In short. Qualifying a supplier in a regulated industry takes weeks to months, and almost none of that time is engineering judgment. It is document collection, currency checking and cross-referencing. Then requalification restarts the clock every one to three years, and the events that trigger it mostly go unnoticed. Agents can carry the assembly. Your quality engineers keep the decision.
The gate is made of paperwork, and paperwork does not scale
Supplier qualification in defense, aerospace and shipbuilding is unusually heavy for good reasons. AS9100 and AS9145 for quality systems. IAQG OASIS for certificate verification. ITAR and export control status. DFARS 7012 and NIST 800-171 for anyone touching controlled unclassified information. Financial stability. First article inspection. Facility audit where the part warrants it.
Industry practice puts qualification anywhere from two weeks to several months, and where it lands has less to do with the supplier's engineering capability than with how ready their documentation happens to be on the day you ask.
The constraint on your supplier base is not how many suppliers your engineers can assess. It is how many document packages your team can chase.
Which is the shape of every workflow that refuses to scale. Volume rises, and the cost of handling it rises with it, because the work is assembly rather than judgment and assembly is done by people.
Requalification is the part nobody budgets for
Qualified suppliers do not stay qualified. Aerospace suppliers are typically requalified every one to three years, and a set of events forces it earlier: a production gap beyond twelve months, a facility move, a change of ownership, a significant process change, deteriorating performance metrics.
Read that list again and notice what it has in common. Every item is a thing that happens at the supplier and gets noticed at your end late, if at all. A supplier changes hands in March and somebody finds out in November because a certificate came back with a different company name on it.
So your qualified supplier list is not a list of qualified suppliers. It is a list of suppliers who were qualified on the date you last looked, which for most of them was a while ago.
What an agent actually does here
Not the decision. The assembly.
The agent carries
Requesting and chasing the document package, in the supplier's preferred format
Verifying certificates against source registries rather than the copy supplied
Checking currency: expiry dates, assessment ages, fiscal years, SPRS scores
Cross-referencing entity names, CAGE codes and addresses across documents
Drafting the qualification summary with every claim linked to its evidence
Watching for requalification triggers continuously and raising them when they occur
Your team keeps
Whether this supplier is fit for this part
Any judgment where the evidence conflicts
Risk acceptance where a gap is known and tolerated
The signature on the qualification record
Escalation calls the agent routes rather than resolves
What to do about a trigger once it is raised
The last row is the one that changes the operation rather than merely speeding it up. A person cannot watch two hundred suppliers for ownership changes and lapsing certificates. An agent can do it every night, and the requalification treadmill stops being a periodic scramble.
None of which matters if it cannot run inside your perimeter
In defense, aerospace and naval shipbuilding, a good deal of this material is export controlled. ITAR technical data cannot sit on a commercial inference endpoint, and an export control classification does not care how good your data processing agreement is.
So the deployment question is not an afterthought here, it is the entry condition. Open-weight models tuned on your own category history, running inside your environment or fully air-gapped, mean supplier records, drawings and specifications never cross the boundary. If a supplier qualification agent requires a call out to somebody else's model, the business case fails before anyone writes it.
What to measure, and what good looks like
Baseline four numbers before you build anything, because none of them can be reconstructed afterwards.
Measure
Days from qualification request to signed record
Touches per qualification: emails, calls, chase cycles
Share of qualifications delayed by document issues rather than findings
Suppliers currently overdue for requalification
Why it matters
The headline number, and the one your engineering team feels
Where the cost actually sits
Usually far higher than anyone expects
The risk you are carrying without having decided to
In a governed procurement operation we run, supplier approvals move roughly 50 percent faster with the team unchanged. The mechanism is not clever. The agent assembles and verifies, the engineer decides, and nobody spends a Thursday afternoon establishing whether a certificate is current.
Start with one commodity, not the whole supplier base
Pick a single commodity or part family with steady qualification volume. Baseline it. Run the agent in shadow for a month, assembling packages alongside your team without touching the live process, and compare. Then open the gate on the narrowest slice: qualifications where the documentation is complete and the findings are clean, with everything else routed to a named reviewer.
Ninety days is enough for that, and one commodity proven with real numbers is worth more internally than a plan covering all of them.
How many of your qualified suppliers would still qualify if you checked today?
Next in this series: why comparing bids is mostly a formatting exercise. And if the question on your mind is who signs when an agent reaches a conclusion, that is covered in Policy That Runs Before the Action Is the Only Kind That Counts.
Recent blogs
Secure your agents
We’d love to chat with you about how your team can secure and govern Ai agents everywhere
