APQP 3rd Edition Transition: What Changed in the Combined APQP and Control Plan Manual and What Your Submission Package Has to Look Like Now

The new program brief lands in the inbox on a Monday, the customer kicks off the APQP timing chart on Friday, and somewhere between those two events the planning team realizes the customer is pointing at the AIAG APQP and Control Plan 3rd Edition while the supplier APQP procedure still references the 2nd Edition manual and the standalone Control Plan reference manual. The five phases still look familiar from the outside. The deliverables list does not. The Control Plan that used to live in its own AIAG reference is now Phase by Phase content in the same manual. Cybersecurity and product safety expectations that used to be implicit are now their own callouts. The Source Selection language that used to be a sidebar in the 2nd Edition is now structured early in Phase 1.

This is the transition gap most planning teams are sitting in right now. The 3rd Edition is not a rewrite. It is a consolidation, a re-ordering, and a set of additions that change which evidence the OEM expects to see at PPAP submission. Suppliers who rebuild their templates to match the new structure save weeks of rework at gate reviews. Suppliers who do not get findings against APQP gate reviews from their customer SQE because the package presents 2nd Edition deliverables in 2nd Edition order.

This post walks the major deltas, the structural changes to the five phases, the new expectation areas, what changes in your submission package, and the transition planning checklist a supplier quality lead can actually execute against this quarter.

What Actually Changed at the Top Level

The AIAG APQP and Control Plan 3rd Edition combines two reference manuals into one. The 2nd Edition APQP manual and the separate Control Plan reference are now a single document organized around the same five phases. That structural change is the lead change. Everything else flows from it.

Three changes matter most for day to day planning work:

1. The Control Plan moves from a standalone reference to integrated Phase content. In the 2nd Edition the Control Plan form, the column definitions, and the supporting examples lived in a separate AIAG manual. Teams using the 2nd Edition kept the APQP manual and the Control Plan reference open side by side. In the 3rd Edition the Control Plan moves into the relevant APQP phases. Prototype Control Plan content now lives inside Phase 3. Pre Launch Control Plan content lives at the Phase 3 to Phase 4 transition. Production Control Plan content lives inside Phase 4 and is the form that becomes PPAP Element 6. The Control Plan is no longer a parallel document. It is an APQP deliverable that progresses by phase.
2. Product safety and cybersecurity are explicit deliverables, not implied. The 2nd Edition treated product safety as an output of Design FMEA severity ratings and Special Characteristic flow down. The 3rd Edition pulls product safety into its own expectation across Phases 2, 3, and 4, with linkage to IATF 16949 Clause 4.4.1.2. Cybersecurity, which the 2nd Edition did not address at all, appears in the 3rd Edition for products with software or connected components. Suppliers shipping embedded software, telematics, or any sensor that streams data into a vehicle network now have to document cybersecurity considerations in the APQP package.
3. Source Selection and supplier development moved earlier. The 2nd Edition discussed sub supplier selection as part of Phase 2 design output. The 3rd Edition structures Source Selection inside Phase 1 with explicit ties to the supplier development process. The OEM expects evidence that the supplier qualified its own sub suppliers using a structured selection process before Phase 2 design work commits the sub supplier into the bill of material.

There are smaller changes layered on top of these three. Lessons Learned gets a more structured place in Phase 5. Risk based thinking language aligns more tightly to IATF 16949 Clause 6.1. The Special Characteristic identification process clarifies the linkage between the Customer Special Characteristic symbol, the Design FMEA severity rating, and the Process FMEA detection rating that triggers Control Plan reaction plan content. These are refinements rather than wholesale changes, and a supplier already running a mature APQP process will recognize most of them as codifications of practice that good teams were already doing.

How the Five Phases Restructure

The five APQP phases stay the same in name and sequence. Plan and Define, Product Design and Development, Process Design and Development, Product and Process Validation, Feedback Assessment and Corrective Action. What changes is which deliverables live inside each phase and how the gate review evidence reads.

