§ Guide · Where-used analysis

BOM Where-Used Analysis: Understanding the Blast Radius of a Component Change

Where-used analysis answers one question: given a part, where do we use it? It is the inverse of reading a bill of materials, and it is the question you cannot answer from inside any single BOM — which is exactly the question a supplier notice forces on you.

Reviewed by Mason, FounderLast reviewed
Start your 14-day trial

The asymmetry is easy to miss. A BOM is written from the perspective of one assembly, and it is complete in that direction: open it and you see every part the board needs. Read in the other direction it tells you almost nothing. A part that appears on the BOM in front of you may sit on one other board or on thirty, in one program or across the whole portfolio, on revisions you still build or on ones designed out two years ago. Nothing on the line indicates which.

This guide covers what where-used analysis returns, the chain it traverses from part number to program, the lifecycle events that should trigger it, and the three decisions that should never be committed without it — a lifecycle status change, an alternate approval, and a sourcing override.

What where-used analysis is

A where-used query takes an item and returns every place it is consumed. The concept comes from materials planning and PLM, where it has always been the counterpart to a BOM explosion: explosion works top-down, from an assembly to its constituent parts; where-used works bottom-up, from a part to the assemblies that contain it.

For electronics work, the useful version of the query returns rather more than a list of file names. Given a manufacturer part number, it should return every BOM line that consumes it, the revision each of those BOMs is at, whether that revision is still built, the quantity per assembly, the products those assemblies roll up into, and the programs that own the products. Anything less leaves the reader doing joins by hand.

Teams that have never had the query available usually approximate it by searching filenames and spreadsheets. That works, in the sense that it produces an answer; it is just an answer with unknown completeness, produced under time pressure, at the moment when being wrong is most expensive.

Why MPN-level changes create cross-BOM risk

Every risk that arrives at the part level propagates along paths that are invisible from within a single design. A manufacturer discontinues a regulator; that is one event. Its consequences are distributed across every board that regulator sits on, and those boards are owned by different people, on different schedules, with different tolerance for change.

Two properties make this worse than it first appears. The first is concentration: engineering teams standardize deliberately, so the parts most likely to be affected are the ones adopted most widely. Standardization is good practice and it makes the reach of a single notice large by design. The second is identity. Part numbers do not match cleanly across BOMs — the same component appears with a tape-and-reel suffix on one board and without it on another, with a temperature-grade letter here and a packing code there, sometimes with the manufacturer name spelled three ways.

An exact string match under-reports, quietly. The BOM lines it misses look exactly like parts you do not use, and there is no error message. Matching on a normalized part number, then confirming the manufacturer separately, is what turns the query from an approximation into something you can make a decision on.

The chain: part number to program

Where-used is a traversal, and each hop answers a different question. The manufacturer part number identifies what changed. The BOM line says how one design uses it. The revision says whether that use is current or historical. The assembly and product say what a customer receives. The program says who owns the response, on what schedule, under which approval regime.

Skipping a hop is where analyses go wrong, and the revision hop is the one most often dropped. A part matched on fourteen BOMs sounds alarming until you find that six of those matches are on revisions superseded eighteen months ago. Conversely, a part that looks contained can turn out to sit on a revision that is still being built for a service contract nobody in the room remembered.

The level-by-level breakdown below sets out what each hop contributes and what it costs you to skip it.

Lifecycle events that should trigger a where-used query

Where-used analysis is usually described as an obsolescence tool, which undersells it. Any part-level event with consequences should trigger one:

  • An NRND notification — the early warning that determines whether the part is still allowed in designs currently on the bench.
  • An end-of-life or discontinuance notice with a last-time-buy date, where reach directly determines the quantity you need and the budget you have to defend.
  • A product change notice affecting specification, materials, assembly site, or die revision, where the impact varies per application and has to be assessed per board.
  • A lead-time or allocation shift, where knowing which programs are exposed decides who gets the available supply.
  • A quality alert, errata publication, or field failure — the case where completeness matters most, because a missed board ships.
  • A significant price movement on a part used at volume, which changes cost models per product rather than per line.
  • A supplier acquisition, plant closure, or authorized-distribution change, any of which can quietly alter availability for every design that depends on the part.

