Compliance
DOT Audit Checklist: The Document-by-Document Prep Inventory
By Editorial Team · Updated July 19, 2026 · 12 min read · Editorial standards
On this page 12 sections
The letter is in your inbox and it names a date. Your driver files are in one cabinet, your drug and alcohol results sit with a third-party administrator, your logs live in an ELD portal, your maintenance records are on a shop laptop, and your accident register is a spreadsheet somebody stopped updating in March. This dot audit checklist is not an explanation of the process. It is the pull list: what to produce, which system it comes out of, and what a reviewer will score as a gap.
For background on what an audit is and how it plays out, read our overview of how a DOT audit works. “DOT audit” is the colloquial umbrella term; FMCSA runs several distinct review types, including the New Entrant Safety Audit, compliance reviews, and focused or offsite investigations. The document demands overlap heavily, so this inventory holds regardless of which one you drew.
The DOT audit checklist at a glance
Print this. Assign an owner to each row before you touch a single file.
| Document category | What specifically to produce | Where it usually lives | The gap reviewers find most often |
|---|---|---|---|
| Driver qualification files | Application, MVRs, annual review note, medical certificate, road test, previous employer inquiries | HR cabinet or DQF software | Annual MVR never pulled; medical cert expired |
| Drug and alcohol program | Policy, pre-employment results, random selection lists, Clearinghouse queries and consents | TPA portal plus Clearinghouse | Random rates not met; annual query missed |
| Hours of service | Records of duty status and supporting documents, 6 months back | ELD portal, plus paper for exempt days | Unassigned driving never reviewed or annotated |
| Vehicle maintenance | Vehicle list, maintenance schedule, repair records, DVIRs, periodic inspection reports | Shop software or folders per unit | Repairs with no DVIR closing the loop |
| Accident register | Register plus underlying reports for each recordable crash | Safety department spreadsheet | Register stops mid-year; recordable definition too narrow |
| Authority and insurance | Operating authority, proof of financial responsibility, current MCS-150 | Registration file plus insurer | Biennial update lapsed; USDOT data stale |
| Hazmat, if applicable | Training records, shipping papers, security plan where required | Hazmat coordinator | Recurrent training cycle silently expired |
Driver qualification files: pull these seven items per driver
A qualification file is complete when a reviewer can trace, on paper, that the driver was screened before driving and re-checked every year since. Under 49 CFR 391.51 the file is kept for as long as the driver is employed and for three years after.
Per driver, produce:
- The employment application meeting 49 CFR 391.21, including the full 10-year employment history for CDL drivers
- The MVR obtained at hire, from every state where the driver held a license in the preceding three years, filed within 30 days of the employment start date
- The most recent annual MVR and the dated note of the annual review of driving record
- A current medical examiner’s certificate or the CDLIS MVR carrying medical status, plus any medical variance
- The road test certificate, or the CDL accepted in lieu of a road test
- Entry-level driver training verification through the Training Provider Registry, where the ELDT rule applies
- The driver investigation history file under 49 CFR 391.53, holding safety performance history responses from DOT-regulated employers of the past three years
The gap: the annual review note. Carriers pull the MVR and forget the signed note documenting that someone evaluated it. Two separate items, two separate misses. Our driver qualification file checklist breaks the assembly order down item by item, and the deeper DQ file requirements guide covers edge cases for intrastate and grandfathered drivers.
One retirement worth knowing: the annual driver’s list of violations under old 49 CFR 391.27 was eliminated in 2022 and that section is now reserved. If your template still has a line for it, you are collecting a form nobody asks for.
Drug and alcohol records: three stacks, not one
Reviewers treat your testing program as three separate proofs: the program exists, people were tested on schedule, results were handled correctly. Pull it as three stacks.
Program stack: the written policy, proof of distribution to drivers, supervisor reasonable-suspicion training records, and your TPA or consortium contract.
Testing stack: pre-employment results dated before the driver performed a safety-sensitive function, random selection lists for every period with the pool size at each draw, plus post-accident, reasonable-suspicion, return-to-duty and follow-up documentation as applicable.
