DOT Audit Defense & FMCSA Investigation

The three audit flavors FMCSA runs

FMCSA does not run a single “DOT audit” — it runs three structurally different reviews, each with a different trigger and scope.

• New-entrant safety audit. Mandatory for every new interstate carrier inside the first 18 months under 49 CFR Part 385 Subpart D. Non-punitive in intent — the auditor is checking the systems exist. See our new-entrant audit walkthrough.
• Compliance review (CR). A comprehensive review of the carrier’s safety management system. Triggered by CSA BASIC scores above the intervention threshold, a fatal-crash event, a complaint pattern, or random selection. This is the rating-issuing audit.
• Focused investigation. Narrower scope; the investigator pulls records for one or two BASICs only. Often used when CSA scores indicate a problem in a specific category (e.g., Driver Fitness) but the rest of the operation looks clean.

A fourth flavor, the off-site investigation, is conducted entirely by document exchange — the carrier emails or mails records to a remote investigator. Off-site CRs have grown post-2020 and now make up a meaningful share of FMCSA workload, especially for smaller carriers in BASIC-1 or BASIC-2 intervention status.

The seven BASICs an investigator reviews

CSA’s Safety Measurement System (SMS) groups every violation type into one of seven Behavior Analysis and Safety Improvement Categories. The compliance review samples carrier records against each one:

1. Unsafe Driving (BASIC-1). Speeding, reckless driving, improper lane change. Investigators pull roadside inspection reports for the past 24 months.
2. Hours of Service Compliance (BASIC-2). RODS, ELD records, supporting documents. Investigators reconcile sampled driver logs against fuel receipts, toll records, and GPS pings under 49 CFR Part 395.
3. Driver Fitness (BASIC-3). DQ files for sampled drivers. The auditor requests the full §391 file: long-form application, MVRs, medical card with DME number on the National Registry, road test, prior-employer verification.
4. Controlled Substances / Alcohol (BASIC-4). Pre-employment, random, post-accident, and reasonable-suspicion testing records. Random selection logs, MRO chain of custody, Clearinghouse pre-employment queries. See our drug program for fleets guide.
5. Vehicle Maintenance (BASIC-5). Annual inspections, periodic maintenance schedule, DVIRs (driver vehicle inspection reports) under 49 CFR Part 396.
6. Hazardous Materials Compliance (BASIC-6). Only sampled if the carrier reports hazmat operation on the MCS-150. Shipping papers, training records, security plan, placarding compliance.
7. Crash Indicator (BASIC-7). Reviewed but not directly auditable from carrier records — the indicator is built from state-reported crash data. Carriers see this BASIC only on the enforcement-eyes-only Safety Measurement System view; the public CSA portal redacts it.

Findings in each BASIC are scored under 49 CFR Part 385 Appendix B to produce the overall safety rating. A handful of automatic-failure findings (driver used before drug pre-employment test, operating without BMC-91, ELD tampering, etc.) flip a single BASIC to Unsatisfactory and the overall rating with it.

Document retention windows

Each record class has a federally mandated retention period. Investigators expect to see records covering the full window when they sample; gaps in the window itself are violations even without any individual record being deficient.

The safety-rating spectrum

FMCSA closes every compliance review with one of three safety ratings under 49 CFR §385.3. The rating posts to SAFER and broadcasts to every broker, factoring company, insurer, and shipper that pulls the carrier’s record.

• Satisfactory. The carrier’s safety management controls are adequate. No restrictions on operation. Most carriers who prepare adequately end here.
• Conditional. One or more deficiencies, but the carrier is allowed to continue operating. Many federal shipping contracts, brokered freight, and insurance policies have a no-Conditional clause — the practical effect on commercial relationships is often more painful than the regulatory effect. The carrier has the right to a corrective action plan and a follow-up review under 49 CFR §385.17.
• Unsatisfactory. Severe deficiencies in safety management. For HM and passenger carriers, an out-of-service order is automatic 45 days after the rating posts; for general-freight property carriers, 60 days, under 49 CFR §385.13. Unsatisfactory ratings frequently lead to authority revocation if the corrective action plan is not completed in time.

A small number of carriers exit a review unrated — usually because the investigator sampled and found no scoring violations but did identify specific compliance gaps below the threshold for a rating. Unrated carriers retain whatever rating they had going in (typically Satisfactory or Unrated for a never-reviewed carrier).

