When a buyer asks a CNC machine shop for “the material certificate,” they are usually asking for one of three very different documents — and the shop may answer with a fourth one they did not request. Understanding what each paper actually proves, and what it does not, is the fastest way to avoid accepting a part whose material cannot be traced back to its source. This guide separates purchase documents, test reports, identity control and traceability levels, and shows how to set requirements that match real risk rather than defaulting to “send everything.”
Start with the purchase specification, not the certificate
The document a supplier can legally and honestly issue depends on what the buyer specified in the first place. A purchase specification does two distinct jobs: it defines the material grade and condition (for example “AISI 304 stainless, annealed bar per ASTM A276” or “6061-T6 aluminum per ASTM B221”), and it defines the documentation package that must accompany the delivery. If the order only names a grade, the mill or distributor is generally free to supply whatever certificate type its system normally produces.
This matters because material standards themselves are often silent on paperwork. A product standard may define chemistry and mechanical properties but leave the certificate format to a separate convention such as EN 10204. Buyers who need a specific document type should state it explicitly in the purchasing document — the reference that governs what the supplier must provide — rather than assume it travels automatically with the steel. ISO 9001:2015 clause 8.5.2 on identification and traceability is often cited here, but it requires a supplier to control identification and traceability to the extent necessary; it does not mandate one universal certificate format for every part.
What “certificate scope” really covers
Certificate scope is where most confusion begins. Under the EN 10204 framework, the common inspection-document types are numbered, and the number tells you who issues the document and whether an independent party verified the result:
- Type 2.1 — a declaration of compliance with the order, issued by the manufacturer, with no test results.
- Type 2.2 — a test report issued by the manufacturer, based on non-specific inspection results.
- Type 3.1 — an inspection certificate issued by the manufacturer’s own inspection department, based on specific inspection and testing of the material supplied.
- Type 3.2 — an inspection certificate issued by the manufacturer and countersigned by an independent inspector or an authorised third-party representative.
The word “specific” is the key: a 3.1 certificate reports test results for the actual material being delivered, whereas a 2.2 report can rest on results that are not specific to the delivered item. The scope of what a document covers — chemical analysis only, or chemistry plus tensile, hardness or impact results — must be checked against the product standard, because a valid-looking certificate can be perfectly genuine and still not contain the property the buyer cares about. Note that EN 10204 applies to metallic products delivered in various forms and is a European convention; buyers outside that schema should confirm the equivalent requirement with the supplier’s quality department and the governing product standard.
Heat or lot identity is the link that makes traceability work
A certificate without an identifier that connects it to the physical parts proves very little. Heat or lot identity is that link: a heat number (for steel and other melt-based metals) or a lot/batch number identifies the specific unit of material produced under one set of process conditions. Effective traceability follows an unbroken chain — purchase order → mill certificate → raw material received → the parts cut from that material — so that a question about one finished part can be answered by walking back to the original melt.
ASTM A751, Standard Test Methods, Practices, and Terminology for Chemical Analysis of Steel Products, is widely used to describe how chemical analysis of steel products is performed and reported, and it distinguishes a heat analysis (from the melt) from a product analysis (from the finished product). The distinction matters for traceability because a heat analysis describes the melt, not necessarily the exact bar or component. Buyers handling aerospace work should also account for AS9100, which strengthens identification and traceability expectations across the aerospace supply chain; the specific clauses and record-retention rules belong to the current revision of that standard, so the controlling text should be confirmed for each programme. Where genuine chain-of-custody matters, a certificate that names a heat number but cannot be linked to a delivery cannot close the loop.
Document review: five checks before you accept the paperwork
Reviewing the document review step as a routine, not an afterthought, catches most certificate problems before they reach the production floor:
- Identity match. The heat, lot or batch number on the certificate must match the number marked on or recorded for the received material.
- Grade and condition match. The specified grade, temper, condition and form on the certificate must match the purchase specification and the drawing.
- Property coverage. Confirm the certificate reports the properties the part actually depends on — strength, hardness, corrosion-related chemistry — not merely a compliance statement.
- Issuer and verification level. Check who signed: a manufacturer’s declaration (2.1/2.2), the maker’s own inspection (3.1), or an independent countersignature (3.2) each carries a different weight.
- Standard references and dates. Confirm the product standard, its edition, and the test dates are stated and current, so the certificate can be tied to the correct revision of the specification.
Where parts must be inspected before acceptance, related guidance such as first article inspection for CNC parts and CNC machining quality inspection reports shows how dimensional records sit alongside material records in a complete quality file. A certificate is a claim about material; it is not a dimensional inspection, and the two should not be substituted for each other.
Risk-based requirements: matching paperwork to consequence
The strongest and cheapest approach is risk-based requirements. Not every part needs a countersigned 3.2 certificate, and insisting on maximum documentation for a non-critical bracket raises cost and lead time without improving safety. Calibrate the documentation package to what happens if the material is wrong:
- Low consequence (non-structural covers, spacers, visual parts): a declaration of compliance or a manufacturer’s test report is usually proportionate.
- Moderate consequence (load-bearing mechanical parts, moving assemblies): a 3.1 certificate with specific test results and a traceable heat number is normally appropriate.
- High consequence (aerospace, medical, pressure or safety-critical parts, regulated product): consider 3.2 with independent verification, plus defined record retention and, where the programme requires it, additional process approvals.
Metrological traceability provides a useful parallel. The concept is an unbroken chain of comparisons linking a measurement to a known standard, and national metrology institutes maintain the top of that chain. For material records, the equivalent idea is an unbroken chain of documents and identifiers — each link verifiable, each issuer identified. Both fail in the same way: one missing or unverifiable link breaks the whole chain.
Common certificate traps and how to close them
Three recurring mistakes account for a large share of disputes. First, accepting a mill certificate for the melt as proof about a specific machined batch without a linkable heat number. Second, treating a generic “complies with” statement as a test report — it is a declaration, not data. Third, requesting a document type that the supplier’s mill does not normally issue and then accepting a substitute without noting the change.
Closing these traps is a paperwork discipline, not a machining problem. State the required certificate type and the required identifiers in the purchase specification; require that heat or lot identity be recorded and preserved through receiving and machining; and review documents on arrival against the five checks above. Where a supplier’s own certification and quality system are relevant, related reading such as quality certifications for CNC machining, how part quality is ensured, and machinable materials can help frame the questions to ask before an order is placed.
Conclusion: specify what you actually need to be able to prove
Material certificates and traceability for CNC parts are not one document but a defined package. The purchase specification sets the grade and the paperwork; the certificate type (2.1, 2.2, 3.1 or 3.2) sets who vouches for the content and whether it was independently verified; the heat or lot identity links the paper to the physical parts; document review confirms the links hold; and risk-based requirements decide how far that chain needs to extend. Buyers who define these four elements in the RFQ get a predictable, verifiable record — and avoid paying for documentation they will never use while still holding the proof they actually need.
