Nadcap-grade record control for a US aerospace NDT supplier

NAS 410 currency is a date problem, not a certificate problem

NAS 410 Rev 5, issued September 2020, sets the qualification and certification requirements for personnel performing NDT, NDI or NDE in aerospace manufacturing, service, maintenance and overhaul. It is the standard almost every US prime flows down, running alongside EN 4179 in European supply chains. Rev 5 tightened sequencing: the specific examination is administered after at least 75 percent of the experience hours are accumulated, and the practical examination after 100 percent. Confirm which revision your purchase order actually invokes.

The audit question is never whether a certificate exists. It is whether the person who processed this part was current in this method at this level on this date. That takes four dates per operator per method: certification date, expiry, last annual near-vision examination, and last colour vision test, which must fall within the previous five calendar years. Miss any one and the certification is not current, whatever the certificate on the wall says. See NAS 410 certification requirements.

Model it as a matrix, not a folder. Operator by method by level, each cell carrying its own dates and its own next-action date, with a flag when any date crosses 90, 60 or 30 days out. That structure also answers the scheduling question, which is who can be put on this job today, and a folder of scanned certificates cannot answer it. Personnel certification tracking built this way stops expiries being discovered by an assessor.

Technique sheets are controlled per part number, per revision

In pipeline or structural work a procedure covers a class of joints. In aerospace, a technique sheet is written against a part number, sometimes against a specific feature on that part, and it names the parameters that produce a qualified inspection: penetrant method and sensitivity level, dwell and emulsification times, magnetising method and amperage, transducer frequency and angle, scan plan, kilovoltage and exposure time, image quality indicator selection and placement.

Because the technique is part-specific, the document count grows with the part catalogue. A supplier with 400 active part numbers holds 400 or more technique sheets, each with a revision history and each referenced by jobs that ran under one particular revision. That is a database problem wearing the costume of a document problem, and it is why shared drives fail here: two revisions circulate on the floor and nobody can state which one governed a shipped lot.

The requirement is that a job record points at a technique revision, not at a technique. When Rev C supersedes Rev B, jobs already run under Rev B keep pointing at Rev B forever. An assessor sampling a two-year-old job then sees the document that actually governed it. Systems resolving that link to the current revision quietly rewrite history and produce a nonconformance the supplier cannot explain, because the evidence contradicting it no longer exists.

The frozen process, and who may change a parameter

The frozen-process concept comes from the customer side of the relationship. Once a technique is approved for a part number, the parameters producing the inspection are fixed, and a change does not take effect until the customer approves it in writing. Nadcap does not write that rule; primes do, through their process specifications and purchase order terms. The supplier obligation is to be able to prove the process did not drift between the approval and the shipment.

Proving it requires change history at the field level rather than the file level. A replaced PDF shows only that something changed. A parameter-level history shows that dwell time moved from 20 to 30 minutes, on which date, at whose request, and under which customer approval reference. When an assessor or a customer quality engineer asks why a parameter differs from their approved copy, only the second version answers the question without a meeting.

Approval routing is the other half. The person who authors a technique and the person who releases it are usually not the same, and in most aerospace NDT suppliers release authority sits with the responsible Level 3. Software letting any user edit a released technique erases that control entirely. See responsible Level 3 support for how the role is structured when a supplier contracts it rather than employing it.

Penetrant process control records under ASTM E1417

ASTM E1417/E1417M drives the fluorescent penetrant line, and the 2021 revision moved several check frequencies. Ultraviolet lamp integrity became a daily check rather than weekly. Method A(W) penetrants need weekly refractometer measurement of water content. Penetrant brightness testing and dryer oven verification moved from quarterly to semi-annual. Daily system performance checks against a known-defect panel remain the anchor of the whole regime, and the assessor starts there.

Suppliers usually record all of this. What they usually cannot do is connect it to parts. The check log lives in a binder beside the line, the job records live in the quality system, and the two are joined by date and by memory. An assessor who samples a part and asks for the system performance check covering the shift that part ran is asking for a join nobody has built, and the search takes minutes that feel much longer.

