Skip to main content

Someone wanted to learn this too, so Grasp built them a personal learning path.

You can keep exploring this one or create your own

Configuring an IATF-Aligned Project Record

Good to see you again. In the previous lesson, you separated the roles of IATF 16949, customer-specific requirements, APQP, FMEA, Control Plans, and PPAP, then mapped them to simulated EDV development gates. That gate map tells the team when evidence is needed. This lesson defines the project record that makes the evidence findable, current, approved, and traceable.

You will configure an IATF-aligned simulated project record for the three assumption-based EDV components. “IATF-aligned” here means that the record is designed to demonstrate disciplined control of responsibility, supplier inputs, requirements, validation, nonconformance, and change. It does not claim IATF certification, nor does it invent Rivian or Amazon-specific procedures.


Treat the project record as an evidence system, not a folder tree

A shared drive filled with CAD, PDFs, and spreadsheet copies is not necessarily a controlled engineering record. The question a reviewer should be able to answer is:

For the released configuration, can we show what was required, who owned each decision, what evidence demonstrated conformity, which suppliers contributed, and what changed?

An effective record connects several kinds of traceability:

Traceability type The question it answers Example
Requirement traceability What requirement drove this feature or test? REQ-ECU-042 requires ingress protection; it links to the sealing-land design and ingress test.
Configuration traceability What exact product definition was assessed or released? ECU base CAD version, drawing revision, EBOM revision, material specification, and approved gasket form one baseline.
Supplier traceability Who made or supplied the affected item, and against which controlled data? An injection molder used drawing DRW-ECU-BASE Rev B and supplied lot M240617-A.
Verification traceability What objective evidence supports the requirement? Test report TEST-ECU-IP-003 Rev A verifies REQ-ECU-042 for a named assembled configuration.
Issue and change traceability What happened when evidence did not meet expectation? A sealing-land warpage NCR links to containment, root-cause evidence, an ECO, revised CAD, revalidation, and the new release.

The record should preserve both current information and historical evidence. Current documents must be easy to identify; superseded documents must remain retrievable but not accidentally used for manufacture, testing, or supplier communication.

IATF 16949

Read this PJC executive overview as an accessible summary of the QMS expectations behind a controlled project record. The licensed IATF standard and applicable customer requirements would control in a real company.

On pages 16–19, read Clause 4.4, “Quality management system and its processes,” through Clause 5.3.1, “Organizational roles, responsibilities, and authorities.” Focus first on process and document control. Then note that customer-facing responsibilities must be assigned and documented, rather than left implicit in meeting notes or informal team habits.

A practical project record therefore has four layers:

  1. Governance — scope, assumptions, roles, decision authority, applicable standards, and gates.
  2. Product definition — requirements, interfaces, CAD, drawings, material decisions, EBOM, and manufacturing view.
  3. Evidence — analyses, test plans, test reports, reviews, supplier records, inspections, and approvals.
  4. History — baselines, nonconformances, concessions where applicable, corrective actions, and ECOs.

The NASA Configuration Management Process image captures the central idea: identify what is controlled, establish baselines, control changes, maintain status, audit the result, and retain work products.

NASA’s Configuration Management Process flowchart depicts the controlled lifecycle from planning and identifying baselines through change control, status accounting, audits, and retained work products; these are the backbone of the simulated EDV project record.

Establish scope and responsibility before creating files

The first controlled object should be a concise Project Quality and Configuration Charter. Create one for the ECU housing now, then reuse its structure for the door trim and HVAC outlet.

Use this identifier:

EDV-SIM-ECU-PQC-001 Rev A

Its purpose is not to repeat every technical requirement. It establishes the operating boundary of the project.

