Xometry Has the Certifications You Need
We take pride in helping our customers maintain the high security and compliance standards their businesses demand. Xometry is ITAR-registered, ISO 9001:2015, ISO 13485:2016, IATF 16949:2016, AS9100D, and CMMC Level 2 certified.
ISO 13485:2016
AS9100D
IATF 16949:2016
ITAR
CMMC Level 2
JCP
Defense Federal Acquisition Regulation Supplement (DFARS) — necessary for all contractors, subcontractors, and vendors doing business with the US Department of War
NIST SP 800-171 — a set of guidelines developed by the National Institute of Standards and Technology that outline the security requirements organizations must implement to protect CUI
Defense Logistics Agency Joint Certification Program (JCP) — allows US and Canadian entities to access unclassified military technical data that is not available to the public
Supplier Performance Risk System (SPRS) score of 110 out of a possible 110 as of February 2026 — this is a numerical grade used by the Department of War and prime contractors to evaluate defense suppliers
DoD Impact Level 4 — a cloud security standard defined by the Defense Information Systems Agency (DISA) to protect CUI
Frequently Asked Questions
About Xometry’s Certifications
Do Xometry’s certifications extend to all the suppliers in the Xometry Manufacturing Partner Network?
No. Each supplier in the Xometry Partner Network operates independently and is responsible for obtaining and maintaining their own certifications.
However, you never have to worry about compliance. When an order requires a specific type of certification, our system automatically flows down those requirements. We strictly route that work to verified shops that hold the corresponding active certifications, ensuring your parts are always manufactured in full compliance with your regulatory needs. Xometry handles the vetting and verification of all Partner credentials so you don't have to.
What is CMMC?
The Cybersecurity Maturity Model Certification (CMMC) is a comprehensive cybersecurity framework established by the United States Department of War (DoW). The CMMC framework is designed to safeguard sensitive information, specifically Controlled Unclassified Information (CUI) and export-controlled data (like ITAR), that is shared between the DoD and its contractors and subcontractors. For more information about CMMC, including how to apply requirements to your Xometry order, check out this article.
What is IATF 16949?
IATF 16949 is the globally recognized quality management system (QMS) standard developed for the automotive industry by the International Automotive Task Force (IATF). To learn more about IATF 16949, including the IATF 16949 audit criteria and accreditation process, check out this article.
What is ISO 13485?
The ISO 13485 certification standard is an internationally recognized standard that stipulates regulations for a quality management system (QMS) in the field of medical devices. These rules focus on design, development, production, installation, and servicing both medical devices and relevant services. To learn more about ISO 13485, including the ISO 13485 audit criteria and accreditation process, check out this article.
What is AS9100?
AS9100D is a generally accepted certification standard for quality management systems (QMS) across the aerospace sector. It is derived from the ISO 9001 standard but includes additional specifics that are tailored to the aerospace sector. To learn more about AS9100, including the AS9100 audit criteria and accreditation process, check out this article.
Questions About Certifications?
Ready to start your next manufacturing project? Our team is here to help with quotes, technical questions, and custom solutions.
