AAR M-1003 Certification for Tank Car Facilities: The NDT Requirements

Two certifications, not one

The AAR Quality Assurance Program requirements sit in the AAR Manual of Standards and Recommended Practices, Section J, Specification for Quality Assurance, Specification M-1003. For tank car facilities the AAR states the legal hook directly: a quality assurance program approved by the AAR's Tank Car Committee is required by federal regulation at 49 CFR 179.2(a)(2) and 179.7. The programme is managed and operated by TTCI, the AAR's wholly owned subsidiary, using auditors employed by or under contract with TTCI, under the general supervision of the AAR Quality Assurance Committee.

M-1003 is only half of it. Appendix B to MSRP Section C-III, Certification of Tank Car Facilities, explains that tank car facility certification consists of certification to the AAR M-1003 Quality Assurance Program, the AAR M-1002 technical approval requirements for each activity, and the administrative provisions pertaining to certification. Table B.1 lists which activities need a technical approval, which need a material group, which need a repair level, and which need a service equipment category.

Certification attaches to activity codes rather than to a building. A20 is manufacturer of freight cars including tank cars. B24 is maintenance and modification of tank car tanks. B81 is qualification of tank car tanks. B90 is maintenance, alteration and qualification of tank car stub sills. C5 is maintenance and qualification of tank car service equipment. C6r covers removal and replacement of service equipment including gaskets, leakage test and modifications. Each activity carries dependencies, and Section J is explicit that QA codes established at initial certification are permanent.

The three-year cycle: CT, C1, C2, RE

Section J paragraph 3.8.1 and Table 3.1 define the cycle. Year zero is the Initial Certification Audit, abbreviated CT. Year one is a Compliance Audit, C1. Year two is a Compliance Audit, C2. Year three is the Recertification Audit, RE. Each certification is in effect for a period of three years subject to annual compliance audits. Initial certification and recertification cover all twenty-four elements defined within Chapter Two. Compliance audits consist of six to eight elements, and in most cases the auditor targets eight.

The QAC selects which elements a compliance audit covers, and it publishes the mandatory set. Under the 2020 rules, elements 2.4 Leadership and Management Responsibility, 2.5 Production, Inspection, and Test Planning, 2.6 Corrective and Preventive Actions, and 2.21 Internal Quality Audits were audited at every audit, with two to four further elements selected from previous audit findings, added activity codes, material nonconformance report data, Section J revisions and observations from the facility tour.

Recertification is not automatic. Paragraph 3.8.3 states it can be denied where a facility has demonstrated an inability or unwillingness to resolve noncompliances or nonconformances, and the QAC reserves the right to schedule a formal meeting. Paragraph 3.8.2 lets the QAC increase audit frequency through Special Quality Assurance Audits based on documented unsatisfactory quality performance, including unresolved adverse audit finding reports, nonconformance reports and the results of industry audits. Lapse rules are equally hard: a facility that opts not to maintain certification operates under the existing certification until expiration only while no more than fifteen months have elapsed since the previous audit.

The 24 elements, and which ones your NDT content lands in

Chapter 2 runs from 2.1 Objective of the Quality Assurance Program through 2.24 Design Control. The manual must include all twenty-four elements, with purpose and scope stated for elements 2.6 through 2.24, must outline the documentation hierarchy, must undergo an annual review, and must be approved by senior management with that approval documented. It must also reference the facility's production, inspection and test plan under element 2.5.

NDT does not get its own element. It lands in four. Element 2.15 Process Control is the primary home: paragraph 2.15.1.8 requires special processes to be performed in accordance with applicable codes, standards, specifications and governmental and contractual requirements by qualified personnel using qualified equipment and procedures. Paragraph 2.15.1.9 requires that the qualification of personnel, procedures and equipment complies with specified requirements. Paragraph 2.15.1.10 requires that documentation for currently qualified personnel, processes or equipment is maintained.

Section J defines a special process as one whose output characteristics cannot be fully or practically verified while in process, thus necessitating a process controlled by qualified personnel, approved procedures and controlled equipment, and it lists welding, heat treating, plating, coating, lining, nondestructive testing and pressure treating. Element 2.22 Training then requires that personnel involved in special processes hold both training and applicable work experience to be considered qualified, and that training records be maintained for qualified personnel as long as they remain qualified. Element 2.17 Quality Records requires evidence that personnel, procedures and equipment for special processes are qualified as required by 2.15.1.10.

