A CMM report is only as real as the process behind it
Early in my career reviewing inspection data from overseas suppliers, I received a pristine CMM report for a batch of precision bushings: every dimension dead nominal, no deviations, all green. The parts arrived and a bore that was supposed to be H7 was so tight a plug gage would not enter. The report had been generated without the parts ever touching a CMM. From that point on I learned that a PDF with a Zeiss logo and green checkmarks means nothing on its own. The question is always: what process produced this data?
What a legitimate CMM report contains
A genuine coordinate measuring machine report has specific characteristics that are hard to fabricate without real CMM software. Look for these elements:
- CMM make and model (Zeiss Contura, Hexagon Global, Mitutoyo Crysta, etc.) plus calibration due date
- Probe configuration and stylus diameter used for the inspection
- Date and time stamp of the actual measurement run, not just PDF export date
- Part number, drawing revision, and serial or lot number tied to the shipment
- Actual measured values with deviation from nominal (not just pass/fail)
- Measurement uncertainty statement or reference to ISO 17025 accreditation
- Inspector name or operator ID, ideally with a signature or digital stamp
Real CMM data shows variation. A report where every critical dimension sits exactly at nominal is suspicious - machining produces parts with measurable scatter. Genuine reports show dimensions distributed within the tolerance band, not stacked on zero.
Red flags in fabricated or inflated reports
I have reviewed dozens of questionable reports over the years. These patterns trigger deeper investigation:
- All dimensions read exactly nominal with zero deviation across 20+ features - statistically improbable on real machined parts
- No probe data, no calibration info, no operator ID - just a table of numbers and a company logo
- Report dates that do not align with production timeline (dated before material was delivered)
- Identical measurement values across multiple parts in a lot (copy-paste, not actual measurement)
- PDF metadata showing creation in Excel or Word rather than export from Calypso, PC-DMIS, or metrology software
- Out-of-tolerance features on incoming inspection that the report marked as passing
How to verify a report before you release payment
The most effective verification step is also the simplest: ask for raw CMM data. Genuine CMM software exports native measurement files alongside the PDF. If a supplier cannot produce raw data or screenshots of the CMM program running, the report was likely assembled manually. Request a short video call where the CMM operator measures a feature on one of your parts live. A shop that actually runs CMM inspection will have no problem with this; a shop that fabricates reports will stall or make excuses.
Independent verification options
For critical applications, build third-party verification into your purchasing process. Companies like SGS, Bureau Veritas, and TUV offer pre-shipment inspection services where an independent inspector visits the supplier, pulls parts from the production lot, and measures them on calibrated equipment. The cost scales with part count and inspection time but is trivial compared to a batch failure on a safety-critical assembly. On your own receiving dock, a calibrated bore gage, pin gage set, micrometer, and surface roughness tester catch most dimensional issues before parts enter production.
The paper trail around the report
A CMM report does not exist in isolation. It should be traceable to a specific machine, a specific program name, an operator ID and a date. If the supplier cannot tell you which CMM ran the part, or the report carries no program number, treat it as unverified data. Real quality departments keep these records because their own audits require them; a shop that cannot produce them is usually a shop that did not measure the part.
- Machine ID and CMM program name on the report
- Operator or inspector ID recorded
- Date and shift traceable
- Raw data available on request
Frequently Asked Questions
Can I trust a CMM report from an ISO 9001 certified shop?
ISO 9001 means a quality system exists on paper; it does not guarantee every operator follows it every time. Treat reports as data to verify, not proof of conformity, until you have a track record with a specific supplier.
What is the difference between a CMM report and an FAI report?
A CMM report shows measured dimensions from a coordinate measuring machine. A First Article Inspection (FAI) report per AS9102 includes ballooned drawings, material certs, process specs, and CMM data for every feature on the first production part. An FAI is more comprehensive.
Should I ask for 100 percent inspection on all parts?
Reserve 100 percent inspection for critical features and safety-related parts. For most commercial work, documented sample inspection per ISO 2859-1 plus CMM on the first article gives adequate confidence.
What if a supplier refuses to share raw CMM data?
Ask why. Some shops consider CMM programs proprietary, but they can still show live measurements or share point-cloud data without revealing programming details. A flat refusal without explanation is a significant red flag.