7 Deadly Sins When Choosing a CNC Shop (And How to Avoid Them)
Most bad supplier decisions do not come from a bad part. They come from an unchecked claim. This page lists the seven failure modes we see on the buyer side, the symptom each one leaves behind, and the check that closes it. Written for engineers and sourcing teams qualifying a machining partner for prototypes through 10,000+ part runs.

The 7 Sins as a Troubleshooting Table
Left column is what you notice. Middle column is why it happens. Right column is the check that closes it before you issue a PO.
| Symptom | Root cause | Fix before ordering |
|---|---|---|
| Certificate shown, scope unclear | Credential covers only part of the process | Match certificate scope to your process list |
| First article good, batch drifts | No in-process monitoring or thermal control | Request in-process inspection records |
| Machined surface looks off-color | Unverified or substituted raw stock | Require mill certificates with heat numbers |
| Parts arrive unfinished | Finishing subcontracted without disclosure | Confirm which steps run in-house |
| Lowest quote wins, then costs climb | Price compared without scope definition | Compare quotes line by line, not totals |
| Questions go unanswered for days | No engineer on the account | Test response time on a real DFM question |
| Volume ramp stalls after pilot | Capacity and staffing not verified | Ask for machine list and shift plan |
Certification and precision claims when choosing a CNC shop
An ISO 9001 certificate is a starting point, not proof. What matters is the scope written on it. A shop can hold ISO 9001:2015 and still subcontract heat treatment or anodizing to an unverified vendor, which leaves a gap its own audit never covered. Pull the certificate number, check the expiry date, and read the scope line against the operations your part actually needs. If finishing or inspection sits outside that scope, treat it as an open item.
Regulated work raises the bar. Medical device parts usually need ISO 13485:2016, automotive hardware needs IATF 16949:2016, and any shop handling your CAD files should be able to explain how it protects them, which is where ISO 27001:2022 applies. Four certificates on one wall is not the point. The point is whether the certificate covers the process that will touch your part.
Precision claims fail the same way. A shop advertising ±0.005 mm means little without temperature-controlled metrology, a calibration schedule, and in-process checks. Tight tolerances often hold on simple geometry in short runs, then drift once the batch grows and the spindle warms. Contoured surfaces make it worse. A 3-axis machine needs multiple setups for a curved aerospace bracket, and each setup stacks positional error. A simultaneous 5-axis center cuts it in one setup and keeps the geometric relationships intact.
- 1Check the scope lineThe certificate must cover incoming material, machining, finishing, and final inspection.
- 2Ask for calibration recordsMachine and CMM calibration dates should be current and traceable.
- 3Match machine to geometryContoured parts with tight datums belong on 5-axis, not multiple 3-axis setups.
Material traceability and finishing scope
Substituted material rarely announces itself. It shows up later as a part that anodizes unevenly, cracks at a bend, or fails a hardness check. Aluminum 6061 and 7075 look identical on the bench and behave nothing alike under load. The same trap applies to stainless grades: 304 and 316L are not interchangeable in a corrosive environment, and 17-4PH needs its own heat-treat route. Mill certificates with heat numbers, tied to the actual stock used, are the only reliable defense.
Finishing is where schedules quietly break. A shop that machines well but sends anodizing to a third party adds a handoff, a second queue, and a second set of tolerances. If that subcontractor is not disclosed, you learn about it when the delivery date slips. One-stop post-processing keeps the part under one quality system from raw stock to packed box. Ask which finishes run in-house and which do not, then decide if the split matters for your tolerances.
- 1Require heat numbersMill certificates must match the stock used, not just the alloy ordered.
- 2Confirm finish ownershipKnow whether anodizing, plating, and coating are in-house or outsourced.
- 3Watch tolerance stackEach handoff can add its own dimensional allowance.
Price comparisons and engineering communication
A low bid is not a discount. It is a different scope, usually with the expensive steps removed. One quote may include material certification, deburring, and full dimensional reports; another may price bare machining only. Comparing totals across those two quotes tells you nothing useful. Put both side by side, line by line, and mark what each one excludes. The gap between the numbers usually explains itself once the scope is visible.
Communication failures surface fastest during DFM. A shop with no engineer on the account will accept a drawing with a 0.4 mm wall and a deep pocket, quote it, and machine it. A shop with an engineer will flag the risk before the spindle turns. Test this early. Send a real question about a thin feature or an unreachable corner and see how long a substantive answer takes. Fast quotes are common. Fast technical answers are not.
- 1Normalize the scopeCompare quotes line by line, including inspection and documentation.
