Records Retention Schedule for AAR M-1003

AAR M-1003 names this requirement as "Training records for qualified personnel, retained as long as they remain qualified or as otherwise specified". The QA manager owns it, and a contracted Level III can author and sign it.

The finding auditors record against this document is: Chapter 7 forms QA-7.1, QA-7.2 and QA-7.3 misused, or nonconformance records not retained for three years. M-1003 is a quality assurance certification for the shop, not an NDT credential. It requires the facility to implement a documented quality assurance programme meeting the twenty-four elements of Chapter 2 and to be audited against them on a three-year cycle. NDT enters through Element 2.15, Process Control, which requires special processes to be performed in accordance with applicable codes, standards, specifications and governmental and contractual requirements by qualified personnel using qualified equipment and procedures; and through Element 2.22, Training, which requires special-process personnel to hold both training and applicable work experience. Where no code covers a special process, the facility must define the necessary qualifications itself.

Source: AAR M-1003 Quality Assurance Audit Handbook 2026, Revision F, revised April 2026 (public version) and Revision C, revised January 2024 (public version), both published by AAR — read in full for programme management, audit criteria selection, mandatory elements, RCCA process, nonconformance reporting and fees. AAR M-1003 Frequently Asked Questions at aar.com/standards/FAQ.php (application route, four-to-nine-month timeline, fee ranges, three-year cycle, twenty-four elements, auditor and QAPE requirements). MSRP Section J Appendix A Activity Code Guide dated 27 January 2026 (activity codes and technical approval requirements). Quality Assurance Program Evaluation (QAPE) Checklist, Rev 02/01/2026 (element titles and the special process and training question set). All retrieved August 2026. The M-1003 specification text itself is a paid AAR publication and was not read in full; element titles were reconstructed from the QAPE checklist.

Records Retention Schedule under AAR M-1003 — owner, content and how it is tested
Item	What applies	Why it matters
Regime	AAR Manual of Standards and Recommended Practices, Section J — Specification M-1003, Specification for Quality Assurance	Enforced by Association of American Railroads (AAR), through its Quality Assurance Committee; the programme is managed and operated by AAR's wholly owned subsidiary MxV Rail using AAR Accredited Auditors
Document	Records Retention Schedule	how long each record is kept, where, and who can retrieve it during an audit
Owner	the QA manager	The signature an auditor traces back
Where it is checked	Quality Assurance Committee vote, then entry in the AAR Registry of M-1003 Certified Facilities with a QA Code.	Usually against a sampled job, not in isolation
Common failure	QAPE checklist does not identify a specific line item of the facility's own programme against each Chapter 2 requirement	The gap between the manual and the job file

What must a records retention schedule contain under AAR M-1003?

It has to satisfy AAR M-1003 as Association of American Railroads (AAR), through its Quality Assurance Committee; the programme is managed and operated by AAR's wholly owned subsidiary MxV Rail using AAR Accredited Auditors enforces it: how long each record is kept, where, and who can retrieve it during an audit. The test is not completeness on paper but traceability — an auditor picks a finished job and works backwards to this document, so anything it claims must be demonstrable on that job.

Who signs the records retention schedule for AAR M-1003?

The QA manager. Because this regime accepts employer-based certification, that role can be filled by a contracted Level III rather than a staff appointment, provided they are qualified in the methods they sign for.

How does a AAR M-1003 auditor test this document?

By sampling. They take a completed job, find the technicians and equipment used, and trace each back through this document to the evidence behind it. A document that reads well but cannot survive that trace is the most common finding across every regime, not just this one.

How long must AAR M-1003 records be kept?

Each M-1003 certification runs three years, subject to annual compliance audits: after initial certification there is a minimum of two annual compliance audits followed by a recertification audit at the end of the third year. Initial and recertification audits cover all twenty-four Chapter 2 elements; compliance audits cover six to eight, always including the four the Quality Assurance Committee mandates for that year (2.5, 2.6, 2.11 and 2.12 for 2026; 2.5, 2.7, 2.8 and 2.21 for 2024). AAR states approximate audit costs for North American facilities of between $6,000 and $12,000 for certification and recertification audits and between $4,000 and $8,000 for compliance audits, with exact fees published in Appendix E of the AAR Office Manual. Time from completed application to initial certification varies from four to nine months. Retention is set by the regime and by the client contract above it, and the longer of the two governs. Firms that set one retention period for everything and document it fare better at audit than firms tracking different periods per record type and losing track.

Does a generic template satisfy AAR M-1003?

No. A downloaded template describes a generic firm, and the first question an auditor asks is whether the document describes THIS firm — its methods, its equipment, its people, its actual workflow. Templates are a starting structure; the content has to be the firm's own or the trace fails immediately.

What happens if this document is missing at a AAR M-1003 audit?

It is a finding, and depending on the regime it can suspend the certificate rather than merely generate a corrective action. The related finding auditors record most often is: QAPE checklist does not identify a specific line item of the facility's own programme against each Chapter 2 requirement

Where this sits in the AAR M-1003 evidence pack

Quality Assurance Manual
Completed Quality Assurance Program Evaluation (QAPE) checklist, identifying the corresponding line item of the facility's programme against each requirement in M-1003 Chapter 2
Production, inspection and test plan (Element 2.5), identifying every inspection and test point, the characteristics inspected and the acceptance criteria
Special process procedures with the personnel, equipment and procedure qualifications required by paragraph 2.15.1.10
Training records for qualified personnel, retained as long as they remain qualified or as otherwise specified
Calibration records for measuring and testing equipment, including calibration date and interval, with unique identification and calibration status labelling (Element 2.8)
Chapter 7 material nonconformance records on Forms QA-7.1, QA-7.2 and QA-7.3, retained three years
Evidence of a current subscription to AAR Circular Letters and of holding the latest revision of MSRP Section J
Internal quality audit records (Element 2.21)

Personnel certification context

Employer-based, and unusually open. M-1003 does not name ASNT SNT-TC-1A, ANSI/ASNT CP-189 or ISO 9712. It requires that special processes be performed by qualified personnel using qualified equipment and procedures in accordance with whatever code, standard or specification actually applies to the product — which for tank cars, wheels and axles is set by AAR technical manuals and federal rules, not by M-1003 itself. Where quality requirements exceed established codes, the facility must describe the necessary qualifications of personnel, procedures and equipment in its own programme, and prove them at audit through training records held as long as the person remains qualified. An outsourced Level III can supply that qualification basis, write the procedures and certify the technicians.