Regulated programmes cannot place work with a supplier who lacks the right credential. Here the credential is a filter, not a PDF someone emails later.
A supplier's AS9100 certificate turns up as a PDF at the end of qualification, which means the shortlist was built without it and half the effort is wasted.
AS9100, ITAR registration, ISO 9001 and the rest are structured, reviewed credentials you can filter the directory by — and asking for two means holding both, not either.
CertificationsA certificate that lapsed last quarter is worse than none, because it is presented as current and nobody re-checks the date on a document they already filed.
Whether a credential is live is worked out every time it is read. There is no sweep job and therefore no window in which the directory shows a certificate that has expired.
CertificationsProgramme audits ask why a supplier was chosen and what changed after. Most sourcing leaves that answer spread across email.
Every bid, approval, order and receipt is written to an append-only, hash-chained log — including changes made by the platform. A later edit breaks the chain and the verifier reports where.
Audit & compliance