Minimum charter content

Charter field Simulated ECU example
Project scope Injection-molded high-voltage ECU enclosure assembly: base, cover, gasket, inserts, fasteners, vent concept, PCB support features, and mounting interfaces
Customer context Rivian-built Amazon Electric Delivery Van context, explicitly assumption-based unless supported by a controlled public source
Target market “United States market assumed pending controlled customer confirmation”
Design-responsibility status Design responsible for enclosure geometry and integration assumptions; supplier responsible for its manufacturing-process design unless separately delegated
Key interfaces Vehicle mounting structure, electrical connectors, PCB, harness, gasket supplier, injection molder, test laboratory
Quality objectives Requirements baseline approved before detailed CAD; all release requirements traceable to verification evidence; no open high-severity launch risk without documented gate disposition
Applicable-source register Link to the standards register from the previous lesson
Records location Onshape document links plus controlled project workbook and evidence folder
Approval roles Program Manager, Mechanical Design Lead, Quality Lead, Supplier Quality Lead, Validation Lead
Assumption boundary No proprietary Rivian, Amazon, supplier, or vehicle data is represented as fact

Assign responsibility to roles, not to people’s names

An organization needs named individuals for practical execution, but the responsibility belongs to a role or position. If a Mechanical Design Lead leaves the project, the responsibility must not disappear with that person.

[PDF] International Automotive Task Force IATF 16949:2016

Use the IATF FAQs to establish two important rules for the simulated record: responsibility is attached to a role, and design responsibility depends on how complete the incoming engineering definition is.

On page 4, read FAQ 5 under Clause 5.3.1. Focus on role based authority. Then go to page 23 and read FAQ 25, “8.3 Design and Development of products and services.” Focus on the design responsibility test. Read each answer in full, including the statement that manufacturing-process design remains an organizational responsibility.

For this course, the component concepts are incomplete by design: package dimensions, interfaces, performance targets, and customer expectations are progressively defined through controlled assumptions. Therefore, the simulated engineering organization is product design responsible for the component definition it creates.

That does not mean it owns every activity. A supplier may own tooling design, molding parameters, resin handling, or assembly-fixture design. The project record must show exactly where responsibility starts and ends.

Configure a role-based responsibility matrix

Use a responsibility matrix with one accountable role for each deliverable. “Accountable” means the role accepts the result; “Responsible” means the role performs or coordinates the work.

Controlled activity Accountable role Responsible role Required consultation
Requirements baseline and RTM Mechanical Design Lead Systems/Requirements Engineer Quality Lead, Validation Lead
CAD, drawing, and EBOM definition Mechanical Design Lead Design Engineer Manufacturing Engineer, Supplier Quality
Moldability and tooling feasibility Supplier Quality Lead Injection-Molding Supplier Mechanical Design Lead, Tooling Engineer
DFMEA Mechanical Design Lead Cross-functional DFMEA team Quality, Manufacturing, Validation
PFMEA and Control Plan Supplier Quality Lead Manufacturing Supplier Quality Lead, Manufacturing Engineer
DVP&R and test configuration Validation Lead Test Engineer Mechanical Design Lead, Quality Lead
Nonconformance containment Quality Lead Supplier Quality or Manufacturing Lead Design Lead, Program Manager
ECO approval and release Program Manager Change Coordinator All affected functional owners

A common failure is assigning “supplier” as the owner of a problem without defining the customer-side owner. Even when the injection molder performs the corrective action, the simulated Supplier Quality Lead remains accountable for supplier escalation, evidence review, and the decision to accept or reject recovery evidence.


Give every controlled object an identity, status, and revision

The record should work whether the team uses a full PLM implementation or a lightweight controlled environment. For this course, use:

  • Onshape for CAD, assemblies, versions, and shareable views;
  • a controlled spreadsheet or database for the master index, RTM, gate status, and change log;
  • a controlled evidence folder for PDFs, supplier records, signed decisions, and test outputs.

Onshape versions help preserve CAD states, but a version by itself is not a complete engineering release. The release record must state what was released, why, under which baseline, and with which approvals.

Recommended identifier scheme

Use stable identifiers. Do not encode too much intelligence in a filename; a short code and a master index are more reliable than a long filename attempting to describe every property.

