The Anatomy of a DOT Compliance Review: What an Auditor Examines in Order

When an FMCSA compliance investigator walks through your door, they are not improvising. The DOT compliance review audit process follows a structured, sequenced protocol that is codified in the FMCSA’s compliance review procedures and tied directly to the six Behavior Analysis and Safety Improvement Categories (BASICs) of the SMS system. Understanding the sequence — not just the checklist — is the operational intelligence that separates carriers who pass from those who collect findings.

This post breaks down the anatomy of a compliance review in the order it actually occurs, based on the FMCSA Audit Protocol. Every phase is documented. Every document request is anticipated. If you want the preparation framework before the auditor arrives, start with our DOT audit checklist covering how trucking companies prepare for FMCSA compliance reviews.

Why the DOT Compliance Review Audit Process Begins Before the Auditor Arrives

Trigger Analysis and Pre-Review Intelligence Gathering

FMCSA compliance investigators do not select carriers at random. By the time a review is scheduled, the agency has already constructed a data profile on your operation. The most common triggers include adverse SMS BASIC percentile scores (generally above 65th percentile in any category), crash involvement, roadside inspection Out-of-Service rates exceeding national averages, and complaints from drivers or the public.

For a full breakdown of how carriers end up on the review calendar, see our analysis of DOT compliance audit triggers. The critical operational point: by the time you receive notification, FMCSA has already reviewed your roadside inspection history, crash data, and registration records from FMCSA’s Data and Statistics portal. The auditor arrives with a hypothesis. Your records either confirm or refute it.

Phase 1 — General Information and Operating Authority Verification

Registration, Insurance, and Authority Scope

The compliance review opens with verification of operating authority under 49 CFR Part 365 and insurance filings under 49 CFR Part 387. Specifically, the investigator will confirm:

  • MCS-90 endorsement on file for the correct liability minimum ($750,000 for general freight; $5,000,000 for hazmat)
  • BMC-91X cargo insurance filing, if applicable
  • UCR registration compliance for the current registration year
  • Operating authority scope — whether actual operations match the commodity and operation type on the MC number

Discrepancies between authority type and actual operations are a finding that cascades into other phases. A carrier operating as a for-hire common carrier under contract authority creates regulatory exposure that compounds across every subsequent document request.

Phase 2 — Driver Qualification File Review (49 CFR Part 391)

The Document Stack That Breaks Most Carriers

Driver Qualification (DQ) files represent the single highest-volume document review in a compliance examination. Each file must contain, at minimum: a completed application for employment, the motor vehicle record (MVR) from every state of licensure in the prior three years, a medical examiner’s certificate (current and not expired), road test or equivalent, and annual review of driving record.

The investigator will pull a statistical sample — typically between five and ten driver files, depending on fleet size — and score deficiencies against 49 CFR 391.51. Missing or expired medical certificates (violation code 391.41(b)(3)) and absent annual MVRs (391.25) consistently rank among the top DQ findings in FMCSA audit data.

For carriers with international drivers, English proficiency enforcement under 49 CFR 391.11(b)(2) is verified during this phase. An investigator who finds a driver who cannot read and respond to traffic signs in English will treat that as a driver qualification deficiency, not a roadside issue only.

Phase 3 — Hours of Service Records (49 CFR Part 395)

ELD and Supporting Document Correlation

Hours of service is the phase where data correlation becomes critical. Under the ELD mandate (49 CFR Part 395.8 and 395.22), the investigator will request ELD records — typically covering a random 30-day sample period — and cross-reference them against:

  • Bills of lading and CMRs for origin/destination verification
  • Fuel receipts and toll records for geographic position confirmation
  • Payroll records for on-duty time not reflected in ELD logs

Missing supporting documents are themselves a violation under 395.8(k). Hours of service findings that reveal systematic false log entries can elevate a compliance review to a Notice to Abate or, in egregious cases, an Imminent Hazard Order. The true cost of an Out-of-Service violation is measurable in CSA points, but HOS falsification findings compound that exposure significantly.

Phase 4 — Vehicle Maintenance Records (49 CFR Part 396)

Systematic Maintenance Program Documentation

The investigator evaluates whether the carrier operates a systematic inspection, repair, and maintenance program under 49 CFR 396.3. This is not a pass/fail on vehicle condition — it is an evaluation of the program itself. Required documentation includes:

  • Annual inspection records for each CMV (396.17), with the inspection report retained for 14 months
  • Driver Vehicle Inspection Reports (DVIRs) under 396.11, retained for three months
  • Repair documentation showing defects were corrected and signed off before the vehicle returned to service
  • Lubrication and PM schedules demonstrating systematic rather than reactive maintenance

Missing annual inspections on even a single vehicle in the fleet sample constitute a 396.17 violation. High-severity defects found during DVIRs that were not repaired before the next dispatch are among the most serious findings in this phase.

Phase 5 — Accident Register and Hazardous Materials (49 CFR Parts 390 and 177)

Crash Register and HazMat Program Verification

Every carrier subject to the FMCSRs must maintain an accident register under 49 CFR 390.15 covering crashes for the prior three years. The register must include date, location, driver name, number of injuries, fatalities, and whether a hazardous materials spill occurred. Absence of the register — or a register that omits required fields — is a direct finding.

For carriers transporting hazardous materials, this phase expands into HazMat program verification: shipping paper compliance under 49 CFR 172.200, placarding under Part 172 Subpart F, and driver HazMat training records under 172.704. This is a domain where new entrants are particularly vulnerable — for a data-driven analysis of where new entrants fail most often, see our review of why new entrants fail their safety audit.

Scoring and Determination

Following document review, the investigator assigns a safety rating — Satisfactory, Conditional, or Unsatisfactory — based on findings across all six BASICs, weighted by severity and pattern. Carriers rated Unsatisfactory must demonstrate corrective action within 45 to 60 days or face operating authority revocation. A Conditional rating requires a corrective action plan. The full FMCSA compliance review framework details rating criteria and appeal rights.

The five phases above account for over 90% of findings in a standard compliance review. The operational lesson is straightforward: auditors follow a protocol, and your preparation should mirror that protocol exactly.

Prepare for your next compliance review: DOT Audit Preparation Bundle — The Trucker Codex

Data sourced from FMCSA Audit Protocol and FMCSA public records. Verify current enforcement thresholds at fmcsa.dot.gov.

Written on April 3, 2026