Reach changes the decision, not just the urgency

The intuitive reading of a large blast radius is that it means move faster. Sometimes it does. Just as often it means the opposite, and the more useful framing is that reach changes which decision you are making at all.

At small reach — one BOM, one program, a modest remaining build — the cheapest answer is usually local and immediate. A bridge buy sized against remaining demand closes the issue, one owner handles it, and a central evaluation would cost more than the problem.

At large reach the economics invert. Fourteen boards across six programs cannot each run an independent alternate evaluation without producing exactly the divergence a shared decision exists to prevent, and a per-program scramble also wastes the one genuine advantage of scale: a single qualification effort that serves every affected design, and a consolidated purchase with more leverage than six separate ones. That is a slower path, deliberately chosen, and it is only available to a team that knows the reach early enough to choose it.

Reach is an input to the decision, not the decision. It tells you who has to be involved, what a coordinated response would be worth, and how much the problem is likely to cost if handled badly. What to actually do remains an engineering and commercial judgment.

Run where-used before changing lifecycle status

Marking a part NRND or end-of-life is a small edit with large downstream consequences: it can block new designs, trigger reviews, and put programs into a response workflow. Making that edit without knowing what it touches means finding out afterwards, from whoever is affected, usually in a less constructive tone.

Resolving usage first changes the sequence in three useful ways. You know which program owners to inform before they hear it secondhand. You can see whether the change conflicts with a decision another team already made and reviewed — a conflict that deserves a flag and a conversation rather than a silent overwrite. And you can record the reach as it stood, so the decision remains legible later, when the usage has moved on.

It also prevents the most common quiet error: applying a status change based on a part number that matched the digits but not the manufacturer. Reviewing the list before committing is when that gets caught.

Run where-used before approving an alternate

An alternate is approved against a use, not against a part in the abstract. A replacement that drops cleanly into nine of the eleven affected boards may be wrong on the other two for reasons that have nothing to do with the component's headline specifications — package height under a heatsink, a thermal pad the layout cannot accommodate, a supply-voltage tolerance that is comfortable in one design and marginal in another, firmware that reads a device ID, or a customer approval that names the original part explicitly.

None of those are visible from a specification comparison. Similarity ranking is a prioritization signal: it tells you which candidates deserve engineering attention first, and it is a genuine time-saver for that. It is not approval, it is not a drop-in guarantee, and it is not qualification. Engineering owns qualification, per application.

The manufacturer's own recommended replacement deserves the same treatment. It is a strong starting point and better evidence than a third-party suggestion, but it is a recommendation for the part in general, made without knowledge of your boards. Where-used is what converts "approve this alternate" into the specific and answerable question: approve it for which assemblies, under what conditions, and with what qualification evidence for each.

Run where-used before applying sourcing overrides

Sourcing overrides are the quietest of the three. When a buyer replaces an estimated lead time with a better figure from a supplier contact, or records a preferred source, the number propagates into planning assumptions across every program that uses the part — usually without anyone in those programs being aware that a number they depend on has moved.

That is often the right outcome; internal knowledge is frequently better than a market estimate. It just should not be invisible. Knowing which programs inherit the override tells you who to notify, whose planning is now based on it, and whether the figure is specific to one program's contract terms and volume rather than being generally true — a negotiated lead time at one volume tier does not transfer to a program buying a tenth as many.

It is worth keeping the distinction explicit in whatever record you keep: distributor stock, minimum order quantity, price breaks, and lead-time figures are estimates, not quotes. They are decision context refreshed at a point in time, and they age. An override should carry its source, its date, and the person who set it, so the next planner can judge how much weight it still deserves — and a discontinued part will not have a meaningful factory lead time at all, whatever a listing shows.