Object type Identifier example Purpose
Requirement REQ-ECU-042 A uniquely testable requirement
Assumption ASM-ECU-011 A declared, confidence-rated engineering assumption
Interface ICD-ECU-003 Controlled interface definition
CAD model CAD-ECU-BASE Master CAD object with version or revision reference
Drawing DRW-ECU-BASE 2D definition associated with released CAD
EBOM EBOM-ECU-001 Engineering product structure
Validation plan DVP-ECU-001 Verification and validation planning
Test report TEST-ECU-IP-003 Objective test evidence
Supplier record SUP-ECU-MOLDER-001 Supplier qualification and performance record
Nonconformance NCR-ECU-007 Record of a requirement nonconformance
Corrective action CAPA-ECU-004 Root cause, corrective action, effectiveness evidence
Engineering change request ECR-ECU-005 Proposal or problem statement requesting a change
Engineering change order ECO-ECU-005 Approved and implemented controlled change
Baseline BASE-ECU-G2-01 Frozen set of objects assessed at a gate

Use a separate revision field such as Rev A, Rev B, or 01, 02. Never change a document’s content without changing the revision or version state that identifies it.

Use a defined maturity model

A simple lifecycle is adequate for the simulated program:

Maturity state Meaning May it be sent to a supplier?
Work in Progress Being developed; not approved for decisions No, unless explicitly marked as an unapproved feasibility discussion
In Review Submitted for formal review Only with review status clearly visible
Approved Content accepted for its stated purpose Yes, for the approved purpose only
Released Baseline-controlled definition authorized for use Yes, as controlled technical data
Superseded Replaced by a newer released item No for new work; retain for history
Archived Retained record with restricted use No

The distinction between approved and released matters. A DFMEA may be approved for G2 feasibility review, while the production drawing is not released until its associated requirements, GD&T plan, material, verification status, and change impacts meet the release criteria.

Map the record to CATIA and ENOVIA concepts

Simulated course control Onshape implementation Typical CATIA/ENOVIA concept
Product structure Assembly plus BOM export or controlled BOM table CATIA Product structure managed as ENOVIA items
Component definition Part Studio and derived parts CATIA Part with Part Design and GSD features
Controlled interface Named mate connectors, reference geometry, exported interface data Published elements and controlled interface objects
CAD snapshot Onshape Version CATIA revision or version under PLM management
Formal release Release workflow if available, plus signed release record ENOVIA lifecycle promotion and release workflow
Design record Drawing PDF, model link, material and specification references ENOVIA-managed document linked to the item
Change control ECR/ECO log with linked Onshape versions ENOVIA Change Action, Change Order, and implementation records

Exact ENOVIA object names and workflows vary by company configuration. The mapping is conceptual: an authoritative item, a controlled document, a revision, a lifecycle state, a baseline, and an approved change must be connected.


Control supplier interfaces and build a traceability plan

The supplier interface is more than a purchase order. For an ECU enclosure, the injection molder, gasket supplier, insert supplier, coating provider if used, and test laboratory can all affect conformity.

The project record must preserve the technical agreement that each supplier is working to: the required product definition, special characteristics where justified, required evidence, applicable material or regulatory evidence, change-notification rules, and acceptance method.

IATF 16949

This section connects supplier control with traceability. Read it to see why supplier qualification, the extent of incoming control, and the ability to isolate suspect product all belong in the same project record.

On pages 37–40, read Clause 8.4 from “Control of Externally Provided Processes, Products and Services” through 8.4.3, “Information for external providers.” Focus on external provider control, then continue through the discussion of supplier selection, monitoring, and communicated requirements. Next, go to page 43 and read Clause 8.5.2, “Identification and traceability,” in full. Focus on risk based traceability. Notice that traceability must support quick identification and segregation of suspect product.

Create a Supplier and Interface Control Matrix

Create SICM-ECU-001 Rev A. One row should exist for every supplier relationship or external technical service that can affect product conformity.

