If you operate commercial motor vehicles, DOT compliance isn't optional paperwork you can push to the bottom of the pile. It's the difference between a clean roadside inspection and a six-figure penalty, between an active operating authority and a fleet that gets shut down overnight. The Federal Motor Carrier Safety Administration (FMCSA) issues violations every single day to carriers who assumed they were "mostly compliant," and "mostly" is exactly where audits find their teeth.
This guide breaks down what DOT compliance actually requires, the records you need to keep, the deadlines that trip people up, and how to build a safety management system that survives an audit without a last-minute scramble. Whether you run one truck or a hundred, the fundamentals are the same—and getting them right protects your business, your drivers, and everyone sharing the road.
The Department of Transportation (DOT) sets the safety standards for commercial transportation in the United States, and the FMCSA enforces those rules for motor carriers specifically. When people say "DOT compliance," they're usually referring to the full body of regulations found in the Federal Motor Carrier Safety Regulations (FMCSRs), which live in Title 49 of the Code of Federal Regulations.
Compliance covers a wide territory: who you hire and how you qualify them, how long they can drive, the condition of your equipment, how you test for drugs and alcohol, and how meticulously you document all of it. The regulations apply to most carriers operating vehicles over 10,001 pounds, transporting hazardous materials in placardable quantities, or carrying enough passengers to require a commercial license.
The core idea is accountability. The DOT assumes that if you can't produce a record proving something happened, it didn't happen. A driver might have a spotless safety history, but if his qualification file is missing a single required document, that's a safety violation. This documentation-first mindset is the single most important thing to internalize, because it reshapes how you think about everyday operations.
You generally fall under FMCSA jurisdiction if you operate a vehicle in interstate commerce that meets any of these thresholds: a gross vehicle weight rating of 10,001 pounds or more, designed to transport 9 or more passengers (including the driver) for compensation, designed to carry 16 or more passengers without compensation, or transporting hazardous materials requiring placards.
Intrastate carriers—those operating only within a single state—follow state-level rules that often mirror the federal regulations closely but can differ in important details. If you cross state lines even occasionally, federal rules apply, and many carriers underestimate how easily a "local" operation slips into interstate territory.
Civil penalties for DOT violations are steep and adjusted upward almost every year for inflation. Recordkeeping violations can run into the thousands per instance, and because violations are often counted per record or per day, totals escalate fast. Serious safety violations—like knowingly using a driver who failed a drug test—can reach tens of thousands of dollars and trigger an unsatisfactory safety rating.
Beyond fines, a poor safety record raises your insurance premiums, damages your standing with shippers who screen carrier safety scores, and can ultimately lead to an out-of-service order that halts operations entirely. Compliance is cheaper than the alternative every single time.
The Driver Qualification (DQ) file is where most audits begin, and where most carriers lose points. Each driver must have a complete file before they ever operate a commercial vehicle, and that file must be maintained throughout their employment and retained for three years after they leave.
A compliant DQ file includes the driver's application for employment, a copy of the motor vehicle record (MVR) from each state where they held a license in the past three years, the safety performance history from previous DOT-regulated employers, a copy of their medical examiner's certificate, the road test certificate or equivalent, and the annual review of driving record with the certification of violations.
The pieces that get missed most often are the annual MVR review and the annual driver's certification of violations. These have to happen every twelve months, and the documentation has to be in the file. A driver who's been with you for five years should have five annual reviews on record. If two are missing, that's two violations the auditor will note.
Every CDL driver must be medically certified by an examiner listed on the FMCSA National Registry of Certified Medical Examiners. The medical card has an expiration date, and a driver operating on an expired card is operating illegally—full stop. You need a tracking system that flags these expirations well in advance, because a lapsed medical certificate sidelines the driver until it's renewed.
For CDL holders, the medical certification status is also reported to the state licensing agency and tied to the license itself. Keeping a copy in your DQ file and monitoring the expiration is your responsibility regardless of what the state has on record.
Hours of Service (HOS) rules limit how long drivers can operate to combat fatigue, one of the leading causes of serious truck crashes. The rules are detailed, but the headline limits for property-carrying drivers are an 11-hour driving limit within a 14-hour window after coming on duty, a required 30-minute break after 8 cumulative hours of driving, and a 60/70-hour limit over 7 or 8 consecutive days.
