What to expect in a DOT compliance audit, and what sets one off
For a carrier past its new entrant period, a DOT audit rarely comes out of nowhere. It usually follows something in your own safety data, and how it ends depends on what your records show.
Written by Rigo Diaz
DOT compliance audits in numbers
A DOT compliance audit, for an established carrier, is an FMCSA investigation: offsite, onsite focused, or onsite comprehensive. It usually follows a CSA alert, a complaint, or a rating request. An investigator samples your driver, hours, maintenance, testing, and accident records, and the result can be a Notice of Violation, a civil penalty, or a safety rating.
Most carriers picture a DOT audit as a knock on the door with no warning. In practice, FMCSA chooses who to investigate mostly from data the carrier can see first: its own inspection results, crashes, and past findings.
I spent more than six years in risk management before I founded Simplex, and I have led it for more than 25 years since. This guide covers the audit an established carrier faces: what triggers it, how it runs, what the investigator asks for, and how each possible outcome affects your business.
The full briefing, read aloud
7 chapters. Select one to jump to it.
Generated with AI text-to-speech from this article's key insights, in order, rather than reading it word for word. Chapter times come from a transcript of the audio. The article itself was written and reviewed by Rigo Diaz.
Key takeaways
It is an investigation, not the new entrant audit
Established carriers get offsite, onsite focused, or onsite comprehensive investigations. Only onsite investigations can produce a safety rating.
Your own data usually triggers it
A BASIC at or above its intervention threshold, recent acute or critical violations, complaints, or a rating change request can all lead to one.
Investigators look for patterns
A critical violation counts when it shows up in at least 10% of the records checked and more than once. Acute violations count on a single instance.
There is no pass or fail
An investigation can end in a cooperative safety plan, a Notice of Violation, a Notice of Claim with penalties, or a safety rating.
Deadlines start with the paperwork
You have 48 hours to produce records kept at another office and 30 days to answer a Notice of Claim.
In this articleContents
What is a DOT compliance audit?
A DOT compliance audit is what most carriers call an FMCSA investigation: a safety investigator examines your records to decide whether your safety management controls meet the federal standard. The regulation calls it a compliance review, and 49 CFR 385.3 lists what it covers: hours of service, maintenance and inspection, driver qualification, CDL requirements, financial responsibility, accidents, and hazardous materials.
It is not the new entrant safety audit. That audit checks a new carrier during its first 18 months and never produces a safety rating. If you are still in that window, start with our new entrant safety audit checklist instead.
What are the three types of DOT audit?
FMCSA runs three kinds of investigation, and only the onsite ones can rate you.
| Investigation | How it works | Possible safety rating |
|---|---|---|
| Offsite | The investigator requests copies of documents and reviews them remotely | None, though penalties are possible |
| Onsite focused | At your place of business, on specific problem areas, with possible employee interviews and vehicle inspections | Conditional or Unsatisfactory, or no rating |
| Onsite comprehensive | At your place of business, covering your entire safety operation | Satisfactory, Conditional, or Unsatisfactory |
An offsite investigation can be converted into an onsite one. The investigator may work for FMCSA or for a state partner agency.
What triggers a DOT compliance audit?
Most DOT compliance audits are triggered by your own safety data. FMCSA's Safety Measurement System ranks carriers every month using two years of roadside inspections and crash reports plus investigation results, and it flags a BASIC when your percentile reaches that BASIC's intervention threshold:
- Unsafe Driving, Crash Indicator, Hours-of-Service Compliance: 65% for most carriers, 60% for hazmat carriers, 50% for passenger carriers
- Vehicle Maintenance, Controlled Substances/Alcohol, Driver Fitness: 80%, 75%, and 65%
- Hazardous Materials Compliance: 80% for every carrier type
The data is not the only trigger. FMCSA also prioritizes carriers with acute or critical violations found in an investigation within the past 12 months, and it weighs complaints and federal mandates. Under 49 CFR 385.3, a compliance review can also follow your own request to change a safety rating.
Carriers who log in can see their complete SMS results, and our guide to the 7 BASICs explains what feeds each one. If a BASIC is close to its threshold, you already know where an investigator would start.
Does a warning letter come first?
Often, but not always. A warning letter names your problem areas and needs no direct reply. FMCSA keeps watching your data, and if it does not improve, the next step is usually an investigation.
But FMCSA says it may use any intervention at any time, depending on the type and severity of the violation. Treat a warning letter as a deadline you set for yourself, not a grace period.
What happens during a DOT audit?
During a DOT audit, the investigator samples your records, looks for patterns, and works out why each problem happened. In an offsite investigation that happens remotely from the copies you send. Onsite, the investigator may also interview employees and inspect vehicles.
FMCSA's method is the Safety Management Cycle. It looks past the violation to the process behind it: your policies and procedures, roles and responsibilities, qualification and hiring, training and communication, monitoring and tracking, and the action you take when something goes wrong. Expect questions about how your operation runs, not only about the paperwork.
How do investigators count violations?
One bad record does not automatically become a finding against your controls. A critical violation counts as a pattern when it appears in at least 10% of the records checked and occurs more than once.
Acute violations are different: one instance is enough. FMCSA's examples are using a disqualified driver and using a driver known to have tested positive for a controlled substance.
Where must your records be?
If you keep records at a regional office or terminal, 49 CFR 390.29 requires you to make them available at your principal place of business, or wherever the investigator specifies, within 48 hours of the request. Saturdays, Sundays, and federal holidays don't count.