What makes where-used reliable

The analysis is only as good as the data underneath it, and the gaps are consistent enough to audit directly:

  • Normalized matching. Match on a normalized form of the part number so suffixes, packing codes, and reel variants cannot hide a real hit — then confirm the manufacturer, because matching digits across two manufacturers is a different part.
  • One canonical BOM set. Every BOM that exists only on someone's laptop is a hole in every where-used answer your organization produces.
  • Revision discipline. Results are only actionable if you can tell which revisions are still built, which are in service support, and which are history.
  • Retired BOMs marked as retired. Dead designs inflate the reach and make every result look worse than it is, which erodes trust in the query itself.
  • Service, spares, and repair BOMs included. They are the ones most often left out and the ones with the longest tail of obligation.
  • Approved alternates recorded on the line. A board that already has a qualified second source is exposed differently from one that does not, and that distinction should not live in a comment.
  • Near-misses surfaced rather than dropped. Lines that matched the number but not the manufacturer belong in a review list, not in silence.

How component catalogs and BOMs work together

Where-used is the link between two levels that most organizations keep separate. BOMs describe designs; a component catalog describes parts. The where-used relationship is what makes each one useful to the other: it lets a part-level fact reach the designs it affects, and it lets a design-level question be answered with part-level knowledge.

Run in one direction, it takes a supplier notice and produces a specific list of affected products with named owners. Run in the other, it takes a board about to enter layout and tells you which of its parts already carry lifecycle flags, prior evaluations, or recorded exceptions — the review that is cheapest before the design is committed and most expensive afterwards.

PCNshark builds the catalog from the BOMs you upload, so each distinct part resolves to one record showing its usage across every BOM, revision, and program alongside its lifecycle status and evidence — which is what makes the reach visible before a change is applied rather than after. What the reach means, and what to do about it, stays with your engineers and buyers.

The chain, level by level

What each hop contributes, and what it costs to skip it. The first five are the traversal itself; the last is what you need immediately after it.

Manufacturer part number
The thing that changed. Match on a normalized form so suffixes, packing codes, and reel variants do not hide a real hit, then confirm the manufacturer separately — matching digits across two manufacturers is a different part, not a match.
BOM line
One use of the part in one bill of materials: quantity, reference designators, fitted status, and any alternates already approved on that line. Quantity matters — a one-off and a forty-eight-off carry very different demand.
BOM revision
Whether the hit is on something you still build. A part on revision B that revision D designed out is history; a part on a revision still produced for service is live exposure. Skipping this hop is the most common source of inflated reach.
Assembly
The board or module the BOM describes. One shippable product often contains several, and the same assembly can appear in more than one product.
Product
What the customer actually receives. Determines who has to be told, whether a customer approval is implicated, and whether requalification is in scope.
Program
Schedule, volume, customer, and approval regime. Two programs inheriting the same part-level fact can correctly reach different responses, and the program is where the response gets owned.
Demand and inventory
Not part of the chain, but the first thing needed after it: remaining build demand, service and warranty obligations, and stock on hand or on order for each affected program. Reach without demand tells you the shape of the problem but not its size.

What a decision-grade where-used answer contains

If any of these is missing, the answer will need to be re-run before anyone is willing to act on it.

  • Every BOM containing the part, matched on a normalized part number rather than an exact string.
  • The revision of each BOM, and whether that revision is still being built or supported.
  • Quantity per assembly, so demand can be estimated rather than guessed.
  • The assemblies and shippable products each BOM rolls up into.
  • The program that owns each affected product, with a named contact.
  • Any alternates already approved on the affected lines.
  • Lines that matched the part number but not the manufacturer, listed separately for review rather than silently included or dropped.
  • The date the answer was generated — usage changes as BOMs are revised, and a decision record needs the snapshot it was made against.

Ready to put this into practice on your own BOMs?

Start your 14-day trial
§ Worked example

Example: one discontinuation, fourteen bills of materials

An illustrative case chosen because the numbers change the answer. A discontinuance notice arrives for a general-purpose microcontroller. Read from inside the BOM that surfaced it, it looks like a single-board problem with an obvious fix. Read across the catalog, it is a program-level decision with a deadline. Every figure below is invented for the example.