Drivers can restart their weekly clock with 34 consecutive hours off duty. There are also flexibility provisions like the sleeper berth split and a short-haul exception for drivers operating within a 150 air-mile radius who meet specific conditions. Knowing which exceptions apply to your operation can legitimately expand your drivers' available hours.
Most carriers are now required to use Electronic Logging Devices (ELDs) to record driving time automatically. The ELD mandate replaced paper logs for the majority of drivers, and the device must be registered and self-certified on the FMCSA website. Drivers still need to manage their duty status accurately—an ELD records driving time but relies on the driver to correctly log on-duty-not-driving, off-duty, and sleeper berth time.
Common HOS violations include form-and-manner errors, false logs, driving beyond the 11- or 14-hour limits, and failing to retain supporting documents. Auditors compare ELD records against fuel receipts, toll records, and dispatch logs to catch falsification, so the records have to tell a consistent story.
Any carrier with CDL drivers must maintain a DOT drug and alcohol testing program, and this is an area where the rules are unforgiving. The program must include six types of testing: pre-employment, random, post-accident, reasonable suspicion, return-to-duty, and follow-up testing.
Random testing happens at rates the FMCSA sets annually—currently 50% of the average driver count for controlled substances and 10% for alcohol. Drivers must be selected using a scientifically valid random method, and the selections have to be spread reasonably throughout the year. You can't run all your random tests in December to hit the quota.

The FMCSA Drug and Alcohol Clearinghouse is a central database that tracks drug and alcohol violations for CDL drivers. Before you hire a driver, you must run a pre-employment query, and you must run annual queries on every current driver. Drivers have to register and grant consent for full queries. Failing to conduct Clearinghouse queries is now one of the most commonly cited violations because it's relatively new and easy to overlook.
If a driver fails or refuses a test, they're immediately prohibited from performing safety-sensitive functions until they complete the return-to-duty process with a Substance Abuse Professional. Putting a prohibited driver back behind the wheel is one of the most serious violations a carrier can commit.
Your equipment has to be safe, and you have to prove it's been maintained. The regulations require systematic vehicle inspections, repairs, and maintenance under your control, plus retention of records documenting that work. You need to keep maintenance records for the period the vehicle is under your control and for six months after.
Drivers are required to perform pre-trip inspections and complete a Driver Vehicle Inspection Report (DVIR) when defects are found. Any defect affecting safe operation must be repaired before the vehicle goes back out. On top of that, every commercial vehicle needs a periodic (annual) inspection by a qualified inspector, with documentation kept on file or on the vehicle.
Roadside inspections feed directly into your Compliance, Safety, Accountability (CSA) score through the Safety Measurement System. Violations are weighted by severity and recency, and they accumulate across seven categories called BASICs—covering unsafe driving, HOS compliance, vehicle maintenance, controlled substances, and more.
A high CSA score in any category increases your odds of being selected for an intervention or audit. It also signals risk to shippers and insurers. Cleaning up the small, frequent violations—a worn tire, a burned-out lamp, a missing reflector—does more for your score over time than people expect, because those minor citations add up across an entire fleet.
The carriers that sail through audits don't have superhuman memories—they have systems. The goal is to make compliance the default outcome of your normal workflow rather than a separate task you have to remember.
Start by assigning clear ownership. Someone needs to be responsible for DQ files, someone for HOS monitoring, someone for the testing program. In a small operation that might all be one person, but the responsibility has to be explicit. Next, build a calendar of recurring deadlines: annual MVR reviews, medical card expirations, annual Clearinghouse queries, periodic vehicle inspections, and the random testing schedule. Automate the reminders.
Finally, conduct your own mock audits. Pull a handful of driver files at random and check them against the requirements as if you were the auditor. Do the same for HOS records and maintenance files. Finding your own gaps on a quiet Tuesday is infinitely better than having an FMCSA investigator find them. Many carriers run a self-audit quarterly, and the practice alone surfaces problems while they're still cheap to fix.
A good document retention policy ties it all together. Know how long each record type must be kept, store everything where it can be retrieved quickly, and back up digital records. When an auditor asks for a specific driver's file from eighteen months ago, the ability to produce it in minutes rather than days tells them everything they need to know about how you run your operation.
DOT regulations evolve. Random testing rates change, penalty amounts adjust for inflation, and new requirements like the Clearinghouse get phased in over time. Carriers who treat compliance as a one-time setup eventually fall behind without realizing it.