- 2Test the DFM responseA useful answer names the specific feature and the specific risk.
Scalability: the sin that appears at ramp
Pilot runs hide capacity problems. Ten parts from a busy shop can still arrive on time because someone squeezed them in. The ramp is where the truth shows. A supplier that cannot move from 50 parts to 5,000 without requoting, retooling, or pushing lead times has a structural limit, not a scheduling problem. Ask for the machine list, the shift pattern, and who runs the night shift before you plan a launch around them.
Capacity is not only spindle count. It is staffing, fixturing, and how many jobs sit in the queue at once. A shop with 127 high-precision CNC machines, including 16 simultaneous 5-axis centers and 16 mill-turn centers, can absorb a ramp that a five-machine job shop cannot. The number that matters is not the total. It is how much of that capacity is genuinely available to you in the month you need it.
How to Run This Check Step by Step
Run these in order. Each step either clears a risk or escalates it before money changes hands.
- 1Pull the certificates and read the scopeGet certificate numbers for ISO 9001:2015, IATF 16949:2016, or ISO 13485:2016 as applicable, plus ISO 27001:2022 if your files are sensitive. Check expiry dates and confirm the scope covers machining, finishing, and inspection.
- 2Send a DFM question with the RFQPick a real risk feature, such as a 0.4 mm wall or a deep pocket with a tight corner radius. Note how long a specific technical reply takes. Vague answers are a signal.
- 3Ask for the machine list and tolerancesRequest axis count, travels, and achievable tolerance for your geometry. Contoured parts with tight datums should be quoted on simultaneous 5-axis, not multiple 3-axis setups.
- 4Require material certificates up frontState the alloy and grade in the PO and require mill certificates with heat numbers tied to the stock used. Do not accept a generic alloy statement.
- 5Map the finishing routeList every post-process step in your drawing and ask which run in-house. Anodizing, plating, powder coating, and laser marking should each have a named owner.
- 6Normalize the quotes before comparingBuild a line-item table covering material, machining, finishing, inspection, and documentation. Compare like for like, then look at the total.
- 7Test the ramp planGive your pilot and volume quantities together. Ask how capacity, shifts, and lead time change between them, and whether the quote holds at the higher volume.
Questions Buyers Ask During Vetting
Is an ISO 9001 certificate enough to qualify a machine shop?
It is the minimum, not the finish line. ISO 9001:2015 shows a quality system exists, but the scope line determines what it covers. If finishing or inspection is outside the scope, that work is effectively unverified.
For medical and automotive parts, look for ISO 13485:2016 or IATF 16949:2016 respectively. Those standards add process controls that general ISO 9001 does not require.
How do I verify a tolerance claim before placing an order?
Ask three questions: what measuring equipment is used, when it was last calibrated, and how in-process checks are recorded. A ±0.005 mm claim needs temperature-controlled metrology and a documented inspection routine behind it.
Then match the claim to your geometry. Tight tolerances on simple prismatic parts are routine. The same tolerance across a contoured surface usually needs simultaneous 5-axis capability.
What should I put in a purchase order to prevent material substitution?
Name the alloy and grade, require mill certificates with heat numbers, and ask for the certificates to ship with the parts. For stainless, specify the grade exactly, since 304 and 316L are not interchangeable in corrosive service.
If the part is safety-related, add a hardness or conductivity check to the inspection plan so substitution is caught before the parts leave the shop.
Should finishing be done by the same shop that machines the part?
It is usually safer. Each handoff adds a queue, a second quality system, and another chance for dimensional drift. When machining and finishing sit under one roof, the same inspection records cover the whole route.
If finishing is outsourced, ask which vendor and confirm that vendor is covered by the shop's quality system and certifications.
How can I tell whether a shop can scale from prototype to production?
Send pilot and volume quantities in the same RFQ. Ask how the lead time, unit price, and process change between them. A shop that has to requote from scratch at volume is telling you the ramp was never planned.
Also ask about shift coverage and available capacity in the month you need, not just total machine count.
What response time is reasonable for a technical question?
A substantive answer to a DFM question should come back on the same business day in most cases. What matters more than speed is specificity: a useful reply names the feature, the risk, and a proposed change.
If the reply is generic or avoids the technical point, assume the account has no engineer assigned to it.
Put the Checklist to Work on Your Next RFQ
Send your drawings and we will return a quote with free DFM analysis, a named engineer on the account, and the certificate scope spelled out.
12-hour quote + DFM100% inspection before shipment±0.005 mmNDA on request