Pittsburgh, Pennsylvania
ISO 9001 consulting for the Pittsburgh supply base.
The reactor company headquartered here is building components that involve no nuclear material at all. For that supplier tier, the nuclear quality standard never applies — and ISO 9001 is the whole of the requirement.
We work in the Kansas City metro. Engagements here run remotely, with on-site visits at the points where being in the building changes the outcome — gap analysis, internal audit, and the certification audits themselves. We do not maintain an office in this market and would rather say so than imply otherwise.
A nuclear metro with a large non-nuclear supplier tier
Pittsburgh has 2,371 manufacturing establishments, 2,185 of them with fewer than 100 employees (US Census County Business Patterns, 2023). It also has something no other metro we serve has: the global headquarters of a reactor company, in Cranberry Township, Butler County — inside this metropolitan area, not adjacent to it.
The reflexive assumption about nuclear supply is that it means ASME NQA-1 and 10 CFR 50 Appendix B, a quality programme we do not offer. For safety-related work that assumption is correct.
But it is not the whole picture here, and the exception is funded and specific. Announcing the company's microreactor accelerator at Etna in Allegheny County, the Commonwealth stated plainly that “Westinghouse will also manufacture certain components at this facility that do not involve any nuclear materials.”
Components involving no nuclear material do not carry nuclear safety-related classification. For the shops supplying that work, NQA-1 does not attach at all — and ISO 9001 is not a stepping stone toward the real requirement. It is the requirement.
Industry in Pittsburgh
- Westinghouse, Cranberry Township Global headquarters in Butler County, inside this metro, with a commitment to retain over 3,100 employees across seven Pennsylvania facilities
- The eVinci accelerator, Etna 87,420 sq ft in Allegheny County, at least $18 million and 40+ jobs — announced with the explicit statement that certain components made there involve no nuclear materials
- The specialty metals base Still substantial, and much of it now serves aerospace — which is AS9100 and special-process accreditation territory that we do not offer
- Federal OSHA only Pennsylvania runs no state plan, which makes a compliance obligations register simpler here than in most of the markets we serve
- The names that left One specialty metals company moved to Texas in 2022 and now runs mostly aerospace; another was acquired by a Luxembourg group in January 2025. We are not going to anchor a page on either
Why this is a different argument from the one people expect
We make a nuclear-adjacent argument on our Chattanooga page too, and it is worth being clear that this is not the same one, because a reader who has seen both should not feel they have read a template twice.
The Chattanooga argument is about direction of travel: for a shop that wants safety-related work, the industry's own guidance treats a mature ISO 9001 system as an on-ramp toward NQA-1. The standard is a stage on the way to somewhere else.
The Pittsburgh argument is about scope: there is a real, funded, local tier of work where the nuclear quality programme is not the destination and never enters the picture. ISO 9001 is not a stage. It is the terminus.
Those lead to genuinely different conversations. In one, the question is what you would eventually have to add. In the other, the question is what your customer's purchase order actually classifies the part as — because that classification, not the industry your customer is in, is what decides which quality programme governs.
If you take one thing from this page: ask what the item classification is before you accept anyone's assumption about which standard you need. Getting that answer wrong in either direction is expensive.
The company's actual footprint here, and what it commits to
The Etna facility is 87,420 square feet at 51 Bridge Street, with at least $18 million invested and more than 40 new jobs committed within three years. Pennsylvania supported it with a $1,083,250 Pennsylvania First grant.
The larger number in the same announcement is the one that matters for a supplier. Westinghouse “committed to retaining over 3,100 employees at its seven facilities across the Commonwealth, including its global headquarters.” Most of those sites are in this metro — Cranberry Township, Etna, Monroeville, Warrendale, New Stanton and Waltz Mill among them.
That is a durable, geographically concentrated buyer with a published retention commitment. New product programmes generate supplier qualification cycles, and supplier qualification cycles are when somebody asks to see your quality system.