What the NDT section of an M-1003 quality manual must contain

Write it as a procedure that a stranger can audit in an hour. Name the special processes the facility performs and the code that governs each. For NDT that is MSRP Section C-III Appendix T for personnel and procedures, Appendix W for welding and the acceptance criteria, and Appendix R for weld purpose codes. Name the standard your written practice is built on, name the Level III who administers the programme, and name the paragraph in Appendix T that qualifies that Level III.

Then close the loop on documentation. Element 2.15.1.11 requires the facility to define special processes not covered by applicable codes, standards or specifications, and where quality requirements exceed those established codes, to describe the necessary qualifications of personnel, procedures and equipment. Element 2.15.1.12 requires the facility to verify that applicable AAR standards, specifications, adopted recommended practices and other technical requirements are obtained, understood, maintained and met, which in practice means an active subscription to AAR Circular Letters and access to the latest Section J.

Element 2.5 is where an auditor tests whether the programme is real. The production, inspection and test plan has to say which welds are examined by which method, at which stage, and against which acceptance criteria in Appendix W. A quality manual that describes an NDT function in the abstract while the inspection and test plan says nothing about radiography of tank shell butt joints will pass a document review and fail on the floor. The procedure library that carries this is the work at /consulting/ndt-technical-procedure-development, and the written practice sitting under it is at /consulting/written-practice-development.

Appendix T: the personnel route, and why self-appointment fails

MSRP Section C-III Chapter 1 defines an NDT Level III as an individual certified by the company as qualified to administer the NDT program, and then adds the sentence that decides most small facilities' compliance position: self-certified or appointment by the company is deemed as not meeting the requirements of Appendix T, and only an individual meeting the testing requirements of Appendix T paragraph 1.8.4 can be certified as an NDT Level III.

That is a stronger position than the FAA takes in aviation and stronger than SNT-TC-1A takes in general industry. In a refinery context an owner will often accept a Level III who was appointed on the strength of experience. The AAR tank car manual will not. The Level III has to have passed the Appendix T examination requirements, and the audit trail has to show it. A shop that has run for years with a shop foreman informally designated as the Level III has a finding waiting for it at the next initial or recertification audit.

Appendix W then puts the Level II and Level III to work at every acceptance decision. Paragraph 2.1 requires that tank car tanks, and any attachments welded directly to the tank, be inspected by NDT examiners qualified per Appendix T for the method employed. Paragraph 10.2.1.2 requires a Level II or Level III NDT technician qualified for radiographic testing to review and approve all required radiographic examinations, with parallel requirements at 10.3, 10.4 and 10.5 for penetrant, magnetic particle and ultrasonic. Where a facility does not have that person on staff, an outside Level 3 is the route, and the boundaries of that role are set out at /consulting/outside-ndt-level-3-can-and-cannot-do.

Appendix W and Appendix R: where NDT is actually called for

Appendix W is titled for welding but section 2.0 is headed Requirements for Nondestructive Examination and section 10.0 is headed Nondestructive Examinations and Acceptance Standards. Section 2.2.2 requires all completed welded butt joint groove welds to be visually inspected and examined by UT or RT. Section 2.3.3 requires specified completed fillet welds on pressure car tanks and aluminium tanks to be examined by magnetic particle or liquid penetrant for carbon steel and by liquid penetrant for aluminium, after postweld heat treatment or no sooner than 24 hours after welding.

The named welds are specific: tank anchor pad-to-tank around the ends of the pad including at least three inches of the longitudinal welds; draft sill pad-to-tank around the outboard end; draft sill pad-to-tank around the inboard end, except where pads extend the full length of the tank. Section 10.1 states that these paragraphs define the acceptance criteria and personnel qualifications used whenever nondestructive test methods are required by the specification or by a tank specification, with radiography at 10.2, penetrant at 10.3, magnetic particle at 10.4 and ultrasonic at 10.5.

Repair levels then govern what welding, and therefore what examination, a facility is allowed to perform at all. Table B.3 of Appendix B defines RL1, RL2 and RLC by reference to the welding purpose codes in Appendix R, with RL2 encompassing RL1 capability and RLC encompassing RL2. RLJ covers weld repairs to tank car jackets and RLS covers stub sills, sill pads and sill welds while excluding pad-to-tank welds. A facility can perform weld repairs only under the repair levels to which it is certified, which means scope creep on the shop floor is an AAR problem, not just a commercial one.

49 CFR 179.7 and 180.509: the federal layer under the AAR layer

Section 179.7 requires each tank car facility to maintain a quality assurance program approved by the AAR that ensures finished products conform to applicable specifications, detects nonconformities in manufacturing, repair, inspection, testing and maintenance, and prevents their recurrence. Paragraph (b) lists twelve minimum elements. Two of them are the NDT elements: subparagraph (9) requires qualification requirements for personnel performing non-destructive inspections and tests, and subparagraph (10) requires procedures for evaluating the inspection and test technique employed, including the accessibility of the area and the sensitivity and reliability of the technique and minimum detectable crack length.