Phase 1: Plan and Define Program

The 3rd Edition adds explicit Source Selection content to Phase 1. The voice of the customer inputs, the program assumptions, the preliminary bill of material, and the preliminary process flow all stay. What gets added is a structured supplier identification step. The supplier shortlist for any sub supplier that will feed the program has to be documented in Phase 1 with the criteria used to evaluate each candidate. Sub suppliers in regulated material categories, in high risk processing categories, or in single source positions get flagged for supplier development planning before Phase 2 commits the design.

A reviewer working through Phase 1 evidence will expect to see: a program timing chart aligned to the OEM Phase Gate dates, a preliminary bill of material with sub supplier candidates identified, the Source Selection evidence pack for any sub supplier that was selected against a shortlist, and the program risk register with the risks identified so far. The risk register language matters. The 3rd Edition expects risk based thinking applied at Phase 1, not deferred to Phase 2 Design FMEA.

Phase 2: Product Design and Development

The 3rd Edition keeps the core Phase 2 deliverables. Design FMEA, Design Verification, Design Reviews, prototype build, engineering drawings, material specifications, special characteristic identification, design for manufacturing and assembly input. The structural change in Phase 2 is the product safety pull through and the cybersecurity callout.

Product safety in Phase 2 means the Design FMEA process has to explicitly identify safety related Special Characteristics, link them to the Customer Special Characteristic flow down, and confirm that those characteristics drive the Phase 3 process design. The 2nd Edition treated this as a Severity 9 to 10 outcome of normal Design FMEA practice. The 3rd Edition expects the linkage to be documented as its own evidence, with the Critical and Significant Characteristic Designators flowing forward into Phase 3 in a traceable way.

Cybersecurity in Phase 2 applies to products with software, connected components, or data interfaces. The evidence expectation is a documented cybersecurity risk assessment that identifies threat vectors, the design controls that mitigate each one, and the verification that those controls work. Suppliers in non electronic categories can document the cybersecurity assessment as not applicable with the rationale recorded. Skipping the question entirely is now a finding.

Phase 3: Process Design and Development

The Phase 3 changes are the biggest structural shift in the 3rd Edition. The Process Flow Diagram, the Process FMEA, and the Pre Launch Control Plan now sit inside Phase 3 as integrated deliverables rather than parallel artifacts. The Pre Launch Control Plan is the form that runs during the Run at Rate, captures any pre launch reaction plans, and gets archived as part of the PPAP Element 6 evidence trail.

The 3rd Edition expects Phase 3 evidence to demonstrate the Process Flow to Process FMEA to Control Plan trace as a single thread. Special Characteristics identified in Phase 2 have to appear on the Process Flow, get analyzed in the Process FMEA with a detection ranking that drives reaction plan content, and land on the Control Plan with the appropriate sample size and reaction plan column populated. The 2nd Edition expected this trace as good practice. The 3rd Edition expects it as the structural shape of the Phase 3 deliverable.

Reviewers working through Phase 3 evidence under the 3rd Edition look for: a Process Flow Diagram with all process steps numbered and with the inspection and verification operations identified, a Process FMEA with the Special Characteristics carried forward and analyzed against the appropriate Severity Occurrence Detection model, a Pre Launch Control Plan that maps every Special Characteristic to a control method and a reaction plan, and a Measurement Systems Analysis plan that addresses every gauge that will appear on the Pre Launch Control Plan.

Phase 4: Product and Process Validation

Phase 4 covers the Significant Production Run, the validation of the Production Control Plan, the validation of the measurement systems on production gauges, the Production Part Approval Process submission, and the packaging evaluation. The 3rd Edition retains the structure but tightens the language around Run at Rate evidence and the Production Control Plan.

The Production Control Plan is the form that flows into PPAP Element 6. Under the 3rd Edition the Production Control Plan is explicitly the Phase 4 evolution of the Pre Launch Control Plan from Phase 3, with reaction plans hardened, sample sizes confirmed against the initial process study from the Significant Production Run, and the Measurement Systems Analysis evidence updated against the as built production gauges. The 2nd Edition allowed teams to treat the Production Control Plan as a fresh document. The 3rd Edition expects it to read as a controlled evolution of the Pre Launch document with revision history that tracks the changes between the two.