Field Injection-molding supplier example
Supplier and manufacturing site SUP-ECU-MOLDER-001; site pending qualification
Supplied scope Molded PA66-GF30 ECU base and cover
Supplier responsibility Tool design, molding-process development, dimensional control, lot traceability, PFMEA, Control Plan, process capability evidence
Internal responsibility Released design definition, functional requirements, DVP&R ownership, supplier approval, disposition authority
Controlled inputs to supplier Released CAD, drawing, material specification, special-characteristic list, packaging requirements, approved deviations
Supplier deliverables DFM report, tooling feasibility, resin certificate, lot records, dimensional report, mold-flow evidence, PPAP-readiness evidence
Verification method Receiving inspection plan, dimensional review, supplier audit as risk warrants, validation testing
Required traceability Resin batch, molding lot, cavity where relevant, tool ID, production date, inspection status
Change rule Supplier cannot change resin source, mold, tool location, processing strategy, inspection method, or manufacturing site without documented notification and approved disposition
Escalation route Supplier Quality Lead, Quality Lead, Program Manager; customer notification only where the actual customer requirement requires it

For safety- or compliance-relevant components, use a stricter level of traceability. The course’s HV ECU context may contain electrical-isolation and sealing requirements, but do not label a characteristic “safety critical” casually. The classification must come from an approved requirement, risk analysis, and applicable standard or customer direction.

The traceability chain for the ECU housing

A useful record is not a list of links added after the work is done. Build the links as work progresses.

Starting object Linked evidence
REQ-ECU-042: ingress performance Sealing concept, gasket specification, DVP&R entry, test procedure, test report, NCRs, ECOs
CAD-ECU-BASE Rev B Onshape version link, drawing DRW-ECU-BASE Rev B, draft-analysis output, DFMEA references, tool feasibility feedback
Gasket material lot Supplier certificate, incoming receipt, assembly build record, test-unit configuration
Test unit TU-ECU-IP-03 Base and cover revisions, gasket lot, fastener torque procedure, laboratory, equipment calibration status, test report
NCR-ECU-007: warped sealing land Contained production lots, measurement data, supplier 8D, updated PFMEA, ECR/ECO, revalidation result

This level of traceability is not bureaucracy for its own sake. If a leak test later fails, the team should be able to distinguish a design problem, a molding-lot problem, a gasket installation problem, a test-fixture problem, or a test-procedure problem without reconstructing history from email.


Make validation evidence configuration-specific

Validation is persuasive only when the tested article is known. A report saying “ECU enclosure passed ingress testing” is weak unless it also says what enclosure was tested.

For every DVP&R entry, configure these fields:

Field Why it matters
Requirement ID and acceptance criterion Prevents a test from becoming a generic activity without a pass/fail basis
Verification method Test, analysis, inspection, or demonstration
Test procedure and revision Shows how the evidence was generated
Test article configuration Links CAD/drawing revisions, material grade, supplier, lots, assembly state, and relevant software or firmware where applicable
Instrument and calibration reference Establishes confidence in the measurement
Conditioning and environment Makes results comparable and repeatable
Result and disposition Pass, fail, conditional pass, or invalid test — not merely “completed”
Deviation reference Makes departures from the plan visible
Approval Identifies the role accepting the evidence

A failed test is not automatically an ECO. First identify what failed:

  • If the unit does not meet the current released requirement, create an NCR.
  • If the requirement itself is unclear, contradictory, or infeasible, create a requirements issue and likely an ECR.
  • If an approved design, process, or control must change, create an ECO after impact analysis.
  • If the test setup was invalid, retain the invalid result and document why a retest is needed. Do not quietly overwrite the evidence.

At G4, your simulated program will prepare a PPAP-readiness package, not a real customer PPAP approval. The project record should still link the expected evidence: released design record, authorized engineering changes, DFMEA, process flow, PFMEA, Control Plan, material and dimensional evidence, validation results, measurement-system evidence, and submission disposition.


Control nonconformance without confusing it with design change

A nonconformance is a failure to meet a specified requirement. It can involve a physical part, CAD output, drawing, process, document, supplier certificate, test result, or inspection method.

A well-configured nonconformance record should prevent unintended use of suspect material while enabling disciplined technical disposition.

IATF 16949

Read these clauses to distinguish two connected but different systems: controlling a planned change, and controlling product or outputs that do not conform to current requirements.

