Why Compliance Reviews Matter for Established Carriers
A compliance review is the FMCSA's deepest investigation of a motor carrier's operations. It is different from the New Entrant Safety Audit, which is the entry-level inspection every new carrier faces in the first 18 months. A compliance review applies to established carriers, and it is triggered by data — usually CSA percentile flags, complaints, or post-incident investigations. By 2026, FMCSA enforcement has intensified alongside the most significant regulatory overhaul since 2010, and only 7 percent of motor carriers pass DOT audits without a single violation. The other 93 percent face fines averaging $7,155 per case, with serious gaps triggering penalties up to $125,000, out-of-service orders, and in the worst cases, operating authority revocation.
This guide is the operator's prep playbook for established carriers. It is the deeper companion to our FMCSA New Entrant Safety Audit Prep which covers the new-entrant case. Established carriers face higher stakes: the audit is triggered because something already looks wrong in the data, and the auditor arrives with specific questions to investigate.
Focused vs Comprehensive Compliance Reviews
In 2025 and 2026, FMCSA has shifted toward focused compliance reviews more often than full comprehensive reviews. The two formats:
- Focused compliance review. Scoped to one or two specific compliance areas where data shows problems. For example, repeated HOS violations trigger an HOS-focused review; a string of brake-related roadside citations triggers a Vehicle Maintenance focused review. The auditor arrives knowing the weak spot and digs into that area in detail.
- Comprehensive compliance review. A full examination of all six functional areas: General, Driver, Operational, Vehicle, Hazmat (if applicable), and Accident. Triggered by serious safety concerns, multiple intervention thresholds crossed, or a high-severity incident.
Most carriers facing audit in 2026 will see focused reviews. The good news: focused reviews are narrower and easier to prepare for. The bad news: the auditor already has a thesis that something is wrong, and the standard of proof to clear the audit is higher than in a fishing-expedition comprehensive review.
What Triggers a Compliance Review
Specific patterns that draw FMCSA's attention:
- Intervention-threshold percentile in any of the seven Compliance Categories. See our CSA Score Improvement Strategy for what those thresholds are and how to lower them.
- Multiple driver complaints filed through the FMCSA National Consumer Complaint Database
- Post-crash investigation, especially involving fatalities, hazmat releases, or out-of-service vehicles
- A pattern of failed roadside inspections in a specific category
- Whistleblower complaints from former drivers or office staff
- Random selection (rare; most reviews are triggered)
A carrier that knows it has a CSA flag in Vehicle Maintenance should assume a Vehicle Maintenance focused review is coming and prep accordingly. The prep window is usually 30 to 90 days from notification.
The Six Functional Areas
A comprehensive compliance review covers six areas. Even in a focused review, the auditor may sample from outside the focus area if something looks off:
- General: operating authority, registration, financial responsibility (insurance), and recordkeeping system integrity.
- Driver: driver qualification files, MVR pulls, DOT physicals, drug-and-alcohol testing program, Clearinghouse queries, and PSP screening.
- Operational: hours of service compliance, ELD records, supporting documents (fuel receipts, BOLs, toll records, dispatch records), and shipping papers.
- Vehicle: maintenance records, annual inspections, DVIRs, repair records, and out-of-service procedures.
- Hazmat (if applicable): shipping papers, training records, placarding, packaging, and emergency response.
- Accident: DOT-recordable crash records, post-incident investigations, drug-and-alcohol post-accident testing.
The auditor will request specific documents in each area. A common sample: 3 to 5 driver files, 3 to 5 vehicle files, 30 to 90 days of ELD logs with supporting documents, the drug-and-alcohol program documentation, and any hazmat-specific records if applicable.
The 30-Day Prep Playbook
When the FMCSA notification arrives — usually a letter scheduling the audit 30 to 60 days out — the prep timeline:
Days 1 to 5: Audit the auditor's likely focus
- Pull current SMS report. Identify the percentiles flagging at intervention threshold.
- Pull the underlying violation and crash data. Identify the specific drivers and vehicles involved.
- Cross-reference against the FMCSA notification. The notification usually states the focus area; if not, the data tells you.
Days 6 to 15: Run an internal mock audit
- Hire a compliance consultant or use an in-house safety manager. Walk through every functional area as if the auditor were sitting at the desk.
- Pull a random sample of driver files, vehicle files, and ELD records. Inspect for completeness, accuracy, and supporting documents.
- Document every gap found.
Days 16 to 25: Remediate
- Fix every gap identified in the mock audit. Missing MVR pull? Pull it now and date it correctly. Missing annual vehicle inspection? Get it done.
- Challenge contestable violations through DataQs. See our DataQs Challenge guide for the procedure. Successful DataQs challenges remove violations from the SMS data and can lower percentiles before the audit.
- Document corrective action for any pattern of violations. A written corrective action plan, dated, signed by the safety officer, with implementation evidence, is the difference between "you have a problem" and "you identified the problem and fixed it."
Days 26 to 30: Final prep
- Organize all records into the auditor's expected format. Most auditors prefer digital records on a flash drive or shared folder.
- Brief the safety officer, dispatch, and senior driver on what to say if interviewed. Honest, concise, factual.
- Confirm the audit location. Some audits happen on-site; others happen at the FMCSA field office.
The Drug and Alcohol Program: Highest Risk Area
The drug and alcohol testing program is the single most common reason for compliance review violations. The auditor will ask for:
- Written drug and alcohol policy
- Pre-employment drug test for every driver hired (no exceptions)
- Random testing pool and selection records (50 percent of drivers tested annually for drugs, 10 percent for alcohol)
- Post-accident testing records
- Supervisor reasonable-suspicion training certificates (60 minutes drug, 60 minutes alcohol)
- Clearinghouse queries: pre-employment full query and annual limited query for every driver
- Return-to-duty process documentation for any positive results
A carrier whose TPA (third-party administrator) has not provided current random selection certificates, or whose supervisors have no reasonable-suspicion training, or whose Clearinghouse queries have lapses will fail this section. See our FMCSA Drug and Alcohol Clearinghouse 2026 for the rules.