Clearinghouse stack: a full pre-employment query for every hire, annual queries on every current driver within each 365-day window, and the driver consents, which are retained three years from the date of the last query.
Retention under 49 CFR 382.401 is tiered: five years for alcohol results of 0.02 or greater, verified positives, refusals and program administration records; two years for collection process records; one year for negatives and cancelled tests. Pull the five-year stack first.
The gap: random testing. Carriers hit the annual percentage on paper but cannot show selections were spread reasonably across the year. Print the selection list for every draw, not the year-end summary. The mechanics are in our DOT drug and alcohol testing program guide.

Hours of service: six months back, plus the exception paperwork
Motor carriers must retain records of duty status and supporting documents for each driver for at least six months from the date of receipt. That is your export window. Do not hand over eighteen months because the portal makes it easy. Produce:
- ELD output files for the six-month window, in the transfer format your device supports
- Supporting documents, up to eight per driver per 24-hour on-duty period under 49 CFR 395.11, applying the first-and-last rule when a driver submits more than eight
- Paper logs or time records for short-haul or otherwise exempt days
- The on-vehicle ELD materials: user manual, malfunction instruction sheet, blank log sheets, malfunction record
- Your edit and annotation history, including how unassigned driving was handled
The gap: unassigned driving. Segments sitting unclaimed in the portal are the clearest sign to a reviewer that nobody is running the ELD account. Assign or annotate every one before you export.
Vehicle maintenance and inspection: build one folder per unit
Maintenance evidence is judged per vehicle, not per fleet, so assemble it that way. Under 49 CFR 396.3 records are kept where the vehicle is housed or maintained for one year, and six months after it leaves your control.
Per power unit and trailer:
- Identification: company unit number, make, serial number, year, and tire size
- Owner information if the vehicle is not owned by you
- The nature and due date of inspection and maintenance operations
- Records of inspection, repairs and maintenance showing date and description of work performed
- Driver vehicle inspection reports with the certification of repairs and the driver’s review, retained three months from the date of the initial report
- The periodic (annual) inspection report, retained 14 months, with current documentation on the vehicle
The gap: the DVIR loop. A driver writes up a defect, the shop fixes it, and nobody signs the certification of repair. The repair invoice alone does not close the record.
Accident register: rebuild it before you hand it over
The register is kept for three years after the date of each accident and must list, at minimum, the date, the city or town and state nearest the crash, the driver’s name, the number of injuries or fatalities, and whether hazardous materials other than fuel from the vehicle’s own tanks were released.
The gap: under-recording. Carriers apply their insurance threshold instead of the DOT-recordable definition and miss tow-away events. Cross-check the register against loss runs and roadside inspection history before the audit, not during it.
Authority, insurance, and registration data
The fastest category to fix and the most embarrassing to miss. Produce your operating authority documentation, proof of financial responsibility at the level required for what you haul under 49 CFR 387.9, and a current MCS-150. The biennial update is due every two years, keyed to your USDOT number: an odd next-to-last digit means odd-numbered years, even means even years, with the month tied to the last digit. Confirm the filing date in the system rather than trusting memory. Carriers in their first year should also read our new entrant safety audit walkthrough, since the document set is front-loaded differently.
Hazmat, if it applies to you
Produce training records containing the employee name, most recent training completion date, a description or location of the materials used, the trainer’s name and address, and certification of training and testing. Recurrent training is required at least once every three years, and records are kept for as long as the person works as a hazmat employee plus 90 days after. Add shipping papers, placarding procedures, and your security plan where required. The gap: the three-year cycle quietly expiring for a long-tenured employee.
The 48-hour version: triage order when you are out of time
You will not close every gap. Close them in this order, roughly the order of exposure.
Driver files for anyone currently driving
What you do: pull the DQ file for every active driver and check three things only — valid medical certificate, MVR within the last 12 months, annual review note signed. Required. The gotcha: an expired medical card means the driver is not qualified right now, which is an operational problem, not a paperwork one.