One honest caveat: we are describing a demand environment, not a customer list. We are not going to imply a relationship we do not have.
What a supplier qualification audit here actually asks for
A reactor programme's supplier quality function does not audit the way a certification body audits. The certification auditor is checking whether your system conforms to a standard. The customer's engineer is checking whether they can rely on you for a specific part.
In practice that means four things get pulled, and they get pulled in this order. Traceability — follow a serial number or a heat number backwards through the building to the receiving inspection record and the mill certificate. Special process control — welding, heat treatment, coating and cleaning, where you cannot verify the result by later inspection, so the qualification of the process and the operator is the evidence. Calibration — measurement traceability with real intervals and a real out-of-tolerance procedure, including what you did the last time an instrument failed a check. And nonconformance history, which is the one nobody volunteers and everybody is asked for.
That last one is worth dwelling on, because instinct is exactly wrong about it. A supplier with no recorded nonconformances is not reassuring; it reads as a supplier that does not record them. What builds confidence is a nonconformance with a real cause, a real correction, and evidence the correction held.
A quality system built to pass a certification audit and a quality system built to survive that conversation are not the same system, even when they conform to the same standard. We build for the second one, because it is the one that keeps the purchase order.
One regulator, and no state programme to lean on
Pennsylvania has no OSHA-approved State Plan for private-sector workers. Federal OSHA covers most private-sector employees in the Commonwealth. In OSHA's own words, Pennsylvania “is under federal OSHA jurisdiction which covers most private sector workers within the state.”
That is genuinely simpler than several neighbouring markets, and it is worth saying so plainly rather than manufacturing complexity to sell against. A ISO 45001 compliance obligations register for a single-site Pennsylvania employer has one occupational-safety regulator in it. Compare that with our Cincinnati page, where one metropolitan area spans three states and three different regimes.
On the environmental side, we checked whether Pennsylvania has a grant that would help fund this kind of work. The Department of Environmental Protection's small business grant programme funds equipment and process changes — awards in the region of $7,500 to $12,000 for replacing equipment, improving processes and reducing runoff. Management systems, certification and consulting are not on the eligible list. If someone has told you a state grant will pay for your ISO 14001 project, ask them to show you the eligibility criteria.
What we looked at here and decided not to sell you
Two Pittsburgh stories get told constantly, and neither survived checking.
The robotics and autonomy cluster. It is real and it is impressive, and we found no documented ISO driver behind it. The standards that actually govern autonomous systems are ISO 26262, ISO 21448 and UL 4600, none of which we offer. At least one major local autonomy company runs its safety assurance through an independent third-party safety-case assessment rather than a certification scheme. The defense-adjacent robotics firms fall under the Defense Department's cybersecurity requirements, not ISO 27001. We are not going to build a robotics practice page out of a cluster that does not buy what we sell.
Legacy specialty metals. The names people reach for have moved. One left for Texas in 2022 and now takes roughly two-thirds of its revenue from aerospace and defense, which is AS9100 territory. Another was acquired by a Luxembourg group in January 2025, in a deal framed around aerospace alloys. The large petrochemical complex in Beaver County is currently up for sale, so its ownership and any supplier requirements are unsettled — and for the record, the state environmental agency's own material on that plant describes permits, violations and a mitigation fund, and requires no environmental management system at all.
We are also not going to print a medical device establishment count for this metro. The federal database was not reachable when we checked, and an unverified number on a page like this is worse than no number.
How we work with companies here
We are based in the Kansas City metro and run Pittsburgh engagements remotely, with on-site work at the points where being in the building changes the outcome — the gap analysis walkthrough, the first internal audit cycle, and the certification audits.
For work in the reactor supply chain the single most useful early conversation is about item classification, because that decides whether we are the right firm at all. If your scope turns out to be safety-related, you need an NQA-1 programme and we will say so.
The consultant who scopes the engagement does the work. No handoff to a junior implementer after the sale.
