Six weeks to your IATF 16949 surveillance audit. The auditor picks one PPAP-listed asset, asks for three years of maintenance evidence, and follows the trail — into calibration records, corrective actions, spare parts, technician qualifications. If any link breaks, that is a finding. If findings accumulate over successive audits, that is a suspended certificate, and a suspended certificate is a suspended supply agreement. An automotive Tier 1 supplier CMMS — sign up free to explore Oxmaint builds that trail as a byproduct of daily work.
Live Simulation
Audit Day: What the Auditor Asks, What Your CMMS Shows
Tap any question below to see the evidence trail
Auditor asks
"Show me the last 36 months of preventive maintenance for stamping press PRS-04, with technician sign-off."
Oxmaint surfaces in 12 seconds
PM-2024-118Ram slide lubrication · J. Patel · 42 minSigned
PM-2024-207Hydraulic filter change · R. Ahmed · 28 minSigned
PM-2024-341Die clamp inspection · M. O'Neill · 55 minSigned
+ 47 more records · Export as IATF evidence pack
Auditor asks
"The June downtime event on Line 3 — where is the corrective action and how was effectiveness verified?"
Objectives defined · Thresholds set · Auto work-order trigger
36sTotal to answer all 4 auditor questions
0Spreadsheets opened, folders searched
100%Evidence timestamped and signed
The Real Cost of One Audit Finding
Tier 1 suppliers rarely lose a certificate to a single event. They lose it to a pattern — the same finding raised across successive surveillance audits because the underlying record system never actually changed. Every finding carries a direct cost and a much larger indirect cost through customer chargebacks, controlled shipping requirements, and lost programme awards. The maths below is what a mid-sized UK Tier 1 typically absorbs per major finding when maintenance evidence is thin.
Cost Ledger — One IATF Major Finding
Typical UK Tier 1 supplier, 200-employee plant
Auditor re-visit fees
Extended audit duration under 6th Edition Rules
$4,000 – $8,000
Internal audit response labour
Quality + maintenance team, avg 120 hours
$6,000 – $10,000
Customer-mandated containment
Sort, inspect, controlled ship — 100% until closure
$15,000 – $40,000
OEM chargebacks and premium freight
Delivery risk premium during containment window
$8,000 – $25,000
New business hold (worst case)
Removed from sourcing lists until pattern breaks
Programme loss
Direct cost, single finding
$33,000 – $83,000
Five Rulebooks, One Asset
A UK Tier 1 stamping a bracket for JLR, Ford and BMW is not running one quality system — they are running five overlapping rulebooks on the same press. IATF 16949 sets the baseline. Each OEM layers its own Customer-Specific Requirements. VDA 6.3 is expected for any German OEM programme. The CMMS record for that single press has to satisfy every layer simultaneously, and the auditor from any one customer needs to see only their filtered view. To watch this multi-rulebook filtering in a live workspace, book a free demo of the multi-OEM audit view.
One asset. Five simultaneous rulebooks.
PRS-04
Stamping press
PPAP-1187
Base
IATF 16949
CSR
JLR SQM
CSR
Ford Q1
CSR
BMW GS
Audit
VDA 6.3
Oxmaint filters evidence per customer view — one asset record, five compliant answers
The Traceability Chain That Auditors Actually Follow
An IATF auditor rarely stays at the top level. They pick a part, follow it to the process, follow the process to the equipment, follow the equipment to its maintenance history, follow the history to the technician, follow the technician to their qualifications. If any link in that chain is broken or reconstructed after the fact, the finding writes itself. The strongest defence is a CMMS where every link is created live, at the moment work happens, and the chain cannot be edited retrospectively.
The Six-Link Audit Trace
1
PPAP Part
Customer-approved part number
2
Process Step
Named operation in control plan
3
Asset
Tagged equipment ID
4
Maintenance
Every WO, PM, PdM, calibration
5
Technician
Signed the work order
6
Qualification
Training record + certification
One broken link = one audit finding. Oxmaint stores all six against a single asset record.
See the Full Audit Chain in a Live Workspace
Watch how one asset record carries all six traceability links, from PPAP to technician qualification, in a 30-minute demo built for Tier 1 automotive.
The most misread clause in IATF 16949 is 8.5.1.5. It does not say "have a PM schedule." It says an organisation shall develop, implement and maintain a documented total productive maintenance system that identifies process equipment necessary to produce conforming product, provides for replacement parts, provides for packaging and preservation of equipment, includes documented maintenance objectives, and — critically — uses predictive maintenance methodologies where appropriate. Suppliers still running paper PMs without any PdM component are non-conforming by definition. Suppliers ready to add PdM signal integration on top of their existing PM programme can sign up free to trial the PdM workflow before rolling it out plant-wide.