The PPAP submission inside Phase 4 carries the same 18 elements as before. What changes is that several of the elements pull directly from the APQP deliverables: Element 2 Design Records traces to Phase 2, Element 3 Engineering Change Documents tie to the Phase 2 to Phase 3 transition, Element 4 Customer Engineering Approval ties to Phase 2 gate evidence, Element 5 Design FMEA pulls from Phase 2, Element 6 Process Flow Diagram and Element 7 Process FMEA and Element 8 Control Plan all pull from Phase 3. The reviewer no longer treats APQP and PPAP as adjacent processes. They treat APQP as the build path that produces PPAP elements as scheduled deliverables.

For the practitioner detail on how the 18 PPAP elements line up, the PPAP 18 Elements Checklist walks each element from the reviewer's seat.

Phase 5: Feedback Assessment and Corrective Action

Phase 5 covers reduced variation, customer satisfaction, delivery and service, and lessons learned. The 3rd Edition expands the Lessons Learned content into a more structured deliverable with a defined input into the next program's Phase 1. The intent is that a supplier running multiple concurrent APQP programs can demonstrate that learnings from a launched program feed forward into the planning of the next one, not just into a static archive.

The reduced variation language ties into the linkage between the Phase 4 initial process study, the long term capability evidence under the Production Control Plan, and the CAPA process when capability slips. A reviewer at a Phase 5 gate looks for the trend evidence on the key Special Characteristics, the variation reduction actions taken, and the linkage to corrective action records when reaction plans fired. The CAPA Effectiveness Verification post walks the closeout standard that applies when a Phase 5 trend triggers a corrective action.

The New Expectation Areas in Detail

Three areas in the 3rd Edition carry new evidence expectations that did not exist in the 2nd Edition. Each one shows up across multiple phases and each one needs its own template content in a supplier's APQP package.

Product Safety as a Cross Phase Thread

Product safety in the 3rd Edition is not a single deliverable. It is a thread that runs from Phase 2 Design FMEA through Phase 3 Process FMEA into Phase 4 Production Control Plan and Phase 5 reduced variation evidence. The expectation is that any characteristic identified as safety related can be traced through every phase with the Critical Characteristic Designator carried forward, the reaction plan documented for the manufacturing control, the operator awareness evidence captured for the production process, and the capability evidence tracked once production starts.

This thread aligns with IATF 16949 Clause 4.4.1.2 on product safety, which requires the organization to have a documented process for the management of product safety related products and processes. The 3rd Edition makes the APQP side of that process explicit. A supplier writing or revising the APQP procedure under the 3rd Edition needs to confirm that the product safety thread has documented hand offs at each phase gate.

For the deeper aerospace parallel on how a safety thread propagates through clause level audit evidence, the AS9100 Clause by Clause Audit Readiness post walks the comparable structure on the AS9100D side.

Cybersecurity as a Phase 2 Deliverable

Cybersecurity in the 3rd Edition applies to any product with software, connected components, embedded controllers, or data interfaces. The evidence expectation is a Phase 2 cybersecurity risk assessment that identifies threat vectors, evaluates likelihood and impact, identifies design controls, and documents the verification that those controls work. The 3rd Edition does not prescribe a specific cybersecurity standard. ISO SAE 21434 is the de facto reference for road vehicles. The 3rd Edition expects the APQP package to identify which standard the cybersecurity assessment was conducted against.

The practical implication for non electronic suppliers is small: document the cybersecurity assessment as not applicable with a written rationale that the product has no software, no firmware, no connected components, and no data interfaces. The practical implication for electronic component suppliers and mechatronic suppliers is large: the cybersecurity risk assessment becomes a Phase 2 gate review deliverable that needs the same level of rigor as the Design FMEA, with cross functional input and documented sign off.

Source Selection as a Phase 1 Deliverable

Source Selection in the 3rd Edition is the documented process by which the supplier qualifies its own sub suppliers before Phase 2 design commits the sub supplier into the bill of material. The evidence expectation is a Source Selection record that identifies the sub supplier shortlist, the evaluation criteria, the scoring or assessment outcome, and the rationale for the selected sub supplier.

For sub suppliers in regulated material categories, in critical processing categories, in single source positions, or in high risk geographies, the Source Selection record has to identify the additional supplier development planning that will run alongside the Phase 2 design work. The 3rd Edition wants the supplier development plan to be a deliverable, not an assumption.