Hours of Service: The Audit Hot Zone
HOS audits compare ELD records against supporting documents (fuel receipts, BOLs, toll receipts, dispatch records). The auditor is looking for:
- Falsified logs (driving while in off-duty status, also called "ghost driving")
- Personal conveyance abuse (driving home using PC after a 14-hour shift)
- Yard move misuse (driving on public roads while in YM status)
- Form-and-manner violations (incomplete logs, missing data fields)
- Supporting document gaps that suggest off-ELD driving
The defense: clean ELD data with no editing, supervisor-approved edits where edits exist, complete supporting documents matching the ELD-recorded duty status, and driver training records on HOS rules. Read our ELD Personal Conveyance and Yard Move guide for what the rules actually say.
Vehicle Maintenance: Documentation Wins
Vehicle maintenance audits sample 3 to 5 vehicles and request:
- Annual DOT inspection records (49 CFR 396.17), signed by a qualified inspector
- Maintenance log showing routine PM service intervals
- Repair records for any work done
- DVIRs for the audit period (typically 6 to 12 months)
- Out-of-service notices and the documented repairs that returned the vehicle to service
The most common failure: incomplete DVIRs. Drivers signing off pre-trips without actually inspecting the vehicle, or maintenance shops repairing trucks without documenting the work. Both are caught easily by an auditor cross-referencing roadside violations against the maintenance log.
Driver Qualification Files: Expensive to Repair Late
A driver qualification file must contain, for every active driver:
- Application for employment
- Driver's previous 10-year employment history
- MVR pulled at hire and annually after
- DOT physical certificate, current
- Road test certificate or equivalent
- Annual review of driving record
- Clearinghouse query (pre-employment full, annual limited)
- PSP report if used in hiring decision
- License copy
- Any prior accident or violation records discovered
Carriers that have not run the right Clearinghouse queries, or have not pulled annual MVRs, will fail this section. There is no remediation that backdates these records — if the auditor sees a 14-month gap in MVR pulls, the violation is recorded.
Common Audit Failure Patterns
The 93 percent of carriers who fail at least one violation cluster around predictable patterns:
- Drug and alcohol program gaps. Missing pre-employment tests, expired supervisor training, gaps in random selection. Single most common automatic violation.
- Driver file gaps on Clearinghouse and MVR. A 12-month gap in annual MVR pulls or a missing Clearinghouse query is an automatic violation per affected driver.
- DVIRs that look templated. When every DVIR for 6 months shows "no defects" on every truck, the auditor knows the drivers are signing without inspecting. The carrier owns the failure to enforce real pre-trips.
- ELD edits without documented driver consent. Some carriers edit driver logs to hide HOS violations. The auditor compares ELD audit trail against supporting documents and finds the discrepancy quickly.
- Maintenance records that do not match roadside violations. A roadside brake out-of-service citation should produce a corresponding maintenance log entry within hours. When the maintenance log is silent, the auditor concludes the repair was either not done or not documented.
The carriers that pass without violations are the ones whose paperwork tells the same story across every system: ELD matches BOLs match fuel receipts match maintenance log matches DVIRs.
What Happens During the Audit Day
The on-site or virtual audit usually runs 4 to 8 hours for a focused review and 1 to 2 days for a comprehensive review. The structure:
- Opening conference. Auditor introduces themselves, explains scope, and requests the document set. The carrier's safety manager or owner is present and authorized to answer questions.
- Document review. The auditor goes through driver files, vehicle files, ELD records, drug-and-alcohol records, and any hazmat records. This is the longest portion.
- Driver interviews (if applicable). The auditor may interview 1 to 3 drivers about their understanding of HOS rules, pre-trip procedures, and the carrier's policies. Coach drivers in advance to be honest, brief, and factual.
- Closing conference. The auditor explains preliminary findings. The carrier has the opportunity to provide additional documentation or context. The Safety Rating is not issued at the closing conference; it comes by mail typically 30 to 60 days after.
The opening and closing conferences are the moments where preparation visibly pays off. A carrier with organized files, a clear chain of authority, and confident answers signals a well-run operation. A carrier that hunts for documents during the audit signals chaos.
What Happens After the Audit
The auditor issues a Safety Rating: Satisfactory, Conditional, or Unsatisfactory.
- Satisfactory: pass. Continue operations.
- Conditional: serious violations were identified. The carrier remains in operation but is on a remediation plan. Many brokers and shippers will not work with Conditional-rated carriers.
- Unsatisfactory: failure. The carrier is given a deadline (usually 45 to 60 days) to remediate, after which authority is revoked if the violations are not cured.
A carrier that receives a Conditional or Unsatisfactory rating can request an upgrade after remediation through the FMCSA Petition for Administrative Review process. The petition requires documented evidence that all violations have been corrected and that systemic changes are in place to prevent recurrence.
The Bottom Line
A focused or comprehensive compliance review is winnable for any established carrier with a working compliance system. The carriers that fail are those whose paperwork has rotted, whose drug-and-alcohol program is on autopilot, whose vehicle maintenance is reactive, and whose ELD discipline is loose. The 30-day prep window — when used well, with a mock audit, real remediation, and DataQs challenges on contestable violations — closes most of the gaps. Insurance, broker access, and operating authority all hinge on the rating that comes out the other side. Treat the audit as the highest-priority operational event of the quarter, because for most carriers, it is.