remains traceable after being mixed with other units and can be recalled individually. Serial records are normal for implantable medical devices and life-limited aerospace parts; lot records cover most industrial and commercial precision machining.
Does an ISO 9001 certificate mean my parts are traceable?
Not by itself. ISO 9001:2015 requires unique identification of outputs where traceability is a requirement, so the depth is defined by the organization and its customers rather than fixed by the standard. Ask the supplier to state in writing what their traceability scope covers: heat number, machine and program, operator, and inspection equipment. Then check the scope line and site address on the certificate.
How long should a supplier retain production and inspection records?
Retention is set by the applicable standard, the customer contract and any regulatory requirement, so it should be agreed in writing rather than assumed. ISO 13485 requires records to be retained for at least the lifetime of the device as defined by the manufacturer, and not less than two years from product release. Automotive retention is driven largely by customer-specific requirements layered on IATF 16949. Ask for the supplier defined period, and check it against the service life of your product.
Our supplier sent a CMM report but goods-in still rejected the parts. What is missing?
Usually the measurement context, not the measurements. Check whether the report names the drawing revision, uses balloon numbers matching that drawing, identifies the measuring equipment, cites a calibration certificate with a date, and states the measurement temperature. Two conforming reports on the same part normally mean two different datum schemes, probing strategies or temperatures. Agree all of those in writing before the first production part is cut.
Can traceability records be delivered in our own format?
Format should be agreed at quotation, because reformatting after delivery is rework on both sides. Common requests are an AS9102 First Article Inspection package, a PPAP Level 3 submission, or a structured export for your own quality system. MW+ quotes FAI and PPAP per programme, so raise the format requirement with the RFQ, not with the first shipment.
Is traceability worth paying for on non-critical parts?
Material traceability is worth it on almost any part, because material substitution is the failure mode that most often escapes visual inspection. Process and serial-level traceability are worth paying for in proportion to the consequence of a failure. For a bracket replaced at service, a certificate of conformance plus mill certificates is proportionate. For a part whose failure stops a line, the finer record pays for itself the first time it bounds a containment.
What should we ask for during a supplier audit?
Bring one part identifier from a previous delivery and ask the supplier to retrieve its heat number, machining record and inspection result while you watch. That exercise tests the chain better than any document review, because it shows whether the layers are linked or merely all present. Then ask for the calibration certificate of the equipment that produced the inspection result.