What Changes in Your APQP Submission Package

A supplier with a mature 2nd Edition APQP package does not have to scrap and rebuild. The transition work is structural plus three new deliverable templates. The structural work is the bigger lift.

Structural changes to apply across the package:

• Update the APQP procedure to reference the AIAG APQP and Control Plan 3rd Edition as the controlling source instead of citing the 2nd Edition APQP manual and the separate Control Plan reference.
• Restructure the Phase 3 deliverable set to integrate the Process Flow, Process FMEA, and Pre Launch Control Plan as a single linked thread with the Special Characteristic trace documented end to end.
• Restructure the Phase 4 deliverable set so the Production Control Plan reads as a controlled evolution of the Pre Launch Control Plan, with revision history that tracks the hardening of reaction plans and the confirmation of sample sizes against the initial process study.
• Add a Source Selection deliverable template to Phase 1 with the shortlist, criteria, scoring, and rationale fields.
• Add a product safety thread template that tracks safety related Special Characteristics from Phase 2 through Phase 5 with explicit hand offs at each phase gate.
• Add a cybersecurity risk assessment template to Phase 2 with the not applicable variant for non electronic products.
• Restructure the Phase 5 Lessons Learned deliverable to feed forward into Phase 1 of subsequent programs, with the input mechanism documented.

Template additions:

• Source Selection record for Phase 1.
• Cybersecurity risk assessment for Phase 2 with applicable and not applicable variants.
• Product safety thread tracking sheet that spans Phases 2 through 5.

Internal procedure updates:

• Update the APQP procedure to reflect the new phase by phase deliverable list.
• Update the gate review checklists so reviewers verify the new evidence at the correct phase gate.
• Update the PPAP procedure to reflect the explicit pull from APQP deliverables into PPAP elements.
• Update the supplier quality manual to flow down the 3rd Edition expectations to sub suppliers.

Transition Planning Checklist for the Supplier Quality Lead

Treat the transition as a structured project, not a documentation refresh. The work breaks into five blocks with realistic effort estimates for a single program supplier site.

1. Discovery and gap analysis. Read the 3rd Edition cover to cover. Compare your current APQP procedure to the 3rd Edition deliverable list. Write a gap analysis with one row per deliverable and a status column. Effort: one to two weeks for a single lead.
2. Template development. Build the three new template additions and revise the existing Control Plan, Process FMEA, Pre Launch Control Plan, and Production Control Plan templates to match the integrated Phase 3 and Phase 4 structure. Effort: two to four weeks depending on how many existing templates need revision.
3. Procedure and checklist updates. Update the APQP procedure, the gate review checklists, the PPAP procedure, and the supplier quality manual flow down content. Route through document control. Effort: two to three weeks including review and approval cycles.
4. Training rollout. Train the APQP program managers, the cross functional Phase 2 and Phase 3 owners, and the supplier quality engineers on the new structure. Capture training records as Clause 7.2 competence evidence. Effort: one to two weeks.
5. Pilot program execution. Pick the next program kickoff and execute against the 3rd Edition structure end to end. Capture the lessons learned and feed them back into the templates and procedures before the second program kicks off. Effort: runs in parallel with the program itself, with a structured retrospective at each gate.

The transition reads as roughly two to three months of part time effort for a supplier quality lead at a single program site. Multi program suppliers and multi site suppliers should expect to layer in additional coordination time for cross site template alignment.

Supplier Impact and OEM Rollout

Customer SQEs at the OEMs are working through their own internal procedure updates and supplier flow down communications. The supplier facing reality is that the 3rd Edition is the controlling reference for new program kickoffs at most OEMs and is being phased in for active programs at the next major change point.

A supplier should expect to see 3rd Edition expectations in: new program APQP timing charts, PPAP submissions for changes that trigger a Pre Launch Control Plan revision, supplier development assessments and 2nd party audits, and customer specific requirement updates that reference the 3rd Edition as the controlling manual. Suppliers shipping into multiple OEMs should expect each customer to have its own transition schedule and should track each customer's communicated effective date.

The 3rd Edition does not invalidate existing PPAP submissions that were built under the 2nd Edition. Active programs that submitted PPAP under the 2nd Edition continue to operate under their submitted Control Plan and supporting documentation until a change triggers a re submission. The transition matters at the next change point and at new program kickoff.

