Compliance

AS9100D / ISO 9001:2015 Certified

Our quality management system is certified to AS9100D (aerospace standard) and ISO 9001:2015 by TÜV Rheinland of North America. This ensures consistent quality, risk management, and continuous improvement in all manufacturing processes.

CMMC (Pursuing Level 2 – NIST SP 800-171)

Rowley Spring and Stamping Corp. is actively pursuing Cybersecurity Maturity Model Certification (CMMC) compliance to meet evolving Department of Defense (DoD) requirements for protecting Federal Contract Information (FCI) and Controlled Unclassified Information (CUI) in defense-related work. We are currently self-assessed against NIST SP 800-171 (the foundational standard for CMMC Level 2), which aligns directly with the 110 security controls required for safeguarding sensitive DoD data. This self-assessment has been completed and reported as needed (e.g., via SPRS scoring where applicable under DFARS clauses), demonstrating our commitment to robust cybersecurity practices. We are now progressing toward full CMMC Level 2 status. As the DoD’s phased rollout continues (with Phase 1 emphasizing self-assessments and Phase 2 introducing third-party certifications via C3PAO for most Level 2 contracts), we are preparing for the appropriate assessment pathway—whether self-assessment or independent third-party verification—depending on contract specifics and DoD designations. This pursuit reinforces our dedication to cybersecurity excellence, building on our existing ITAR DDTC registration and other defense-oriented compliances. It ensures we remain a trusted partner for aerospace and defense customers handling sensitive information. Documentation, including our current self-assessment status, System Security Plan (SSP) summaries, and progress updates toward Level 2, is available upon request for qualifying partners.

ITAR DDTC Registered

Rowley Spring and Stamping is registered with the U.S. Department of State’s Directorate of Defense Trade Controls (DDTC) under the International Traffic in Arms Regulations (ITAR). This registration supports secure manufacturing and handling of defense articles for military and aerospace clients.

REACH Compliant

We comply with the European Union’s Registration, Evaluation, Authorization and Restriction of Chemicals (REACH) regulation, ensuring no Substances of Very High Concern (SVHCs) exceed allowable thresholds in our products.

RoHS Compliant

Our components adhere to the Restriction of Hazardous Substances (RoHS) directive, restricting the use of lead, mercury, cadmium, and other hazardous substances in electrical and electronic equipment.

Excellence You Can Trust

Contact us to learn more about our certifications and quality standards.