IATF 16949 · Clause 8.5.1.5
What "TPM" actually requires
Documented list of process equipment needed to produce conforming product
Availability of replacement parts for that equipment
Packaging and preservation of equipment, tooling, and gauging
Documented maintenance objectives with measurable KPIs
Periodic review against maintenance objectives
Use of predictive maintenance methodologies where appropriate
Structured periodic maintenance
Corrective maintenance with documented root cause
Expert Perspective: Why the Same Finding Repeats
The finding I raise most often in Tier 1 surveillance audits is not a control failure — it is a maintenance record gap adjacent to a quality escape. The corrective action says "equipment malfunction" and the CMMS shows three consecutive missed PMs the quarter before. Plants that run maintenance and quality as parallel systems, joining them only when something goes wrong, will fail the same finding at every audit cycle until the integration becomes structural.
01
Evidence is a byproduct, not a project
Audit-grade records come from technicians closing work orders correctly — not from the quality team assembling folders the week before.
02
One record, every customer view
The same asset carries PPAP linkage, calibration, PM history and CSR tags — any OEM can be audited against without rebuilding.
03
8D that actually closes
Structured corrective action linked to the originating work order, with 90-day effectiveness verification tracked in-system.
A Realistic 90-Day Rollout
A CMMS rollout that tries to onboard every asset simultaneously usually stalls. Suppliers who succeed sequence the work — PPAP-critical production equipment first, then secondary production, then facilities. Within 90 days a well-scoped implementation covers your audit-critical assets end-to-end, with the balance migrating in a controlled second phase. To size a rollout to your specific plant and OEM mix, book a free scoping call with an automotive specialist.
Tier 1 Rollout Timeline
Week 1
Week 4
Week 8
Week 12
Asset register + PPAP tagging
PM schedule import + clause mapping
Cycle-count triggers + calibration certs
CSR overlays per OEM programme
8D corrective action workflow
PdM signal integration
MTBF/MTTR dashboards + mock audit
By week 12: full audit-readiness extraction across every PPAP-critical asset.
Walk Into Your Next Audit With Evidence in Order
Stop assembling records the week before. Let Oxmaint show you a Tier 1 workspace configured for your OEMs, your equipment, and your next surveillance date.
The UK automotive supply chain sits inside one of the most demanding customer mixes in the world — JLR, BMW MINI Plant Oxford, Nissan Sunderland, Toyota Burnaston, Stellantis Ellesmere Port, and a Tier 2 network exporting into Germany. IATF 16949 6th Edition Rules effective January 2025 introduced risk-based audit duration calculations, meaning a thin evidence trail directly extends your audit — and the cost. For UK suppliers exporting into Germany, VDA 6.3 process audits assess the maintenance record against each of the six process modules. UK teams can sign up free to configure a UK Tier 1 workspace without a procurement cycle.
01
Multi-OEM CSR overlays
Supplying JLR and a German OEM simultaneously means IATF 16949 plus JLR SQM plus VDA 6.3 evidence trails running in parallel.
02
6th Edition risk-based audits
Audit duration scales with your risk profile. A patchy record trail extends the audit — and the audit fees.
03
EV programme launches
New battery, e-motor and power electronics lines mean fresh PPAP submissions and asset registers built from day one.
Frequently Asked Questions
Does Oxmaint satisfy IATF 16949 clause 8.5.1.5 on Total Productive Maintenance?
Yes. Clause 8.5.1.5 requires a documented TPM system with maintenance objectives, planned preventive maintenance, predictive maintenance methodologies, and periodic assessment. Oxmaint provides asset-level PM plans with completion evidence, PdM signal integration with automated work orders, MTBF and MTTR trending, and configurable maintenance objectives per asset — covering the full set of elements a 16949 auditor expects under this clause.
How does the CMMS handle multiple OEM Customer-Specific Requirements at the same time?
CSRs are configured as overlays on the IATF 16949 baseline. When you supply JLR, Ford, BMW and Stellantis in parallel, each customer's specific requirements — JLR SQM, Ford Q1, BMW GS, Stellantis CSR — are tagged against the relevant asset, workflow step and evidence record. During a customer audit the workspace filters to show only the evidence relevant to that OEM's rulebook, without needing separate systems per customer.
Can we produce PPAP-linked maintenance records for new programme launches?
Yes. Assets are tagged with the PPAP part numbers they produce, so any maintenance activity — PM, corrective, calibration, PdM — is automatically linked to the affected PPAP submissions. For new programme launches this means your PPAP element checklists carry live evidence of asset readiness, run-at-rate results, and process capability from day one, rather than being assembled retroactively.
How does the platform support VDA 6.3 process audits for German OEM customers?
VDA 6.3 audits assess six process modules — project management, product development, process development, supplier management, production, and customer service. Oxmaint's production module evidence covers the P6 requirements directly: material resources, process capability, equipment condition, corrective action and traceability. Evidence packs can be filtered per module for pre-audit review by internal auditors or SMMT Industry Forum-qualified VDA 6.3 assessors.
What is a realistic implementation timeline for a mid-sized UK Tier 1 supplier?
A typical 90-day rollout covers PPAP-critical production assets end-to-end. Weeks 1–4 focus on the asset register, PPAP tagging, PM schedule import and clause mapping. Weeks 5–8 add cycle-count triggers, calibration certificates, CSR overlays and structured 8D workflows. Weeks 9–12 layer in PdM signal integration, MTBF/MTTR dashboards and a full mock audit extraction. Secondary production and facilities equipment migrate in a controlled second phase.
