The DOT Audit Letter Arrived: What to Expect and What to Bring

The letter — or the email, or the phone call — says the Federal Motor Carrier Safety Administration is scheduling your new entrant safety audit. If your stomach dropped, read this first: the audit letter is not an accusation. Every carrier that registers for interstate authority gets one. Under 49 CFR §385.307, FMCSA audits every new entrant during its 18-month monitoring period, once you've been operating long enough to have records worth reviewing — generally at least three months in. You didn't get flagged. You got scheduled.

What the letter is is a deadline with a document list attached. This post covers the window between the letter and the audit: what the notice tells you, exactly which records the auditor will ask for, how the offsite upload process works, and how to spend the two to four weeks you have. If you want the full month-by-month preparation program that starts on day one of operations, that's the 12-month audit timeline — this post is for the carrier whose timeline just collapsed to a few weeks.

First, the two mistakes that end companies

Before the document list, the two responses that turn a routine audit into a revocation:

Ignoring it. Under 49 CFR §385.337, a new entrant that refuses to permit a safety audit gets written notice that its registration will be revoked unless it agrees in writing, within 10 days of the notice date, to permit the audit. No agreement, and revocation plus an out-of-service order take effect on day 11. Not responding to scheduling contact is how carriers back into this provision without ever intending to "refuse" anything. Answer the letter.

Assuming a no-records operation can wing it. The audit is a records review. Per §385.307(c), all records and documents required for the audit "shall be made available for inspection upon request." An auditor cannot credit a drug and alcohol program you describe but can't document, and several missing-program findings are automatic failures — a single confirmed violation, no scoring involved. The failed-audit post walks the full §385.321(b) automatic-failure list; the short version is that the drug and alcohol testing program, insurance, CDL validity, and out-of-service repairs are all single-occurrence tripwires.

What the letter tells you

Read the notice twice, then extract four things:

1. The format. Audits run either onsite — §385.315 says generally at your principal place of business — or offsite, which FMCSA now uses heavily: you upload documents to the agency's New Entrant Web System (NEWS) and complete the audit remotely with a certified auditor (§385.313).
2. The date or deadline. Onsite audits have an appointment date. Offsite audits have a document-submission deadline. Both are commitments; treat a document deadline with the same seriousness as an auditor standing in your office.
3. The document request list. The specific records requested for your operation. The generic version is below, but the letter controls — if it asks for something not on the standard list, produce it.
4. The auditor's contact information. You'll use it — to confirm receipt, to ask clarifying questions, and to flag anything you genuinely cannot produce in time. Auditors answer questions; per §385.309, part of the audit's stated purpose is educational and technical assistance. Asking "should the ELD file cover the drivers you named or all drivers" reads as a carrier taking the audit seriously, not as weakness.

While you're at it, confirm your contact information in your FMCSA registration is current. Offsite audit correspondence goes to the addresses on file; a stale email on your MCS-150 is how carriers miss deadlines they never knew existed. (Our MCS-150 guide covers fixing that.)

What the audit covers — and how it's scored

Per §385.311, the audit reviews your safety management systems and a sample of required records across driver qualification, driver duty status, vehicle maintenance, the accident register, and controlled substances and alcohol testing — plus insurance and general operating requirements.

The scoring mechanics live in Appendix A to Part 385 and are worth 60 seconds of your attention, because they tell you where the real risk sits. Your compliance is grouped into six factors: General (Parts 387/390), Driver (Parts 382/383/391), Operational (Parts 392/395), Vehicle (Parts 393/396 plus 12 months of inspection data), Hazardous Materials, and Accident (your recordable-accident rate). Each violation of an acute regulation costs 1.5 points; each critical violation costs 1 point. Three or more points in a factor means that factor fails. Fail three or more factors and the audit discloses inadequate safety management controls — plus the sixteen §385.321(b) violations that fail the audit on their own, one occurrence, no arithmetic.

Two Appendix A details small carriers miss: if you've had at least three roadside inspections in the past 12 months and your vehicle out-of-service rate is 34% or higher, that alone adds a point to the Vehicle factor. And two or more recordable accidents in 12 months brings your accident rate into scoring (the threshold is 1.5 recordable accidents per million miles, 1.7 for carriers operating entirely within a 100 air-mile radius).

One reassurance while you're bracing: per §385.317, the safety audit does not produce a safety fitness determination. There is no Satisfactory/Conditional/Unsatisfactory rating riding on this. It is pass/fail, and its whole question is whether your basic safety management controls exist and function.

The document list

This list follows FMCSA's own Safety Audit Resource Guide — the document the agency publishes so carriers know what auditors typically request. Your letter may trim or add items; the letter controls.

Driver documents

The driver items above live in the driver qualification file you were required to build at hire — application, previous-employer inquiries, road test, MVRs, medical certificate, per §391.51. If your DQF has gaps, the DQF build guide is the item-by-item repair manual, and the free DQF completeness checker will score a file in about two minutes.

Vehicle documents

Maintenance records beyond the annual inspection — your §396.3 maintenance files and DVIRs with defect corrections — aren't always on the standard offsite request list, but they're squarely within the audit's scope and an onsite auditor can ask for them. Have them assembled either way; the maintenance file guide covers the file structure.