Clearinghouse queries
What you do: run your Clearinghouse query history and identify any driver without a pre-employment full query or a query in the last 365 days. Required. The gotcha: you cannot retroactively create a pre-employment query. Document what happened rather than backdating anything.
ELD export and unassigned driving
What you do: assign or annotate every unassigned segment, then export the six-month window. Smart, not strictly required. The gotcha: mass-assigning segments to the wrong driver creates a falsification problem far worse than the original gap.
Accident register reconciliation
What you do: rebuild the register from insurance loss runs and roadside data. Required. The gotcha: adding a crash you previously omitted is better than being shown one you missed.
Everything else, indexed rather than perfected
What you do: build a labeled index of maintenance folders, policies and registration proof, even where contents are imperfect. Smart, not required. The gotcha: a reviewer who can find things forms a different impression than one who watches you dig.
The gap no checklist closes
Work all the way down this dot audit checklist and you will have proven one thing: that your processes ran. You screened, you tested, you inspected, you filed. What you have not produced, anywhere in the stack, is an assessment of the person.
That is not a criticism of the regulations. A driver qualification file has fields for license status, medical status and crash history. It has no field for the driver who accepted a load and stopped answering the phone in Amarillo, or who quit on dispatch twice. You can assemble a flawless, audit-proof file for that exact driver, because the federal format has nowhere to record any of it. Previous-employer inquiries under 391.23 ask about accidents and drug and alcohol history, and many carriers answer them narrowly.
That behavioral layer is what CDLScan’s peer-sourced driver database covers. Carriers look up a CDL driver by name and read what past carriers reported about reliability and rehire-worthiness. CDLScan lists north of 1 million driver reviews and handles more than 20,000 searches a week; the search itself is free, with a full report starting at $2.75.
It is an added layer on top of the required checks, never a substitute for a pre-employment Clearinghouse query, an MVR, a PSP pull, or an FCRA-compliant background check. Run the required record first, then check what past carriers reported about the driver’s conduct on the job. One tells you whether you may hire. The other tells you whether you want to.
Frequently asked questions
How far in advance do I get notice before a DOT audit?
It varies by review type and by whether the review is onsite or offsite. Some contacts arrive with a specific document request and a deadline measured in days. Treat the request letter as authoritative on timing and scope, and confirm anything ambiguous with the investigator named on it rather than assuming a standard window exists.
What do DOT auditors look for first?
Driver qualification and drug and alcohol testing records, because noncompliance there is easiest to demonstrate from documents alone. Hours of service usually comes next, since ELD data exports quickly and unassigned driving is immediately visible. Build your dot audit preparation around those three first.
What happens if a document is genuinely missing?
Do not fabricate or backdate it. A missing record is a finding; a falsified record is far more serious and is usually obvious from metadata or internal inconsistencies. Document what happened and present the corrective action alongside the gap.
How much can a DOT violation cost?
Civil penalties vary by violation type and severity, can reach several thousand dollars per violation, and FMCSA adjusts the amounts annually for inflation. Some recordkeeping violations are assessed per day or per record. Verify the current penalty schedule on the FMCSA site before estimating exposure.
Does an FMCSA safety audit checklist differ from a compliance review checklist?
The document categories are largely the same, so one dot audit checklist covers both, but scope and consequences differ. A New Entrant Safety Audit is a compliance and educational check on a carrier in its first period of operation and does not produce a safety rating the way a compliance review can. Verify which review type you are facing before deciding how deep to go.
Do owner-operators under my authority need their own DQ files?
If they operate under your authority and you control their work, they are generally treated as your drivers for qualification purposes and need complete files. Leased-on drivers are a common source of missing dot audit documents because carriers assume the file is somebody else’s job.
Can peer driver reviews substitute for any required record?
No. Peer-sourced behavioral information sits on top of the compliance stack, never inside it. Nothing in a driver reputation lookup replaces a Clearinghouse query, an MVR, a previous employer investigation under 391.23, or an FCRA-compliant consumer report where one is used for a hiring decision.