Compliance and Certifications
Industry Standards we uphold
Supplier Purchase Order T&C
Read or download BESTProto Supplier Purchase Order Terms & Conditions
BESTProto’s quality management system is certified to AS9100:2016 and ISO 9001:2015 by Smithers Quality Assessments, Inc., and both certificates can be verified in the IAF CertSearch database. BESTProto is also ITAR-registered with the U.S. Department of State, and compliant with CMMC Level 1 and NIST 800-171 (self-assessed). Details on each are below.
Quality Assurance & Compliance
IPC Certification
Our prototyping and assembly processes follow IPC standards, the electronics industry standards published by the Global Electronics Association, formerly IPC. Specifically, we build to IPC-A-610, which governs the acceptability of electronic assemblies, and J-STD-001, which sets the requirements for soldered electrical and electronic assemblies. Most of our shop floor staff are IPC trained and certified by our in-house IPC-certified trainer, who is also our Quality Manager. We also support IPC-2581, an open, vendor-neutral XML-based format for transferring complete printed circuit board (PCB) design, fabrication, and assembly data between designers, fabricators, and assemblers. Customers choose the performance class for each project, Class 2 or Class 3, and we build and inspect to that class.
International Trade in Arms Regulations
BESTProto is registered with the Department of State for defense article manufacturing under the International Traffic in Arms Regulations.
The International Traffic in Arms Regulations (ITAR) is a US Government framework that controls how defense-related items, technologies, and data are exported or shared. When working with military or aerospace-grade products, we strictly adhere to the ITAR regulatory guidelines to meet our ITAR Registration status. Registration details are provided on request.
National Institute of Standards And Technology
BESTProto maintains compliance with NIST Special Publication 800-171, Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations. We have implemented the required security controls to safeguard Controlled Unclassified Information (CUI) processed, stored, or transmitted within our IT infrastructure, and we audit our systems regularly. Our self-assessed compliance status is recorded in the DoD Supplier Performance Risk System (SPRS). Documentation is provided on request.
CMMC
Level 1
CMMC Level 1 Compliance
Our organization has completed the mandatory annual self-assessment and affirmed our compliance with CMMC Level 1 / FAR 52.204-21 requirements. Our compliance status is actively recorded in the DoD Supplier Performance Risk System (SPRS). Documentation is provided on request.
AS9100:2016 Certification
ISO 9001:2015 Certification
SAM / CAGE Registration
BESTProto, Inc. is a registered vendor with the U.S. government, holding an active registration in the System for Award Management (SAM). Our company is also identified by a Unique Entity ID (UEI) and a CAGE/NCAGE Code, which are essential for federal contracting and grant processes. Both are provided on request. These registrations confirm our ability to engage in business with government agencies and defense-related entities.
Frequently Asked Questions
Does my program require AS9100:2016, or is ISO 9001:2015 enough?
The answer comes from your contract. Many defense and aerospace programs accept ISO 9001:2015-level quality, which is the default under our process controls. Programs that flow AS9100:2016 requirements down to suppliers need AS9100:2016 job controls, which add enhanced traceability and documentation and increase the cost of the build. BESTProto is certified to both, so tell us at the time of quote which level your purchase order or drawing calls for, and we will quote and build to it.
What should I tell BESTProto before sending ITAR-controlled or CUI files?
Identify the data as ITAR-controlled or CUI when you request the quote, before you send any design files. Export rules apply to technical data as well as hardware, so the way files are shared matters from the first message. BESTProto is registered with the U.S. Department of State under ITAR, and our NIST 800-171 controls apply to the systems that handle CUI.
How do I know whether my contract requires CMMC Level 1 or NIST 800-171?
Check the clauses in your contract. FAR 52.204-21 covers basic safeguarding of Federal Contract Information and corresponds to CMMC Level 1. DFARS 252.204-7012 requires protection of Controlled Unclassified Information under NIST SP 800-171. BESTProto has completed its annual CMMC Level 1 self-assessment and recorded its NIST 800-171 status in SPRS. Both are self-assessments, not third-party certifications. If your contract requires a higher CMMC level, contact us before quoting so we can discuss it.
Should I build to IPC Class 2 or Class 3?
Choose the class based on how the product is used. Class 2 suits dedicated-service electronics, where continued performance is expected but a failure is not life-critical. Class 3 suits high-reliability products, such as flight, life-support, and other mission-critical equipment, and applies stricter acceptance criteria that add inspection effort and cost. Most of our shop floor staff are IPC trained and certified by our in-house IPC-certified trainer, and we build to either class under IPC-A-610 and J-STD-001. Specify the class on your drawing or at the time of quote.
Where is my project built, and where do the parts come from?
All BESTProto assembly is performed in the United States by a team of U.S. citizens. Every component purchase goes through a verified U.S. distributor, and bare boards are fabricated by U.S.-based partners, most of which also operate under ISO 9001, AS9100, and ITAR requirements. This is an operating policy, not a requirement of any single certification, but it supports our ITAR obligations and gives defense and aerospace customers added assurance on data security and supply chain control.
How can I get copies of BESTProto’s certificates and registrations?
Contact us and tell us which documents you need. We can provide our AS9100:2016 and ISO 9001:2015 certificates, ITAR registration, CMMC Level 1 documentation, and SAM and CAGE information. Include your company name and the program the documents are for. Customers can also verify our AS9100:2016 and ISO 9001:2015 certificates in the public IAF CertSearch database.