The change
Notice type
Product discontinuance
Component
100-pin LQFP microcontroller
Recommended replacement
Named in the notice
Last-time-buy date
14 weeks out
Where-used resolution
  1. Normalized part number matched across all maintained BOMs
  2. Matches filtered to revisions still built or supported
  3. Quantities and reference designators collected per line
  4. Assemblies rolled up to products, and products to programs
  5. Lines matching the number under a different manufacturer set aside for review
The reach
BOMs containing the part
14
Programs affected
6
Active revisions affected
3
Highest quantity per assembly
2
Programs with a build inside the window
2
Near-matches needing review
3 lines, different manufacturer

Illustrative example; all figures are invented and do not describe a specific part, organization, or notice. At one BOM in one sustaining program, a modest bridge buy closes this. At fourteen BOMs across six programs, the same notice justifies a single central alternate evaluation, a consolidated last-time-buy, and a named owner per program. The fact did not change; the reach did — and the reach was only knowable by looking outside the BOM that raised the alarm.

§ FAQ

Frequently asked questions

01What is where-used analysis?
A query that takes a component and returns every place it is used: the BOM lines that consume it, the revisions of those BOMs, the assemblies and products they roll up into, and the programs that own them. It answers the question a single bill of materials structurally cannot — where else does this part appear.
02Is where-used the same as a BOM explosion?
They are inverses. A BOM explosion works top-down, expanding an assembly into every part it contains. A where-used query works bottom-up, starting from a part and finding every assembly that contains it. Both traverse the same relationships; obsolescence and change management need the bottom-up direction, because the event starts at the part.
03Why do where-used results miss parts?
Most often part-number identity: the same component appears with different suffixes, packing codes, or grade letters across BOMs, so an exact string match silently under-reports. After that come BOMs that exist only on individual machines, stale revisions never marked as retired, service and spares BOMs left out of the search, and alternates recorded in a comment rather than a field.
04How often should where-used analysis be run?
Event-driven for anything that changes a part's status — notices, quality alerts, allocation, supplier changes — and periodically as a review across the parts already flagged, since usage changes even when the part does not. A part with no exposure last quarter can be designed into a new board this quarter without anyone re-checking the flag.
05Does a larger blast radius always mean acting faster?
No. A large radius often argues for a slower, coordinated response: one central alternate evaluation serving every affected design, and one consolidated purchase rather than six competing ones. Small reach usually justifies a fast local fix. Reach tells you which kind of decision you are making and who needs to be in it; the urgency comes from the deadline in the notice and the demand behind it.
06Should service and spares BOMs be included?
Yes, and they are the ones most often forgotten. Service obligations frequently outlast production by years, which means a part designed out of every current product can still carry real exposure. Leaving those BOMs out of the search produces an answer that looks clean and undersizes the response.
§ Sources

Sources & references

  1. 01Texas Instruments — Product change notification (JEDEC J-STD-046 / J-STD-048)The notice formats and change categories that trigger a where-used query.
  2. 02Texas Instruments — Product life cycle (ACTIVE, NRND, LAST TIME BUY, OBSOLETE)Lifecycle stages published per part by the manufacturer, independent of which BOMs consume it.
  3. 03IEC 62402 — Obsolescence managementThe standard's resolution strategies assume you can establish which products are affected.
  4. 04GIDEP — Government-Industry Data Exchange ProgramPart-level alerts distributed between organizations; each recipient still has to determine its own exposure.
Last reviewed

See the reach before you commit to the response

Upload the BOMs your team already maintains and each distinct part resolves to one record showing where it is used — across every BOM, revision, and program — alongside its lifecycle status and the evidence behind it. Start a trial, or book a 20-minute workflow review with a sanitized BOM and a notice you are working right now.

Start your 14-day free trial on Starter or Team. A payment method is required; cancel before the trial ends to avoid being charged. Scale is a paid plan and starts immediately rather than with a trial.