Back to overview
May 21, 2025

New Formula Q revision 7 published

New quality requirements for Volkswagen Group suppliers

On 25 April 2025, Volkswagen AG finally published the long-awaited Revision 7 of Formula Q. The new revision updates, tightens or introduces numerous requirements, particularly with regard to cybersecurity, sustainability and digital processes.

Formula Q Specification Revision 7 published – New quality requirements for Volkswagen Group suppliers

On 25 April 2025, Volkswagen AG published the long-awaited Revision 7 of the Formula Q Specification. This forms the binding basis for quality requirements for suppliers throughout the Volkswagen Group. The new revision updates, tightens or introduces numerous requirements, particularly with regard to cybersecurity, sustainability and digital processes.

What is new in Revision 7?

The new edition replaces the previous version from 2021 (Revision 6) and responds to current market changes and regulatory requirements. Important new features include:

  • Expanded cybersecurity obligations Suppliers must demonstrate a certified cybersecurity management system in accordance with ISO 21434 – including an audit in accordance with VDA PAS 5112.→ This applies to both hardware and software deliveries and also affects subcontractors.

 

  • Mandatory PSCR contact person (Product Safety & Conformity Representative) Each supplier must appoint a PSCR who will be registered in the supplier database.

 

  • Stricter documentation requirements Documents relevant to quotations and projects must be available in German – deviations require approval.

 

  • Extended requirements for the supply chain Compliance with quality, environmental and IT security requirements must be ensured at all levels – including requalification and change management.

  • Integration of brand-specific additions Revision 7 explicitly refers to the Formula Q Brand-specific additions, which contain further rules depending on the brand (e.g. Audi, Porsche, Škoda, MAN, Bentley, etc.).

What does this mean for suppliers in concrete terms? – Six recommendations for implementing the new Formula Q Revision 7

The requirements of the new Formula Q are not just a ‘nice-to-have’ but are binding for all active and future suppliers to the Volkswagen Group. Anyone who does not meet the requirements risks being excluded from the award process. We recommend the following steps:

1. Appoint and register a PSCR

  • What: Every organisation must appoint a qualified Product Safety & Conformity Representative (PSCR).
  • How: Training in accordance with VDA volume ‘Product Integrity’, entry in the supplier database (LDB) with contact details.
  • Tip: Also appoint a representative and provide them with regular training.

2. Implement a cybersecurity management system

  • What: A management system in accordance with ISO 21434 must be set up for software or network-enabled components.
  • How: Conduct an audit in accordance with VDA PAS 5112. The results must be presented to the customer.
  • Not sufficient: ISO/IEC 27001 alone is not sufficient for product-related requirements!

3. Self-assessment & supply chain analysis

  • What: Suppliers must ensure that the new requirements are consistently met throughout the entire supply chain.
  • How: Conduct internal and supplier audits using the Formula Q method.
  • Tip: Focus on critical components, parts and outsourced processes.

4. Ensure documentation and language

  • What: Technical documentation and communication with the customer must be in German.
  • How: Translate project and QM documents and keep them centrally available.
  • Exception: Deviations only with written approval from VW.

5. Review quality management system

  • What: The requirements from IATF 16949, VDA volumes, TISAX and ISO 21434 must be fully reflected in the QMS.
  • How: Adapt audit planning, integrate relevant standard requirements, clarify responsibilities.
  • Tip: For software-intensive projects, also consider Automotive SPICE®.

6. Training & competence development

  • What: Employees must be trained in product safety, cybersecurity and CoP.
  • How: Training in accordance with VDA volumes, PSCR training courses, internal awareness programme.
  • TopQM offers: Practical workshops and in-house training modules.

 

Our conclusion at TopQM

The new revision is not just an update, but a comprehensive leap forward in quality. It requires suppliers to have a highly integrated quality and safety management system across the entire value chain. Cybersecurity and the consistent implementation of requalification obligations in particular present many companies with new challenges.

At TopQM, we support our customers in analysing and implementing the new requirements, including:

  • PSCR training and integration into the QMS
  • Supply chain analysis & documentation review
  • Internal and supplier audits according to VDA 6.3 and Formula Q
  • Process optimisation according to Formula Q & IATF 16949

 

Do you have questions about implementation? Feel free to contact us for individual advice or a QM assessment based on the new Formula Q in concrete terms.