For suppliers running parallel quality systems against aerospace customers, the FAI vs PPAP post walks how the AIAG PPAP lane and the AS9102 FAI lane diverge under the same change point.

The Recurring Pitfalls

Three pitfalls hit suppliers most often during the transition, based on the patterns showing up at customer SQE gate reviews:

• Treating the Control Plan as a standalone document. Teams that built strong 2nd Edition habits around the standalone Control Plan reference often miss that the Control Plan now lives inside the APQP phases. The Pre Launch Control Plan and Production Control Plan have to read as evolutions inside Phase 3 and Phase 4, with the revision history that tracks the evolution. A Control Plan that lands at PPAP with no Pre Launch precursor reads as a 2nd Edition habit and gets flagged.
• Skipping the cybersecurity assessment for non electronic products. Non electronic suppliers correctly conclude that the cybersecurity expectation does not apply to their product. The pitfall is concluding it without documenting the not applicable rationale. The 3rd Edition expects the question to be answered. Silence on the question is a finding, even when the answer is not applicable.
• Treating Source Selection as something the purchasing team owns separately. The 3rd Edition pulls Source Selection into Phase 1 of the APQP package. Suppliers that kept Source Selection in a parallel purchasing process without surfacing the evidence into the APQP gate review get flagged at Phase 1 gate review. The evidence has to be in the APQP package, not in a separate purchasing folder.

Why a Connected Document Model Helps the Transition

The 3rd Edition's structural shift makes the case for a connected document model stronger than the 2nd Edition did. The Special Characteristic that gets identified in Phase 2 has to propagate into the Process Flow, the Process FMEA, the Pre Launch Control Plan, the Production Control Plan, the operator instructions, the gauge calibration program, and the PPAP package. When those documents are maintained as separate spreadsheets that line up only at PPAP submission time, the trace breaks and the reviewer finds the gaps. When they are maintained as a connected model where a revision to the Special Characteristic propagates through every linked artifact, the trace holds.

That is the design behind QualityEngineer.ai's APQP workflow, the Blueprint Intelligence feature extraction that seeds the Special Characteristic list from the print, the PPAP package workflow that pulls the Phase 3 and Phase 4 evidence into the 18 elements in submission order, and the document cascade that propagates revisions across the connected QMS. Our webinar replays walk through a live submission against this connected model, and the next live session follows the same pattern.

The 3rd Edition transition is the right moment to evaluate whether the existing spreadsheet stack can carry the integrated phase structure or whether the structural shift is the trigger to move the APQP and PPAP workflow into a tool that holds the trace by design.

Related Reading

• What is APQP? Advanced Product Quality Planning Explained for the foundational five phase walkthrough
• APQP Software vs Spreadsheets: Where Excel Based Programs Break Down for the tooling decision the 3rd Edition transition surfaces
• PPAP 18 Elements Checklist for the element by element submission walkthrough that pulls from APQP deliverables
• Process FMEA: A Practical Guide for Automotive Quality Engineers for the Phase 3 PFMEA discipline the integrated Control Plan depends on
• Control Plan in Manufacturing: What Goes in It and How to Build One for the Control Plan column by column foundation
• PFMEA Software vs Templates: When Spreadsheets Stop Working for the parallel tooling argument on the Phase 3 side
• PPAP Software: How Purpose Built Tools Reduce Submission Rework for the connected document case at PPAP submission time
• What is PPAP? A Complete Guide for Quality Engineers for the 18 element foundation the new Phase 4 expectations pull from
• Cpk vs Ppk: Which Process Capability Index to Use for PPAP for the Phase 4 initial process study evidence
• Gauge R&R Acceptance Criteria for the Measurement Systems Analysis evidence that supports the Phase 3 and Phase 4 Control Plan gauges
• AS9100 Clause by Clause Audit Readiness for the aerospace parallel on how a safety thread propagates across clause level evidence

About the Author

Daniel Crouse is the founder of QualityEngineer.ai and has spent 15 plus years in supplier quality, PPAP, and manufacturing systems. He built QualityEngineer.ai because quality engineers deserve better tools than Excel.

Connect on LinkedIn