What records does a DOT audit review?
A DOT audit reviews the records behind each area of the compliance review. FMCSA's own Carrier Compliance Questionnaire, a free 60-question self-check, asks whether you can produce:
- Records of duty status for every driver for the past 6 months
- A complete driver qualification file for every driver, with a driving record obtained within the last 12 months
- Maintenance records for every unit, and annual inspection records covering the past 14 months
- Driver vehicle inspection reports for the past 90 days
- Random drug and alcohol test results for the last 12 months, plus your Clearinghouse registration and queries
- A current accident record, and current lists of your vehicles and drivers
- Proof of insurance and an up-to-date registration
For every file and retention period, use our DOT compliance checklist. For driver files specifically, our DQF checklist goes item by item.
What happens if you fail a DOT audit?
An investigation has no pass or fail grade. It ends in one or more outcomes, and each has its own clock.
| Outcome | What it means | Your move |
|---|---|---|
| Cooperative Safety Plan | A voluntary plan you build with the investigator to fix safety problems | Carry it out. It can't replace a Notice of Claim |
| Notice of Violation | Violations serious enough for formal action, but not for penalties | Correct them and send evidence, or contest them |
| Notice of Claim | FMCSA proposes a civil penalty | Reply in writing within 30 days: pay, contest, or seek arbitration |
| Safety rating | Issued only after an onsite investigation, with written notice within 30 days | A proposed Conditional or Unsatisfactory becomes final after 45 or 60 days |
The costly mistake is ignoring a Notice of Claim. Under 49 CFR 386.14, a missed reply can become a default final order, and the default admits every fact alleged. FMCSA also says a penalty may be reduced if you carry out the corrective action it recommends. Our guide to DOT fines and penalties covers the amounts.
A final Unsatisfactory rating brings an order placing your operations out of service. Our guide to DOT safety ratings explains how ratings are decided, appealed, and upgraded.
The findings also stay in your data. Acute and critical violations from an investigation keep you prioritized for further interventions for 12 months, so the next audit can start from the last one.
How do you prepare for a DOT compliance audit?
Prepare for a DOT compliance audit by finding your problems before your data does. Five habits cover most of it.
Step 1: Check your BASICs every month
The SMS updates monthly. Compare each BASIC with its threshold, and challenge inspection or crash data you believe is wrong through DataQs.
Step 2: Run a mock audit with FMCSA's questionnaire
Answer every question with a document, not a yes. A question you can't prove on paper is a likely finding.
Step 3: Sample your own records
Each month, pull a few logs, driver files, and maintenance files at random, the way an investigator would. One error is a correction. The same error in several files is the start of a pattern.
Step 4: Fix the process behind each gap
Ask why it happened: no policy, no owner, no training, or nobody checking. That is the question the Safety Management Cycle asks, and the answer is what keeps a gap from coming back.
Step 5: Keep records where you can reach them
If files live at a terminal, name who delivers them within 48 hours. Keep your MCS-150 registration current too, since the questionnaire asks about it.
How Simplex helps you get ready for a DOT compliance audit
An investigation tests the records you already have. We help you test them first, and respond when FMCSA finds something.
DOT audit support
Our audit guidance and support team explains what the investigator will ask for and helps you organize the records.
Mock audits and monitoring
Our compliance programs include CSA monitoring, DataQs support, and a DOT mock audit with a risk management plan.
The programs an audit samples
Our DOT safety compliance services cover driver qualification files, drug and alcohol testing, hours of service, and maintenance records.
Frequently asked questions
What triggers a DOT compliance audit?+
What happens if you fail a DOT audit?+
Can a DOT audit lead to fines?+
Is a DOT compliance audit the same as a new entrant safety audit?+
What is a mock DOT audit?+
Where this information comes from
The requirements below come from federal regulation and FMCSA's CSA program materials, checked on October 19, 2026.
-
1
eCFR — 49 CFR 385.3
What a compliance review covers, why one is conducted, and that safety audits do not produce ratings.
-
2
FMCSA CSA — Interventions
The three investigation types, Cooperative Safety Plans, Notices of Violation and Claim.
-
3
FMCSA Safety Planner — 3.4 Addressing Carriers that Pose a Safety Hazard
Which investigations can rate you, conversions, and reduced penalties for corrective action.
-
4
FMCSA — SMS Methodology, version 3.21 (June 2026)
BASIC intervention thresholds, acute and critical violations, and the 10% pattern rule.
-
5
FMCSA — Carrier Compliance Questionnaire
The 60-question self-check and the record time frames it asks about.
-
6
eCFR — 49 CFR 390.29
The 48-hour rule for producing records kept at another office.
-
7
eCFR — 49 CFR 386.14
The 30-day reply to a Notice of Claim, its options, and default.
-
8
eCFR — 49 CFR 385.11
Notice of a safety rating within 30 days and when a proposed rating becomes final.
Written by
Rigo Diaz
Founder & CEO, Simplex Group
Founder and CEO of Simplex Group, with more than 25 years leading the company and helping trucking entrepreneurs navigate compliance, insurance, and the day-to-day demands of running a carrier. Before founding Simplex, he spent more than six years in risk management, experience that continues to shape how he approaches insurance, compliance, and carrier risk today.
Published · Updated
Related articles and services
Your data tells FMCSA where to look. Look there first.
An established carrier is rarely picked at random. The BASICs, the past findings, and the records an investigator will sample are all things you can check today.
If you want a mock audit before FMCSA runs the real one, or help answering what an investigation found, talk to our team.