Subscribe to FMCSA updates, check your registration and authority status periodically, and review your policies at least once a year against the current regulations. Industry associations and qualified compliance consultants can be worth the investment, especially as your fleet grows and the administrative burden multiplies. The regulatory landscape rewards carriers who stay engaged and punishes those who set it and forget it.
While the FMCSA doesn't mandate a specific frequency for internal self-audits, best practice is to conduct a thorough internal review at least quarterly, with spot checks happening more frequently. A quarterly cadence lets you catch issues like expiring medical cards, missing annual MVR reviews, or gaps in Clearinghouse queries before they become citable violations during an actual FMCSA audit. The most disciplined carriers build mini-audits into monthly routines—reviewing a rotating sample of driver qualification files, comparing ELD records against supporting documents, and verifying maintenance records are current. The reasoning is simple: violations compound over time, and many are counted per day or per record, so a problem you catch in week three costs almost nothing to fix, while the same problem discovered during a federal audit a year later could represent dozens of stacked violations. Treat your self-audit schedule as seriously as you'd treat a real one, document that you performed it, and you'll dramatically reduce both your risk and your stress when the official notice arrives.
These are two distinct DOT processes that carriers frequently confuse. A new entrant safety audit happens within the first 12 months after you receive your operating authority, and it's largely educational in nature—the FMCSA wants to confirm that you understand the safety regulations and have basic management systems in place. It focuses on whether you have the required programs (driver qualification, drug and alcohol testing, HOS recordkeeping, vehicle maintenance) rather than digging deeply into every record. A compliance review, by contrast, is a much more rigorous, comprehensive investigation that can happen at any point and is often triggered by elevated CSA scores, a serious crash, or a complaint. Compliance reviews result in a safety rating—satisfactory, conditional, or unsatisfactory—and can carry significant civil penalties. The key takeaway is that passing your new entrant audit is the beginning, not the end. Many carriers relax after clearing that first hurdle, only to find that a compliance review years later applies far more scrutiny than they were prepared for.
Yes, absolutely. The size of your fleet does not exempt you from the DOT drug and alcohol testing requirements. If you employ even a single CDL driver operating in interstate commerce, you must have a complete testing program that includes pre-employment, random, post-accident, reasonable suspicion, return-to-duty, and follow-up testing. The challenge for small carriers is the random testing component, because hitting the required selection rates with a tiny driver pool is statistically awkward. The standard solution is to join a consortium or third-party administrator (C/TPA) that pools your drivers with those of other small carriers, allowing random selections to be conducted across a larger group while keeping you compliant. The C/TPA handles selection, scheduling, and recordkeeping for a manageable fee. Skipping the program because you're small is one of the riskiest gambles a carrier can take—a single audit finding here can produce serious penalties and an immediate hit to your safety rating, and the cost of a consortium membership is trivial by comparison.
Retention periods vary by record type, and knowing them is essential because auditors will ask for historical records, not just current ones. Driver qualification files must be retained for the duration of employment plus three years after the driver leaves. Drug and alcohol testing records have varying retention periods—negative results are kept for one year, while positive results, refusals, and certain other records must be retained for five years. Hours of Service records and supporting documents are generally kept for six months. Vehicle maintenance records are retained while the vehicle is under your control and for six months afterward. As for storage, electronic recordkeeping is fully acceptable and strongly recommended, provided the records are accurate, accessible, and retrievable. The best systems store documents in an organized, searchable format with automated backups, so that producing a specific record during an audit takes minutes rather than a frantic search through filing cabinets. Whatever system you choose, the test is simple: can you retrieve any required record quickly and prove it's authentic?
First, don't panic—but do act quickly and methodically. The notice will typically specify what's being reviewed and give you a window to prepare or gather records, so read it carefully to understand the scope and the timeline. Begin by assembling the records the auditor is likely to request: driver qualification files, drug and alcohol testing documentation including Clearinghouse query records, HOS and ELD records with supporting documents, and vehicle maintenance and inspection files. Conduct an honest internal review against the requirements and identify any gaps before the auditor does, because in some cases you can correct documentation deficiencies or at least be prepared to explain them transparently. Resist any temptation to fabricate or backdate records—falsification turns a fixable paperwork problem into a serious legal one. If your operation is large or the stakes are high, consider engaging a qualified DOT compliance consultant or attorney to guide you through the process. Throughout the audit, be cooperative, organized, and honest; auditors respond far better to a carrier who acknowledges a gap and shows a plan to fix it than to one who appears evasive or disorganized.