Quick Answer
Quick Answer
Quality certificate management is the systematic process of receiving, reviewing, approving, storing, and retrieving material test certificates (MTCs), certificates of conformance (CoCs), and NDE reports across a fabrication or supply chain operation. A structured system eliminates manual handling errors, enforces compliance, and provides instant audit-ready traceability.
Quality certificates are the backbone of traceability in metals processing, pressure vessel fabrication, and structural work. Every heat of steel, coil of pipe, or forged flange arrives with documentation that must be verified against a purchase order, a material standard, and a customer specification — before the material ever touches a production floor.
Yet in most shops today, this process is manual, fragmented, and slow. Certificates arrive by email, get saved in generic folder trees, and live in no-one's system of record. Auditors ask for a heat number. Someone spends two hours searching.
This guide covers the complete lifecycle of quality certificate management — from receiving and inspection through approval, storage, outgoing issuance, and retention.
What Counts as a Quality Certificate?
Quality certificates in metals and fabrication include:
- Mill Test Certificates (MTCs / CMTRs) — issued by steel mills and metal producers, documenting chemistry and mechanical test results for a specific heat/lot
- Certificates of Conformance (CoC) — declarations that material or a finished component meets specified requirements
- NDE / NDT Reports — radiography, ultrasonic, magnetic particle, and dye penetrant inspection records
- Heat Treatment Records — time-temperature charts for normalizing, stress relieving, or PWHT operations
- Dimensional Inspection Reports — first article inspections, in-process checks
- Calibration Records — for test equipment used in the certification chain
- Welding Procedure Qualification Records (WPQRs / PQRs)
Each document type carries different retention obligations, different verification rules, and different downstream audiences. Managing them as a single undifferentiated pile of PDFs is the root cause of most traceability failures.
The Core Certificate Management Lifecycle
1. Receipt and Intake
Certificates arrive from suppliers alongside or shortly after material delivery. The intake step establishes:
- Linkage — tying the certificate to a purchase order line, heat number, and stock location
- Format normalization — paper, PDF email, EDI, supplier portal export
- Initial completeness check — does the document contain the minimum required data fields (heat number, grade, standard reference, test results, authorized signature)?
Gaps found at intake are far cheaper to resolve than gaps found during a customer audit or regulatory inspection.
2. Technical Verification
The certificate claims compliance with a standard. The verification step confirms the claim is accurate:
- Chemistry values are within the specification limits for the stated grade and product form
- Mechanical properties (yield, tensile, elongation, CVN impact) meet the required minimums
- The correct testing standard was applied (e.g., ASTM A370 for tensile testing)
- The certifying lab or mill is approved on the manufacturer's qualified supplier list
This step requires access to the underlying standards data — not just the certificate text.
3. Approval and Sign-Off
Once technical verification passes, the certificate enters a review and approval workflow. Depending on the end-use category (general fabrication vs. pressure equipment vs. nuclear), approval may require one or more qualified reviewers with documented authority.
See Certificate Review & Approval Workflow Best Practices for step-by-step guidance.
4. Linkage to Stock and Work Orders
An approved certificate must be linked to the physical material it covers. This means:
- Attaching the certificate record to the stock ledger entry for the specific heat/lot
- Propagating that linkage to work orders or job travellers that consume the material
- Maintaining the link when material is cut, kitted, or transferred between locations
Without this linkage, traceability breaks the moment material moves from the receiving dock.
5. Outgoing Certificate Issuance
When finished products or sub-assemblies are shipped to customers, the quality package must be assembled. This may include:
- Pass-through supplier MTCs (with or without re-certification)
- A company-issued Certificate of Conformance referencing the underlying heat data
- NDE and dimensional reports for the specific piece
- Customer-specific formatting requirements
6. Long-Term Retention and Retrieval
Quality certificates for structural, pressure, and safety-critical applications must be retained for decades. ASME requires 25 years for pressure vessel records in many jurisdictions. ISO 9001 requires documented retention periods. 21 CFR Part 11 requirements apply in pharmaceutical manufacturing environments.
Retrieval must be fast. An auditor or customer should be able to request a certificate and receive it within minutes, not days.