Carrier and program documents

If any row in those tables made your stomach drop again, run the free audit readiness check today — it scores the same areas the audit reviews, automatic-failure items flagged, in 13 questions, and hands you the gap list in writing while you still have weeks to close it.

If your audit is offsite: how the upload actually works

Offsite audits run through FMCSA's New Entrant Web System (NEWS), which you access with the same Login.gov credentials as your FMCSA Portal account. If you've never set up Portal access, do it the day the letter arrives — account setup requires your USDOT number and PIN, and chasing a forgotten PIN the week documents are due is a self-inflicted emergency.

Practical mechanics worth knowing before you start:

• ELD records transfer electronically, not as printouts. Your ELD can send via web service using an output-file comment in the format NEWS-xxxxx — the unique identifier is provided when your audit starts — or you can upload the data-transfer file directly. FMCSA's instructions are explicit: do not print and fax ELD files.
• Upload legible, complete, clearly named files. The auditor sees exactly what you send. unit2-annual-inspection-2026.pdf gets credited; scan_0043.pdf sideways and cropped gets a follow-up request, and follow-ups burn your calendar.
• Meet the stated deadline, and communicate early if you can't. A carrier that contacts the auditor about a genuinely unobtainable record before the deadline is in a different posture than one that goes silent past it — silence trends toward §385.337.

If your audit is onsite, the same list applies; the difference is the auditor reviews records at your principal place of business and can go deeper into anything in scope, and you should expect to talk through your operation — how you dispatch, how you track hours, who does maintenance. Under §385.319(a), the auditor reviews the findings with you at the end either way.

A two-week working plan

Assume the letter gives you a few weeks. Spend them in this order:

Days 1–2 — Respond and gap-check. Confirm receipt with the auditor. Set up NEWS/Portal access if offsite. Run the audit readiness check and the audit timeline tool so you know your gaps and your dates on paper instead of in your head.

Days 3–7 — Close the closable gaps. Some gaps can genuinely be fixed in a week: consortium enrollment where a program never existed, a missing annual inspection performed now, an MVR pulled now, an accident register created now (honestly dated — it's a record you create and maintain, not a filing with a deadline you missed). What you cannot do is backdate anything. A record created today and dated last month is falsification (§390.35), which converts a paperwork problem into the kind auditors escalate — and it's a federal false statement besides. A gap with a straight story and a fix in motion beats a forged record every time.

Days 8–12 — Assemble and self-review. Build the package in the order the letter requests. Then review it as the auditor will: Is every driver on the drivers list matched by a license, medical certificate, and MVR? Do the 30 days of duty records have supporting documents that actually corroborate them — and do the fuel receipts land where the logs say the truck was? Finding your own discrepancy first means you can explain it; having the auditor find it means it's a finding.

Days 13–14 — Submit early, or stage the room. Offsite: upload with days to spare, so a rejected file or a follow-up request isn't fatal. Onsite: records staged in one place, and block the day — auditors work through interruptions, but a carrier who can't locate his own records is demonstrating the absence of the exact management controls being audited.

After the audit

The auditor reviews findings with you, and FMCSA sends written results no later than 45 days after the audit is completed (§385.319). Pass, and your new entrant monitoring simply continues to the end of the 18-month period — keep doing what your records now prove you do. Fail, and the notice starts a 60-day corrective-action clock (45 days for placarded-hazmat and passenger carriers) with revocation automatic on day 61 if you don't act. That path — the corrective action plan, the practical 15-day submission window, extensions, administrative review, reapplication — has its own playbook: what happens if you fail the new entrant audit.

The honest summary of this whole post: the audit letter is a scheduled, pass/fail records check with a published document list and a scoring system you can read in advance. Carriers don't fail it because auditors are tricky; they fail it because the records don't exist. If yours exist and you can produce them, the next few weeks are assembly work, not jeopardy.

That assembly work is what Roadworthy HQ automates — driver qualification files kept complete against the §391.51 checklist, drug and alcohol program records in their own confidential store, maintenance and annual-inspection tracking by vehicle, and an audit binder that assembles the auditor-ready package in the order requested instead of over a frantic weekend. 14-day free trial, no credit card required — enough time to know exactly where you stand before your audit date.

This article is general guidance, not legal advice. Your audit notice and 49 CFR Part 385, Subpart D control your specific deadlines and document requirements; the audit mechanics described here are current as of July 2026.

Related violation codes

The requirements covered above are cited as these violation codes in audits and roadside inspections:

• §391.51 — Driver qualification file incomplete
• §391.41(a) — Driver lacking valid medical certificate
• §391.25 — Annual driving record inquiry and review
• §382.301 — No pre-employment drug test
• §382.305 — Failure to implement a random testing program
• §395.8 — Driver's record of duty status not current
• §395.11 — HOS supporting documents missing
• §396.17 — Periodic (annual) inspection violations
• §387.7 — Operating without required financial responsibility
• §390.15(b) — Accident register missing or incomplete