Xometry Certifications | ISO, ITAR, AS9100D & More
Xometry Has the Certifications You Need
We take pride in helping our customers maintain the high security and compliance standards their businesses demand. Xometry is ITAR-registered, ISO 9001:2015, ISO 13485:2016, IATF 16949:2016, AS9100D, and CMMC Level 2 certified.
ISO 9001:2015
ISO 13485:2016
AS9100D
IATF 16949:2016
ITAR
CMMC Level 2
JCP
See Xometry's Certificates and Registrations
ISO 9001:2015
ISO 9001 is a globally recognized standard for quality management, and Xometry’s certification demonstrates our commitment to quality and ongoing optimization.
ISO 13485:2016
ISO 13485 is the internationally recognized quality management system (QMS) standard in the design and manufacturing of medical devices.
AS9100D
AS9100D builds upon the foundation of ISO 9001, and is the internationally recognized QMS standard for the aerospace, aviation, and defense industries.
IATF 16949:2016
Developed by the International Automotive Task Force (IATF), IATF 16949 is the international standard for QMS in the automotive industry.
ITAR
International Traffic in Arms Regulations (ITAR) registration is mandatory for any US company that manufactures, exports, or brokers defense articles, services, or related data covered by the US Munitions List.
CMMC Level 2
Cybersecurity Maturity Model Certification (CMMC) Level 2 is a cybersecurity standard for Department of War (DoW) contractors that process, store, or transmit Controlled Unclassified Information (CUI).
Defense Federal Acquisition Regulation Supplement (DFARS) — necessary for all contractors, subcontractors, and vendors doing business with the US Department of War
NIST SP 800-171 — a set of guidelines developed by the National Institute of Standards and Technology that outline the security requirements organizations must implement to protect CUI
Defense Logistics Agency Joint Certification Program (JCP) — allows US and Canadian entities to access unclassified military technical data that is not available to the public
Supplier Performance Risk System (SPRS) score of 110 out of a possible 110 as of February 2026 — this is a numerical grade used by the Department of War and prime contractors to evaluate defense suppliers
DoD Impact Level 4 — a cloud security standard defined by the Defense Information Systems Agency (DISA) to protect CUI
Questions About Certifications?
If you don’t see what you’re looking for here, our experts can answer your questions about Xometry’s certifications and how we implement security best practices.
Frequently Asked Questions About Xometry’s Certifications
Do Xometry’s certifications extend to all the suppliers in the Xometry Manufacturing Partner Network?
No. Each supplier in the Xometry Partner Network operates independently and is responsible for obtaining and maintaining their own certifications. However, you never have to worry about compliance. When an order requires a specific type of certification, our system automatically flows down those requirements. We strictly route that work to verified shops that hold the corresponding active certifications, ensuring your parts are always manufactured in full compliance with your regulatory needs. Xometry handles the vetting and verification of all Partner credentials so you don't have to.
What is CMMC?
The Cybersecurity Maturity Model Certification (CMMC) is a comprehensive cybersecurity framework established by the United States Department of War (DoW). The CMMC framework is designed to safeguard sensitive information, specifically Controlled Unclassified Information (CUI) and export-controlled data (like ITAR), that is shared between the DoD and its contractors and subcontractors. For more information about CMMC, including how to apply requirements to your Xometry order, check out this article.
What is IATF 16949?
IATF 16949 is the globally recognized quality management system (QMS) standard developed for the automotive industry by the International Automotive Task Force (IATF). To learn more about IATF 16949, including the IATF 16949 audit criteria and accreditation process, check out this article.
What is ISO 13485?
The ISO 13485 certification standard is an internationally recognized standard that stipulates regulations for a quality management system (QMS) in the field of medical devices. These rules focus on design, development, production, installation, and servicing both medical devices and relevant services. To learn more about ISO 13485, including the ISO 13485 audit criteria and accreditation process, check out this article.
What is AS9100?
AS9100D is a generally accepted certification standard for quality management systems (QMS) across the aerospace sector. It is derived from the ISO 9001 standard but includes additional specifics that are tailored to the aerospace sector. To learn more about AS9100, including the AS9100 audit criteria and accreditation process, check out this article.