Common Failure Modes in Certificate Management
| Failure Mode | Root Cause | Consequence |
|---|---|---|
| Certificate not received before use | No hold on receiving until cert arrives | Non-conforming material used in production |
| Chemistry values not checked against standard | Manual process skipped under time pressure | Incorrect grade used; field failure risk |
| Certificate stored but not linked to heat | Filing by supplier name, not heat number | Cannot retrieve cert by material identifier |
| Outgoing cert package missing documents | No checklist; assembled ad hoc | Customer holds payment; delivery delayed |
| Retention gap | No defined policy; documents deleted or lost | Audit failure; regulatory exposure |
What a Mature Certificate Management System Looks Like
A mature system, whether software-based or procedurally rigorous, provides:
- Structured intake with mandatory data fields captured at receipt
- Standards-aware verification — chemistry and mechanical limits stored as data, not paper lookups
- Role-based approval workflows with electronic sign-off and audit trail
- Bidirectional traceability — from certificate to stock to work order to finished product
- Outgoing package assembly from verified constituent records
- Retention scheduling with access controls on archived documents
- Audit-ready reporting — generate a full traceability report by heat number in under a minute
Certificate Management vs. General Document Management
General document management systems (SharePoint, Google Drive, even engineering PDM systems) were not designed for the structured data requirements of material certification:
- They store files, not the structured chemistry and mechanical data within those files
- They have no concept of a material standard or grade specification
- They cannot flag a certificate as non-conforming against a limit
- They have no first-in-first-out or material-linkage model
A purpose-built quality certificate management system — like TestCert — maintains the certificate as both a document and a structured data record, enabling automated verification, instant retrieval, and standards-aware approval workflows.
Regulatory and Standards Context
Several frameworks govern quality certificate management practices:
- ISO 9001:2015 §7.5 — documented information control and retention
- ASME Section VIII / Section IX — specific records for pressure vessels and weld qualifications
- PED 2014/68/EU — European pressure equipment directive; traceability requirements
- API Q1 / API Q2 — quality management for oil and gas equipment manufacturers
- 21 CFR Part 11 — FDA regulation for electronic records in pharmaceutical manufacturing
- AS9100 — aerospace quality management; first-article and material certification requirements
Building Your Certificate Management Process: Where to Start
For organizations transitioning from ad-hoc to systematic certificate management:
- Audit your current state — identify where certificates arrive, where they are stored, and how they are retrieved today
- Define document types and verification rules per material category
- Establish intake controls — no material released to production without an approved certificate
- Create standard operating procedures for verification and approval
- Implement a retention policy with defined periods per document type
- Evaluate software options that support structured data capture and workflow automation
What is the difference between an MTC and a Certificate of Conformance?
A Mill Test Certificate (MTC) contains actual measured test data — specific chemistry percentages and mechanical test values from a production heat. A Certificate of Conformance is a declaration that material or a product meets specified requirements, which may reference the underlying MTC without repeating all test data. Most regulated applications require both.
How long should quality certificates be retained?
Retention periods vary by application and jurisdiction. ASME pressure vessel records typically require 25 years minimum. ISO 9001 requires documented retention periods defined by the organization. Pharmaceutical applications governed by 21 CFR Part 11 require records to be retained for the lifetime of the product plus a regulatory period. See our Document Retention Rules guide for a full breakdown.
Can we use SharePoint or Google Drive for quality certificate management?
General file storage systems can hold certificate PDFs but cannot enforce structured data capture, perform standards-aware verification, or maintain bidirectional material linkage. They work as an interim measure but create audit risk at scale. Purpose-built systems provide verification, workflow, and retrieval capabilities that generic storage cannot replicate.
What fields must a Mill Test Certificate contain to be acceptable?
At minimum: material specification and grade, heat or lot number, product form and dimensions, actual chemistry values for all required elements, actual mechanical test results, applicable test standard reference, heat treatment condition (if applicable), and authorized signature with certifier identification. Customer or end-use requirements may add additional mandatory fields.
What happens when a supplier provides a certificate that fails verification?
The material should be quarantined immediately and tagged as hold pending disposition. A non-conformance report (NCR) should be raised against the supplier. Disposition options include return to supplier, application for material review board (MRB) acceptance with documented justification, or rejection and replacement. The certificate failure and disposition must be retained in the audit record.
Ready to automate your certificate workflow?
Try TestCert free