m. Suppliers of sorting and rework services must be certified to the current version of ISO 9001.

n. Suppliers of software development services shall have an assessment process profile report or evidence
acceptable to Nexteer that is consistent with the current version of ASPICE or CMMI software assessment
methodologies. Additionally, certification to the current version of ISO 26262 is required in order to
demonstrate ASIL D capability.
o. Suppliers of service packaging must be certified to the current version of ISO 9001.
p. Suppliers are responsible to ensure their certificate name and address information matches the DUNS
location that is in the Intelex Supplier Profile Application.
q. Certification Body/Registrar Notification - Suppliers registered to ISO 9001, IATF 16949, or ISO/IEC 17025
shall notify Nexteer of certificates being revoked, withdrawn, being placed on suspension, or re-instated. In
those cases, the supplier may be subject to a second party audit process and be placed on new business
hold until the supplier is recertified. Supplier must submit to the Nexteer SQE, a plan/timeline for
reinstatement.

NOTE: Third party certification does not relieve the supplier of the full responsibility of the quality and delivery
of the product supplied.

NOTE: Nexteer Automotive does not grant Quality Management System waivers.

Requirements for Suppliers of Electronics

The supplier shall support Nexteer’s efforts to comply with ISO26262.

If requested by Nexteer, the supplier shall enter into a Development Interface Agreement with Nexteer which
details functional safety responsibilities between the two parties, and also identifies required information
sharing.

For hardware elements of Class 2 complexity according to ISO26262:2018 Part 8 Clause 13 (example, sensor
ICs without internal safety mechanisms necessary for Nexteer safety case), the supplier shall support the
hardware evaluation steps defined therein by providing the necessary analysis and test data. The supplier
shall also provide the necessary failure rate information for Nexteer to incorporate into a system level FMEDA.

For elements of Class 3 complexity according to ISO26262:2018 Part 8 Clause 13 (example, complex IC’s with
internal safety mechanisms, like microprocessor, power supply or gate drive IC), it is expected that these will
be developed by the supplier as a Safety Element out of Context (SEooC) capable of ASIL D. The supplier
shall provide independent evidence that an ASIL D compliant ISO26262 hardware development process was
followed. The supplier shall provide independent evidence that the component has been assessed to a level of
ASIL D per ISO26262. The supplier shall also provide a safety manual detailing the assumptions of use and
requirements to Nexteer as the integrator to achieve ASIL D at the item level. The supplier shall provide safety
analysis reports (including results from FTA, FMEDA, DFA) and a safety case report. The detailed FTA,
FMEDA, and DFA should be available for review with Nexteer. The supplier shall provide the necessary failure
rate information and diagnostic coverage information (with justification) for Nexteer to incorporate into a system
level FMEDA. The supplier shall support any Nexteer item level ISO26262 assessment or audit activities by
making information readily available to assessor/auditor.

For suppliers of electronic assemblies, the supplier shall provide evidence of compliance with applicable
requirements of ISO 26262:2018 Part 7, and also Quality management systems standards such as IATF
16949 and/or ISO 9001. Nexteer reserves the right to perform a functional safety audit on processes
implemented in the assembly supply chain w.r.t ISO 26262. The supplier shall support any Nexteer item level
ISO26262 assessment or audit activities by making information readily available to assessor/auditor.

13