On pages 45–46, read Clause 8.5.6, “Control of changes,” including 8.5.6.1. Focus on change review and validation. Then read page 47 through the first paragraph of page 48 under Clause 8.7, “Control of Nonconforming Outputs.” Focus on containment and disposition. Finally, read the concession paragraph and note the limits of concession.

Configure an NCR workflow

Create NCR-ECU-007 for any simulated issue that represents a requirement nonconformance. Use the following states:

  1. Detected and contained — identify affected parts, documents, lots, test units, and shipments; stop unintended use.
  2. Characterized — define the nonconformance against the exact requirement, including measurement method and evidence.
  3. Disposition proposed — options may include rework, scrap, return to supplier, use under approved concession, or further technical evaluation.
  4. Disposition approved — approval authority is recorded. A supplier cannot authorize itself to deviate from a released customer requirement.
  5. Root cause and corrective action — use an appropriate method, such as 5-Why or 8D, when the issue warrants it.
  6. Effectiveness verified — demonstrate that correction worked and recurrence controls are active.
  7. Closed — all affected records, FMEAs, Control Plans, validation plans, and change records have been reviewed.

NCR, concession, corrective action, and ECO are different records

Record Purpose Does it change the released definition?
NCR Records a failure to meet the current requirement No
Concession or deviation permit Authorizes a limited, controlled departure from the current requirement No; it is temporary and bounded
Corrective action / 8D Removes or reduces the cause of an identified nonconformance Not necessarily
ECR Requests evaluation of a possible permanent change No
ECO Approves and implements a permanent controlled change Yes

For example, suppose prototype ECU covers show sealing-land flatness outside the current drawing requirement:

  • The NCR identifies the affected covers and prevents their normal use.
  • A temporary concession might permit carefully selected prototype parts for a limited non-safety-related learning build, but only if the authorized roles accept the risk and the scope is documented.
  • The supplier’s corrective action may adjust molding parameters or investigate tooling deformation.
  • An ECO is needed only if the team changes the design, mold, drawing, material, process control, acceptance criterion, or other controlled baseline.

Configure engineering-change control as an impact-assessment system

An ECO is not simply a revised CAD file. It is the record that answers why the configuration changed, what else is affected, who approved the new state, how it was verified, and when the old state ceased to be valid.

Use two linked objects:

  • ECR — captures the issue, opportunity, supplier proposal, or customer request.
  • ECO — the authorized implementation package once impact analysis and approvals are complete.

Required ECO fields

ECO field ECU example
Change reason Supplier reports recurring sealing-land distortion near a gate location
Affected baseline BASE-ECU-G3-01
Affected objects Base CAD, base drawing, mold-flow study, DFMEA, PFMEA, Control Plan, DVP&R, EBOM/MBOM, PPAP-readiness index
Proposed action Relocate gate and locally revise rib pattern to reduce distortion
Technical rationale Mold-flow and dimensional evidence indicate a plausible fill-and-packing contribution to warpage
Risk impact Sealing performance, tooling timing, dimensional capability, validation schedule, stock disposition
Required verification Updated mold-flow assessment, dimensional trial, gasket-compression stack review, repeat ingress validation
Supplier impact Tool modification, revised process documentation, revised pre-launch controls, trial-run evidence
Approval roles Mechanical Design Lead, Quality Lead, Supplier Quality Lead, Validation Lead, Program Manager
Implementation point Defined tool trial and effective lot or date
Old-stock disposition Quarantine, prototype-only use under approved deviation, rework, or scrap, as applicable
Closure evidence Revised objects released; required verification passed; affected baseline and gate status updated

The ECO sequence

  1. Initiate and contain the trigger. Link the supplier issue, NCR, test failure, customer request, or improvement proposal.
  2. Assess impact before approval. Review requirements, standards applicability, interfaces, CAD, drawings, EBOM, manufacturing view, FMEAs, Control Plans, supplier tooling, validation, and PPAP-readiness evidence.
  3. Define the implementation and verification plan. State exactly what must be tested, inspected, or analyzed before release.
  4. Obtain role-based approvals. Approvals must reflect authority, not merely attendance in a meeting.
  5. Implement the new configuration. Release revised CAD, drawing, BOM, supplier data, process controls, and instructions together where applicable.
  6. Control the cut-in. Record the effective date, lot, serial range, build phase, or tool state. Preserve traceability of material produced during transition.
  7. Verify and close. Confirm that the changed configuration meets requirements and that all linked records are updated.