That second one is under-appreciated. It obliges the facility to justify its technique, not merely to certify its technicians. Subparagraph (11) requires periodic calibration and measurement procedures for inspection equipment, and subparagraph (12) requires a system for maintaining records of inspections, tests and result interpretation. Paragraph (c) states that only personnel qualified for each non-destructive inspection and test perform that particular operation, and paragraph (e) requires employees to be trained on the programme and its procedures.

Section 180.509 then drives the demand. The structural integrity inspection at paragraph (e) covers, at minimum, all transverse fillet welds greater than 0.25 inch within four feet of the bottom longitudinal centerline except body bolster pad attachment welds; the termination of longitudinal fillet welds greater than 0.25 inch within four feet of that centerline; and tank shell butt welds within two feet of it. Paragraph (e)(4) lists the acceptable methods: dye penetrant, radiographic examination, magnetic particle, ultrasonic, and direct, remote or enhanced visual inspection using magnifiers, fiberscopes, borescopes or machine vision. Thickness testing at paragraph (f) requires a device accurate to within 0.002 inch. This is recurring, statutory, scheduled NDT demand, and it is why tank car shops need a compliant programme rather than a subcontractor relationship.

The records the auditor asks for

MSRP Section C-III Chapter 1 Table 1.20 lists the documents each certified and registered tank car facility must retain, with periods. Certification and registration of facilities, six years. Welding procedure and procedure qualification, while valid. Performance qualification of welders and operators, while valid plus 90 days. Procedure qualification, while valid. NDT written practice, while valid. NDT certification records, while valid plus 90 days. NDT procedure requirements, while valid. Results of radiographic examinations, five years, with the radiographs themselves retained or discarded. Exhibit B-1 subcontractor's evaluation sheet, while valid, requiring an annual review.

Table 1.19 covers what the car owner keeps, and it interlocks with your output. Radiographs and radiographic reports or UT reports, ten years. Postweld heat treatment records, five years, consistent with radiograph retention. NDT inspection records, until the next inspection. Drawings used as precedent for repairs, ten years. Section 180.517 then requires owners to keep written inspection reports containing the type of inspection performed, the results, the reporting mark and number, the specification, the month and year, a description of defects and repair methods, and the facility name, address, inspector name and signature with the unique facility code.

Element 2.17 of Section J requires inspection and test records to identify the reference drawing or part number, the applicable requirements, the specific inspections performed and results obtained, nonconformance reports, the date, and the identity of the inspector or data recorder. It also requires an environment suitable for preventing deterioration, damage and loss of physical records, and for electronic records, controls addressing data loss, recovery and storage. Most findings against 2.17 are about the last sentence, not the first.

The audit itself, and the 30-day clock afterwards

Initial application is online. Section J paragraph 3.3.2 requires the application to be accompanied by a quality assurance manual approved by a senior management official, an organisation chart depicting quality assurance functions, a completed Quality Assurance Program Evaluation checklist identifying the corresponding line item in the manual that addresses each Chapter 2 requirement, any current AAR technical approvals relating to the activities applied for, and proof of sales or pending sales into North American Railway Interchange Service. A facility may conditionally start work on the activities applied for, but may not release any activities until it receives AAR certification.

Paragraph 3.4.1.1 requires the quality manual and completed QAPE roughly 60 days before the scheduled audit, and the audit handbook requires the Facility Profile Data Sheet 60 days prior, with activities matching the AAR Registry of M-1003 Certified Facilities exactly; where there is a discrepancy, the registry is correct. An opening meeting reviews scope, audit criteria, resources, schedule and safety requirements. Potential adverse findings are raised during the audit and documented once validated. A closing meeting reviews results and provides written findings.

Then the clock starts. Paragraph 3.6.2 requires a written response to the lead auditor on each noncompliance within 30 calendar days of the Adverse Audit Finding Report, demonstrating compliance with element 2.6 through a complete root cause analysis and appropriate corrective action. A rejected response earns 15 calendar days to resubmit. A second rejection sends the unresolved findings with reasons to audit agency management, the QAC Manager and, where applicable, the technical committee manager, with the facility permitted to continue operating pending formal disposition. A facility whose NDT programme cannot survive that scrutiny is better served fixing the written practice and the Level III position before the audit than after it, which is the sequence at /consulting/asnt-level-iii-consulting-services and, where the Level III has already left, at /consulting/ndt-level-3-resigned-what-to-do.

Request a consultation