What an engagement covers
- ISO 9001 system build A quality management system scoped to what your purchase orders actually classify your work as. See ISO 9001.
- Item classification triage Whether the part is safety-related or not is the question that decides which quality programme governs. We would rather establish it before you commit money than after.
- Supplier qualification readiness The evidence a supplier quality engineer arrives asking for: process validation, traceability, calibration, and the nonconformance history you would rather not show but will be asked for.
- ISO 14001 without the grant myth An environmental management system built for a real driver — a customer, a permit, a corporate parent — rather than for a state grant that does not fund it. See ISO 14001.
- ISO 45001 under federal OSHA One regulator, which is simpler here than in most of our markets. See ISO 45001.
- Gap analysis and roadmap Two to four weeks, fixed scope and price, with a clear go or no-go before real money is committed.
- Internal audit and management review Auditor-grade internal audits and a facilitated management review producing recorded decisions.
Questions we get from companies in this market
We want nuclear work. Do we need NQA-1 or ISO 9001?
It depends on how the item is classified, not on the industry your customer is in. Safety-related items fall under 10 CFR 50 Appendix B and a supplier needs an NQA-1 programme, which we do not offer. But not all work in this supply chain is safety-related — the microreactor accelerator in Etna was announced with the explicit statement that certain components manufactured there involve no nuclear materials at all. For that tier, NQA-1 never attaches and ISO 9001 is the whole requirement. Get the classification in writing from your customer before anyone quotes you for anything.
Is this the same argument as your Chattanooga page?
No, and the difference is worth understanding because it changes what you should do. Chattanooga is about direction: industry guidance treats a mature ISO 9001 system as an on-ramp toward NQA-1 for a shop that wants safety-related work eventually. Pittsburgh is about scope: there is a funded local tier where NQA-1 does not enter the picture and ISO 9001 is not a stage on the way to anything. One asks what you would have to add later. The other asks what your purchase order says today.
What does a customer audit look for that a certification audit does not?
Evidence about a specific part rather than conformity in general. The four things that get pulled are traceability — following a heat or serial number backwards to receiving inspection and the mill certificate — special process control for welding, heat treatment, coating and cleaning where the result cannot be verified afterwards, calibration with real intervals and a real out-of-tolerance procedure, and nonconformance history. That last one catches people out. A supplier with no recorded nonconformances does not look careful; it looks like a supplier that does not record them. What earns confidence is a real cause, a real correction, and evidence the correction held.
Will a Pennsylvania grant pay for our ISO 14001 project?
Not the one people usually mean. The Department of Environmental Protection's small business grant funds equipment and process changes — replacing equipment, improving processes, reducing runoff — with awards in the region of $7,500 to $12,000. Management systems, certification and consulting fees are not on the eligible list. If a consultant has told you otherwise, ask to see the eligibility criteria in writing. There may be customer or corporate drivers that justify ISO 14001 here; a state grant is not one of them.
Do you work with Pittsburgh's robotics and autonomy companies?
Generally no, and we would rather explain why than take the meeting. The standards that govern autonomous systems are ISO 26262, ISO 21448 and UL 4600, and we do not offer any of them. Defense-adjacent robotics work runs on the Defense Department's cybersecurity requirements rather than ISO 27001, and we do not offer those either. If a robotics company needs ISO 9001 for a manufacturing operation, or ISO 27001 for an enterprise information security programme with a commercial driver behind it, that is us. The autonomy safety case is not.
Does Pennsylvania have its own OSHA programme?
No. Pennsylvania has no OSHA-approved State Plan for private-sector workers, so federal OSHA covers most private-sector employees in the Commonwealth. That makes an ISO 45001 compliance obligations register simpler here than in Michigan, Indiana, Kentucky or Tennessee, all of which run their own plans. We mention it because the opposite error is common: a register built for a Pennsylvania site by someone assuming a state plan exists will contain requirements that do not apply to you.