A temporary alternate inspection or process control should not become an invisible permanent workaround. If it is used, identify the affected product, record the risk basis and approval, monitor the temporary condition, and return to the standard control or formally revise the controlled process.


Build the minimum viable ECU project record

Set up the following controlled structure now. It is intentionally lightweight enough for Onshape plus templates, but complete enough to resemble a company project record.

EDV-SIM-ECU/
  00_Governance/
    EDV-SIM-ECU-PQC-001_Project_Quality_Configuration_Charter
    Roles_and_Responsibility_Matrix
    Assumptions_Log
    Standards_Register_Link
    Gate_Decision_Log

  01_Requirements_and_Interfaces/
    Requirements_Traceability_Matrix
    Interface_Control_Matrix
    Packaging_and_Keepout_Assumptions

  02_Product_Definition/
    Onshape_CAD_Links_and_Versions
    Drawings
    EBOM
    Proposed_MBOM_View
    Material_and_Joining_Records

  03_Risk_and_Quality_Planning/
    Risk_Register
    DFMEA
    DVP_and_R
    Prototype_Control_Plan
    Supplier_and_Interface_Control_Matrix

  04_Verification_and_Validation/
    Analysis
    Test_Procedures
    Test_Reports
    Inspection_Reports
    Test_Article_Configuration_Log

  05_Supplier_Records/
    Supplier_Qualification
    DFM_and_Tooling_Feedback
    Material_and_Lot_Certificates
    Supplier_8D_and_CAPA

  06_Nonconformance_and_Change/
    NCR_Log
    Concessions_and_Deviations
    ECR_Log
    ECO_Log
    Released_Baselines

  07_Release_and_Gates/
    G1_G2_G3_G4_Packages
    PPAP_Readiness_Index
    Approval_Evidence

Then create a one-page Master Record Index with these fields:

Field Purpose
Object ID Stable identifier
Object title Human-readable name
Object type Requirement, CAD, test report, NCR, ECO, and so on
Revision/version Exact controlled state
Maturity state Work in Progress, In Review, Approved, Released, Superseded
Owner role Accountable role
Storage location Onshape link or controlled file path
Related baseline Gate or release baseline
Parent links Requirements, interfaces, supplier, validation, NCR, or ECO links
Approval reference Decision record and approving role
Retention/status note Current, superseded, archived, or restricted

Your first usable baseline can be:

BASE-ECU-G1-01

Include the approved requirements baseline, assumptions log, standards register, preliminary EBOM, interface-control matrix, risk register, DVP&R outline, and G1 decision record. That baseline is the controlled starting point for detailed ECU design in the next modules.


Key takeaways

An IATF-aligned simulated project record is an evidence architecture, not a collection of files. It should make seven controls visible:

  • Design responsibility is explicit, role-based, and distinguished from supplier process responsibility.
  • Supplier interfaces define controlled inputs, required outputs, verification, traceability, and change-notification expectations.
  • Traceability links requirements, product configuration, suppliers, lots, validation evidence, nonconformances, and changes.
  • Documented information has identifiers, revision control, maturity states, approval evidence, and retrievable history.
  • Validation evidence identifies the exact tested configuration and acceptance criterion.
  • Nonconformance control contains and dispositions deviations from the current requirement without silently changing the definition.
  • ECO control assesses and verifies the complete impact of a permanent change before release and tracks its implementation boundary.

Next, you will construct the assumption-based Rivian-built Amazon EDV context and packaging model. That work will populate the project record with confidence-rated vehicle facts, engineering assumptions, keep-out zones, and explicitly owned interfaces.

Can't find a good explanation? Sign up and we'll make it for you

Sign up