DataQs and Request for Data Review (RDR)

Two appeals paths exist, and they apply to different things. Picking the right one is half the battle:

• DataQs at dataqs.fmcsa.dot.gov challenges individual inspection or crash data points. Use this when a roadside inspection violation was recorded incorrectly (wrong driver, wrong vehicle, wrong violation code) or when a crash was non-preventable and shouldn’t count toward the Crash Indicator. DataQs adjudication is run by the state that recorded the data, with FMCSA oversight. Decisions typically come within 30–90 days. Successful DataQs corrections cascade back into the SMS score within 30 days of the data refresh cycle.
• Request for Data Review (RDR) under 49 CFR §385.15 challenges the overall safety rating itself. The carrier files an administrative-review request within 90 days of the rating posting, identifying factual or procedural errors in how the review was conducted. FMCSA Division Office staff review the file; if the carrier wins, the rating is upgraded or vacated.

A petition for review beyond the RDR goes through the federal courts under 49 USC §521 and 49 USC §501 et seq. The administrative-review path is exhausted first.

Pre-audit document preparation

The audit notice arrives 7–30 days before the on-site visit (off-site audits sometimes get less). Build the request list’s response packet on receipt of the notice; do not wait until the day before.

The investigator’s standard document request typically includes:

• USDOT number, MC docket, current MCS-150 confirmation, current BMC-91 on SAFER.
• Driver list with hire dates, license numbers, and status (active / inactive / terminated).
• Vehicle list with VINs, plate numbers, GVWR, and home terminal.
• HOS records for the sampled period (6 months for most reviews; 12 months for hazmat).
• Drug & alcohol testing records for the audit period: random selections, MRO results, refusals, follow-up plans.
• Accident register with copies of every state-filed accident report.
• Annual inspection certificates and DVIRs for sampled vehicles.
• For hazmat operations: training records, security plan, shipping papers samples.

What audit day looks like

On-site compliance reviews run 1–5 days depending on fleet size. A safety investigator (state-deputized under MCSAP for most reviews) arrives at the carrier’s principal place of business with the document request and a laptop. The agenda:

1. Opening conference — introductions, scope of review, the BASICs being sampled, expected duration.
2. Document review — the investigator pulls sample drivers and vehicles and reviews the corresponding records.
3. Interviews — the safety director (or owner-operator) is interviewed about the safety program. Selected drivers may also be interviewed.
4. Findings discussion — the investigator previews potential violations and gives the carrier a chance to produce missing records or context.
5. Closing conference — the investigator outlines findings, the rating recommendation (final rating is signed off at the Division Office), and any corrective actions expected.

Written findings arrive 30–90 days post-audit. The rating, when issued, posts to SAFER within a week of the carrier’s acknowledgement.

Restoring a Conditional or Unsatisfactory rating

A Conditional or Unsatisfactory rating is not permanent. Two paths to upgrade:

• Corrective action plan (CAP) + follow-up review. The carrier submits a written plan addressing every cited violation; FMCSA reviews and either accepts or requests revisions. Once approved, a follow-up audit verifies the corrections were implemented. A successful follow-up upgrades the rating per 49 CFR §385.17.
• Administrative review. If the carrier disagrees with the rating itself, the RDR (above) challenges it directly without waiting for a follow-up.

Either path requires the underlying safety system to be functional. Carriers who exit a Conditional review without fixing the root cause usually end up in an Unsatisfactory review 18–36 months later.

Which audit are you actually facing?

Life after the audit

Whether the audit closes Satisfactory, Conditional, or Unsatisfactory, the work continues. The carrier’s CSA BASICs continue to update monthly based on rolling 24-month inspection data. Building durable systems — not one-time prep — is what keeps a rating safe long-term:

• Quarterly internal mini-audits sampling each of the seven systems.
• Monthly CSA score check; investigate any BASIC that crosses the alert threshold.
• Annual DataQs review — pull every roadside inspection from the past 12 months and confirm each is accurately coded.
• Documented safety meetings, driver training records, MRO and consortium contracts current.
• Quick reinstatement coordination via fastreinstatementfiling.com if a lapse drives authority into NOT AUTHORIZED status.