Building the join is not difficult once the checks are records with timestamps and the processing steps carry timestamps too. Every part then inherits the process control state of its shift automatically, and an out-of-tolerance check immediately identifies the parts at risk rather than triggering a manual reconstruction. That containment speed is the practical argument for putting process control inside NDT inspection software instead of beside it in a binder.

Magnetic particle field verification under ASTM E1444

ASTM E1444/E1444M sets the aerospace magnetic particle regime. System performance verification and black light intensity are daily checks. Field adequacy at the part surface is established with quantitative quality indicators or shims, and field strength is measured with a Hall-effect gaussmeter whose own accuracy is verified every six months. Each of those is a record with a date, a result, an instrument identity, and a person, and each is sampled independently.

The gaussmeter six-month verification is the classic quiet failure. It lapses, nobody notices, and every field reading taken afterwards is unsupported. The parts have shipped. Containment then means identifying every lot inspected between the lapse date and the discovery date, which is fast when the instrument serial number is bound to each result and archaeological when it was written on a bench log that has since been replaced.

That is the general rule for aerospace record design: bind the instrument, not the instrument name. Equipment calibration tracking that carries serial numbers, due dates and current status into every result turns the containment query into a filter. Without it, containment becomes an archaeology project performed under a customer escape notification, which is the worst possible circumstance in which to discover that your records do not join.

Radiographic technique and IQI records

A radiographic record has to reproduce the shot. Source or tube and its parameters, source-to-film distance, film or detector type and its identification, screens, exposure time, geometry, the image quality indicator selected and where it was placed, the essential hole or wire visible, and the density readings taken. AC7114/4 governs film radiography specifically, and AC7114/9 covers remote interpretation of radiographic film and digital images.

The reader sheet and the technique are usually separated in practice, because the interpretation gets stored with the job while the technique lives with the part. An assessor sampling a shot wants both together, plus the interpreter certification currency on the date of reading. Three records in three systems, joined by hand. That is a slow answer during an audit, and a slow answer is a finding waiting to be written up.

Remote interpretation has made this sharper. When film or digital images are read at a different site from the one where they were shot, the chain of custody, the reader qualification under the accreditation, and the transmission record all become auditable objects in their own right. A supplier offering remote reading needs those three recorded automatically, because a manual chain-of-custody log spanning two sites will not survive contact with volume.

The audit trail a Nadcap assessor samples

The assessor works backwards from a job. Pick a part, find the paperwork, then follow every thread it exposes: which technique revision, which operator, was that operator current, which process controls covered the shift, which instruments, were they in calibration, who reviewed the interpretation, what happened to the rejects. Each thread must terminate in a record with a date on it rather than in an explanation from a supervisor.

That makes the audit a data-model test rather than a documentation test. A supplier with excellent documents and no relationships between them fails threads two, four and six. A supplier with adequate documents and complete relationships passes all of them in a fraction of the time, which also shortens the audit and reduces the surface area the assessor has time and appetite to explore further.

Run it on yourself first. The self-audit is a Nadcap requirement and the most frequently cited nonconformance area, and it works only when re-run against the current criteria revision with objective evidence attached to each line. Nadcap AC7114 audit readiness covers how that pre-audit pass is structured and what gets sampled. The gap you find yourself is always cheaper than the gap the assessor finds.

What aerospace changes about software selection

Aerospace inverts the usual priority. In most NDT segments the report is the deliverable and the records support it. Here the records are the deliverable, because accreditation is what lets you quote at all. So evaluate on record structure: can a job bind to a technique revision, can a certification carry four independent dates, can a process control check join to the parts it covers, can an instrument bind to a result.

Then evaluate change control. Who can release a technique, is the approval captured with an authority reference, is field-level history retained, and can a released document be edited without leaving a trace. Ask the vendor to demonstrate an edit to a released technique and to show you the resulting audit entry on screen. If the demonstration is a slide rather than a click, the capability is aspirational rather than real.

Atlantis builds inspection software on Odoo, deployed cloud or on-premise, with certification tracking, calibration tracking and configurable record structures. Configurability matters here because every prime flows down a slightly different set of required fields, and a fixed schema forces the difference into free text. Affordable, accessible, fully customizable. Request a demo and bring your hardest audit thread, the one that currently takes three people and a shared drive to answer.

Request a consultation